@ishlabs/cli 0.19.0 → 0.20.0

package/dist/lib/profile-sources.js

@@ -164,6 +164,11 @@ export async function resolveSourceRef(client, value, opts) {
 }
 // --- Agentic generation jobs ---
 const GENERATION_POLL_INTERVAL_MS = 2_500;
+/** NEW-CP-3: emit a "still running" heartbeat at least this often even if
+ *  status/progress_message hasn't changed. Backend often stays at
+ *  `running` with no message for tens of seconds; without a breadcrumb
+ *  the CLI looks frozen. */
+const GENERATION_HEARTBEAT_MS = 15_000;
 const GENERATION_TERMINAL_STATUSES = new Set(["completed", "failed"]);
 /**
  * Thrown when a generation job doesn't reach a terminal status before the
@@ -190,7 +195,9 @@ export class GenerationTimeoutError extends Error {
 export async function pollGenerationJobUntilDone(client, jobId, opts = {}) {
     const timeoutMs = opts.timeoutMs ?? 600_000;
     const deadline = Date.now() + timeoutMs;
+    const startedAt = Date.now();
     let lastReported = "";
+    let lastHeartbeatAt = Date.now();
     while (true) {
         const job = await client.get(`/people/generation-jobs/${jobId}`, undefined, { timeout: 60_000 });
         if (!opts.quiet) {
@@ -198,8 +205,19 @@ export async function pollGenerationJobUntilDone(client, jobId, opts = {}) {
                 ? `${job.status}: ${job.progress_message}`
                 : job.status;
             if (line !== lastReported) {
+                // Status / message changed — emit it as a fresh breadcrumb.
                 process.stderr.write(`  ${line}\n`);
                 lastReported = line;
+                lastHeartbeatAt = Date.now();
+            }
+            else if (Date.now() - lastHeartbeatAt >= GENERATION_HEARTBEAT_MS) {
+                // NEW-CP-3: the backend often holds at `status=running` with no
+                // `progress_message` for tens of seconds. Without a heartbeat the
+                // CLI looks frozen. Emit a "still running" line every 15s so the
+                // operator knows we're polling and not hung.
+                const elapsedSec = Math.round((Date.now() - startedAt) / 1000);
+                process.stderr.write(`  still ${job.status} (${elapsedSec}s elapsed)…\n`);
+                lastHeartbeatAt = Date.now();
             }
         }
         if (GENERATION_TERMINAL_STATUSES.has(job.status))

package/dist/lib/skill-content.js

@@ -220,6 +220,10 @@ When in doubt: side-by-side comparison usually beats in-place edits. Ids are che
 - **401 surfaces as fake blocker**: an unauthenticated endpoint produces "participant got stuck on auth screen" — looks like a UX blocker but is config. Always confirm endpoint auth before reading transcripts as user-research data.
 - **No per-page/per-timestamp scoping for media**: there's no "evaluate just slide 14" or "react to seconds 0-30" API. State the focus explicitly in the \`assignment\` text, or pre-stitch the artifact (e.g. replace one slide locally, upload as a new iteration).
 - **\`study get --json\` participants live at the top level**, not nested under \`iterations[*].participants\`. The backend split made \`/studies/{id}\` lite (metadata + iteration shells, no participant graph) and added \`/studies/{id}/participants\`; the CLI joins them so \`study get --json\` carries a flat \`participants[]\` with \`iteration_id\` on each row. Read \`.participants[]\`, not \`.iterations[].participants[]\`.
+- **All destructive deletes require \`--yes\` in non-TTY mode**: \`ish workspace delete\`, \`study delete\`, \`ask delete\`, \`person delete\`, \`source delete\`, \`chat endpoint delete\`. In \`--json\` mode (or any piped/non-TTY invocation), omitting \`--yes\` refuses with \`error_kind: "ConfirmationRequired"\` + an \`example\` field showing the same command with \`--yes\` appended. \`workspace delete\` is the highest-blast-radius: it removes ALL nested studies, asks, people, secrets, configs, sources, and chat endpoints — the prompt names them explicitly.
+- **\`ish login\` is idempotent**: with a valid saved token, \`ish login\` short-circuits with "Already logged in" and **does not open a new browser tab**. Use \`--force\` (or \`-f\`) only when actually switching accounts.
+- **\`ish person create\` accepts inline flags** (mirrors \`person update\`): the file-only API (\`--file <path>\`) is preserved as an escape hatch but the common path is \`ish person create --name "X" --type ai --country US ...\` — \`--type\` defaults to \`ai\` when \`--file\` is omitted. See \`ish person create --help\` for the full inline-flag set including \`--household\` (MECE rule applies) and \`--accessibility-profile\`.
+- **\`ish status\` now surfaces \`chat_endpoint\`** alongside \`workspace\`/\`study\`/\`ask\`. Stale or orphan active refs get a \`warning\` + \`hint\` field on the affected ref (instead of silently dropping the \`name\`). On \`workspace use <other>\`, the CLI cascade-clears \`study\`/\`ask\`/\`chat_endpoint\` (they belong to the previous workspace).
 
