deepline 0.3.408 → 0.3.410

package/dist/cli/{chunk-7P5AA3SN.js → chunk-PPDBRJRW.js}

@@ -8,6 +8,10 @@ var PROVIDER_TRANSIENT_ERROR_BRAND = Symbol.for(
 );
 var LEGACY_TOOL_EXECUTION_ERROR_SCHEMA_VERSION = 0;
 var TOOL_EXECUTION_ERROR_SCHEMA_VERSION = 1;
+var SUPPORTED_TOOL_EXECUTION_ERROR_SCHEMA_VERSIONS = [
+  LEGACY_TOOL_EXECUTION_ERROR_SCHEMA_VERSION,
+  TOOL_EXECUTION_ERROR_SCHEMA_VERSION
+];
 var TOOL_EXECUTION_ERROR_SCHEMA_HEADER = "x-deepline-tool-error-schema";
 var MAX_IDENTIFIER_LENGTH = 200;
 var MAX_CODE_LENGTH = 160;
@@ -341,4 +345,5 @@ function deserializeToolExecutionFailure(message, value, acceptedSchemaVersion)
 
 
 
-exports.TOOL_EXECUTION_ERROR_SCHEMA_VERSION = TOOL_EXECUTION_ERROR_SCHEMA_VERSION; exports.TOOL_EXECUTION_ERROR_SCHEMA_HEADER = TOOL_EXECUTION_ERROR_SCHEMA_HEADER; exports.DeeplineError = DeeplineError; exports.ToolExecutionError = ToolExecutionError; exports.brandAsToolExecutionError = brandAsToolExecutionError; exports.isProviderTransientFailure = isProviderTransientFailure; exports.ProviderTransientError = ProviderTransientError; exports.getProviderUnavailableReason = getProviderUnavailableReason; exports.isProviderUnavailable = isProviderUnavailable; exports.isProviderWaterfallUnavailableError = isProviderWaterfallUnavailableError; exports.brandAsProviderTransientError = brandAsProviderTransientError; exports.serializeToolExecutionFailure = serializeToolExecutionFailure; exports.deserializeToolExecutionFailure = deserializeToolExecutionFailure;
+
+exports.TOOL_EXECUTION_ERROR_SCHEMA_VERSION = TOOL_EXECUTION_ERROR_SCHEMA_VERSION; exports.SUPPORTED_TOOL_EXECUTION_ERROR_SCHEMA_VERSIONS = SUPPORTED_TOOL_EXECUTION_ERROR_SCHEMA_VERSIONS; exports.TOOL_EXECUTION_ERROR_SCHEMA_HEADER = TOOL_EXECUTION_ERROR_SCHEMA_HEADER; exports.DeeplineError = DeeplineError; exports.ToolExecutionError = ToolExecutionError; exports.brandAsToolExecutionError = brandAsToolExecutionError; exports.isProviderTransientFailure = isProviderTransientFailure; exports.ProviderTransientError = ProviderTransientError; exports.getProviderUnavailableReason = getProviderUnavailableReason; exports.isProviderUnavailable = isProviderUnavailable; exports.isProviderWaterfallUnavailableError = isProviderWaterfallUnavailableError; exports.brandAsProviderTransientError = brandAsProviderTransientError; exports.serializeToolExecutionFailure = serializeToolExecutionFailure; exports.deserializeToolExecutionFailure = deserializeToolExecutionFailure;

package/dist/cli/{chunk-IWBXJDZA.mjs → chunk-PZSLPBDA.mjs}

@@ -2,7 +2,7 @@ import {
   argsWantJson,
   openInBrowser,
   printCommandEnvelope
-} from "./chunk-4CFULMRB.mjs";
+} from "./chunk-5V5Y37BC.mjs";
 import {
   ACTIVE_ORG_ID_ENV,
   ACTIVE_ORG_NAME_ENV,
@@ -25,7 +25,7 @@ import {
   saveHostEnvValues,
   saveProjectDeeplineEnvValues,
   storedHostApiKey
-} from "./chunk-SD7MXAJA.mjs";
+} from "./chunk-RFB25DSQ.mjs";
 
