@decidio/sdk 0.6.1 → 0.6.3

package/CHANGELOG.md

@@ -1,8 +1,44 @@
 # Changelog — @decidio/sdk
 
-Release notes for the client SDK. The Python package `decidio` ships the same changes under the same
-version (the two are conformance-locked twins). Each entry names what changed, what a reader must do
-on upgrade, and what proved it.
+Release notes for the client SDK. The Python package `decidio` ships under the same version; the core -
+the gate, signing, receipts and the verifier - is conformance-locked between the two, while the command line's
+first-run surfaces (the fork, `--demo`, the code sign-in) are TypeScript-first and named as such in the parity
+allowlist. Each entry names what changed, what a reader must do on upgrade, and what proved it.
+
+## 0.6.3 — the two 0.6.2 reviews' small items
+
+- **`DECIDIO_DEBUG_INPUT=1` no longer prints what you type** (review: Medium). The 0.6.2 trace hex-dumped every stdin
+  byte - passwords, codes and links, muted prompt or not. It now prints the SHAPE only: control bytes named (`\r`, `\n`,
+  ESC), every printable byte as `x`. A newline problem is visible in the shape alone.
+- Four strings still described the sign-in as an emailed link to paste; they say the code now. The CHANGELOG's "twins"
+  line overstated CLI parity and now says exactly what is locked and what is TypeScript-first. Two README headings
+  still said "0.4". The offline local demo no longer prints "the terminal follows the web app or your phone" when it
+  has just said there are no such doors. `receipt --json` help says it prints a summary; the credential is the file.
+
+## 0.6.2 — the fork after its first real run
+
+Founder UAT of 0.6.1 on a Windows console, same day.
+
+- **Prompts pause.** On the founder's cmd.exe the agent-id prompt "took the folder's" name without waiting. The
+  terminal driver could not reproduce it, so this is defence plus instrumentation: one readline now lives for the whole
+  command (a console's `\r\n` can no longer split across two questions - the previous per-question interfaces could
+  hand the second byte to the next prompt as Enter), and `DECIDIO_DEBUG_INPUT=1` prints the raw bytes stdin delivers, so
+  a recurrence names its cause instead of a theory.
+- **"What next?" has a way out:** `3  sign out of this computer  (npx @decidio/sdk logout)`.
+- **Option 2 in a folder that already holds an agent** says so before asking for a name (with cleanup / a new folder /
+  `--force` as the ways out), instead of `init` refusing afterwards with text that read like a prompt.
+- **The bare command is update-gated** on a terminal, so a cached old npx copy announces the newer version instead of
+  quietly showing an old first screen; `npx @decidio/sdk` is enough, `@latest` is not needed.
+- **Sign in by CODE, not by paste.** When the command line asks for a sign-in, the email it triggers carries an
+  8-character code and nothing to click; you type the code into the terminal that asked (dashes, case and an O for a 0
+  are forgiven). Three misses and the code is dead. The web app's sign-in screen keeps its link email unchanged; two
+  flows, each with exactly one action. Why this shape and not "click the link and the terminal continues": that design
+  moves a session to a DIFFERENT device than the one that clicked, which is a new attack class the privacy council had
+  to harden (docs/Decidio_CLI_Signin_Wait_Spec.md, retired); a code travels from the inbox to the device you are
+  sitting at, and an attacker who triggers the email gains nothing. A pasted link is still accepted, quietly.
+- **`npx decidio`.** A new npm package named `decidio` holds one file: it resolves the `@decidio/sdk` it pins (same
+  version, released in lockstep) and runs that CLI. `npx decidio …` is `npx @decidio/sdk …` with fewer keystrokes; the
+  update gate names whichever package you came through. Not something to import - the SDK stays `@decidio/sdk`.
 
 ## 0.6.1 — the first-run fork, and the local demo's loose ends
 

package/README.md

@@ -9,6 +9,7 @@ is the two-minute tour, the sign-in and the token admin around it. Install, wrap
 ## The two-minute tour
 
 ```bash
+npx decidio                          # the short form: asks one question, then does the thing you picked
 npx @decidio/sdk quickstart          # against your workspace (you need an invite - request one below)
 npx @decidio/sdk quickstart --demo   # no invite yet? the same tour on this machine, against a local stand-in of the API
 # Not sure? The bare command asks: with no sign-in on this computer it asks whether you have an
@@ -22,7 +23,7 @@ you approve right there (or from your Decidio app), executes on approval, then d
 sealed Authority Receipt and verifies it offline in front of you, pinned to your workspace's
 issuer. It mints a **7-day** tour token (`init` mints 90-day tokens — different jobs, different
 lifetimes) and ends by offering to clean itself up (`quickstart cleanup` works later too).
