deepline 0.3.189 → 0.3.190

package/dist/cli/index.js

@@ -1965,7 +1965,7 @@ configureProxyFromEnv();
 // src/cli/index.ts
 var import_promises14 = require("fs/promises");
 var import_node_path32 = require("path");
-var import_node_os19 = require("os");
+var import_node_os20 = require("os");
 var import_commander5 = require("commander");
 
 // src/pagination.ts
@@ -3051,7 +3051,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.189",
+  version: "0.3.190",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -3276,6 +3276,13 @@ var KNOWN_SKILL_AGENTS = [
   "gemini-cli",
   "windsurf"
 ];
+var DEFAULT_SKILL_AGENTS = [
+  "codex",
+  "claude-code",
+  "cursor",
+  "gemini-cli",
+  "antigravity"
+];
 function skillsAgentPathSegment(agent) {
   if (agent === "*") return "all";
   const slug = agent.replace(/[^a-z0-9]+/gi, "-").replace(/^-+|-+$/g, "");
@@ -3288,6 +3295,13 @@ function sdkSkillsVersionPath(baseUrl, agents = []) {
 function legacySdkSkillsVersionPath(baseUrl) {
   return (0, import_node_path2.join)((0, import_node_path2.dirname)(sdkCliStateDirPath(baseUrl)), "sdk-skills", ".version");
 }
+function readSkillsVersionFile(path) {
+  try {
+    return (0, import_node_fs2.readFileSync)(path, "utf-8").trim();
+  } catch {
+    return "";
+  }
+}
 function resolveAutoSyncSkillAgents() {
   switch (detectAgentRuntime()) {
     case "codex":
@@ -3300,6 +3314,8 @@ function resolveAutoSyncSkillAgents() {
       return ["gemini-cli"];
     case "antigravity":
       return ["antigravity"];
+    case "unknown":
+      return [...DEFAULT_SKILL_AGENTS];
     default:
       return [];
   }
@@ -3308,6 +3324,13 @@ function readSdkSkillsLocalVersion(baseUrl) {
   const pluginVersion = readPluginSkillsVersion();
   if (pluginVersion) return pluginVersion;
   const agents = resolveAutoSyncSkillAgents();
+  if (agents.length > 1) {
+    const versions = agents.map(
+      (agent) => readSkillsVersionFile(sdkSkillsVersionPath(baseUrl, [agent]))
+    );
+    const first = versions[0];
+    return first && versions.every((version) => version === first) ? first : "";
+  }
   const scopedPath = sdkSkillsVersionPath(baseUrl, agents);
   if (agents.length > 0 && (0, import_node_fs2.existsSync)(scopedPath)) {
     try {
@@ -3334,10 +3357,19 @@ function readSdkSkillsLocalVersion(baseUrl) {
   }
 }
 function writeSdkSkillsLocalVersion(baseUrl, version, agents) {
-  const path = sdkSkillsVersionPath(baseUrl, agents);
-  (0, import_node_fs2.mkdirSync)((0, import_node_path2.dirname)(path), { recursive: true });
-  (0, import_node_fs2.writeFileSync)(path, `${version}
+  const targets = agents.length > 1 ? agents.map((agent) => [agent]) : [agents];
+  let complete = true;
+  for (const target of targets) {
+    const path = sdkSkillsVersionPath(baseUrl, target);
+    try {
+      (0, import_node_fs2.mkdirSync)((0, import_node_path2.dirname)(path), { recursive: true });
+      (0, import_node_fs2.writeFileSync)(path, `${version}
 `, "utf-8");
+    } catch {
+      complete = false;
+    }
+  }
+  return complete;
 }
 
 // ../play-runtime/coordinator-headers.ts
@@ -42724,7 +42756,7 @@ Examples:
 // src/cli/commands/setup.ts
 var import_node_child_process5 = require("child_process");
 var import_node_fs20 = require("fs");
-var import_node_os14 = require("os");
+var import_node_os15 = require("os");
 var import_node_path25 = require("path");
 
 // src/cli/installation-lifecycle.ts
@@ -42852,7 +42884,7 @@ function isOwnedInstallerCommandPath(input2) {
 // src/cli/commands/skills.ts
 var import_node_child_process3 = require("child_process");
 var import_node_fs19 = require("fs");
-var import_node_os13 = require("os");
+var import_node_os14 = require("os");
 var import_node_path24 = require("path");
 
 // contracts/install-commands.json
@@ -42888,7 +42920,6 @@ var install_commands_default = {
 
 // src/cli/install-commands.ts
 var INSTALL_COMMANDS = install_commands_default;
-var DEFAULT_SKILL_AGENTS = INSTALL_COMMANDS.skills.default_agents;
 var skillsNpxPackage = INSTALL_COMMANDS.skills.npx_add_args_template.find(
   (arg) => /^skills@\d+\.\d+\.\d+$/.test(arg)
 );
@@ -42939,7 +42970,7 @@ function skillsSourceUrl(baseUrl) {
 function buildSkillsAddArgs(baseUrl, skillName, options = {}) {
   const skillNames = Array.isArray(skillName) ? skillName : [skillName];
   const [firstSkillName, ...extraSkillNames] = skillNames;