 // src/cli/commands/auth.ts
 import {

package/dist/cli/{chunk-ILHRA7AD.js → chunk-QADCFSGH.js}

@@ -3,7 +3,7 @@
 
 
 
-var _chunkFERRDNMOjs = require('./chunk-FERRDNMO.js');
+var _chunkAD47BXN2js = require('./chunk-AD47BXN2.js');
 
 
 
@@ -16,7 +16,7 @@ var _chunkFERRDNMOjs = require('./chunk-FERRDNMO.js');
 var _chunkBQR6UN3Cjs = require('./chunk-BQR6UN3C.js');
 
 
-var _chunk7P5AA3SNjs = require('./chunk-7P5AA3SN.js');
+var _chunkPPDBRJRWjs = require('./chunk-PPDBRJRW.js');
 
 // src/cli/tool-features.ts
 var VIEWS = {
@@ -31,7 +31,7 @@ var VIEWS = {
       details: model,
       lines: [
         ...unlisted,
-        ..._chunkFERRDNMOjs.formatModelDescription.call(void 0, model).trimEnd().split("\n")
+        ..._chunkAD47BXN2js.formatModelDescription.call(void 0, model).trimEnd().split("\n")
       ]
     };
   },
@@ -92,7 +92,7 @@ async function found(lookup) {
   try {
     return await lookup;
   } catch (error) {
-    if (error instanceof _chunk7P5AA3SNjs.DeeplineError && (error.statusCode === 404 || error.code === "PLAY_NOT_FOUND" || error.code === "NOT_FOUND")) {
+    if (error instanceof _chunkPPDBRJRWjs.DeeplineError && (error.statusCode === 404 || error.code === "PLAY_NOT_FOUND" || error.code === "NOT_FOUND")) {
       return null;
     }
     throw error;
@@ -128,18 +128,18 @@ async function describeName(name, options, lookups) {
     const features = toolFeatures(record2);
     return {
       described: {
-        ..._chunkFERRDNMOjs.describedTool.call(void 0, record2, name),
+        ..._chunkAD47BXN2js.describedTool.call(void 0, record2, name),
         // Shown when the tool runs only on your own credentials; otherwise
         // it is a feature, described with --feature byok.
         ..._optionalChain([byok, 'optionalAccess', _3 => _3.required]) === true ? { byok } : {},
         ...features.length ? { features: features.map(({ view: _view, ...feature }) => feature) } : {}
       },
-      record: _chunkFERRDNMOjs.toolMetadataJsonForDescribe.call(void 0, 
+      record: _chunkAD47BXN2js.toolMetadataJsonForDescribe.call(void 0, 
         record2,
         name,
         lookups.seedStarterScript
       ),
-      schemas: _chunkFERRDNMOjs.publicToolSchemas.call(void 0, record2),
+      schemas: _chunkAD47BXN2js.publicToolSchemas.call(void 0, record2),
       feature: (featureName, value) => {
         const feature = features.find(({ name: name2 }) => name2 === featureName);
         return feature ? describeFeature(record2, feature, value, {

package/dist/cli/{chunk-ECVLPS67.js → chunk-QJI5FIOW.js}

@@ -1,17 +1,19 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
-var _chunk4RNDKFNQjs = require('./chunk-4RNDKFNQ.js');
+var _chunkD37FEBESjs = require('./chunk-D37FEBES.js');
 
 
+var _chunkNTVLGHFMjs = require('./chunk-NTVLGHFM.js');
 
-var _chunk2XXXFPTDjs = require('./chunk-2XXXFPTD.js');
 
+var _chunkLTFL4JRNjs = require('./chunk-LTFL4JRN.js');
 
-var _chunkQ3PUHXOYjs = require('./chunk-Q3PUHXOY.js');
 
+var _chunkNF4V5DTYjs = require('./chunk-NF4V5DTY.js');
 
-var _chunkQUAQX3FQjs = require('./chunk-QUAQX3FQ.js');
+
+var _chunkFVLNYDI4js = require('./chunk-FVLNYDI4.js');
 
 // src/cli/commands/update.ts
 var _child_process = require('child_process');
@@ -26,6 +28,7 @@ var _child_process = require('child_process');
 
 var _fs = require('fs');
 var _os = require('os');
+var _promises = require('timers/promises');
 
 
 