-Sign in once — `npx @decidio/sdk login`, or when the tour asks: the CLI emails you a link, you paste it, and
+Sign in once — `npx @decidio/sdk login`, or when the tour asks: the CLI emails you an 8-character code, you type it, and
 the sign-in is kept in your profile (owner-only) for 30 days, or until this terminal closes, `logout`, or
 `quickstart cleanup`. At the human step the tour offers three doors: answer here, open the decision in
 the web app (a one-time link, signed in for you), or scan the QR with your phone — whichever answers
@@ -74,8 +75,8 @@ npx @decidio/sdk init --unique my-agent   # --unique appends a random suffix: co
 Every network command talks to the hosted sandbox by default (`verify` is offline) and announces its target host on
 stderr each run — set `DECIDIO_API_URL` (env or `.env`) to point at another Decidio instead.
 
-`init` signs you into your workspace (email + password, or paste the sign-in link from your
-workspace email), generates the agent's Ed25519 keypair **locally** (only the public `did:key`
+`init` signs you into your workspace (email + password, or the 8-character code the CLI emails you —
+type it where you asked), generates the agent's Ed25519 keypair **locally** (only the public `did:key`
 is sent), registers the agent, mints its **floor-limited API token** (limited to the agent runtime — request authorization, poll status, report signed confirmation; it cannot administer the workspace or approve anything — and your workspace session never touches the agent's disk), and writes `.env`.
 Every later command that talks to Decidio reads `.env` from this directory automatically (`verify` is
 offline and never does). Re-running init for an
@@ -91,7 +92,7 @@ agent name — if it's already taken in your workspace, `init` stops cleanly and
 fresh one (or pass `--unique` to auto-append a random suffix — collision-proof for shared
 workspaces and CI). Interactive terminals sign in once (`npx @decidio/sdk login` — stored owner-only in your
 profile, bound to this terminal window, 30 days). Headless terminal (no prompts possible)? Export `DECIDIO_SESSION_TOKEN` first:
-request a sign-in link, then exchange its `?login=` value at `POST /demo/login-consume` — the
+request a sign-in link from the web app's sign-in screen, then exchange its `?login=` value at `POST /demo/login-consume` — the
 response's `token` is your session token (the CLI prints these exact instructions when it
 can't prompt). That session token is your workspace login, not the agent's credential: unset it
 before launching agent code from the same shell, because child processes inherit exported
@@ -659,7 +660,7 @@ that fits every other confirm error.
 - **The token recovery journal** (`.decidio-token-journal`, owner-only, gitignored; ids and timestamps, never a token value; append-only by the CLI's behaviour — not OS-enforced or tamper-evident). One JSON row per event: `minted` (a token was issued, written BEFORE its credential file), `retired how=persisted` (the credential file now holds it - the token is live and that file is its handle; not revoked), `retired how=revoked` (revoked server-side), `probe` (a durability check). `doctor` names rows still outstanding; `quickstart cleanup` sweeps them.
 - `quickstart --demo` — the same tour with no account: an in-process stand-in of the API on 127.0.0.1 (shipped in this package) answers every door, a key generated for the run signs a real receipt (its content says `local-demo`; pinning it to the hosted issuer fails), and the web/phone door is a hosted demo decision page reached through a one-word relay (no account, no record, ten minutes). Your folder gains exactly one file, the receipt. Offline, the tour is terminal-only and says so.
 - `quickstart --phone web` — the QR at the human step opens the phone web rendering even when the Decidio app is installed (by default it opens the app when there is one).
-- `login [email]` / `logout` — sign in ONCE (the CLI emails you a link; you paste it) and forget that sign-in on this computer (the session token itself stays valid until it expires (up to 30 days) — there is no server-side revocation yet). The session is stored in your user profile, owner-only, bound to the terminal window that created it, for 30 days; `DECIDIO_SESSION_TOKEN` in the environment outranks it (headless shells).
