@phnx-labs/agents-cli 1.22.46 → 1.22.47

package/README.md

@@ -54,7 +54,7 @@ agents setup status                    # readiness for browser, computer, fleet,
 agents run claude "explain this repo"  # run any agent on your existing subscription
 ```
 
-`agents setup` is interactive and idempotent -- safe to re-run on any machine. Once core setup exists, it opens a status-aware menu for browser, computer, secrets, fleet, share, watchdog, and device preferences; each choice delegates to the same wizard available under `agents setup <capability>`. In CI or another non-TTY, bare setup prints the checklist without prompting. The `agi-cli.sh` one-liner installs this same canonical `@phnx-labs/agents-cli` package. Prefer bun? `bun install -g @phnx-labs/agents-cli` works too.
+Everything here — and every other command in this README — is free and needs no account; the optional `agents auth login` exists only for [team spaces](#sign-in). `agents setup` is interactive and idempotent -- safe to re-run on any machine. Once core setup exists, it opens a status-aware menu for browser, computer, secrets, fleet, share, watchdog, and device preferences; each choice delegates to the same wizard available under `agents setup <capability>`. In CI or another non-TTY, bare setup prints the checklist without prompting. The `agi-cli.sh` one-liner installs this same canonical `@phnx-labs/agents-cli` package. Prefer bun? `bun install -g @phnx-labs/agents-cli` works too.
 
 Full path -- installing harnesses, logging in, smoke-testing `agents teams`, and setting up your own fleet: [`apps/cli/docs/QUICKSTART.md`](apps/cli/docs/QUICKSTART.md).
 
@@ -224,8 +224,8 @@ Supports plan (read-only), edit, auto, and skip modes, effort levels, JSON outpu
 Treat `skip` as a last-resort escape hatch. In direct-exec runs (without `--acp`),
 agi-cli forwards the harness's native no-prompt flag; it does not add another
 safety layer. Prefer `auto` where it adds a safer automatic policy (smart classifier
-on Claude/Copilot, native high-auto mode on Droid, or interactive Kimi), or `edit`
-everywhere else. For headless Kimi, `edit`, `auto`, and `skip` all use the same
+on Claude/Copilot, never-prompt over a sandbox on Codex, native high-auto mode on
+Droid, or interactive Kimi), or `edit` everywhere else. For headless Kimi, `edit`, `auto`, and `skip` all use the same
 already-auto-approved `-p` behavior, so prefer `edit` rather than signaling a blanket
 bypass. Harnesses without a native bypass flag reject direct-exec `skip`.
 
@@ -247,11 +247,13 @@ permission requests at the ACP protocol layer: it selects `allow_always` when of
 otherwise the first permission option offered by the server. The same last-resort
 warning applies.
 
-Codex has no native smart-classifier mode, so `agents run codex --mode auto` resolves
-to sandboxed `edit` and can still prompt. When `--mode` is omitted for Codex, the same
-safe writable mode is used: the workspace, `~/.agents`, and regenerable toolchain caches
-are writable; network access is enabled; and approvals are requested on demand. An
-explicit `--mode plan` keeps the filesystem read-only while leaving network access on.
+Codex has three managed permission profiles rather than a smart classifier. `edit`
+and `auto` share one sandbox — the workspace, `~/.agents`, and regenerable toolchain
+caches are writable, and network access is enabled — and differ only in approvals:
+`edit` requests them on demand, while `auto` never prompts, so a sandbox-denied
+command fails and the agent works around it instead of stopping on a dialog nobody
+is watching. When `--mode` is omitted for Codex, `edit` is used. An explicit
+`--mode plan` keeps the filesystem read-only while leaving network access on.
 `agents run codex --mode skip` is different:
 it bypasses approvals **and** removes the sandbox. `full` remains an alias for `skip`,
 but new scripts should use the explicit `skip` name.
@@ -295,6 +297,11 @@ agents sessions render a1b2c3d4 -o session.md
 # Or publish it as a link in one step (unlisted + redacted by default)
 agents sessions share a1b2c3d4
 
+# Visualize a session as a trajectory -- tool-call waterfall, timing, stalls, errors
+agents trace a1b2c3d4                    # opens the HTML (a person at a terminal)
+agents trace a1b2c3d4 --text --errors-only   # compact text an agent reads in-context
+agents sessions trace a1b2c3d4 --json    # the versioned sessions-trace envelope
+
 # Just the last 3 turns, user messages only
 agents sessions a1b2c3d4 --last 3 --include user
 
@@ -434,6 +441,8 @@ agents feed --flat                  # one row per agent (legacy)
 agents feed --device mac-mini         # scope the view to one or more hosts
 agents feed --local                 # skip the SSH fan-out
 agents feed --json                  # blocks stamped with their outcome key
+agents feed watch --json            # versioned agents + attention + activity NDJSON
+agents feed answer <key> --choice 0 # first answer wins; route over the recorded reply rail
 agents feed post --title "Halfway done" "CI green, watching merge"  # title + body
 ```
 