@@ -210,6 +213,9 @@ function probeSdkSidecarEsbuild(versionDir) {
 
 
 var UPDATE_PREFERENCES_SCHEMA_VERSION = 1;
+function defaultHomeDir() {
+  return _optionalChain([process, 'access', _4 => _4.env, 'access', _5 => _5.HOME, 'optionalAccess', _6 => _6.trim, 'call', _7 => _7()]) || _os.homedir.call(void 0, );
+}
 var CLI_UPDATE_MESSAGES = [
   {
     id: "auto-update-default-v1",
@@ -236,7 +242,7 @@ function unreadablePreferences(path, error) {
     acknowledgedMessages: CLI_UPDATE_MESSAGES.map(({ id }) => id)
   };
 }
-function cliUpdatePreferencesPath(homeDir = _os.homedir.call(void 0, )) {
+function cliUpdatePreferencesPath(homeDir = defaultHomeDir()) {
   return _path.join.call(void 0, 
     homeDir,
     ".local",
@@ -245,7 +251,7 @@ function cliUpdatePreferencesPath(homeDir = _os.homedir.call(void 0, )) {
     "update-preferences.json"
   );
 }
-function readCliUpdatePreferences(homeDir = _os.homedir.call(void 0, )) {
+function readCliUpdatePreferences(homeDir = defaultHomeDir()) {
   const path = cliUpdatePreferencesPath(homeDir);
   if (!_fs.existsSync.call(void 0, path)) return defaultPreferences();
   try {
@@ -262,7 +268,7 @@ function readCliUpdatePreferences(homeDir = _os.homedir.call(void 0, )) {
     return unreadablePreferences(path, error);
   }
 }
-function writeCliUpdatePreferences(preferences, homeDir = _os.homedir.call(void 0, )) {
+function writeCliUpdatePreferences(preferences, homeDir = defaultHomeDir()) {
   const path = cliUpdatePreferencesPath(homeDir);
   const tempPath = `${path}.${process.pid}.tmp`;
   _fs.mkdirSync.call(void 0, _path.dirname.call(void 0, path), { recursive: true });
@@ -277,7 +283,7 @@ function writeCliUpdatePreferences(preferences, homeDir = _os.homedir.call(void
     _fs.rmSync.call(void 0, tempPath, { force: true });
   }
 }
-function setCliAutoUpdateEnabled(enabled, homeDir = _os.homedir.call(void 0, )) {
+function setCliAutoUpdateEnabled(enabled, homeDir = defaultHomeDir()) {
   const current = readCliUpdatePreferences(homeDir);
   const next = {
     ...current,
@@ -287,7 +293,7 @@ function setCliAutoUpdateEnabled(enabled, homeDir = _os.homedir.call(void 0, ))
   writeCliUpdatePreferences(next, homeDir);
   return next;
 }
-function setCliPinnedVersion(version, homeDir = _os.homedir.call(void 0, )) {
+function setCliPinnedVersion(version, homeDir = defaultHomeDir()) {
   const next = {
     ...readCliUpdatePreferences(homeDir),
     pinnedVersion: version
@@ -295,14 +301,14 @@ function setCliPinnedVersion(version, homeDir = _os.homedir.call(void 0, )) {
   writeCliUpdatePreferences(next, homeDir);
   return next;
 }
-function clearCliPinnedVersion(homeDir = _os.homedir.call(void 0, )) {
+function clearCliPinnedVersion(homeDir = defaultHomeDir()) {
   const current = readCliUpdatePreferences(homeDir);
   if (current.pinnedVersion === null) return current;
   const next = { ...current, pinnedVersion: null };
   writeCliUpdatePreferences(next, homeDir);
   return next;
 }
-function shouldRunCliAutoUpdate(homeDir = _os.homedir.call(void 0, )) {
+function shouldRunCliAutoUpdate(homeDir = defaultHomeDir()) {
   const preferences = readCliUpdatePreferences(homeDir);
   return preferences.autoUpdateEnabled && preferences.pinnedVersion === null;
 }
@@ -355,7 +361,7 @@ function buildSidecarProjectConfigCommand(versionDir, nodeBin) {
   return `${shellQuote(nodeBin)} -e ${shellQuote(script)} ${shellQuote(versionDir)}`;
 }
 function sidecarStateDir(input) {
-  const scope = _optionalChain([input, 'access', _4 => _4.env, 'access', _5 => _5.DEEPLINE_CONFIG_SCOPE, 'optionalAccess', _6 => _6.trim, 'call', _7 => _7()]);
+  const scope = _optionalChain([input, 'access', _8 => _8.env, 'access', _9 => _9.DEEPLINE_CONFIG_SCOPE, 'optionalAccess', _10 => _10.trim, 'call', _11 => _11()]);
   if (!scope || scope.includes("/") || scope.includes("\\")) {
     return null;
   }
@@ -403,8 +409,8 @@ function resolvePythonSidecarUpdatePlan(options) {
   }
   const installMethod = readOptionalText(_path.join.call(void 0, stateDir, ".install-method"));