+- `login [email]` / `logout` — sign in ONCE (the CLI emails you an 8-character code; you type it) and forget that sign-in on this computer (the session token itself stays valid until it expires (up to 30 days) — there is no server-side revocation yet). The session is stored in your user profile, owner-only, bound to the terminal window that created it, for 30 days; `DECIDIO_SESSION_TOKEN` in the environment outranks it (headless shells).
 - `dev [--target URL] [--port N]` — local relay for the resume webhook (operator setups)
 
 The CLI's stream contract: **stdout carries results only** (safe to pipe — `--json` output is
@@ -702,7 +703,7 @@ Every error raised after a decision exists carries the `decisionId`, so a suspen
 timed-out action is always findable in
 your queue.
 
-## What 0.4 does not yet claim
+## What the SDK does not yet claim
 
 The retest that graded 0.3.3 *A- for the core and the shipped stores* and the first-run reviews of
 0.3.3 and 0.3.5 agree on what is left, and none of it is a defect a patch release closes. Stated here so
@@ -728,7 +729,7 @@ the next reader grades a promise, not a moving target:
 
 ## Compatibility and support
 
-- **Stable in 0.4:** `guard.protect` / `withApproval` and their options; the durable resume
+- **Stable surface:** `guard.protect` / `withApproval` and their options; the durable resume
   controller (`createDecidioResume`: `park`, `resolve`, `reconcile`, `reconfirm`, `recover`, the worker
   and both webhook handlers); the `PendingStore` contract and both shipped stores, including the on-disk
   revision-chain layout; `EvidenceOutcome` (a root export) and `ResumeStatus` / `RecoveryState` (on the

package/dist/cli.js

@@ -467,22 +467,44 @@ export function approvalAnswer(answer) {
         return "reject";
     return "again";
 }
+let sharedRl = null;
+let sharedRlOpen = false;
+function closeSharedRl() { if (sharedRlOpen) {
+    sharedRlOpen = false;
+    sharedRl?.close();
+} }
 function ask(question, mute = false) {
     if (process.stdin.readableEnded || process.stdin.destroyed)
         return Promise.resolve("");
     return new Promise((resolve) => {
-        const rl = createInterface({ input: process.stdin, output: process.stderr, terminal: true });
+        if (!sharedRl || !sharedRlOpen) {
+            sharedRl = createInterface({ input: process.stdin, output: process.stderr, terminal: true, crlfDelay: Infinity });
+            sharedRlOpen = true;
+            sharedRl.once("close", () => { sharedRlOpen = false; });
+        }
+        const rl = sharedRl;
         currentRl = rl;
+        let restore = null;
         if (mute) {
             const anyRl = rl;
             const write = anyRl._writeToOutput?.bind(rl);
             anyRl._writeToOutput = (s) => { if (s.includes(question))
                 write?.(s); };
-        }
-        rl.once("close", () => { if (currentRl === rl)
-            currentRl = null; resolve(""); });
-        rl.question(question, (answer) => { resolve(answer.trim()); rl.close(); if (mute)
-            process.stderr.write("\n"); });
+            restore = () => { anyRl._writeToOutput = write; };
+        }
+        const onClose = () => { if (currentRl === rl)
+            currentRl = null; restore?.(); resolve(""); };
+        rl.once("close", onClose);
+        rl.question(question, (answer) => { rl.off("close", onClose); if (currentRl === rl)
+            currentRl = null; restore?.(); if (mute)
+            process.stderr.write("\n"); resolve(answer.trim()); });
+    });
+}
+if (process.env.DECIDIO_DEBUG_INPUT && process.stdin.isTTY) {
+    process.stdin.on("data", (c) => {
+        const b = Buffer.from(c);
+        const shape = [...b].map((x) => x === 0x0d ? "\\r" : x === 0x0a ? "\\n" : x === 0x1b ? "ESC" : x < 0x20 ? `^${String.fromCharCode(x + 64)}` : x === 0x7f ? "DEL" : "x").join("");
+        process.stderr.write(`[stdin ${b.length}B ${shape}]\n`);
     });
 }
 function terminalId() {
@@ -557,7 +579,7 @@ async function loginFlow(purpose, emailArg) {