@@ -600,7 +609,7 @@ agents hosts check gpu-box              # reachable? which agi-cli version?
 
 # Run there instead of locally
 agents run claude --device gpu-box "profile this build"   # headless: follows live by default
-agents run claude --device gpu-box                         # no prompt → interactive TTY over SSH (tmux-backed)
+agents run claude --device gpu-box                         # no prompt → direct interactive TTY over SSH
 agents accounts sync work --device gpu-box               # portable provider account only; native OAuth stays local
 agents run claude --device auto "…"                      # affinity-pick host from 14d usage (harness stays claude)
 agents run claude --device auto "…"                        # same — auto is a host value, not a harness name
@@ -638,10 +647,12 @@ agents devices sync                     # ingest `tailscale status`
 agents devices ignore ipad              # sync the dismissal via agents.yaml fleet.discovery
 agents repo push user                    # carry device decisions to the other machines
 agents repo pull user                    # pull and reconcile them into this machine's registry
-agents devices list                     # fleet + headroom: load, mem, idle/busy — which box has room (cache-first)
+agents devices list                     # spec (cores/RAM/disk) + load/mem/disk + headroom + role + description
 agents devices list --live              # force a live probe of every device (alias of --refresh)
-agents devices list --full              # add per-device cores and free/total RAM
+agents devices list --full              # add per-device free/total RAM detail
 agents devices list --no-stats          # instant: names/addresses only, skip the probe
+agents devices describe mac-mini "signing + notarize box"   # one-line purpose, synced + shown in the list
+agents devices ignored                  # dismissed nodes — when, and which machine dismissed them
 agents devices config zion interactive.host zion   # the device agents show YOU artifacts on (★ in the list)
 agents devices config mac-mini agents.max-concurrent 4   # per-device settings (tracked devices/<name>/agents.yaml)
 agents devices config mac-mini scheduler.enabled off     # bare `devices config <name>` opens a settings menu (TTY)
@@ -814,7 +825,7 @@ tools:
 ---
 ```
 
-Workflows that need to write — post PR comments, edit files, send Slack — should run with `--mode edit`, or `--mode auto` on Claude Code and GitHub Copilot. Reserve `--mode skip` (legacy alias: `full`) for last-resort bypasses. `agents run` defaults to `--mode plan` for other harnesses; Codex defaults to its safe writable profile. An explicit Codex `--mode plan` is read-only with network access.
+Workflows that need to write — post PR comments, edit files, send Slack — should run with `--mode edit`, or `--mode auto` on Claude Code, GitHub Copilot, and Codex. Reserve `--mode skip` (legacy alias: `full`) for last-resort bypasses. `agents run` defaults to `--mode plan` for other harnesses; Codex defaults to its safe writable profile. An explicit Codex `--mode plan` is read-only with network access.
 
 Resolution is project > user > system: a `<repo>/.agents/workflows/<name>/` overrides a same-named workflow in `~/.agents/workflows/`. Commit project workflows with your repo so teammates get the same pipeline.
 
@@ -898,7 +909,7 @@ agents setup mine remove jack --purge
 
 Under the hood, `init` drops a pure pass-through shim in `~/.agents/.cache/shims/<name>` (already on `PATH`) that sets `AGENTS_BRAND` and forwards every argument to the same binary — nothing is copied or forked. The brand's config lives in `~/.agents/agents.yaml` (`brands.<name>`), so it rides `agents repo push/pull` across your fleet. Disabling a command hides it **only** under that brand; plain `agents` / `ag` keep every command. Curated skills/plugins/MCP ride a per-brand [resource profile](apps/cli/docs/profiles.md). Full reference: [Make it yours](apps/cli/docs/mine.md).
 
-> Personal use is free and Apache-2.0. Redistributing a branded build commercially will require a license in a future release.
+> Branded builds are free for personal and commercial use alike. New versions ship under FSL-1.1-Apache-2.0: every user and company may use, modify, and redistribute; only offering agents-cli itself as a competing commercial product or service is barred, and each version automatically becomes Apache-2.0 two years after release.
 
 ---
 
@@ -1005,7 +1016,7 @@ agents browser profiles create cloud \
 
 ## Sign in
 
-`agents auth` signs this machine in to **Phoenix ID** — the Phoenix Labs account layer that spaces and plan tiers hang off. Sign-in is Google-only and runs a device-code flow: the CLI shows a code, your browser confirms it, and the CLI picks the session up.
+Signing in is **optional**. Every local feature — `agents run`, sessions, teams, fleet dispatch, secrets, browser, computer — works with no account. The one thing an account unlocks is **team spaces**, the hosted surface under `agents auth space`. `agents auth` signs this machine in to **Phoenix ID**, the Phoenix Labs account layer behind team spaces. Sign-in is Google-only and runs a device-code flow: the CLI shows a code, your browser confirms it, and the CLI picks the session up.
 
