deepline 0.3.160 → 0.3.162

package/README.md

@@ -16,11 +16,22 @@ Claude Code, Codex, or your terminal.
 
 ## Install
 
+Check `npm --version` and use the matching command.
+
+For npm 11.16 or newer:
+
+```bash
+npm install -g --allow-scripts=esbuild deepline@latest
+```
+
+For older npm:
+
 ```bash
 npm install -g deepline@latest
-deepline setup --json
 ```
 
+Then run `deepline setup --json`.
+
 Setup opens your browser so you can sign in, then installs Deepline's skills
 for your coding agent. If global skill setup is unavailable, Deepline retries
 with project-local skills automatically.
@@ -30,7 +41,7 @@ with project-local skills automatically.
 Paste this into Claude Code, Codex, or another coding agent:
 
 ```text
-Set up https://code.deepline.com/INSTALL.md
+Install the official Deepline CLI globally from npm (package: deepline) by following https://code.deepline.com/INSTALL.md.
 ```
 
 Once setup is complete, tell your agent what you want to do:

package/dist/bundling-sources/sdk/src/release.ts

@@ -200,7 +200,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.160',
+  version: '0.3.162',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/sdk/src/types.ts

@@ -1022,8 +1022,10 @@ export interface StopPlayRunResult {
   stopped: boolean;
   /** True when the durable cancellation lane accepted the request and is draining. */
   cancelling?: boolean;
-  /** Number of open HITL interactions marked cancelled. */
+  /** Number of run-scoped HITL waits cancelled by the stop request. */
   hitlCancelledCount: number;
+  /** True if HITL state or its same-message Slack card still needs retrying. */
+  hitlCancellationPending?: boolean;
   /**
    * True when the scheduler state for the run was stale and the stop could
    * not be confirmed. Absent on older servers (treated as confirmed).

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/absurd-runtime-worker.ts

@@ -5519,6 +5519,8 @@ export function absurdAdoptedLaneWorkerOptions(input: {
   workerBase: string;
   queue: string;
   nextPollDelayMs: () => Promise<number | null>;
+  reconcileRuntimeCancellations: () => Promise<void>;
+  sweepAndReconcileCancellations: () => Promise<void>;
   onError: (error: Error) => void;
 }): WorkerOptions {
   return {
@@ -5534,6 +5536,12 @@ export function absurdAdoptedLaneWorkerOptions(input: {
     pollInterval: ABSURD_IDLE_POLL_INTERVAL_SECONDS,
     nextPollDelayMs: input.nextPollDelayMs,
     idlePollFallbackMs: () => ABSURD_ADOPTED_LANE_POLL_INTERVAL_MS,
+    // A manually cancelled Absurd task cannot be claimed. Retired queues
+    // therefore need the same scheduler/outbox projection hooks as the
+    // active lane, or a run parked on this queue can stay `waiting` forever
+    // after the old release stops polling it.
+    afterClaim: input.reconcileRuntimeCancellations,
+    saturatedMaintenance: input.sweepAndReconcileCancellations,
     fatalOnLeaseTimeout: false,
     onError: input.onError,
   };
@@ -6948,6 +6956,9 @@ export async function startRuntimeWorkerHost(
       schedulerOptions.schema,
     ),
   });
+  const reportCancellationProgress = createRateLimitedRuntimeLogger({
+    log: (...args) => console.info(...args),
+  });
   const reconcileRuntimeCancellations = async () => {
     await withRuntimeSchedulerClient(poolOptions, async (client) => {
       const cancellations = await reconcileAbsurdRuntimeCancellations({
@@ -6955,12 +6966,16 @@ export async function startRuntimeWorkerHost(
         queue,
         schedulerOptions,
       });
-      if (cancellations.reconciled > 0) {
-        console.info('[absurd-runtime.worker] cancellations_reconciled', {
-          queue,
-          releaseId,
-          ...cancellations,
-        });
+      if (cancellations.reconciled > 0 || cancellations.skipped > 0) {
+        reportCancellationProgress(
+          '[absurd-runtime.worker] cancellations_reconciled',
+          {
+            queue,
+            releaseId,
+            adopted: false,
+            ...cancellations,
+          },
+        );
       }
     });
   };
@@ -7102,6 +7117,36 @@ export async function startRuntimeWorkerHost(
         const reportAdoptedQueueError = createRateLimitedRuntimeLogger({
           log: (...args) => console.error(...args),
         });
+        const reportAdoptedCancellationProgress =
+          createRateLimitedRuntimeLogger({
+            log: (...args) => console.info(...args),
+          });
+        const reconcileAdoptedQueueCancellations = async () => {
+          await withRuntimeSchedulerClient(poolOptions, async (client) => {
+            const cancellations = await reconcileAbsurdRuntimeCancellations({
+              client,
+              queue: adoptedQueue,
+              schedulerOptions,
+            });
+            if (cancellations.reconciled > 0 || cancellations.skipped > 0) {
+              reportAdoptedCancellationProgress(
+                '[absurd-runtime.worker] cancellations_reconciled',
+                {
+                  queue: adoptedQueue,
+                  releaseId,
+                  adopted: true,
+                  ...cancellations,
+                },
+              );
+            }
+          });
+        };
+        const sweepAndReconcileAdoptedQueueCancellations = async () => {
+          await adoptedClient.sweepCancellations(
+            ABSURD_CANCELLED_DEADLINE_RECONCILE_LIMIT,
+          );
+          await reconcileAdoptedQueueCancellations();
+        };
         const adoptedWorker = await adoptedClient.startWorker(
           absurdAdoptedLaneWorkerOptions({
             workerBase,
@@ -7115,6 +7160,9 @@ export async function startRuntimeWorkerHost(
                 if (!nextDue.dueAt) return null;
                 return nextDue.dueAt.getTime() - Date.now();
               }),
+            reconcileRuntimeCancellations: reconcileAdoptedQueueCancellations,
+            sweepAndReconcileCancellations:
+              sweepAndReconcileAdoptedQueueCancellations,
             onError: (error) =>
               reportAdoptedQueueError(
                 '[absurd-runtime.worker] adopted_queue_error',