   if (installMethod !== "python-sidecar") return null;
-  const scope = _optionalChain([options, 'access', _8 => _8.env, 'access', _9 => _9.DEEPLINE_CONFIG_SCOPE, 'optionalAccess', _10 => _10.trim, 'call', _11 => _11()]) || "";
-  const hostUrl = _optionalChain([options, 'access', _12 => _12.env, 'access', _13 => _13.DEEPLINE_HOST_URL, 'optionalAccess', _14 => _14.trim, 'call', _15 => _15()]) || "";
+  const scope = _optionalChain([options, 'access', _12 => _12.env, 'access', _13 => _13.DEEPLINE_CONFIG_SCOPE, 'optionalAccess', _14 => _14.trim, 'call', _15 => _15()]) || "";
+  const hostUrl = _optionalChain([options, 'access', _16 => _16.env, 'access', _17 => _17.DEEPLINE_HOST_URL, 'optionalAccess', _18 => _18.trim, 'call', _19 => _19()]) || "";
   const nodeBin = readOptionalText(_path.join.call(void 0, stateDir, ".node-bin")) || process.execPath;
   const sidecarPath = readOptionalText(_path.join.call(void 0, stateDir, ".command-path")) || _path.join.call(void 0, 
     stateDir,
@@ -476,7 +482,7 @@ function inferNpmGlobalPrefixFromEntrypoint(entrypoint, env) {
   return prefix || null;
 }
 function normalizedNpmPrefix(value) {
-  const trimmed = _optionalChain([value, 'optionalAccess', _16 => _16.trim, 'call', _17 => _17()]);
+  const trimmed = _optionalChain([value, 'optionalAccess', _20 => _20.trim, 'call', _21 => _21()]);
   if (!trimmed) return null;
   const normalized = (() => {
     try {
@@ -489,7 +495,12 @@ function normalizedNpmPrefix(value) {
 }
 function resolveNpmGlobalPrefix(env) {
   try {
-    const plan = _chunk2XXXFPTDjs.resolveShellSpawn.call(void 0, "npm", ["prefix", "-g"], process.platform, env);
+    const plan = _chunkLTFL4JRNjs.resolveShellSpawn.call(void 0, 
+      "npm",
+      ["prefix", "-g"],
+      process.platform,
+      env
+    );
     const result = _child_process.spawnSync.call(void 0, plan.command, plan.args, {
       encoding: "utf8",
       env,
@@ -545,8 +556,8 @@ function resolveUpdatePlan(options = {}) {
   const npmGlobalPrefix = options.npmGlobalPrefix !== void 0 ? options.npmGlobalPrefix : resolveNpmGlobalPrefix(env);
   const hasVerifiedNpmOwnership = inferredInstallPrefix !== null && normalizedNpmPrefix(inferredInstallPrefix) === normalizedNpmPrefix(npmGlobalPrefix);
   const installPrefix = options.requireVerifiedNpmOwnership ? hasVerifiedNpmOwnership ? inferredInstallPrefix : null : inferredInstallPrefix;
-  const npmVersion = options.npmVersion === void 0 ? _chunk4RNDKFNQjs.readNpmVersion.call(void 0, env) : options.npmVersion;
-  const npmGlobalInstallFlags = _chunk4RNDKFNQjs.npmSupportsAllowScripts.call(void 0, npmVersion) ? [...NPM_SDK_INSTALL_COMMON_FLAGS, "--allow-scripts=esbuild"] : NPM_SDK_INSTALL_COMMON_FLAGS;
+  const npmVersion = options.npmVersion === void 0 ? _chunkD37FEBESjs.readNpmVersion.call(void 0, env) : options.npmVersion;
+  const npmGlobalInstallFlags = _chunkD37FEBESjs.npmSupportsAllowScripts.call(void 0, npmVersion) ? [...NPM_SDK_INSTALL_COMMON_FLAGS, "--allow-scripts=esbuild"] : NPM_SDK_INSTALL_COMMON_FLAGS;
   const args = installPrefix ? [
     "install",
     "-g",
@@ -556,7 +567,7 @@ function resolveUpdatePlan(options = {}) {
     packageSpec
   ] : ["install", "-g", ...npmGlobalInstallFlags, packageSpec];
   const fallbackRegistryUrl = options.npmFallbackRegistryUrl !== void 0 ? options.npmFallbackRegistryUrl : publicNpmFallbackRegistryUrl(
-    _optionalChain([env, 'access', _18 => _18.DEEPLINE_HOST_URL, 'optionalAccess', _19 => _19.trim, 'call', _20 => _20()]) || _chunkQUAQX3FQjs.autoDetectBaseUrl.call(void 0, )
+    _optionalChain([env, 'access', _22 => _22.DEEPLINE_HOST_URL, 'optionalAccess', _23 => _23.trim, 'call', _24 => _24()]) || _chunkFVLNYDI4js.autoDetectBaseUrl.call(void 0, )
   );
   return {
     kind: "npm-global",
@@ -636,24 +647,126 @@ function matchingAutoUpdateFailure(plan) {
   return marker;
 }
 async function runAutomaticUpdatePlan(plan) {
-  const previousFailure = matchingAutoUpdateFailure(plan);
-  if (previousFailure) {
+  try {
+    const installation = resolveUpdateInstallation(plan);