         log("  ✘ no email given - re-run when you have it.");
         return null;
     }
-    const password = await ask("  password (Enter = emailed sign-in link): ", true);
+    const password = await ask("  password (Enter = emailed sign-in code): ", true);
     if (password) {
         const r = await api("/demo/login", { method: "POST", body: JSON.stringify({ email, password }) }, "");
         if (r.status >= 200 && r.status < 300 && r.body?.token) {
@@ -567,29 +589,37 @@ async function loginFlow(purpose, emailArg) {
         }
         log(`  ✘ password sign-in failed (${r.status})${r.body?.error ? ` — ${r.body.error}` : ""}. No problem — the emailed link works for every account:`);
     }
-    const req = await api("/demo/login-link", { method: "POST", body: JSON.stringify({ email }) }, "");
+    const req = await api("/demo/login-link", { method: "POST", body: JSON.stringify({ email, code: true }) }, "");
     if (!(req.status >= 200 && req.status < 300)) {
         log(`  ✘ could not request a sign-in email (${req.status})${req.body?.error ? ` — ${req.body.error}` : ""}. Check the address and re-run.`);
         return null;
     }
-    log(`  ✔ sign-in email requested for ${email} — check your inbox and spam; paste the link (or its login= code; single-use, 15 minutes)`);
-    log(dim(`    invite-only lab: a link arrives only for an invited address — not invited yet? request access: decidioai.com/#early-access`));
+    log(`  ✔ sign-in email sent to ${email} — it holds an 8-character code (single-use, 15 minutes). Check spam too.`);
+    log(dim(`    invite-only lab: an email arrives only for an invited address — not invited yet? request access: decidioai.com/#early-access`));
     log(dim(`    or see the whole story on this machine right now, no account: npx @decidio/sdk quickstart --demo`));
-    const pasted = await ask("  link or code: ");
-    if (!pasted) {
-        log("  ✘ nothing pasted — re-run when you have the email.");
-        return null;
-    }
-    const m = pasted.match(/[?&]login=([^&\s]+)/);
-    const linkToken = m ? decodeURIComponent(m[1]) : pasted;
-    const r = await api("/demo/login-consume", { method: "POST", body: JSON.stringify({ token: linkToken }) }, "");
-    if (r.status >= 200 && r.status < 300 && r.body?.token) {
-        const s = saveSession(String(r.body.token), email);
-        log(`  ✔ signed in as ${email} until ${s.expiresAt.slice(0, 10)}${s.terminal ? "" : dim(" (no terminal id here: the sign-in ends on logout or cleanup, not on close)")}`);
-        return s.token;
+    for (let attempt = 1; attempt <= 3; attempt++) {
+        const typed = await ask("  code from the email: ");
+        if (!typed) {
+            log("  ✘ nothing typed — re-run when you have the email.");
+            return null;
+        }
+        const m = typed.match(/[?&]login=([^&\s]+)/);
+        const isLink = !!m || /^[0-9a-f]{32,}$/i.test(typed);
+        const body = isLink ? { token: m ? decodeURIComponent(m[1]) : typed } : { token: "c." + typed.toUpperCase().replace(/[^0-9A-Z]/g, "").replace(/O/g, "0").replace(/[IL]/g, "1").slice(0, 8), email };
+        const r = await api("/demo/login-consume", { method: "POST", body: JSON.stringify(body) }, "");
+        if (r.status >= 200 && r.status < 300 && r.body?.token) {
+            const s = saveSession(String(r.body.token), email);
+            log(`  ✔ signed in as ${email} until ${s.expiresAt.slice(0, 10)}${s.terminal ? "" : dim(" (no terminal id here: the sign-in ends on logout or cleanup, not on close)")}`);
+            return s.token;
+        }
+        if (isLink) {
+            log(`  ✘ that link didn't work (${r.status})${r.body?.error ? ` — ${r.body.error}` : ""}. Sign-in links are single-use and expire in 15 minutes — request a fresh one and re-run.`);
+            return null;
+        }
+        if (attempt < 3)
+            log(`  ✘ that code didn't work — check the email and try again (${3 - attempt} ${3 - attempt === 1 ? "try" : "tries"} left)`);