package/dist/bundling-sources/shared_libs/plays/authoring-contract.ts

@@ -144,6 +144,10 @@ export const PLAY_AUTHORING_CONTRACT_ISSUE_CODES = [
   'play_authoring_fetch_idempotency_required',
   'play_authoring_fetch_key_reused_in_loop',
   'play_authoring_fetch_http_error_branch',
+  'play_authoring_slack_interactive_message_without_wait',
+  'play_authoring_slack_interactive_layout_unverified',
+  'play_authoring_slack_action_wait_result_ignored',
+  'play_authoring_slack_action_wait_unbounded_loop',
   'play_authoring_tool_deprecated',
   'play_authoring_replay_unsafe_nondeterminism',
   'play_authoring_row_sleep_unsupported',

package/dist/cli/index.js

@@ -3051,7 +3051,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.160",
+  version: "0.3.162",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -28623,10 +28623,17 @@ async function handleRunStop(args) {
   const stopNotConfirmed = result.stopped === false || result.staleSchedulerState === true;
   if (stopNotConfirmed) {
     const detail = typeof result.error === "string" && result.error.trim() ? result.error.trim() : result.staleSchedulerState === true ? "scheduler state for the run is stale" : "the server did not confirm the stop";
-    process.stderr.write(
-      `Failed to stop run ${runId}: ${detail}. Retry 'deepline runs stop ${runId}' or inspect the run with 'deepline runs get ${runId} --full --json'.
-`
-    );
+    const lines2 = [
+      `Failed to stop run ${runId}: ${detail}.`,
+      ...result.hitlCancelledCount > 0 ? [`cancelled HITL waits: ${result.hitlCancelledCount}`] : [],
+      ...result.hitlCancellationPending === true ? [
+        "warning: HITL cancellation or same-card Slack refresh is still pending"
+      ] : [],
+      `retry: deepline runs stop ${runId}`,
+      `inspect: deepline runs get ${runId} --full --json`
+    ];
+    process.stderr.write(`${lines2.join("\n")}
+`);
     printCommandEnvelope(
       {
         ...result,
@@ -28636,9 +28643,7 @@ async function handleRunStop(args) {
               title: "run stop",
               lines: [
                 `\u2717 stop not confirmed for ${result.runId || runId}`,
-                `  ${detail}`,
-                `  retry: deepline runs stop ${runId}`,
-                `  inspect: deepline runs get ${runId} --full --json`
+                ...lines2.slice(1)
               ]
             }
           ]
@@ -28650,7 +28655,10 @@ async function handleRunStop(args) {
   }
   const lines = [
     `Stopped ${result.runId}`,
-    ...result.hitlCancelledCount > 0 ? [`cancelled HITL waits: ${result.hitlCancelledCount}`] : []
+    ...result.hitlCancelledCount > 0 ? [`cancelled HITL waits: ${result.hitlCancelledCount}`] : [],
+    ...result.hitlCancellationPending === true ? [
+      `warning: HITL cancellation or Slack card refresh is still pending; retry 'deepline runs stop ${runId}'`
+    ] : []
   ];
   printCommandEnvelope(
     {
@@ -42469,7 +42477,7 @@ Examples:
 }
 