+    return await withUpdateLock(_nullishCoalesce(_optionalChain([installation, 'optionalAccess', _25 => _25.directory]), () => ( null)), async () => {
+      const previousFailure = matchingAutoUpdateFailure(plan);
+      if (previousFailure) {
+        process.stderr.write(
+          [
+            "Skipping Deepline SDK/CLI auto-update because this same update already failed on this machine.",
+            `Fix Node/npm native package installation issues, then run: ${previousFailure.manualCommand}`,
+            "Common causes include broken esbuild installs, node-gyp build toolchain errors, npm cache corruption, or registry/network failures.",
+            ""
+          ].join("\n")
+        );
+        return {
+          status: "skipped_previous_failure",
+          exitCode: previousFailure.exitCode || 1,
+          previousFailure
+        };
+      }
+      const targetVersion = _optionalChain([autoUpdatePackageSpec, 'call', _26 => _26(plan), 'access', _27 => _27.match, 'call', _28 => _28(
+        /^deepline@(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)$/
+      ), 'optionalAccess', _29 => _29[1]]);
+      const installedVersion = installedUpdateVersion(installation);
+      if (targetVersion && parseSemver(installedVersion) && compareUpdateVersions(installedVersion, targetVersion) >= 0) {
+        return { status: "updated", exitCode: 0 };
+      }
+      const exitCode = await applyUpdatePlan(plan);
+      return exitCode === 0 ? { status: "updated", exitCode: 0 } : { status: "failed", exitCode };
+    });
+  } catch (error) {
     process.stderr.write(
-      [
-        "Skipping Deepline SDK/CLI auto-update because this same update already failed on this machine.",
-        `Fix Node/npm native package installation issues, then run: ${previousFailure.manualCommand}`,
-        "Common causes include broken esbuild installs, node-gyp build toolchain errors, npm cache corruption, or registry/network failures.",
-        ""
-      ].join("\n")
+      `Could not complete the automatic Deepline CLI update: ${error instanceof Error ? error.message : String(error)}
+`
     );
-    return {
-      status: "skipped_previous_failure",
-      exitCode: previousFailure.exitCode || 1,
-      previousFailure
-    };
+    return { status: "failed", exitCode: 1 };
+  }
+}
+function parseSemver(version) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(
+    version.trim()
+  );
+  if (!match) return null;
+  return {
+    major: Number(match[1]),
+    minor: Number(match[2]),
+    patch: Number(match[3]),
+    prerelease: _nullishCoalesce(match[4], () => ( ""))
+  };
+}
+function compareUpdateVersions(left, right) {
+  const a = parseSemver(left);
+  const b = parseSemver(right);
+  if (!a || !b) return left.localeCompare(right);
+  for (const key of ["major", "minor", "patch"]) {
+    if (a[key] !== b[key]) return a[key] > b[key] ? 1 : -1;
+  }
+  if (a.prerelease === b.prerelease) return 0;
+  if (!a.prerelease) return 1;
+  if (!b.prerelease) return -1;
+  return a.prerelease.localeCompare(b.prerelease);
+}
+function resolveUpdateInstallation(plan) {
+  if (plan.kind === "source" || plan.kind === "homebrew") return null;
+  const prefixIndex = plan.kind === "npm-global" ? plan.args.indexOf("--prefix") : -1;
+  const directory = plan.kind === "python-sidecar" ? plan.stateDir : _nullishCoalesce(_nullishCoalesce(plan.installPrefix, () => ( (prefixIndex >= 0 ? plan.args[prefixIndex + 1] : void 0))), () => ( resolveNpmGlobalPrefix(process.env)));
+  if (!directory)
+    throw new Error("Cannot determine the npm global installation to lock.");
+  return {
+    kind: plan.kind,
+    directory: _nullishCoalesce(normalizedNpmPrefix(directory), () => ( _path.resolve.call(void 0, directory)))
+  };
+}
+function installedUpdateVersion(installation) {
+  if (!installation) return "";
+  const { kind, directory } = installation;
+  if (kind === "python-sidecar") {
+    try {
+      const version = safeVersionSegment(
+        _fs.readFileSync.call(void 0, _path.join.call(void 0, directory, ".version"), "utf8")