-  const agents = options.agents ?? INSTALL_COMMANDS.skills.default_agents;
+  const agents = options.agents ?? DEFAULT_SKILL_AGENTS;
   const values = {
     skills_index_url: skillsIndexUrl(baseUrl),
     skills_source_url: skillsSourceUrl(baseUrl),
@@ -42968,6 +42999,8 @@ function buildSkillsAddArgs(baseUrl, skillName, options = {}) {
 // src/cli/skills-sync.ts
 var import_node_child_process2 = require("child_process");
 var import_node_crypto11 = require("crypto");
+var import_node_os13 = require("os");
+var import_node_zlib2 = require("zlib");
 var import_node_fs18 = require("fs");
 var import_node_path23 = require("path");
 
@@ -43324,6 +43357,8 @@ async function maybeReportSdkCliFailure(input2) {
 
 // src/cli/skills-sync.ts
 var CHECK_TIMEOUT_MS2 = 3e3;
+var INSTALLER_PROBE_TIMEOUT_MS = 1500;
+var PUBLISHED_VERIFICATION_RETRY_MS = 5 * 6e4;
 function shouldSkipSkillsSync() {
   if (detectAgentRuntime() === "claude_cowork" || isCiEnvironment()) {
     return true;
@@ -43612,7 +43647,7 @@ function spawnDetachedSkillsSyncChild(argv, onSpawnError) {
 function failedSkillsSyncPath(baseUrl, agents) {
   return (0, import_node_path23.join)(
     sdkCliStateDirPath(baseUrl),
-    `skills-sync-failed-${agents.map(agentLeaseSegment).join("-")}-version`
+    `skills-sync-failed-${sortedLeaseAgents(agents).map(agentLeaseSegment).join("-")}-version`
   );
 }
 function hasMarkedSkillsSyncVersion(path, version) {
@@ -43635,13 +43670,15 @@ function writeMarkedSkillsSyncVersion(path, version) {
     return false;
   }
 }
-function writeUnavailableSkillsNotice(baseUrl, remoteVersion, skillNames, notice = writeSdkSkillsStatusLine) {
+function writeUnavailableSkillsNotice(baseUrl, remoteVersion, skillNames, reason, notice = writeSdkSkillsStatusLine, knownProbes) {
   const path = unavailableSkillsNoticePath(baseUrl);
   if (hasMarkedSkillsSyncVersion(path, remoteVersion)) return;
   writeMarkedSkillsSyncVersion(path, remoteVersion);
-  const manualCommand = `npx ${buildSkillsInstallArgs(baseUrl, skillNames).join(" ")}`;
+  const probes = reason === "no-installer" ? knownProbes ?? probeInstallers() : null;
+  const manualCommand = probes?.npx === "missing" && probes.bunx !== "missing" ? `bunx ${buildBunxSkillsInstallArgs(baseUrl, skillNames, DEFAULT_SKILL_AGENTS).map(shellQuote4).join(" ")}` : `npx ${buildSkillsInstallArgs(baseUrl, skillNames).join(" ")}`;
+  const explanation = reason === "unsupported-agent" ? "the detected agent has no automatic skills sync target. Automatic sync was skipped." : probes?.bunx === "missing" && probes.npx === "missing" ? "neither `bunx` nor `npx` was found on PATH. Make one available." : `installer version check failed for ${Object.entries(probes ?? {}).filter(([, result]) => result === "failed").map(([command]) => `\`${command}\``).join(" and ")}. Check those commands with --version.`;
   notice(
-    `Deepline agent skills are out of date, but neither \`bunx\` nor \`npx\` is available. Install Node.js/npm or Bun, then run:
+    `Deepline agent skills are out of date, but ${explanation} To install manually, run:
 ${manualCommand}`
   );
 }
@@ -43652,10 +43689,17 @@ function clearUnavailableSkillsNotice(baseUrl) {
   }
 }
 function hasFailedSkillsSync(baseUrl, remoteVersion, agents) {
-  return hasMarkedSkillsSyncVersion(
-    failedSkillsSyncPath(baseUrl, agents),
-    remoteVersion
+  const marked = readMarkedSkillsSyncVersion(
+    failedSkillsSyncPath(baseUrl, agents)
   );
+  if (marked === remoteVersion) return true;
+  try {
+    const retry = JSON.parse(marked);
+    const now = Date.now();
+    return retry.version === remoteVersion && typeof retry.retryAfter === "number" && retry.retryAfter > now && retry.retryAfter <= now + PUBLISHED_VERIFICATION_RETRY_MS;
+  } catch {
+    return false;
+  }
 }
 function hasFailedAutomaticSkillsSync(baseUrl, agents) {
   return (0, import_node_fs18.existsSync)(failedSkillsSyncPath(baseUrl, agents));
@@ -43666,6 +43710,15 @@ function markFailedSkillsSync(baseUrl, remoteVersion, agents) {
     remoteVersion
   );
 }
+function deferPublishedVerificationRetry(baseUrl, remoteVersion, agents) {
+  return writeMarkedSkillsSyncVersion(
+    failedSkillsSyncPath(baseUrl, agents),
+    JSON.stringify({
+      version: remoteVersion,
+      retryAfter: Date.now() + PUBLISHED_VERIFICATION_RETRY_MS
+    })
+  );
+}