 ```bash
 agents auth login                        # shows a code, opens a Phoenix-branded page
@@ -1314,7 +1325,7 @@ Two repos with the same shape, different roles:
 
 See [docs/concepts.md](apps/cli/docs/concepts.md) for the full mental model: DotAgents repos, resource kinds, and how resolution works end-to-end.
 
-Other useful commands: `agents doctor` checks CLI availability and resource sync drift, `agents usage` shows available quota/rate-limit data for installed agents, `agents config budget` shows cross-vendor spend caps and current spend-to-cap (and enforces pre-flight estimates + a hard-cap kill-switch on every run — see [docs/observability.md](apps/cli/docs/observability.md#budget-guardrails-agents-budget)), `agents import` adopts an existing unmanaged install, `agents trash` lists and restores soft-deleted version directories, and `agents subagents` installs reusable subagent definitions for parent-agent workflows.
+Other useful commands: `agents doctor` checks CLI availability and resource sync drift, `agents view` shows per-account quota/rate-limit data for installed agents, `agents config budget` shows cross-vendor spend caps and current spend-to-cap (and enforces pre-flight estimates + a hard-cap kill-switch on every run — see [docs/observability.md](apps/cli/docs/observability.md#budget-guardrails-agents-budget)), `agents import` adopts an existing unmanaged install, `agents trash` lists and restores soft-deleted version directories, and `agents subagents` installs reusable subagent definitions for parent-agent workflows.
 
 ---
 
@@ -1499,7 +1510,7 @@ Claude Code, Codex CLI, Antigravity, Grok Build, and others each have their own
 
 ### Is it free?
 
-Yes. This developer tool is entirely free because we believe developers should have the best tools — fast and robust — so they can create the best products for their users.
+Yes — every feature, with no account and no signup. `agents run`, sessions, teams, fleet dispatch, secrets, browser, and computer automation all work the moment you install. The optional `agents auth login` exists only to unlock hosted team spaces (`agents auth space`); there are no paid tiers. This developer tool is entirely free because we believe developers should have the best tools — fast and robust — so they can create the best products for their users.
 
 ### Is this like `nvm` / `mise` / `asdf` for AI agents?
 
@@ -1533,7 +1544,9 @@ macOS and Linux. Windows via WSL works but isn't first-class yet.
 
 **macOS-only features:** Keychain-based secrets (`agents secrets`, `agents accounts add`) require macOS. Default iCloud sync for bundles requires macOS + iCloud Keychain enabled; use `--no-icloud-sync` for device-local bundles. On Linux, use environment variables or `.env` files for API keys. Native Linux credential store support is planned.
 
-Interactive tmux-backed runs require tmux 3.2 or newer.
+Interactive runs spawn directly by default. Enable `tmux.enabled` on a device to
+give each run an addressable pane for `agents message`, injection, and `agents
+focus`; tmux-backed runs require tmux 3.2 or newer.
 