 ## When in doubt
 
@@ -376,9 +380,13 @@ ish person suggest-scenarios \\
 #    [{"text":"...","source":"situation","scenario_prompt":"..."}, ...]
 #    Valid source values: situation, voice, binary, micro-story
 
-# 3. Save the person shell
+# 3. Save the person shell — either from file:
 ish person create --file ./persona.json
 # → p-d4e
+#
+# …or inline (mirror of person update):
+# ish person create --name "Alice" --type ai --country US \\
+#     --occupation founder --household single --bio "..."
 
 # 4. Persist the answers as structured evidence
 ish person evidence add p-d4e --traces-file ./answers.json
@@ -1042,7 +1050,7 @@ ish <command> --help
 | \`mcp\`       | Wire the hosted ish MCP server into local AI    | guides/mcp-add              |
 |             | clients (Cursor, VS Code, Claude Code,          |                             |
 |             | Claude Desktop, Windsurf). Idempotent.          |                             |
-| \`login\`     | Browser-based auth                              | —                           |
+| \`login\`     | Browser-based auth. Idempotent: short-circuits on valid saved token. \`--force\` to switch accounts. | —                           |
 | \`logout\`    | Clear saved credentials                         | —                           |
 | \`status\`    | Show active session (user, workspace,           | concepts/active-context     |
 |             | study, ask, token validity) — alias \`whoami\`    |                             |

package/dist/upgrade.js

@@ -32,11 +32,18 @@ export async function upgrade(currentVersion, targetVersion) {
     const scriptUrl = import.meta.url;
     const runningFromNodeModules = scriptUrl.includes("/node_modules/");
     if (looksLikeNode || runningFromNodeModules) {
-        throw new Error("Cannot self-upgrade an npm-installed CLI (would overwrite the node binary). " +
+        // Pattern C: tag as ValidationError so exitCodeFromError maps to 2
+        // (usage_error). Otherwise this would fall through to the generic
+        // exit 1 even with the wrapper in place (ISSUE-012).
+        const err = new Error("Cannot self-upgrade an npm-installed CLI (would overwrite the node binary). " +
             "Run `npm install -g @ishlabs/cli@latest` instead.");
+        err.name = "ValidationError";
+        throw err;
     }
     if (targetVersion && !/^\d+\.\d+\.\d+/.test(targetVersion)) {
-        throw new Error(`Invalid version format: ${targetVersion}`);
+        const err = new Error(`Invalid version format: ${targetVersion}`);
+        err.name = "ValidationError";
+        throw err;
     }
     const latest = targetVersion || (await getLatestVersion());
     if (latest === currentVersion) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ishlabs/cli",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "The command-line interface for ish",
   "type": "module",
   "bin": {