 function clearFailedSkillsSync(baseUrl, agents) {
   try {
     (0, import_node_fs18.unlinkSync)(failedSkillsSyncPath(baseUrl, agents));
@@ -43680,7 +43733,7 @@ function sortedUniqueSkillNames(names) {
     (a, b) => a.localeCompare(b)
   );
 }
-async function fetchV1SkillNames(baseUrl) {
+async function fetchV1SkillIndex(baseUrl) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), CHECK_TIMEOUT_MS2);
   try {
@@ -43688,20 +43741,175 @@ async function fetchV1SkillNames(baseUrl) {
       new URL("/.well-known/skills/index.json", baseUrl),
       { signal: controller.signal }
     );
-    if (!response.ok) return [];
+    if (!response.ok) return null;
     const data = await response.json().catch(() => null);
-    const names = (data?.skills ?? []).filter((skill) => skill.install_surface === "v1").map((skill) => skill.name).filter(
-      (name) => typeof name === "string" && name.length > 0
-    );
-    return sortedUniqueSkillNames(names);
+    return data;
   } catch {
-    return [];
+    return null;
   } finally {
     clearTimeout(timeout);
   }
 }
-function buildSdkSkillNames(v1SkillNames) {
-  return sortedUniqueSkillNames(v1SkillNames);
+function v1SkillNames(index) {
+  const skills = Array.isArray(index?.skills) ? index.skills : [];
+  return sortedUniqueSkillNames(
+    skills.filter((skill) => skill && skill.install_surface === "v1").map((skill) => skill.name).filter(
+      (name) => typeof name === "string" && name.length > 0
+    )
+  );
+}
+function buildSdkSkillNames(v1SkillNames2) {
+  return sortedUniqueSkillNames(v1SkillNames2);
+}
+function isDefaultAgentSet(agents) {
+  return agents.length === DEFAULT_SKILL_AGENTS.length && agents.every((agent, index) => agent === DEFAULT_SKILL_AGENTS[index]);
+}
+function safeSkillFilePath(value) {
+  if (typeof value !== "string" || !value) return false;
+  return value.split("/").every(
+    (part) => /^[a-zA-Z0-9._-]+$/.test(part) && part !== "." && part !== ".."
+  );
+}
+function installedSkillFiles(root, prefix = "") {
+  const files = [];
+  for (const entry of (0, import_node_fs18.readdirSync)((0, import_node_path23.join)(root, prefix), {
+    withFileTypes: true
+  })) {
+    const relativePath = prefix ? `${prefix}/${entry.name}` : entry.name;
+    if (entry.isDirectory()) {
+      files.push(...installedSkillFiles(root, relativePath));
+    } else if (entry.isFile()) {
+      files.push(relativePath);
+    } else {
+      throw new Error(`unexpected installed entry in ${root}`);
+    }
+  }
+  return files.sort((a, b) => a.localeCompare(b));
+}
+function publishedArchiveFiles(bytes, expectedFiles, name) {
+  const tar = (0, import_node_zlib2.gunzipSync)(bytes, { maxOutputLength: 128 * 1024 * 1024 });
+  const expected = new Set(expectedFiles);
+  const files = /* @__PURE__ */ new Map();
+  let offset = 0;
+  while (offset + 512 <= tar.length) {
+    const header = tar.subarray(offset, offset + 512);
+    if (header.every((byte) => byte === 0)) {
+      if (!tar.subarray(offset).every((byte) => byte === 0)) {
+        throw new Error(`invalid published archive for ${name}`);
+      }
+      break;
+    }
+    const file = header.toString("utf8", 0, 100).split("\0", 1)[0] ?? "";
+    const sizeText = header.toString("ascii", 124, 136).replace(/\0/g, "").trim();
+    const size = /^[0-7]+$/.test(sizeText) ? Number.parseInt(sizeText, 8) : NaN;
+    const type = header[156];
+    if (!safeSkillFilePath(file) || !expected.has(file) || files.has(file) || !Number.isSafeInteger(size) || size < 0 || type !== 0 && type !== 48 || header.subarray(345, 500).some((byte) => byte !== 0)) {
+      throw new Error(`invalid published archive entry for ${name}`);
+    }
+    const start = offset + 512;
+    const end = start + size;
+    if (end > tar.length) {
+      throw new Error(`incomplete published archive for ${name}`);
+    }
+    files.set(file, tar.subarray(start, end));
+    offset = start + Math.ceil(size / 512) * 512;
+  }
+  if (files.size !== expected.size) {
+    throw new Error(`published archive file list differs for ${name}`);
+  }
+  return files;
+}
+var PublishedSkillsVerificationError = class extends Error {
+};
+async function verifyDefaultAgentSkillsInstall(baseUrl, remoteVersion, skillNames, index) {
+  if (index?.version !== remoteVersion) {
+    throw new PublishedSkillsVerificationError(