 ### Do I need Node.js?
 
@@ -1592,4 +1605,4 @@ Commands in [`apps/cli/src/commands/`](apps/cli/src/commands/), libraries in [`a
 
 ## License
 
-Apache-2.0 -- see [LICENSE](./LICENSE).
+FSL-1.1-Apache-2.0 -- see [LICENSE](./LICENSE). Free for every user and company to use, modify, and redistribute; the only barred use is offering agents-cli itself as a competing commercial product or service. Each version automatically becomes Apache-2.0 two years after its release.

package/dist/cli/command-registry.d.ts

@@ -63,8 +63,8 @@ export declare const loadMenubar: ModuleLoader;
 export declare const loadSync: ModuleLoader;
 export declare const loadRefreshRules: ModuleLoader;
 export declare const loadFactory: ModuleLoader;
-export declare const loadUsage: ModuleLoader;
 export declare const loadInsights: ModuleLoader;
+export declare const loadTrace: ModuleLoader;
 export declare const loadPerf: ModuleLoader;
 export declare const loadPty: ModuleLoader;
 export declare const loadTmux: ModuleLoader;

package/dist/cli/command-registry.js

@@ -65,8 +65,8 @@ export const loadMenubar = async () => (await import('../commands/menubar.js')).
 export const loadSync = async () => (await import('../commands/sync.js')).registerSyncCommand;
 export const loadRefreshRules = async () => (await import('../commands/refresh-rules.js')).registerRefreshRulesCommand;
 export const loadFactory = async () => (await import('../commands/factory.js')).registerFactoryCommands;
-export const loadUsage = async () => (await import('../commands/usage.js')).registerUsageCommand;
 export const loadInsights = async () => (await import('../commands/insights.js')).registerInsightsCommand;
+export const loadTrace = async () => (await import('../commands/sessions-trace.js')).registerTraceCommand;
 export const loadPerf = async () => (await import('../commands/perf.js')).registerPerfCommand;
 export const loadPty = async () => (await import('../commands/pty.js')).registerPtyCommands;
 export const loadTmux = async () => (await import('../commands/tmux.js')).registerTmuxCommands;
@@ -172,8 +172,10 @@ export const COMMAND_LOADERS = {
     sync: [loadSync],
     'refresh-rules': [loadRefreshRules],
     factory: [loadFactory],
-    usage: [loadUsage],
     insights: [loadInsights],
+    // `agents trace` is a top-level alias of `agents sessions trace` (precedent:
+    // `agents insights` aliases `agents sessions insights`). One implementation.
+    trace: [loadTrace],
     perf: [loadPerf],
     pty: [loadPty],
     tmux: [loadTmux],