+      );
+      return !version || sidecarStructureFailure(_path.join.call(void 0, directory, "versions", version)) ? "" : version;
+    } catch (e12) {
+      return "";
+    }
+  }
+  return installedPackageVersion(
+    process.platform === "win32" ? directory : _path.join.call(void 0, directory, "lib")
+  );
+}
+async function withUpdateLock(installationDirectory, action) {
+  if (!installationDirectory) return action();
+  _fs.mkdirSync.call(void 0, installationDirectory, { recursive: true });
+  const lockPath = _path.join.call(void 0, installationDirectory, ".deepline-update.lock");
+  const deadline = Date.now() + 12e4;
+  let waiting = false;
+  for (; ; ) {
+    try {
+      _fs.mkdirSync.call(void 0, lockPath, { mode: 448 });
+      break;
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      if (Date.now() >= deadline) {
+        throw new Error(
+          `Timed out waiting for the Deepline CLI update lock at ${lockPath}. Check for an active installer before removing a lock left by an interrupted update.`
+        );
+      }
+      if (!waiting) {
+        process.stderr.write(
+          "Another Deepline CLI update is in progress; waiting for it to finish.\n"
+        );
+        waiting = true;
+      }
+      await _promises.setTimeout.call(void 0, 100);
+    }
+  }
+  try {
+    return await action();
+  } finally {
+    _fs.rmSync.call(void 0, lockPath, { recursive: true });
   }
-  const exitCode = await runUpdatePlan(plan);
-  return exitCode === 0 ? { status: "updated", exitCode: 0 } : { status: "failed", exitCode };
 }
 function safeVersionSegment(value) {
   const normalized = value.trim();
@@ -679,7 +792,7 @@ function installedPackageVersion(versionDir) {
   try {
     const parsed = JSON.parse(_fs.readFileSync.call(void 0, packageJsonPath, "utf8"));
     return typeof parsed.version === "string" ? safeVersionSegment(parsed.version) : "";
-  } catch (e12) {
+  } catch (e13) {
     return "";
   }
 }
@@ -703,17 +816,17 @@ function sidecarInstallFailure(versionDir) {
 function runCommand(command, args, env = process.env) {
   return new Promise((resolveResult) => {
     let output = "";
-    const plan = _chunk2XXXFPTDjs.resolveShellSpawn.call(void 0, command, args, process.platform, env);
+    const plan = _chunkLTFL4JRNjs.resolveShellSpawn.call(void 0, command, args, process.platform, env);
     const child = _child_process.spawn.call(void 0, plan.command, plan.args, {
       stdio: ["inherit", "pipe", "pipe"],
       shell: plan.shell,
       env
     });
-    _optionalChain([child, 'access', _21 => _21.stdout, 'optionalAccess', _22 => _22.on, 'call', _23 => _23("data", (chunk) => {
+    _optionalChain([child, 'access', _30 => _30.stdout, 'optionalAccess', _31 => _31.on, 'call', _32 => _32("data", (chunk) => {
       output += chunk.toString();
       process.stderr.write(chunk);
     })]);
-    _optionalChain([child, 'access', _24 => _24.stderr, 'optionalAccess', _25 => _25.on, 'call', _26 => _26("data", (chunk) => {
+    _optionalChain([child, 'access', _33 => _33.stderr, 'optionalAccess', _34 => _34.on, 'call', _35 => _35("data", (chunk) => {
       output += chunk.toString();
       process.stderr.write(chunk);
     })]);
@@ -733,7 +846,7 @@ function isRegistryAccessFailure(output, registryUrl) {
   let registryHost = "";
   try {
     registryHost = new URL(registryUrl).hostname;
-  } catch (e13) {
+  } catch (e14) {
     return false;
   }
   if (!registryHost || !output.toLowerCase().includes(registryHost.toLowerCase())) {
@@ -968,7 +1081,7 @@ async function runPythonSidecarUpdatePlan(plan) {
       try {
         _fs.renameSync.call(void 0, backupDir, finalDir);
         backupDir = null;
-      } catch (e14) {
+      } catch (e15) {
       }
     }
     process.stderr.write(
@@ -1014,6 +1127,13 @@ async function runPythonSidecarUpdatePlan(plan) {
   return 0;
 }
 async function runUpdatePlan(plan) {
+  const installation = resolveUpdateInstallation(plan);
+  return withUpdateLock(