+      "the published skill index version does not match the server version"
+    );
+  }
+  const published = /* @__PURE__ */ new Map();
+  const entries = Array.isArray(index.skills) ? index.skills : [];
+  for (const name of skillNames) {
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(name)) {
+      throw new PublishedSkillsVerificationError(
+        `unsafe published skill name: ${name}`
+      );
+    }
+    const entry = entries.find(
+      (skill) => skill && skill.name === name && skill.install_surface === "v1"
+    );
+    if (!Array.isArray(entry?.files) || !entry.files.length || !entry.files.every(safeSkillFilePath) || new Set(entry.files).size !== entry.files.length || !entry.files.includes("SKILL.md") || entry.type !== "archive" || entry.url !== `./archives/${name}.tar.gz` || typeof entry.digest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(entry.digest)) {
+      throw new PublishedSkillsVerificationError(
+        `invalid published file list for ${name}`
+      );
+    }
+    published.set(name, {
+      files: [...entry.files].sort((a, b) => a.localeCompare(b)),
+      digest: entry.digest
+    });
+  }
+  const expected = /* @__PURE__ */ new Map();
+  const jobs = [...published];
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), 12e4);
+  let cursor = 0;
+  try {
+    await Promise.all(
+      Array.from({ length: Math.min(8, jobs.length) }, async () => {
+        while (cursor < jobs.length) {
+          const job = jobs[cursor++];
+          if (!job) break;
+          const [name, publishedSkill] = job;
+          const url = new URL(
+            `/.well-known/skills/archives/${name}.tar.gz`,
+            baseUrl
+          );
+          const response = await fetch(url, { signal: controller.signal });
+          if (!response.ok) {
+            throw new Error(`published archive is unavailable: ${name}`);
+          }
+          const bytes = Buffer.from(await response.arrayBuffer());
+          const digest = `sha256:${(0, import_node_crypto11.createHash)("sha256").update(bytes).digest("hex")}`;
+          if (digest !== publishedSkill.digest) {
+            throw new Error(`published archive digest differs for ${name}`);
+          }
+          for (const [file, content] of publishedArchiveFiles(
+            bytes,
+            publishedSkill.files,
+            name
+          )) {
+            expected.set(`${name}/${file}`, content);
+          }
+        }
+      })
+    );
+  } catch (error) {
+    throw new PublishedSkillsVerificationError(
+      error instanceof Error ? error.message : String(error)
+    );
+  } finally {
+    clearTimeout(timeout);
+    controller.abort();
+  }
+  const home = (0, import_node_os13.homedir)();
+  const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR?.trim() || (0, import_node_path23.join)(home, ".claude");
+  for (const [name, { files }] of published) {
+    for (const root of [
+      (0, import_node_path23.join)(home, ".agents", "skills", name),
+      (0, import_node_path23.join)(claudeConfigDir, "skills", name)
+    ]) {
+      const installed = installedSkillFiles(root);
+      if (installed.length !== files.length || installed.some((file, index2) => file !== files[index2])) {
+        throw new Error(`installed file tree differs for ${name}`);
+      }
+      for (const file of files) {
+        const publishedContent = expected.get(`${name}/${file}`);
+        if (!publishedContent || !(0, import_node_fs18.readFileSync)((0, import_node_path23.join)(root, file)).equals(publishedContent)) {
+          throw new Error(`installed content differs for ${name}/${file}`);
+        }
+      }
+    }
+  }
 }
 async function fetchSkillsUpdate(baseUrl, localVersion) {
   const controller = new AbortController();
@@ -43742,13 +43950,58 @@ function buildBunxSkillsInstallArgs(baseUrl, skillNames, agents) {
     agents
   });
 }
-function hasCommand(command) {
+var NEGATIVE_INSTALLER_PROBE_TTL_MS = 5 * 60 * 1e3;
+function probeInstallers(timeoutMs) {
+  return {
+    bunx: probeCommand("bunx", timeoutMs),
+    npx: probeCommand("npx", timeoutMs)
+  };
+}
+function noInstallerProbePath(baseUrl) {
+  return (0, import_node_path23.join)(
+    sdkCliStateDirPath(baseUrl),
+    "skills-sync-no-installer-unknown.json"
+  );
+}
+function dueUnknownInstallerProbes(baseUrl, remoteVersion) {
+  const path = noInstallerProbePath(baseUrl);