     }
-    log(`  ✘ that link didn't work (${r.status})${r.body?.error ? ` — ${r.body.error}` : ""}.`);
-    log(`  Sign-in links are single-use and expire in 15 minutes — request a fresh one and re-run.`);
+    log(`  ✘ three misses — that code is now dead. Re-run to get a fresh email.`);
     return null;
 }
 async function acquireSession(purpose) {
@@ -659,12 +689,13 @@ async function firstRunFork(signedInAs = null) {
             return { kind: "stop", code: 1 };
     }
     log("");
-    log(`  What next?   ${dim("[1/2]")}`);
+    log(`  What next?   ${dim("[1/2/3]")}`);
     log(`    ${bold("1")}   the two-minute tour against your workspace         ${dim("npx @decidio/sdk quickstart")}`);
     log(`    ${bold("2")}   wire up your own agent now (register, token, .env)  ${dim("npx @decidio/sdk init <agentId>")}`);
-    const b = await pick("1 or 2", /^[12]$/);
+    log(`    ${bold("3")}   sign out of this computer                           ${dim("npx @decidio/sdk logout")}`);
+    const b = await pick("1, 2 or 3", /^[123]$/);
     if (!b) {
-        log(`  No answer — you are signed in; run either command above when you are ready.`);
+        log(`  No answer — you are signed in; run any command above when you are ready.`);
         return { kind: "stop", code: 0 };
     }
     if (b === "1") {
@@ -672,6 +703,21 @@ async function firstRunFork(signedInAs = null) {
         log("");
         return { kind: "tour" };
     }
+    if (b === "3") {
+        log(`  → running: npx @decidio/sdk logout`);
+        log("");
+        return { kind: "logout" };
+    }
+    const here = readEnvFile();
+    if (["DECIDIO_AGENT_KEY", "DECIDIO_API_TOKEN"].some((k) => (here[k] ?? "").trim()) && here.DECIDIO_AGENT_ID) {
+        const tour = /^quickstart-/.test(here.DECIDIO_AGENT_ID);
+        log(`  This folder's .env already holds an agent (${tour ? "the tour's, " : ""}"${here.DECIDIO_AGENT_ID}"). A new agent here would overwrite its key.`);
+        log(`  Either: start in a new folder          ${dim("mkdir <name> && cd <name> && npx @decidio/sdk")}`);
+        if (tour)
+            log(`      or: clear the tour's agent first   ${dim("npx @decidio/sdk quickstart cleanup")}   then run this again`);
+        log(`      or: replace it, backing .env up     ${dim("npx @decidio/sdk init <name> --force")}`);
+        return { kind: "stop", code: 1 };
+    }
     const def = defaultAgentId();
     log(`  Your agent needs a name. It is how the workspace shows the request ("Requested by ${def.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ")}")`);
     log(`  and the key .env is written under. Any name works; Enter takes the folder's.`);
@@ -721,9 +767,8 @@ async function cmdInit(agentId, opts = {}) {
         err(`✘ this directory's .env already holds the key for a DIFFERENT agent ("${existingEnv.DECIDIO_AGENT_ID}").`);
         err(`  Registering "${agentId}" here would overwrite that key — and a private key that is`);
         err(`  overwritten is gone for good (it never left this machine). Nothing was written.`);
-        err(`  Pick one:`);
-        err(`    1. New directory (cleanest): mkdir ${agentId} && cd ${agentId} && npx @decidio/sdk init ${agentId}`);
-        err(`    2. Replace the old agent here, backing its .env up first: npx @decidio/sdk init ${agentId} --force`);
+        err(`  Either: a new directory (cleanest):   mkdir ${agentId} && cd ${agentId} && npx @decidio/sdk init ${agentId}`);
+        err(`      or: replace the old agent here, backing its .env up first:   npx @decidio/sdk init ${agentId} --force`);
         return 1;
     }
     const { did: localDid, privateKeyBase64: localKey } = generateKeypair();
@@ -1513,7 +1558,8 @@ async function cmdQuickstartInner(opts = {}) {
         }
         else if (doorLink)
             rows.push(`${bold("your phone")}   ${dim("the link above works on a phone too (no QR came back this time)")}`);
-        rows.push(dim("whichever answers first wins — the terminal follows the web app or your phone."));