+    _nullishCoalesce(_optionalChain([installation, 'optionalAccess', _36 => _36.directory]), () => ( null)),
+    () => applyUpdatePlan(plan)
+  );
+}
+async function applyUpdatePlan(plan) {
   let exitCode = 1;
   if (plan.kind === "npm-global") {
     exitCode = await runNpmInstallWithRegistryFallback({
@@ -1038,7 +1158,7 @@ function normalizeBaseUrl(value) {
   return value.replace(/\/$/, "");
 }
 function normalizePinnedVersion(value) {
-  const normalized = _nullishCoalesce(_optionalChain([value, 'optionalAccess', _27 => _27.trim, 'call', _28 => _28(), 'access', _29 => _29.replace, 'call', _30 => _30(/^v/, "")]), () => ( ""));
+  const normalized = _nullishCoalesce(_optionalChain([value, 'optionalAccess', _37 => _37.trim, 'call', _38 => _38(), 'access', _39 => _39.replace, 'call', _40 => _40(/^v/, "")]), () => ( ""));
   return /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(normalized) ? normalized : null;
 }
 async function publishedVersionSupportsPin(version, fallbackRegistryUrl) {
@@ -1069,7 +1189,7 @@ async function publishedVersionSupportsPin(version, fallbackRegistryUrl) {
         continue;
       }
       const metadata = await response.json();
-      return _optionalChain([metadata, 'access', _31 => _31.deepline, 'optionalAccess', _32 => _32.updatePreferences]) === 1;
+      return _optionalChain([metadata, 'access', _41 => _41.deepline, 'optionalAccess', _42 => _42.updatePreferences]) === 1;
     } catch (error) {
       lastError = error instanceof Error ? error : new Error(String(error));
     } finally {
@@ -1079,14 +1199,14 @@ async function publishedVersionSupportsPin(version, fallbackRegistryUrl) {
   throw _nullishCoalesce(lastError, () => ( new Error("No npm registry was available")));
 }
 async function runUpdateCommand(options, dependencies = {}) {
-  const detectBaseUrl = _nullishCoalesce(dependencies.detectBaseUrl, () => ( _chunkQUAQX3FQjs.autoDetectBaseUrl));
+  const detectBaseUrl = _nullishCoalesce(dependencies.detectBaseUrl, () => ( _chunkFVLNYDI4js.autoDetectBaseUrl));
   const resolvePlan = _nullishCoalesce(dependencies.resolvePlan, () => ( resolveUpdatePlan));
   const runPlan = _nullishCoalesce(dependencies.runPlan, () => ( runUpdatePlan));
   const syncSkills = _nullishCoalesce(dependencies.syncSkillsIfNeeded, () => ( (async () => {
     const originalWrite = process.stdout.write.bind(process.stdout);
     process.stdout.write = (() => true);
     try {
-      const exitCode = await _chunk2XXXFPTDjs.runSkillsCommand.call(void 0, { json: true });
+      const exitCode = await _chunkNTVLGHFMjs.runSkillsCommand.call(void 0, { json: true });
       if (exitCode !== 0) {
         throw new Error(
           `Deepline skills update failed with exit ${exitCode}.`
@@ -1157,11 +1277,11 @@ async function runUpdateCommand(options, dependencies = {}) {
     ]
   };
   if (options.json && !options.executeWithJson) {
-    _chunkQ3PUHXOYjs.printCommandEnvelope.call(void 0, { ...plan, render }, { json: true });
+    _chunkNF4V5DTYjs.printCommandEnvelope.call(void 0, { ...plan, render }, { json: true });
     return 0;
   }
   if (options.printCommand) {
-    _chunkQ3PUHXOYjs.printCommandEnvelope.call(void 0, 
+    _chunkNF4V5DTYjs.printCommandEnvelope.call(void 0, 
       {
         ...plan,
         render: {
@@ -1174,7 +1294,7 @@ async function runUpdateCommand(options, dependencies = {}) {
     return 0;
   }
   if (plan.kind === "source" || plan.kind === "homebrew") {
-    _chunkQ3PUHXOYjs.printCommandEnvelope.call(void 0, { ...plan, render }, { json: false });
+    _chunkNF4V5DTYjs.printCommandEnvelope.call(void 0, { ...plan, render }, { json: false });
     return 0;
   }
   stderr.write(`Updating Deepline SDK/CLI with: ${plan.manualCommand}
@@ -1204,7 +1324,7 @@ To retry with full installer output, run: deepline skills
     );
   }
   if (options.executeWithJson && options.json) {
-    _chunkQ3PUHXOYjs.printCommandEnvelope.call(void 0, 
+    _chunkNF4V5DTYjs.printCommandEnvelope.call(void 0, 
       {
         ok: true,
         pinnedVersion
@@ -1250,4 +1370,5 @@ Examples:
 