+  try {
+    const cached = JSON.parse((0, import_node_fs18.readFileSync)(path, "utf-8"));
+    if (cached.version === remoteVersion && typeof cached.checkedAt === "number" && cached.checkedAt <= Date.now() && Date.now() - cached.checkedAt < NEGATIVE_INSTALLER_PROBE_TTL_MS && (cached.probes?.bunx === "missing" || cached.probes?.bunx === "failed") && (cached.probes?.npx === "missing" || cached.probes?.npx === "failed")) {
+      return cached.probes;
+    }
+  } catch {
+  }
+  const probes = probeInstallers(INSTALLER_PROBE_TIMEOUT_MS);
+  if (probes.bunx !== "available" && probes.npx !== "available") {
+    try {
+      (0, import_node_fs18.mkdirSync)((0, import_node_path23.dirname)(path), { recursive: true });
+      (0, import_node_fs18.writeFileSync)(
+        path,
+        JSON.stringify({
+          version: remoteVersion,
+          checkedAt: Date.now(),
+          probes
+        }),
+        "utf-8"
+      );
+    } catch {
+    }
+  }
+  return probes;
+}
+function probeCommand(command, timeoutMs) {
   const plan = resolveShellSpawn(command, ["--version"]);
   const result = (0, import_node_child_process2.spawnSync)(plan.command, plan.args, {
     stdio: "ignore",
-    shell: plan.shell
+    shell: plan.shell,
+    timeout: timeoutMs
   });
-  return result.status === 0;
+  if (result.status === 0) return "available";
+  return result.error?.code === "ENOENT" ? "missing" : "failed";
+}
+function hasCommand(command) {
+  return probeCommand(command) === "available";
 }
 function shellQuote4(arg) {
   return `'${arg.replace(/'/g, `'\\''`)}'`;
@@ -43834,7 +44087,7 @@ async function runSkillsInstall(installs, agents, notice = writeSdkSkillsStatusL
   }
   const details = failures.map((failure) => failure.detail).filter(Boolean).join("\n");
   const attemptedCommands = failures.map((failure) => `  ${failure.manualCommand}`).join("\n");
-  const retryAgent = agents.at(0);
+  const retryAgent = agents.length === 1 ? agents[0] : void 0;
   notice(
     `Deepline agent-skills refresh failed for ${agents.join(", ")}. The Deepline command will continue; this only affects optional local agent instructions, not authentication, data, or billing.
 ` + (attemptedCommands ? `Attempted installer command${failures.length === 1 ? "" : "s"}:
@@ -43921,6 +44174,9 @@ async function syncSdkSkillsIfNeeded(baseUrl, options = {}) {
   if (options.mode === "detached" && agents.length > 0) {
     flushDeferredSkillsNotices(baseUrl, agents);
   }
+  if (options.mode === "detached" && options.update === void 0 && isDefaultAgentSet(agents)) {
+    return;
+  }
   const ownsInProgressMarker = options.mode !== "detached" && agents.length > 0 && Boolean(options.claim);
   const leases = ownsInProgressMarker ? readInProgressSkillsSyncLeases(baseUrl, agents) : null;
   if (leases && [...leases.values()].some((lease) => lease.owner !== options.claim)) {
@@ -43953,11 +44209,33 @@ async function syncSdkSkillsIfNeeded(baseUrl, options = {}) {
       writeUnavailableSkillsNotice(
         baseUrl,
         update.remoteVersion,
-        buildSdkSkillNames(DEFAULT_SDK_SKILL_NAMES)
+        buildSdkSkillNames(DEFAULT_SDK_SKILL_NAMES),
+        "unsupported-agent"
       );
       return;
     }
     if (options.mode === "detached" && agents.length > 0) {
+      if (isDefaultAgentSet(agents)) {
+        if (agents.some(
+          (agent) => isFreshInProgressSkillsSync(
+            readInProgressSkillsSyncLease(baseUrl, agent)
+          )
+        )) {
+          return;
+        }
+        const probes = dueUnknownInstallerProbes(baseUrl, update.remoteVersion);
+        if (probes.bunx !== "available" && probes.npx !== "available") {
+          writeUnavailableSkillsNotice(
+            baseUrl,
+            update.remoteVersion,
+            buildSdkSkillNames(DEFAULT_SDK_SKILL_NAMES),
+            "no-installer",
+            writeSdkSkillsStatusLine,
+            probes
+          );
+          return;
+        }
+      }
       const outcome = claimAndSpawnDetachedSkillsSync(
         baseUrl,
         agents,
@@ -43967,10 +44245,11 @@ async function syncSdkSkillsIfNeeded(baseUrl, options = {}) {
       if (outcome === "held") return;
       if (outcome === "claimed") {
         writeSdkSkillsStatusLine(
-          "Deepline skills changed; refreshing agent skills in the background."
+          "Deepline skills are out of date; updating in the background."
         );
         return;
       }
+      if (isDefaultAgentSet(agents)) return;
     }
     await runInlineSkillsSync(
       baseUrl,
@@ -43987,7 +44266,8 @@ async function syncSdkSkillsIfNeeded(baseUrl, options = {}) {
 async function runInlineSkillsSync(baseUrl, remoteVersion, agents, notices) {
   const update = { remoteVersion };
   const notice = notices === "defer" ? deferSkillsNotice(baseUrl, agents) : writeSdkSkillsStatusLine;
-  const remoteSkillNames = await fetchV1SkillNames(baseUrl);
+  const index = await fetchV1SkillIndex(baseUrl);
+  const remoteSkillNames = v1SkillNames(index);
   const skillNames = buildSdkSkillNames(
     remoteSkillNames.length > 0 ? remoteSkillNames : DEFAULT_SDK_SKILL_NAMES
   );
@@ -43997,6 +44277,7 @@ async function runInlineSkillsSync(baseUrl, remoteVersion, agents, notices) {
       baseUrl,
       update.remoteVersion,
       skillNames,
+      "unsupported-agent",
       notice
     );
     return;
@@ -44007,6 +44288,7 @@ async function runInlineSkillsSync(baseUrl, remoteVersion, agents, notices) {
       baseUrl,
       update.remoteVersion,
       skillNames,
+      "no-installer",
       notice
     );
     return;
@@ -44032,10 +44314,47 @@ async function runInlineSkillsSync(baseUrl, remoteVersion, agents, notices) {
       markerWritten,
       attempts: installResult.attempts
     });
+    if (isDefaultAgentSet(agents)) {
+      notice(
+        `After fixing the installer, remove ${failedSkillsSyncPath(baseUrl, agents)} to retry this skills version automatically.`
+      );
+    }
     return;
   }
+  if (isDefaultAgentSet(agents)) {
+    try {
+      await verifyDefaultAgentSkillsInstall(
+        baseUrl,
+        update.remoteVersion,
+        skillNames,
+        index
+      );
+    } catch (error) {
+      const detail = error instanceof Error ? error.message : String(error);
+      const publishedFailure = error instanceof PublishedSkillsVerificationError;
+      const markerWritten = publishedFailure ? deferPublishedVerificationRetry(baseUrl, update.remoteVersion, agents) : markFailedSkillsSync(baseUrl, update.remoteVersion, agents);
+      notice(
+        publishedFailure ? `Deepline could not verify the published skills: ${detail}. The local version remains stale; it will retry automatically on a later command.` : `Deepline agent-skills refresh could not verify the five installed targets: ${detail}. The local version remains stale. After fixing the install, remove ${failedSkillsSyncPath(baseUrl, agents)} to retry this version automatically.`
+      );
+      void maybeReportAutomaticSkillsSyncFailure({
+        baseUrl,
+        remoteSkillsVersion: update.remoteVersion,
+        agents,
+        skillsPackage: SKILLS_NPX_PACKAGE,
+        targetSkillCount: skillNames.length,
+        markerWritten,
+        attempts: []
+      });
+      return;
+    }
+  }
   runLegacySkillsCleanup(agents);
-  writeSdkSkillsLocalVersion(baseUrl, update.remoteVersion, agents);
+  if (!writeSdkSkillsLocalVersion(baseUrl, update.remoteVersion, agents)) {
+    notice(
+      "Deepline agent skills installed, but the local skills version could not be recorded. A later command will retry the refresh."