package/dist/commands/accounts.js

@@ -3,7 +3,7 @@ import { password } from '@inquirer/prompts';
 import { setHelpSections } from '../lib/help.js';
 import { readMeta, updateMeta } from '../lib/state.js';
 import { ALL_AGENT_IDS, getAccountInfo, resolveAgentName } from '../lib/agents.js';
-import { getVersionHomePath, listInstalledVersions } from '../lib/installations/versions.js';
+import { getGlobalDefault, getVersionHomePath, listInstalledVersions } from '../lib/installations/versions.js';
 import { assertNativeAccountNameable, nativeAccountCapability, nativeIdentityKey } from '../lib/account-capabilities.js';
 import { collectRunCandidates } from '../lib/accounting/rotate.js';
 import { isInteractiveTerminal } from './utils.js';
@@ -16,7 +16,10 @@ import { runDevicesAccounts } from './ssh.js';
 import { discoverNativeAccounts } from '../lib/account-catalog.js';
 import { readAndResolveBundleEnv } from '../lib/secrets/bundles.js';
 import { getAccountProvider, listAccountProviders } from '../lib/account-provider-registry.js';
-import { accountBindings, addAccount, addNativeAccount, bindAccount, findAccount, findUnifiedAccount, inspectAccount, listNativeAccounts, readAccountRegistry, removeAccount, renameAccount, setAccountSecret, unbindAccount } from '../lib/account-registry.js';
+import { accountBindings, addAccount, addNativeAccount, bindAccount, findAccount, findUnifiedAccount, inspectAccount, labelNativeAccount, listNativeAccounts, readAccountRegistry, removeAccount, renameAccount, setAccountSecret, unbindAccount } from '../lib/account-registry.js';
+function cleanCommandError(command, err) {
+    command.error(err instanceof Error ? err.message : String(err), { exitCode: 1, code: 'accounts.error' });
+}
 function parseInstallation(raw) {
     const at = raw.lastIndexOf('@');
     if (at < 1 || at === raw.length - 1)
@@ -273,12 +276,43 @@ export function registerAccountsCommand(program) {
     });
     accounts.command('name <source> <name>')
         .description('Name a signed-in native installation without copying its OAuth credentials')
-        .action(async (source, name) => {
-        const identity = await nativeIdentityFromSource(source);
-        const account = addNativeAccount(name, identity.agent, identity.identityKey, identity.identityLabel, identity.scope);
-        console.log(chalk.green(`Named ${source} as ${account.name}.`));
-        if (account.scope === 'device')
-            console.log(chalk.gray(`${identity.agent} authentication is device-scoped; attach '${account.name}' to '${identity.agent}', not an individual version.`));
+        .action(async (source, name, _o, command) => {
+        try {
+            const identity = await nativeIdentityFromSource(source);
+            const account = addNativeAccount(name, identity.agent, identity.identityKey, identity.identityLabel, identity.scope);
+            console.log(chalk.green(`Named ${source} as ${account.name}.`));
+            if (account.scope === 'device')
+                console.log(chalk.gray(`${identity.agent} authentication is device-scoped; attach '${account.name}' to '${identity.agent}', not an individual version.`));
+        }
+        catch (err) {
+            cleanCommandError(command, err);
+        }
+    });
+    accounts.command('label <harness> [label]')
+        .description('Label a native login independently of its installed harness version')
+        .option('--account <email-or-id>', 'Native identity to label when the harness has multiple logins')
+        .action(async (harness, label, o, command) => {
+        try {
+            const agent = parseHarness(harness);
+            assertNativeAccountNameable(agent);
+            const candidates = (await collectRunCandidates(agent)).filter(candidate => candidate.signedIn);
+            const needle = o.account?.toLowerCase();
+            const selected = needle
+                ? candidates.find(candidate => candidate.email?.toLowerCase() === needle || candidate.accountKey?.toLowerCase() === needle)
+                : candidates.find(candidate => candidate.version === getGlobalDefault(agent)) ?? (candidates.length === 1 ? candidates[0] : undefined);
+            if (!selected)
+                throw new Error(needle
+                    ? `Unknown ${agent} account '${o.account}'.`
+                    : `Multiple ${agent} accounts are connected; pass --account <email|id>.`);
+            const identityKey = selected.accountKey ?? selected.email?.toLowerCase();
+            if (!identityKey)
+                throw new Error(`${agent} account '${selected.version}' has no stable identity.`);
+            const account = labelNativeAccount(agent, identityKey, selected.email ?? undefined, label, nativeAccountCapability(agent).scope);
+            console.log(chalk.green(`Labeled ${agent} account ${selected.email ?? identityKey} as '${account.name}'.`));
+        }
+        catch (err) {
+            cleanCommandError(command, err);
+        }
     });
     accounts.command('attach <account> <target>')
         .description('Attach a named account to a native installation or custom harness')
@@ -329,15 +363,25 @@ export function registerAccountsCommand(program) {
     accounts.command('remove <name>').description('Remove an account and its device-local credential').action((name) => removeAccount(name));
     accounts.command('set-default <agent> <name>')
         .description('Use this account for a harness when --account is omitted')
-        .action((agentRaw, name) => {
-        const { agent, account } = setDefaultAccount(agentRaw, name);
-        console.log(chalk.green(`${agent} now uses account '${account.name}' unless --account overrides it.`));
+        .action((agentRaw, name, _o, command) => {
+        try {
+            const { agent, account } = setDefaultAccount(agentRaw, name);
+            console.log(chalk.green(`${agent} now uses account '${account.name}' unless --account overrides it.`));
+        }
+        catch (err) {
+            cleanCommandError(command, err);
+        }
     });
     const switchCmd = accounts.command('switch <harness> [account]')
         .description('Pick the default account for a harness')
         .option('--json', 'Machine-readable account list or the resulting default')
         .action(async (harness, account, o, command) => {
-        await runAccountsSwitch(harness, account, { json: !!(o.json || command.optsWithGlobals().json) });
+        try {
+            await runAccountsSwitch(harness, account, { json: !!(o.json || command.optsWithGlobals().json) });
+        }
+        catch (err) {
+            cleanCommandError(command, err);
+        }
     });
     accounts.command('clear-default <agent>')
         .description('Return a harness to native login or balanced account selection')