+        if (!DEMO || doorLink)
+            rows.push(dim("whichever answers first wins — the terminal follows the web app or your phone."));
         block("③", "Your call", rows, "choice");
         let settledState = null;
         const settledP = running.then(() => { settledState = "approved"; }, (e) => { settledState = e instanceof DecidioRejectedError ? "rejected" : "other"; });
@@ -2116,7 +2162,7 @@ THE TOUR
                                        (--keep-agent is refused here: nothing of the demo's can be kept)
 
 SIGN IN (once)
-  npx @decidio/sdk login [email]       sign in ONCE: the CLI emails you a link, you paste it; the sign-in
+  npx @decidio/sdk login [email]       sign in ONCE: the CLI emails you an 8-character code, you type it; the sign-in
                                        is kept on this computer 30 days, or until this terminal closes, logout, or cleanup
   npx @decidio/sdk logout              forget the stored sign-in on this computer (the token itself stays valid
                                        until it expires — there is no server-side revocation yet)
@@ -2145,7 +2191,9 @@ APPROVALS AND RECEIPTS
                                        If it starts with a dash, put it after -- or use --reason:
                                          ... approve <id> -- "-50% cut, per the board"
                                          ... approve <id> --reason "-50% cut, per the board"
-  npx @decidio/sdk receipt <id> [--json]   download a sealed decision's Authority Receipt (.json)
+  npx @decidio/sdk receipt <id> [--json]   download a sealed decision's Authority Receipt to a .json FILE; --json prints
+                                       a summary to stdout (file name, evidence, issuer, the identities you may see) -
+                                       the credential itself is the file
   npx @decidio/sdk verify --issuer <did> <receipt.json> [more...]   verify receipts OFFLINE, pinned to your
                                        workspace's issuer (--allow-unpinned: structural check only)
 
@@ -2157,7 +2205,8 @@ NOTES
   Every NETWORK command talks to the hosted sandbox (https://decidio-api.onrender.com) unless
   DECIDIO_API_URL says otherwise; the target host is announced on stderr each run. "verify" is
   fully offline — it touches no network and reads no .env.
-  Update check: network commands ask the public npm registry once a day whether a newer version exists. If so,
+  Update check: network commands (and the bare command on a terminal) ask the public npm registry once a day
+  whether a newer version exists. If so,
   an interactive run asks "Upgrade now? [y/n]" first (y upgrades the way you installed - global, or in the
   project for a local install; under npx it prints the @latest form - and re-runs your command; n exits); a headless
   run prints the notice and continues (DECIDIO_REQUIRE_LATEST=1 makes it exit). DECIDIO_NO_UPDATE_CHECK=1 skips
@@ -2212,7 +2261,8 @@ async function latestPublished() {
     }
 }
 async function updateGate(cmd, argv) {
-    if (!cmd || !GATED_CMDS.has(cmd) || SHELL_ENV.DECIDIO_NO_UPDATE_CHECK || SHELL_ENV.DECIDIO_UPDATE_REEXEC || VERSION === "unknown" || VERSION.includes("-"))
+    const gatedHere = cmd ? GATED_CMDS.has(cmd) : !!(process.stdin.isTTY && process.stdout.isTTY);
+    if (!gatedHere || SHELL_ENV.DECIDIO_NO_UPDATE_CHECK || SHELL_ENV.DECIDIO_UPDATE_REEXEC || VERSION === "unknown" || VERSION.includes("-"))
         return null;
     const latest = await latestPublished();
     if (!latest || !semverNewer(latest, VERSION))
@@ -2228,7 +2278,9 @@ async function updateGate(cmd, argv) {
         const cwd = norm(process.cwd());
         return cwd === norm(root) || cwd.startsWith(norm(root) + pathSep) ? root : null;
     })();
-    const upgradeCmd = underNpx ? `npx @decidio/sdk@latest ${argv.slice(2).join(" ")}` : localRoot ? "npm i @decidio/sdk@latest" : "npm i -g @decidio/sdk@latest";
+    const viaAlias = /[\\/]decidio$/.test(argv[1] ?? "");