 // src/cli/commands/setup.ts
-var import_node_child_process4 = require("child_process");
+var import_node_child_process5 = require("child_process");
 var import_node_fs20 = require("fs");
 var import_node_os14 = require("os");
 var import_node_path25 = require("path");
@@ -44224,6 +44232,32 @@ Examples:
   });
 }
 
+// src/cli/npm-script-policy.ts
+var import_node_child_process4 = require("child_process");
+function npmSupportsAllowScripts(version) {
+  const match = /^(\d+)\.(\d+)(?:\.|$)/.exec(version?.trim() ?? "");
+  if (!match) return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  return major > 11 || major === 11 && minor >= 16;
+}
+function readNpmVersion(env) {
+  try {
+    const plan = resolveShellSpawn("npm", ["--version"]);
+    const result = (0, import_node_child_process4.spawnSync)(plan.command, plan.args, {
+      encoding: "utf8",
+      env,
+      shell: plan.shell,
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 5e3
+    });
+    if (result.status !== 0) return null;
+    return String(result.stdout ?? "").trim() || null;
+  } catch {
+    return null;
+  }
+}
+
 // src/cli/commands/setup.ts
 var SETUP_PHASE_NAMES = [
   "cli",
@@ -44413,7 +44447,7 @@ function removeKnownLegacyPaths(baseUrl) {
   }).removeRetiredArtifacts();
 }
 function resolvePathCommands(command) {
-  const lookup = (0, import_node_child_process4.spawnSync)(
+  const lookup = (0, import_node_child_process5.spawnSync)(
     process.platform === "win32" ? "where" : "which",
     process.platform === "win32" ? [command] : ["-a", command],
     { encoding: "utf8", shell: process.platform === "win32" }
@@ -44440,7 +44474,7 @@ function isHomebrewFormulaCommand(path) {
 }
 function resolvePersistentGlobalCommand(dependencies = {}) {
   const platform3 = dependencies.platform ?? process.platform;
-  const run = dependencies.spawn ?? import_node_child_process4.spawnSync;
+  const run = dependencies.spawn ?? import_node_child_process5.spawnSync;
   const pathExists = dependencies.exists ?? import_node_fs20.existsSync;
   const pathClis = dependencies.pathClis ?? resolvePathCommands("deepline");
   const homebrewCommand = pathClis.find(isHomebrewFormulaCommand);
@@ -44539,7 +44573,8 @@ function failSetupPhase(phases, phase, code) {
 }
 function rollbackCommand(scope, root) {
   const prefix = scope === "local" && root ? ` --prefix ${JSON.stringify((0, import_node_path25.join)(root, ".deepline", "runtime"))}` : "";
-  return `npm install -g${prefix} --no-audit --no-fund --include=optional deepline@${SDK_VERSION}`;
+  const allowScriptsFlag = npmSupportsAllowScripts(readNpmVersion(process.env)) ? " --allow-scripts=esbuild" : "";
+  return `npm install -g${prefix} --no-audit --no-fund --include=optional${allowScriptsFlag} deepline@${SDK_VERSION}`;
 }
 function setupResumeCommand(baseUrl, scope) {
   const hostPrefix = baseUrl === "https://code.deepline.com" ? "" : `DEEPLINE_HOST_URL=${JSON.stringify(baseUrl)} `;
@@ -45280,7 +45315,7 @@ function consumePendingCliUpdateMessages(homeDir2 = (0, import_node_os15.homedir
 }
 
 // src/cli/commands/update.ts
-var import_node_child_process5 = require("child_process");
+var import_node_child_process6 = require("child_process");
 var import_node_fs23 = require("fs");
 var import_node_os16 = require("os");
 var import_node_path28 = require("path");
@@ -45631,7 +45666,7 @@ function normalizedNpmPrefix(value) {
 function resolveNpmGlobalPrefix(env) {
   try {
     const plan = resolveShellSpawn("npm", ["prefix", "-g"]);
-    const result = (0, import_node_child_process5.spawnSync)(plan.command, plan.args, {
+    const result = (0, import_node_child_process6.spawnSync)(plan.command, plan.args, {
       encoding: "utf8",
       env,
       shell: plan.shell,
@@ -45686,14 +45721,16 @@ function resolveUpdatePlan(options = {}) {
   const npmGlobalPrefix = options.npmGlobalPrefix !== void 0 ? options.npmGlobalPrefix : resolveNpmGlobalPrefix(env);
   const hasVerifiedNpmOwnership = inferredInstallPrefix !== null && normalizedNpmPrefix(inferredInstallPrefix) === normalizedNpmPrefix(npmGlobalPrefix);
   const installPrefix = options.requireVerifiedNpmOwnership ? hasVerifiedNpmOwnership ? inferredInstallPrefix : null : inferredInstallPrefix;
+  const npmVersion = options.npmVersion === void 0 ? readNpmVersion(env) : options.npmVersion;
+  const npmGlobalInstallFlags = npmSupportsAllowScripts(npmVersion) ? [...NPM_SDK_INSTALL_COMMON_FLAGS, "--allow-scripts=esbuild"] : NPM_SDK_INSTALL_COMMON_FLAGS;
   const args = installPrefix ? [
     "install",
     "-g",
     "--prefix",
     installPrefix,
-    ...NPM_SDK_INSTALL_COMMON_FLAGS,
+    ...npmGlobalInstallFlags,
     packageSpec
-  ] : ["install", "-g", ...NPM_SDK_INSTALL_COMMON_FLAGS, packageSpec];
+  ] : ["install", "-g", ...npmGlobalInstallFlags, packageSpec];
   const fallbackRegistryUrl = options.npmFallbackRegistryUrl !== void 0 ? options.npmFallbackRegistryUrl : publicNpmFallbackRegistryUrl(
     env.DEEPLINE_HOST_URL?.trim() || autoDetectBaseUrl()
   );
@@ -45843,7 +45880,7 @@ function runCommand(command, args, env = process.env) {
   return new Promise((resolveResult) => {
     let output2 = "";
     const plan = resolveShellSpawn(command, args);
-    const child = (0, import_node_child_process5.spawn)(plan.command, plan.args, {
+    const child = (0, import_node_child_process6.spawn)(plan.command, plan.args, {
       stdio: ["inherit", "pipe", "pipe"],
       shell: plan.shell,
       env
@@ -50823,7 +50860,7 @@ function registerDeeplineCommandGroups(program) {
 }
 
 // src/cli/self-update.ts
-var import_node_child_process6 = require("child_process");
+var import_node_child_process7 = require("child_process");
 var AUTO_UPDATE_TELEMETRY_TIMEOUT_MS = 2e3;
 var TRUSTED_AUTO_UPDATE_ORIGIN = "https://code.deepline.com";
 function trustedAutoUpdateRegistryUrl(baseUrl) {
@@ -50919,7 +50956,7 @@ function relaunchCurrentCommand(plan) {
   return new Promise((resolve22) => {
     const command = plan.kind === "python-sidecar" ? plan.sidecarPath : process.execPath;
     const args = plan.kind === "python-sidecar" ? process.argv.slice(2) : process.argv.slice(1);
-    const child = (0, import_node_child_process6.spawn)(command, args, {
+    const child = (0, import_node_child_process7.spawn)(command, args, {
       stdio: "inherit",
       shell: process.platform === "win32",
       env: {

package/dist/cli/index.mjs

@@ -3046,7 +3046,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.160",
+  version: "0.3.162",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -28695,10 +28695,17 @@ async function handleRunStop(args) {
   const stopNotConfirmed = result.stopped === false || result.staleSchedulerState === true;
   if (stopNotConfirmed) {
     const detail = typeof result.error === "string" && result.error.trim() ? result.error.trim() : result.staleSchedulerState === true ? "scheduler state for the run is stale" : "the server did not confirm the stop";
-    process.stderr.write(
-      `Failed to stop run ${runId}: ${detail}. Retry 'deepline runs stop ${runId}' or inspect the run with 'deepline runs get ${runId} --full --json'.
-`
-    );
+    const lines2 = [
+      `Failed to stop run ${runId}: ${detail}.`,
+      ...result.hitlCancelledCount > 0 ? [`cancelled HITL waits: ${result.hitlCancelledCount}`] : [],
+      ...result.hitlCancellationPending === true ? [
+        "warning: HITL cancellation or same-card Slack refresh is still pending"
+      ] : [],
+      `retry: deepline runs stop ${runId}`,
+      `inspect: deepline runs get ${runId} --full --json`
+    ];
+    process.stderr.write(`${lines2.join("\n")}
+`);
     printCommandEnvelope(
       {
         ...result,
@@ -28708,9 +28715,7 @@ async function handleRunStop(args) {
               title: "run stop",
               lines: [
                 `\u2717 stop not confirmed for ${result.runId || runId}`,
-                `  ${detail}`,
-                `  retry: deepline runs stop ${runId}`,
-                `  inspect: deepline runs get ${runId} --full --json`
+                ...lines2.slice(1)
               ]
             }
           ]
@@ -28722,7 +28727,10 @@ async function handleRunStop(args) {
   }
   const lines = [
     `Stopped ${result.runId}`,
-    ...result.hitlCancelledCount > 0 ? [`cancelled HITL waits: ${result.hitlCancelledCount}`] : []
+    ...result.hitlCancelledCount > 0 ? [`cancelled HITL waits: ${result.hitlCancelledCount}`] : [],
+    ...result.hitlCancellationPending === true ? [
+      `warning: HITL cancellation or Slack card refresh is still pending; retry 'deepline runs stop ${runId}'`
+    ] : []
   ];
   printCommandEnvelope(
     {
@@ -42554,7 +42562,7 @@ Examples:
 }
 
 // src/cli/commands/setup.ts
-import { spawnSync as spawnSync2 } from "child_process";
+import { spawnSync as spawnSync3 } from "child_process";
 import {
   existsSync as existsSync15,
   lstatSync as lstatSync2,
@@ -44331,6 +44339,32 @@ Examples:
   });
 }
 
+// src/cli/npm-script-policy.ts
+import { spawnSync as spawnSync2 } from "child_process";
+function npmSupportsAllowScripts(version) {
+  const match = /^(\d+)\.(\d+)(?:\.|$)/.exec(version?.trim() ?? "");
+  if (!match) return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  return major > 11 || major === 11 && minor >= 16;
+}
+function readNpmVersion(env) {
+  try {
+    const plan = resolveShellSpawn("npm", ["--version"]);
+    const result = spawnSync2(plan.command, plan.args, {
+      encoding: "utf8",
+      env,
+      shell: plan.shell,
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 5e3
+    });
+    if (result.status !== 0) return null;
+    return String(result.stdout ?? "").trim() || null;
+  } catch {
+    return null;
+  }
+}
+
 // src/cli/commands/setup.ts
 var SETUP_PHASE_NAMES = [
   "cli",
@@ -44520,7 +44554,7 @@ function removeKnownLegacyPaths(baseUrl) {
   }).removeRetiredArtifacts();
 }
 function resolvePathCommands(command) {
-  const lookup = spawnSync2(
+  const lookup = spawnSync3(
     process.platform === "win32" ? "where" : "which",
     process.platform === "win32" ? [command] : ["-a", command],
     { encoding: "utf8", shell: process.platform === "win32" }
@@ -44547,7 +44581,7 @@ function isHomebrewFormulaCommand(path) {
 }
 function resolvePersistentGlobalCommand(dependencies = {}) {
   const platform3 = dependencies.platform ?? process.platform;
-  const run = dependencies.spawn ?? spawnSync2;
+  const run = dependencies.spawn ?? spawnSync3;
   const pathExists = dependencies.exists ?? existsSync15;
   const pathClis = dependencies.pathClis ?? resolvePathCommands("deepline");
   const homebrewCommand = pathClis.find(isHomebrewFormulaCommand);
@@ -44646,7 +44680,8 @@ function failSetupPhase(phases, phase, code) {
 }
 function rollbackCommand(scope, root) {
   const prefix = scope === "local" && root ? ` --prefix ${JSON.stringify(join20(root, ".deepline", "runtime"))}` : "";
-  return `npm install -g${prefix} --no-audit --no-fund --include=optional deepline@${SDK_VERSION}`;
+  const allowScriptsFlag = npmSupportsAllowScripts(readNpmVersion(process.env)) ? " --allow-scripts=esbuild" : "";
+  return `npm install -g${prefix} --no-audit --no-fund --include=optional${allowScriptsFlag} deepline@${SDK_VERSION}`;
 }
 function setupResumeCommand(baseUrl, scope) {
   const hostPrefix = baseUrl === "https://code.deepline.com" ? "" : `DEEPLINE_HOST_URL=${JSON.stringify(baseUrl)} `;
@@ -45394,7 +45429,7 @@ function consumePendingCliUpdateMessages(homeDir2 = homedir10()) {
 }
 
 // src/cli/commands/update.ts
-import { spawn as spawn4, spawnSync as spawnSync3 } from "child_process";
+import { spawn as spawn4, spawnSync as spawnSync4 } from "child_process";
 import {
   existsSync as existsSync18,
   mkdirSync as mkdirSync14,
@@ -45761,7 +45796,7 @@ function normalizedNpmPrefix(value) {
 function resolveNpmGlobalPrefix(env) {
   try {
     const plan = resolveShellSpawn("npm", ["prefix", "-g"]);
-    const result = spawnSync3(plan.command, plan.args, {
+    const result = spawnSync4(plan.command, plan.args, {
       encoding: "utf8",
       env,
       shell: plan.shell,
@@ -45816,14 +45851,16 @@ function resolveUpdatePlan(options = {}) {
   const npmGlobalPrefix = options.npmGlobalPrefix !== void 0 ? options.npmGlobalPrefix : resolveNpmGlobalPrefix(env);
   const hasVerifiedNpmOwnership = inferredInstallPrefix !== null && normalizedNpmPrefix(inferredInstallPrefix) === normalizedNpmPrefix(npmGlobalPrefix);
   const installPrefix = options.requireVerifiedNpmOwnership ? hasVerifiedNpmOwnership ? inferredInstallPrefix : null : inferredInstallPrefix;
+  const npmVersion = options.npmVersion === void 0 ? readNpmVersion(env) : options.npmVersion;
+  const npmGlobalInstallFlags = npmSupportsAllowScripts(npmVersion) ? [...NPM_SDK_INSTALL_COMMON_FLAGS, "--allow-scripts=esbuild"] : NPM_SDK_INSTALL_COMMON_FLAGS;
   const args = installPrefix ? [
     "install",
     "-g",
     "--prefix",
     installPrefix,
-    ...NPM_SDK_INSTALL_COMMON_FLAGS,
+    ...npmGlobalInstallFlags,
     packageSpec
-  ] : ["install", "-g", ...NPM_SDK_INSTALL_COMMON_FLAGS, packageSpec];
+  ] : ["install", "-g", ...npmGlobalInstallFlags, packageSpec];
   const fallbackRegistryUrl = options.npmFallbackRegistryUrl !== void 0 ? options.npmFallbackRegistryUrl : publicNpmFallbackRegistryUrl(
     env.DEEPLINE_HOST_URL?.trim() || autoDetectBaseUrl()
   );

package/dist/index.d.mts

@@ -1917,8 +1917,10 @@ interface StopPlayRunResult {
     stopped: boolean;
     /** True when the durable cancellation lane accepted the request and is draining. */
     cancelling?: boolean;
-    /** Number of open HITL interactions marked cancelled. */
+    /** Number of run-scoped HITL waits cancelled by the stop request. */
     hitlCancelledCount: number;
+    /** True if HITL state or its same-message Slack card still needs retrying. */
+    hitlCancellationPending?: boolean;
     /**
      * True when the scheduler state for the run was stale and the stop could
      * not be confirmed. Absent on older servers (treated as confirmed).

package/dist/index.d.ts

@@ -1917,8 +1917,10 @@ interface StopPlayRunResult {
     stopped: boolean;
     /** True when the durable cancellation lane accepted the request and is draining. */
     cancelling?: boolean;
-    /** Number of open HITL interactions marked cancelled. */
+    /** Number of run-scoped HITL waits cancelled by the stop request. */
     hitlCancelledCount: number;
+    /** True if HITL state or its same-message Slack card still needs retrying. */
+    hitlCancellationPending?: boolean;
     /**
      * True when the scheduler state for the run was stale and the stop could
      * not be confirmed. Absent on older servers (treated as confirmed).

package/dist/index.js

@@ -864,7 +864,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.160",
+  version: "0.3.162",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/index.mjs

@@ -768,7 +768,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.160",
+  version: "0.3.162",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.d.mts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.160";
+    readonly version: "0.3.162";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.d.ts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.160";
+    readonly version: "0.3.162";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.js

@@ -74,7 +74,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.160",
+  version: "0.3.162",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.mjs

@@ -48,7 +48,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.160",
+  version: "0.3.162",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.3.160",
+  "version": "0.3.162",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",