@datarails-ai/dr-cli 1.6.151 → 1.6.152

package/dist/scopes-map.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "cliVersion": "1.6.151",
+  "cliVersion": "1.6.152",
   "_contract": "Resolve a command path through `aliases` (canonical prefix + alias segment -> canonical path) before any lookup. A path listed in `pendingCommands`, or whose first segment is a key of `pending`, is UNDECIDED, not unrestricted: fail closed or skip it, and never read a path's absence from `commands` as 'no requirement'. An entry carrying `denied` is UNAVAILABLE to any AGENT-SCOPED credential — one whose `scopes` claim carries at least one `resource:action` entry; a claim that is absent, empty, capability-only or wholly unparseable is UNRESTRICTED, and this mark does not apply to it — whatever else that entry says: it is not a ceiling and it is not always-available, its `denied.reason` says why and `denied.until` names the ticket that lifts it, and the absence of `requires` on it must NEVER be read as 'no requirement'. Only an entry in `commands` with an empty `requires` means always-available.",
   "commands": {
     "login": {
@@ -4761,6 +4761,209 @@
           "action": "write"
         }
       ]
+    },
+    "agents list": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents get": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents versions": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents test-link": {
+      "requires": []
+    },
+    "agents refresh": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "write"
+        }
+      ]
+    },
+    "agents pull": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents update": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "write"
+        }
+      ]
+    },
+    "agents create": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "write"
+        }
+      ]
+    },
+    "agents mcp-servers": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents cli-scopes": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents scope-registry": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents set-listed": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "destructive"
+        }
+      ]
+    },
+    "agents set-global": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "destructive"
+        }
+      ]
+    },
+    "agents set-visibility": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "destructive"
+        }
+      ]
+    },
+    "agents archive": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "destructive"
+        }
+      ]
+    },
+    "agents catalog": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents models": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents system-entities": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents skills list": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents skills get": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents skills versions": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents skills bundle": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents skills pull": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "read"
+        }
+      ]
+    },
+    "agents skills create": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "write"
+        }
+      ]
+    },
+    "agents skills publish": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "write"
+        }
+      ]
+    },
+    "agents skills delete": {
+      "requires": [
+        {
+          "resource": "managed-agents",
+          "action": "destructive"
+        }
+      ]
     }
   },
   "aliases": {

package/dist/skills/dr-cli/reference/safety.md

@@ -51,13 +51,19 @@ Reads never need confirmation. Gated **writes** fall into two tiers (full table:
   Still relay the plan and get the user's in-chat "yes" before the execute step,
   but it will not pop a dialog.
 - **Non-prod (`DEV`, `DEV-1`, `TEST`, `TEST-1`…`TEST-7`):** a plain `yes` is fine
-  for either tier — token only.
+  for either tier — token only. Exception: `agents set-listed` / `set-global` /
+  `set-visibility` / `archive` and `agents skills delete` take the word gate on
+  every server, because the agent and skill registry is shared by every
+  environment (a write on DEV-1 changes production agents too).
 
 **Tier A is the smaller set:** every `delete` (across all resources), plus
 `workflow`/`mec workflow` `archive` (and its `delete` alias), `process delete`,
 `step delete`, `task delete`; `forecast scenarios bulk-edit`; `cash rules
 delete-all`; `filebox archive` and `filebox data-query clear`;
 `multi-product org-products set`;
+`agents archive` and the three agent-reach flips `agents set-listed` /
+`set-global` / `set-visibility` (each changes who can reach the agent for every
+organization at once);
 `error-enrichments import` (replaces every rule on the server, zeroes all
 hits/feedback counters, and reassigns every rule id); and
 `dashboards push --override` / `filebox push --override`. `import` is **not** an
@@ -81,7 +87,8 @@ with the same alias and tags, the push adds a version to *that* filebox and it
 becomes the one served. The CLI cannot tell in advance and no word gate will
 stop it, so check the destination afterwards.
 Everything else gated is Tier B (all `create`/`update`/`reorder`/`set-*`/`lock`/
-`unlock` verbs, `templates set-field-type`, `rescan table` (a full historical
+`unlock` verbs other than the agent-reach flips above,
+`templates set-field-type`, `rescan table` (a full historical
 rescan — expensive/high-blast but reversible, so token-only; the plan step shows
 the document + version counts), `filebox rescan-version` (the same, for one
 version: re-extracts it in place and replaces its rows, never deletes; the plan

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@datarails-ai/dr-cli",
-  "version": "1.6.151",
+  "version": "1.6.152",
   "description": "Datarails CLI",
   "type": "module",
   "engines": {