+    const pkgName = viaAlias ? "decidio" : "@decidio/sdk";
+    const upgradeCmd = underNpx ? `npx ${pkgName}@latest ${argv.slice(2).join(" ")}` : localRoot ? `npm i ${pkgName}@latest` : `npm i -g ${pkgName}@latest`;
     const notice = `${latest} is available (you have ${VERSION}).`;
     if (!(process.stdin.isTTY && process.stdout.isTTY)) {
         err(`⚠ ${notice} Upgrade: ${upgradeCmd}`);
@@ -2252,7 +2304,7 @@ async function updateGate(cmd, argv) {
         return null;
     }
     log(`  upgrading: ${upgradeCmd}${localRoot ? ` (in ${localRoot})` : ""}`);
-    const up = spawnSync(process.platform === "win32" ? "npm.cmd" : "npm", localRoot ? ["i", "@decidio/sdk@latest"] : ["i", "-g", "@decidio/sdk@latest"], { stdio: "inherit", shell: process.platform === "win32", env: SHELL_ENV, ...(localRoot ? { cwd: localRoot } : {}) });
+    const up = spawnSync(process.platform === "win32" ? "npm.cmd" : "npm", localRoot ? ["i", `${pkgName}@latest`] : ["i", "-g", `${pkgName}@latest`], { stdio: "inherit", shell: process.platform === "win32", env: SHELL_ENV, ...(localRoot ? { cwd: localRoot } : {}) });
     if (up.status !== 0) {
         err(`✘ the upgrade did not complete (exit ${up.status ?? "?"}) — run it by hand: ${upgradeCmd}`);
         return 1;
@@ -2268,11 +2320,16 @@ async function main(argv) {
         return 0;
     }
     if (!cmd && process.stdin.isTTY && process.stdout.isTTY) {
+        const gatedBare = await updateGate(cmd, argv);
+        if (gatedBare !== null)
+            return gatedBare;
         log(brand() + " — gate an action, route it to a human, execute on approval, hold the proof.   " + dim("(npx @decidio/sdk --help for every command)"));
         const stored = process.env.DECIDIO_SESSION_TOKEN ? "" : loadSession()?.email ?? null;
         const pick = await firstRunFork(process.env.DECIDIO_SESSION_TOKEN ? "" : stored);
         if (pick.kind === "stop")
             return pick.code;
+        if (pick.kind === "logout")
+            return cmdLogout();
         if (pick.kind === "init")
             return cmdInit(pick.agentId, {});
         return cmdQuickstart({ demo: pick.kind === "demo" });
@@ -2393,6 +2450,8 @@ async function main(argv) {
                 const pick = await firstRunFork();
                 if (pick.kind === "stop")
                     return pick.code;
+                if (pick.kind === "logout")
+                    return cmdLogout();
                 if (pick.kind === "init")
                     return cmdInit(pick.agentId, {});
                 if (pick.kind === "demo")
@@ -2497,6 +2556,7 @@ const invokedAsProgram = (() => {
 })();
 if (invokedAsProgram)
     main(process.argv).then(async (code) => {
+        closeSharedRl();
         if (code !== 0)
             process.exitCode = code;
         if (stdinReadAbandoned) {

package/openapi.yaml

@@ -5,7 +5,7 @@
 openapi: 3.1.0
 info:
   title: Decidio Agent Gate
-  version: 0.6.1   # tracks the SDK release - checked by packages/conformance/manifests.mjs
+  version: 0.6.3   # tracks the SDK release - checked by packages/conformance/manifests.mjs
   description: >
     Authorize an AI-agent action (proceed | route | block), confirm the captured outcome, and
     receive the signed resume webhook when a routed action is decided. Every outcome seals a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decidio/sdk",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "description": "One-line approval gate for AI-agent actions. Wrap a risky tool call with guard.protect(); Decidio's policy engine decides proceed | route | block, a human approves routed actions, and every outcome is sealed as a verifiable Authority Receipt.",
   "license": "Apache-2.0",
   "type": "module",
@@ -84,7 +84,7 @@
     "prepublishOnly": "npm run typecheck && npm run build && node ../publish-boundary/check.mjs --only @decidio/sdk"
   },
   "dependencies": {
-    "@decidio/verify": "0.6.1"
+    "@decidio/verify": "0.6.3"
   },
   "author": "OmniTwin Technologies Inc.",
   "bugs": {