+    );
+    return;
+  }
   clearUnavailableSkillsNotice(baseUrl);
   clearFailedSkillsSync(baseUrl, agents);
   notice("Deepline agent skills are up to date.");
@@ -44104,7 +44423,7 @@ function detectSkillsAgents(input2) {
   if (knownAgent) return [knownAgent];
   const roots = [
     ...input2.scope === "local" && input2.root ? [input2.root] : [],
-    input2.homeDir ?? (0, import_node_os13.homedir)()
+    input2.homeDir ?? (0, import_node_os14.homedir)()
   ];
   const detected = AGENT_MARKERS.filter(
     (marker) => roots.some(
@@ -44688,7 +45007,7 @@ function safeRead(path) {
 function removeKnownLegacyPaths(baseUrl) {
   return CliInstallation.forUser({
     baseUrlSlug: baseUrlSlug(baseUrl),
-    home: (0, import_node_os14.homedir)()
+    home: (0, import_node_os15.homedir)()
   }).removeRetiredArtifacts();
 }
 function resolvePathCommands(command) {
@@ -45444,7 +45763,7 @@ var import_node_fs24 = require("fs");
 
 // src/cli/update-preferences.ts
 var import_node_fs21 = require("fs");
-var import_node_os15 = require("os");
+var import_node_os16 = require("os");
 var import_node_path26 = require("path");
 var UPDATE_PREFERENCES_SCHEMA_VERSION = 1;
 var CLI_UPDATE_MESSAGES = [
@@ -45473,7 +45792,7 @@ function unreadablePreferences(path, error) {
     acknowledgedMessages: CLI_UPDATE_MESSAGES.map(({ id }) => id)
   };
 }
-function cliUpdatePreferencesPath(homeDir2 = (0, import_node_os15.homedir)()) {
+function cliUpdatePreferencesPath(homeDir2 = (0, import_node_os16.homedir)()) {
   return (0, import_node_path26.join)(
     homeDir2,
     ".local",
@@ -45482,7 +45801,7 @@ function cliUpdatePreferencesPath(homeDir2 = (0, import_node_os15.homedir)()) {
     "update-preferences.json"
   );
 }
-function readCliUpdatePreferences(homeDir2 = (0, import_node_os15.homedir)()) {
+function readCliUpdatePreferences(homeDir2 = (0, import_node_os16.homedir)()) {
   const path = cliUpdatePreferencesPath(homeDir2);
   if (!(0, import_node_fs21.existsSync)(path)) return defaultPreferences();
   try {
@@ -45499,7 +45818,7 @@ function readCliUpdatePreferences(homeDir2 = (0, import_node_os15.homedir)()) {
     return unreadablePreferences(path, error);
   }
 }
-function writeCliUpdatePreferences(preferences, homeDir2 = (0, import_node_os15.homedir)()) {
+function writeCliUpdatePreferences(preferences, homeDir2 = (0, import_node_os16.homedir)()) {
   const path = cliUpdatePreferencesPath(homeDir2);
   const tempPath = `${path}.${process.pid}.tmp`;
   (0, import_node_fs21.mkdirSync)((0, import_node_path26.dirname)(path), { recursive: true });
@@ -45514,7 +45833,7 @@ function writeCliUpdatePreferences(preferences, homeDir2 = (0, import_node_os15.
     (0, import_node_fs21.rmSync)(tempPath, { force: true });
   }
 }
-function setCliAutoUpdateEnabled(enabled, homeDir2 = (0, import_node_os15.homedir)()) {
+function setCliAutoUpdateEnabled(enabled, homeDir2 = (0, import_node_os16.homedir)()) {
   const current = readCliUpdatePreferences(homeDir2);
   const next = {
     ...current,
@@ -45524,7 +45843,7 @@ function setCliAutoUpdateEnabled(enabled, homeDir2 = (0, import_node_os15.homedi
   writeCliUpdatePreferences(next, homeDir2);
   return next;
 }
-function setCliPinnedVersion(version, homeDir2 = (0, import_node_os15.homedir)()) {
+function setCliPinnedVersion(version, homeDir2 = (0, import_node_os16.homedir)()) {
   const next = {
     ...readCliUpdatePreferences(homeDir2),
     pinnedVersion: version
@@ -45532,18 +45851,18 @@ function setCliPinnedVersion(version, homeDir2 = (0, import_node_os15.homedir)()
   writeCliUpdatePreferences(next, homeDir2);
   return next;
 }
-function clearCliPinnedVersion(homeDir2 = (0, import_node_os15.homedir)()) {
+function clearCliPinnedVersion(homeDir2 = (0, import_node_os16.homedir)()) {
   const current = readCliUpdatePreferences(homeDir2);
   if (current.pinnedVersion === null) return current;
   const next = { ...current, pinnedVersion: null };
   writeCliUpdatePreferences(next, homeDir2);
   return next;
 }
-function shouldRunCliAutoUpdate(homeDir2 = (0, import_node_os15.homedir)()) {
+function shouldRunCliAutoUpdate(homeDir2 = (0, import_node_os16.homedir)()) {
   const preferences = readCliUpdatePreferences(homeDir2);
   return preferences.autoUpdateEnabled && preferences.pinnedVersion === null;
 }
-function consumePendingCliUpdateMessages(homeDir2 = (0, import_node_os15.homedir)()) {
+function consumePendingCliUpdateMessages(homeDir2 = (0, import_node_os16.homedir)()) {
   const preferences = readCliUpdatePreferences(homeDir2);
   const acknowledged = new Set(preferences.acknowledgedMessages);
   const pending = CLI_UPDATE_MESSAGES.filter(({ id }) => !acknowledged.has(id));
@@ -45562,7 +45881,7 @@ function consumePendingCliUpdateMessages(homeDir2 = (0, import_node_os15.homedir
 // src/cli/commands/update.ts
 var import_node_child_process6 = require("child_process");
 var import_node_fs23 = require("fs");
-var import_node_os16 = require("os");
+var import_node_os17 = require("os");
 var import_node_path28 = require("path");
 
 // src/cli/install-integrity.ts
@@ -45937,7 +46256,7 @@ function isHomebrewFormulaEntrypoint(entrypoint) {
 }
 function resolveUpdatePlan(options = {}) {
   const env = options.env ?? process.env;
-  const homeDir2 = options.homeDir ?? (0, import_node_os16.homedir)();
+  const homeDir2 = options.homeDir ?? (0, import_node_os17.homedir)();
   const entrypoint = options.entrypoint ?? (process.argv[1] ? (0, import_node_path28.resolve)(process.argv[1]) : "");
   const sourceRoot = entrypoint ? findRepoBackedSdkRoot((0, import_node_path28.dirname)(entrypoint)) : null;
   if (sourceRoot) {
@@ -45995,7 +46314,7 @@ function autoUpdateFailurePath(plan) {
     return (0, import_node_path28.join)(plan.stateDir, AUTO_UPDATE_FAILURE_FILE);
   }
   return (0, import_node_path28.join)(
-    (0, import_node_os16.homedir)(),
+    (0, import_node_os17.homedir)(),
     ".local",
     "deepline",
     "sdk-cli",
@@ -47497,12 +47816,12 @@ function stableStringify(value) {
 
 // src/cli/commands/tools.ts
 var import_node_fs26 = require("fs");
-var import_node_os18 = require("os");
+var import_node_os19 = require("os");
 var import_node_path30 = require("path");
 
 // src/tool-output.ts
 var import_node_fs25 = require("fs");
-var import_node_os17 = require("os");
+var import_node_os18 = require("os");
 var import_node_path29 = require("path");
 function isPlainObject(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
@@ -47630,7 +47949,7 @@ function projectRowOutput(conversion) {
   };
 }
 function ensureOutputDir() {
-  const outputDir = (0, import_node_path29.join)((0, import_node_os17.homedir)(), ".local", "share", "deepline", "data");
+  const outputDir = (0, import_node_path29.join)((0, import_node_os18.homedir)(), ".local", "share", "deepline", "data");
   (0, import_node_fs25.mkdirSync)(outputDir, { recursive: true });
   return outputDir;
 }
@@ -50069,7 +50388,7 @@ function starterScriptJson(script) {
 function seedToolListScript(input2) {
   const stem = safeFileStem(input2.toolId);
   const fileName = `${stem}-workflow-seed-${Date.now()}.play.ts`;
-  const scriptDir = (0, import_node_fs26.mkdtempSync)((0, import_node_path30.join)((0, import_node_os18.tmpdir)(), "deepline-workflow-seed-"));
+  const scriptDir = (0, import_node_fs26.mkdtempSync)((0, import_node_path30.join)((0, import_node_os19.tmpdir)(), "deepline-workflow-seed-"));
   (0, import_node_fs26.chmodSync)(scriptDir, 448);
   const scriptPath = (0, import_node_path30.join)(scriptDir, fileName);
   const projectDir = `deepline/projects/${stem}-workflow`;
@@ -51367,7 +51686,7 @@ function topLevelCommandKnown(program, commandName) {
   );
 }
 async function runPlayRunnerHealthCheck() {
-  const dir = await (0, import_promises14.mkdtemp)((0, import_node_path32.join)((0, import_node_os19.tmpdir)(), "deepline-health-play-"));
+  const dir = await (0, import_promises14.mkdtemp)((0, import_node_path32.join)((0, import_node_os20.tmpdir)(), "deepline-health-play-"));
   const file = (0, import_node_path32.join)(dir, "health-check.play.ts");
   try {
     await (0, import_promises14.writeFile)(