 
 
-exports.readCliUpdatePreferences = readCliUpdatePreferences; exports.setCliAutoUpdateEnabled = setCliAutoUpdateEnabled; exports.shouldRunCliAutoUpdate = shouldRunCliAutoUpdate; exports.canAutomaticallyApplyUpdatePlan = canAutomaticallyApplyUpdatePlan; exports.resolveUpdatePlan = resolveUpdatePlan; exports.runAutomaticUpdatePlan = runAutomaticUpdatePlan; exports.runUpdatePlan = runUpdatePlan; exports.publishedVersionSupportsPin = publishedVersionSupportsPin; exports.runUpdateCommand = runUpdateCommand; exports.registerUpdateCommand = registerUpdateCommand;
+
+exports.readCliUpdatePreferences = readCliUpdatePreferences; exports.setCliAutoUpdateEnabled = setCliAutoUpdateEnabled; exports.shouldRunCliAutoUpdate = shouldRunCliAutoUpdate; exports.canAutomaticallyApplyUpdatePlan = canAutomaticallyApplyUpdatePlan; exports.resolveUpdatePlan = resolveUpdatePlan; exports.runAutomaticUpdatePlan = runAutomaticUpdatePlan; exports.compareUpdateVersions = compareUpdateVersions; exports.runUpdatePlan = runUpdatePlan; exports.publishedVersionSupportsPin = publishedVersionSupportsPin; exports.runUpdateCommand = runUpdateCommand; exports.registerUpdateCommand = registerUpdateCommand;