package/dist/commands/auth.js

@@ -3,9 +3,10 @@ import { PhoenixApiError, clearSession, createSpace, createSpaceInvite, fetchWho
 import { setHelpSections } from '../lib/help.js';
 import { runOrDie } from '../lib/format.js';
 /**
- * `agents auth` — sign in to Phoenix ID, the account layer behind teams and
- * plan tiers. Everything here goes through `lib/identity`; this file builds no
- * URLs and reads no credential files of its own.
+ * `agents auth` — sign in to Phoenix ID, the account layer behind team spaces.
+ * Signing in is optional: every local feature works with no account. Everything
+ * here goes through `lib/identity`; this file builds no URLs and reads no
+ * credential files of its own.
  */
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
@@ -90,14 +91,15 @@ async function requireSpace(ref) {
 export function registerAuthCommand(program) {
     const auth = program
         .command('auth')
-        .description('Sign in to Phoenix ID — the account layer behind spaces and plan tiers');
+        .description('Sign in to Phoenix ID — the account layer behind team spaces');
     setHelpSections(auth, {
         examples: `agents auth login                         # device-code sign-in via your browser
 agents auth whoami                        # who this machine is signed in as
 agents auth space create "Design Team"    # start a space
 agents auth space invite ada@example.com  # add a teammate
 agents auth logout                        # clear this machine only`,
-        notes: `Sign-in is Google-only and opens a Phoenix-branded page; the CLI never sees a password.
+        notes: `Signing in is optional — every local feature works with no account; team spaces are what it unlocks.
+Sign-in is Google-only and opens a Phoenix-branded page; the CLI never sees a password.
 The session lives in this machine's agents state dir, so logging out here signs out nothing else.
 Point at a different backend with PHOENIX_ID_BASE (defaults to the production service).`,
     });

package/dist/commands/browser-sessions-picker.js

@@ -10,12 +10,13 @@
  * second renderer. Interactive routing and the browse loop live in
  * `sessions-picker-factory.ts` (shared with the computer twin).
  */
+import { showFile } from '../lib/open-url.js';
 import chalk from 'chalk';
 import { itemPicker } from '../lib/picker.js';
 import { isPromptCancelled } from './utils.js';
 import { buildPreview } from './sessions-picker.js';
 import { createSessionsPickerCommand } from './sessions-picker-factory.js';
-import { runBrowserSessions, buildBrowserSessionRows, matchesBrowserSessionRow, openArtifact, formatBytes, } from '../lib/browser/sessions-list.js';
+import { runBrowserSessions, buildBrowserSessionRows, matchesBrowserSessionRow, formatBytes, } from '../lib/browser/sessions-list.js';
 import { formatRelativeTime } from '../lib/session/relative-time.js';
 const KIND_LABEL = {
     screenshot: 'shots',
@@ -89,11 +90,12 @@ function formatArtifactLabel(a) {
     const age = formatRelativeTime(new Date(a.mtimeMs).toISOString());
     return `${age.padEnd(11)}  ${a.name.padEnd(34)}  ${formatBytes(a.bytes).padStart(8)}`;
 }
-/** Open one artifact in the OS default app, printing its path (matches the
- *  non-interactive `--open` behavior) and any open failure. */
-function openAndReport(a) {
+/** Open one artifact, printing its path (matches the non-interactive `--open`
+ *  behavior) and any open failure. Routes through the same viewer seam as
+ *  `--open`, so the interactive and non-interactive halves cannot diverge. */
+async function openAndReport(a) {
     console.log(a.path);
-    if (!openArtifact(a.path))
+    if ((await showFile(a.path)).via === 'none')
         console.error(`Could not open ${a.path}`);
 }
 /** Second-level picker over one row's captures, newest first. Enter opens the
@@ -136,12 +138,12 @@ const browserSessionsPicker = createSessionsPickerCommand({
             return;
         }
         if (row.artifacts.length === 1) {
-            openAndReport(row.artifacts[0]);
+            await openAndReport(row.artifacts[0]);
             return;
         }
         const artifact = await pickArtifact(row);
         if (artifact)
-            openAndReport(artifact);
+            await openAndReport(artifact);
     },
 });
 /** True when the interactive picker should open instead of the printed table: