@skrr-ai/cli 0.1.109 → 0.1.111

package/dist/commands/agents/chat.js

@@ -456,7 +456,10 @@ class AgentsChat extends base_command_1.BaseCommand {
      * canonical scope at all. Naming that at launch is cheap; discovering it
      * mid-run costs a session.
      */
-    static TASK_REF_IN_PROMPT = /\b(?:OSK-\d+|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b/;
+    // UUIDs identify Stores, versions, files and conversations too. Only a
+    // Task identifier or a UUID with an explicit Task label/URL/command earns
+    // this warning; a resource UUID alone cannot establish its kind.
+    static TASK_REF_IN_PROMPT = new RegExp(String.raw `\bOSK-\d+\b|(?:\btask(?:[\s_-]*(?:id|uuid))?\s*[:=]?\s*["'\x60]?|/tasks?/|\bskrr\s+tasks\s+(?:(?:updates|result|expectations|deliverable|comments|resume)\s+)?[a-z-]+\s+)[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b`, 'i');
     /**
      * `--local-skill` names → the references the server resolves, from the daemon
      * that will run the turn. Any name that does not resolve stops the command:

package/dist/commands/agents/duplicate.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
+const agent_proactive_baseline_1 = require("../../lib/agent-proactive-baseline");
 const web_url_1 = require("../../lib/web-url");
 class AgentsDuplicate extends base_command_1.BaseCommand {
     static description = 'Duplicate an agent (clones the agent and its actions)';
@@ -41,6 +42,9 @@ class AgentsDuplicate extends base_command_1.BaseCommand {
         if (r.agent)
             this.log(`URL: ${(0, web_url_1.withAgentUrl)(this.cliConfig.baseURL, r.agent).url ?? '-'}`);
         this.log(`Cloned ${actionCount} action${actionCount === 1 ? '' : 's'}`);
+        // A copy starts in standby; the server's receipt names the enable command.
+        for (const line of (0, agent_proactive_baseline_1.creationDispositionLines)(r.proactive))
+            this.log(line);
     }
 }
 exports.default = AgentsDuplicate;

package/dist/commands/agents/eval/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -26,7 +27,7 @@ class AgentsEvalList extends base_command_1.BaseCommand {
             this.handleApiError(error, { subject: `agent ${args.agentId}` });
         }
         if (flags.json) {
-            this.log(this.agentJson(args.agentId, result));
+            this.printJsonResult((0, list_output_1.listResult)(this.withAgentContext(args.agentId, result)));
             return;
         }
         const rows = result.data ?? [];

package/dist/commands/agents/files/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -12,7 +13,7 @@ class AgentsFilesList extends base_command_1.BaseCommand {
         const { args, flags } = await this.parse(AgentsFilesList);
         const result = await data_provider_1.dataService.listAgentFolderFiles(args.agentId);
         if (flags.json)
-            this.log(this.agentJson(args.agentId, result));
+            this.printJsonResult((0, list_output_1.listResult)(this.withAgentContext(args.agentId, result)));
         else {
             this.log(JSON.stringify(result.data, null, 2));
             this.printAgentUrl(args.agentId);

package/dist/commands/agents/folders/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -12,7 +13,7 @@ class AgentsFoldersList extends base_command_1.BaseCommand {
         const { args, flags } = await this.parse(AgentsFoldersList);
         const result = await data_provider_1.dataService.listAgentFolders(args.agentId);
         if (flags.json)
-            this.log(this.agentJson(args.agentId, result));
+            this.printJsonResult((0, list_output_1.listResult)(this.withAgentContext(args.agentId, result)));
         else {
             this.log(JSON.stringify(result.data, null, 2));
             this.printAgentUrl(args.agentId);

package/dist/commands/agents/goals/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -39,7 +40,7 @@ class AgentsGoalsList extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(response));
             return;
         }
         const items = (response?.data ?? []);

package/dist/commands/agents/intuitions/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -11,11 +12,13 @@ class AgentsIntuitionsList extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(AgentsIntuitionsList);
         const result = await data_provider_1.dataService.getAgentIntuitions(args.agentId);
-        this.log(flags.json
-            ? this.agentJson(args.agentId, result)
-            : JSON.stringify(result.intuitions ?? result, null, 2));
-        if (!flags.json)
-            this.printAgentUrl(args.agentId);
+        if (flags.json) {
+            this.printJsonResult((0, list_output_1.listResult)(this.withAgentContext(args.agentId, result), 'intuitions'));
+            return;
+        }
+        const text = JSON.stringify(result.intuitions ?? result, null, 2);
+        this.log(text);
+        this.printAgentUrl(args.agentId);
     }
 }
 exports.default = AgentsIntuitionsList;

package/dist/commands/agents/list.d.ts

@@ -1,3 +1,4 @@
+import { type AgentListParams } from '@skrr-ai/data-provider';
 import { BaseCommand } from '../../base-command';
 /**
  * One agent document → one table row.
@@ -38,11 +39,22 @@ export declare function agentRow(a: Record<string, unknown>): {
  * Exported and pure so the wording is testable without an oclif runtime.
  */
 export declare function noAgentsEmptyMessage(bin?: string): string;
+/** Server-side selection: never download and locally filter the historical inventory. */
+export declare function agentListParams(flags: Record<string, unknown>): AgentListParams;
 export default class AgentsList extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        q: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        harness: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        readiness: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        cursor: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        all: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        fields: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        compact: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        ndjson: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/agents/list.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.orderPinnedFirst = orderPinnedFirst;
 exports.agentRow = agentRow;
 exports.noAgentsEmptyMessage = noAgentsEmptyMessage;
+exports.agentListParams = agentListParams;
+const list_output_1 = require("../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
@@ -57,14 +59,36 @@ function noAgentsEmptyMessage(bin = 'skrr') {
         `  → Start a coding session and one will be created for you: \`${bin} code\`\n` +
         `  → Or create one explicitly: \`${bin} agents create --name "..." --provider anthropic --model claude-sonnet-4-5 --target hosted-machine\``);
 }
+/** Server-side selection: never download and locally filter the historical inventory. */
+function agentListParams(flags) {
+    return {
+        requiredPermission: data_provider_1.PermissionBits.VIEW,
+        search: flags.q,
+        harnessId: flags.harness,
+        readiness: flags.readiness,
+        limit: flags.all ? undefined : flags.limit ?? 50,
+        cursor: flags.cursor,
+        // Explicit field selection may need a field outside the summary projection.
+        fields: flags.all || flags.fields ? undefined : 'summary',
+        withReadiness: 1,
+    };
+}
 class AgentsList extends base_command_1.BaseCommand {
     static description = 'List agents available to you';
     static examples = [
         '<%= config.bin %> agents list',
-        '<%= config.bin %> agents list --json',
+        '<%= config.bin %> agents list --q scout --harness <harness-id> --readiness ready --compact --json',
+        '<%= config.bin %> agents list --all --json',
     ];
     static flags = {
+        ...list_output_1.listOutputFlags,
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+        q: core_1.Flags.string({ description: 'Search Agent name or description on the server' }),
+        harness: core_1.Flags.string({ description: 'An enabled execution target must reference this harness ID' }),
+        readiness: core_1.Flags.string({ options: ['ready', 'blocked', 'unknown'], description: 'Filter server-side unattended execution admission; ready is a prerequisite check, not a guarantee of task authorization' }),
+        limit: core_1.Flags.integer({ min: 1, max: 100, description: 'Page size (default 50; maximum 100)', exclusive: ['all'] }),
+        cursor: core_1.Flags.string({ description: 'Continue from next_cursor in the previous response', exclusive: ['all'] }),
+        all: core_1.Flags.boolean({ description: 'Full historical inventory and full Agent payloads (unbounded); filters still apply' }),
     };
     async run() {
         this.requireAuth();
@@ -75,15 +99,20 @@ class AgentsList extends base_command_1.BaseCommand {
             // web client passes when listing agents a user can see (see
             // client/src/routes/ChatRoute.tsx). EDIT would restrict to agents the
             // user can modify.
-            response = await data_provider_1.dataService.listAgents({
-                requiredPermission: data_provider_1.PermissionBits.VIEW,
-            });
+            response = await data_provider_1.dataService.listAgents(agentListParams(flags));
         }
         catch (err) {
             this.handleApiError(err);
         }
-        if (flags.json) {
-            this.log(JSON.stringify((0, web_url_1.withDataUrls)(this.cliConfig.baseURL, response, web_url_1.agentUrlFrom), null, 2));
+        // An older server silently ignoring readiness would return unsafe matches.
+        if (flags.readiness && response?.readiness_filter_applied !== flags.readiness) {
+            this.error('The server did not confirm execution-readiness filtering. Upgrade the server before selecting executors with --readiness.');
+        }
+        if (flags.json || flags.ndjson) {
+            this.printList((0, list_output_1.shapeListResponse)((0, web_url_1.withDataUrls)(this.cliConfig.baseURL, response, web_url_1.agentUrlFrom), {
+                resource: 'agent', fields: flags.fields, compact: flags.compact,
+                requestedLimit: flags.all ? undefined : flags.limit ?? 50,
+            }), Boolean(flags.ndjson));
             return;
         }
         // AgentListResponse shape has varied — accept { data }, { agents }, or a
@@ -92,8 +121,10 @@ class AgentsList extends base_command_1.BaseCommand {
         const items = Array.isArray(r)
             ? r
             : (r?.data ?? r?.agents ?? []);
+        for (const note of (0, list_output_1.textModeProjectionNotes)(flags))
+            this.log(note);
         if (items.length === 0) {
-            this.log(noAgentsEmptyMessage(this.config.bin));
+            this.log(flags.q || flags.harness || flags.readiness ? 'No agents match these filters. Broaden --q, --harness, or --readiness.' : noAgentsEmptyMessage(this.config.bin));
             return;
         }
         // Best-effort: a list that cannot read pins still lists, unordered by them.
@@ -107,15 +138,21 @@ class AgentsList extends base_command_1.BaseCommand {
         const rows = orderPinnedFirst(items, preferences).map((item) => ({
             pinned: item.pinned ? 'pinned' : '',
             ...agentRow(item),
+            harness: (0, format_1.formatCell)(item.harnessName ?? item.harnessId, 'unassigned'),
+            readiness: (0, format_1.formatCell)(item.executionReadiness?.state, 'unknown'),
             url: (0, web_url_1.agentUrlFrom)(this.cliConfig.baseURL, item) ?? '-',
         }));
         (0, format_1.renderTable)(rows, [
             { key: 'pinned', header: 'PINNED' },
             { key: 'id', header: 'ID' },
             { key: 'name', header: 'NAME', maxWidth: 30 },
-            { key: 'description', header: 'DESCRIPTION', maxWidth: 60 },
+            { key: 'harness', header: 'HARNESS', maxWidth: 30 },
+            { key: 'readiness', header: 'ADMISSION' },
             { key: 'url', header: 'URL', maxWidth: 72 },
         ], (line) => this.log(line));
+        const page = response;
+        if (page?.has_more && page.after)
+            this.log(`More agents available. Continue with --cursor ${page.after}`);
     }
 }
 exports.default = AgentsList;

package/dist/commands/agents/releases/known-issues/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../../base-command");
@@ -34,7 +35,7 @@ class AgentsReleasesKnownIssuesList extends base_command_1.BaseCommand {
         }
         const issues = release.knownIssues ?? [];
         if (flags.json) {
-            this.log(JSON.stringify({ releaseId: release.id, knownIssues: issues }, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)({ releaseId: release.id, knownIssues: issues }, 'knownIssues'));
             return;
         }
         if (issues.length === 0) {

package/dist/commands/agents/releases/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -35,7 +36,10 @@ class AgentsReleasesList extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(AgentsReleasesList);
         const result = await data_provider_1.dataService.getAgentReleases(args.agentId);
-        this.log(flags.json ? this.agentJson(args.agentId, result) : renderReleases(result.data ?? []));
+        if (flags.json)
+            this.printJsonResult((0, list_output_1.listResult)(this.withAgentContext(args.agentId, result)));
+        else
+            this.log(renderReleases(result.data ?? []));
         if (!flags.json)
             this.printAgentUrl(args.agentId);
     }

package/dist/commands/agents/releases/trusted-publishers/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../../base-command");
@@ -27,7 +28,7 @@ class AgentsReleasesTrustedPublishersList extends base_command_1.BaseCommand {
             const result = await data_provider_1.dataService.getAgentTrustedPublishers(args.agentId);
             const bindings = result.data ?? [];
             if (flags.json) {
-                this.log(JSON.stringify(bindings, null, 2));
+                this.printJsonResult((0, list_output_1.listResult)(bindings));
                 return;
             }
             if (bindings.length === 0) {

package/dist/commands/agents/roles/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const roles_1 = require("../../../lib/roles");
@@ -15,7 +16,7 @@ class RolesList extends base_command_1.BaseCommand {
         try {
             const result = await roles_1.roleApi.list(args.id);
             if (flags.json) {
-                this.log(JSON.stringify(result, null, 2));
+                this.printJsonResult((0, list_output_1.listResult)(result, 'roles'));
                 return;
             }
             for (const role of result.roles)

package/dist/commands/agents/skills/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -37,7 +38,7 @@ class AgentsSkillsList extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(response));
             return;
         }
         if (flags.quiet)

package/dist/commands/agents/todos/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const schedule_1 = require("../../../lib/schedule");
@@ -33,7 +34,7 @@ class AgentsTodosList extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(response, 'todos'));
             return;
         }
         (0, schedule_1.renderTodoList)(response.todos ?? [], (line) => this.log(line));

package/dist/commands/agents/triggers/create.js

@@ -76,7 +76,7 @@ class AgentsTriggersCreate extends base_command_1.BaseCommand {
             description: 'ISO-8601 datetime after which a schedule stops firing (--kind schedule)',
         }),
         'stale-catchup-ms': core_1.Flags.integer({
-            description: 'How late a missed occurrence may still run, in ms (a positive number). After downtime, an occurrence more than this overdue is skipped rather than run late, and the schedule moves to its next future slot. Unset: 3600000 (1 hour).',
+            description: 'How late a missed occurrence may still run, in ms, from 1000 (1 second) to 31622400000 (366 days). After downtime, an occurrence more than this overdue is skipped rather than run late, and the schedule moves to its next future slot. Unset: 3600000 (1 hour).',
         }),
         // once
         at: core_1.Flags.string({

package/dist/commands/agents/triggers/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const triggers_1 = require("../../../lib/triggers");
@@ -53,7 +54,7 @@ class AgentsTriggersList extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(response, 'triggers'));
             return;
         }
         (0, triggers_1.renderTriggerList)(response.triggers ?? [], (line) => this.log(line));

package/dist/commands/agents/triggers/update.js

@@ -63,7 +63,7 @@ class AgentsTriggersUpdate extends base_command_1.BaseCommand {
             description: 'ISO-8601 datetime after which a schedule stops firing',
         }),
         'stale-catchup-ms': core_1.Flags.integer({
-            description: 'How late a missed occurrence may still run, in ms (a positive number). After downtime, an occurrence more than this overdue is skipped rather than run late, and the schedule moves to its next future slot. Unset: 3600000 (1 hour).',
+            description: 'How late a missed occurrence may still run, in ms, from 1000 (1 second) to 31622400000 (366 days). After downtime, an occurrence more than this overdue is skipped rather than run late, and the schedule moves to its next future slot. Unset: 3600000 (1 hour).',
         }),
         at: core_1.Flags.string({ description: 'ISO-8601 datetime for once triggers' }),
         entity: core_1.Flags.string({

package/dist/commands/agents/update.d.ts

@@ -80,6 +80,17 @@ export default class AgentsUpdate extends BaseCommand {
  * Exported for tests.
  */
 export declare function agentUpdateWarnings(payload: Record<string, unknown>, updated: unknown): string[];
+/**
+ * The Agent row inside an update reply: the reply itself for an ordinary
+ * PATCH, `agent` inside the Always-On control envelope, or null when the
+ * control reply carries none (a PATCH of `isAlwaysOn` alone). Exported for tests.
+ */
+export declare function agentRowFromUpdate(updated: unknown): Record<string, unknown> | null;
+/**
+ * One line for an `isAlwaysOn` write, from the receipt: applied, or already in
+ * that state so nothing changed (OSK-16477). Exported for tests.
+ */
+export declare function alwaysOnReceiptLine(payload: Record<string, unknown>, updated: unknown): string | null;
 /**
  * Warnings from the server's `writeReceipt` (OSK-15070). The receipt names
  * every key the write saw as applied (and through which control: the legacy

package/dist/commands/agents/update.js

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AGENT_FENCE_RETRY_CODES = void 0;
 exports.agentUpdateWarnings = agentUpdateWarnings;
+exports.agentRowFromUpdate = agentRowFromUpdate;
+exports.alwaysOnReceiptLine = alwaysOnReceiptLine;
 exports.writeReceiptWarnings = writeReceiptWarnings;
 exports.retryOnceOnAgentFence = retryOnceOnAgentFence;
 exports.defaultPermissionModePatch = defaultPermissionModePatch;
@@ -212,8 +214,26 @@ class AgentsUpdate extends base_command_1.BaseCommand {
             this.log(JSON.stringify((0, web_url_1.withAgentUrl)(this.cliConfig.baseURL, updated), null, 2));
             return;
         }
-        const a = updated;
-        this.log(`Updated agent ${a.id ?? a._id ?? args.id} — ${a.name ?? '(no name)'}`);
+        // The Always-On control replies with its own envelope, which names no agent.
+        // Name it from the Agent's own row, not "(no name)" (OSK-16477).
+        const a = agentRowFromUpdate(updated) ?? { id: args.id };
+        if (typeof a.name !== 'string') {
+            try {
+                const row = (await data_provider_1.dataService.getAgentById({ agent_id: args.id }));
+                if (row &&
+                    typeof row === 'object' &&
+                    typeof row.name === 'string') {
+                    a.name = row.name;
+                }
+            }
+            catch {
+                // The update already happened; a failed name read only costs the label.
+            }
+        }
+        this.log(`Updated agent ${a.id ?? a._id ?? args.id} — ${typeof a.name === 'string' ? a.name || '(no name)' : '(name unavailable)'}`);
+        const alwaysOnLine = alwaysOnReceiptLine(payload, updated);
+        if (alwaysOnLine)
+            this.log(alwaysOnLine);
         this.log(`URL: ${(0, web_url_1.withAgentUrl)(this.cliConfig.baseURL, { ...a, id: a.id ?? a._id ?? args.id }).url ?? '-'}`);
         const modeNote = defaultPermissionModeNote(flags['default-permission-mode'], a);
         if (modeNote)
@@ -285,6 +305,42 @@ function agentUpdateWarnings(payload, updated) {
         ...(unapplied.length > 0 ? [(0, create_1.unappliedPayloadKeysWarning)(unapplied)] : []),
     ];
 }
+/**
+ * The Agent row inside an update reply: the reply itself for an ordinary
+ * PATCH, `agent` inside the Always-On control envelope, or null when the
+ * control reply carries none (a PATCH of `isAlwaysOn` alone). Exported for tests.
+ */
+function agentRowFromUpdate(updated) {
+    if (!updated || typeof updated !== 'object' || Array.isArray(updated))
+        return null;
+    const reply = updated;
+    const isControlReply = typeof reply.agentId === 'string' && reply.state !== null && typeof reply.state === 'object';
+    if (!isControlReply)
+        return { ...reply };
+    const agent = reply.agent;
+    return agent && typeof agent === 'object' && !Array.isArray(agent)
+        ? { ...agent, id: agent.id ?? reply.agentId }
+        : { id: reply.agentId };
+}
+/**
+ * One line for an `isAlwaysOn` write, from the receipt: applied, or already in
+ * that state so nothing changed (OSK-16477). Exported for tests.
+ */
+function alwaysOnReceiptLine(payload, updated) {
+    if (typeof payload.isAlwaysOn !== 'boolean')
+        return null;
+    const receipt = (0, data_provider_1.readAgentWriteReceipt)(updated);
+    if (!receipt)
+        return null;
+    const state = payload.isAlwaysOn ? 'on' : 'off';
+    if (receipt.unchanged.some((entry) => entry.field === 'isAlwaysOn')) {
+        return `Always-On: already ${state}; nothing changed.`;
+    }
+    if (receipt.applied.some((entry) => entry.field === 'isAlwaysOn')) {
+        return `Always-On: turned ${state}.`;
+    }
+    return null;
+}
 /**
  * Warnings from the server's `writeReceipt` (OSK-15070). The receipt names
  * every key the write saw as applied (and through which control: the legacy

package/dist/commands/api-keys/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../lib/list-output");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const managed_agent_keys_1 = require("../../lib/managed-agent-keys");
@@ -23,7 +24,7 @@ class ApiKeysList extends base_command_1.BaseCommand {
             return;
         }
         if (flags.json) {
-            this.log(JSON.stringify(keys, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(keys));
             return;
         }
         if (keys.length === 0) {

package/dist/commands/apps/channel.d.ts

@@ -0,0 +1,20 @@
+import { AppsCommand } from '../../lib/apps-command';
+/**
+ * Which update channel an installation follows. The Store's channel (`store channel`), for an installed App:
+ * `manual` waits for you, `auto_minor` lets the platform move it to a later public version of the same
+ * interface major, and `beta` also lets it take versions their publisher released as beta (the channel is the
+ * opt-in). A move never widens what you approved: a version that asks for more waits for `apps reconsent`.
+ */
+export default class AppsChannel extends AppsCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        installation: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        channel: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        expected: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/apps/channel.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const apps_command_1 = require("../../lib/apps-command");
+/**
+ * Which update channel an installation follows. The Store's channel (`store channel`), for an installed App:
+ * `manual` waits for you, `auto_minor` lets the platform move it to a later public version of the same
+ * interface major, and `beta` also lets it take versions their publisher released as beta (the channel is the
+ * opt-in). A move never widens what you approved: a version that asks for more waits for `apps reconsent`.
+ */
+class AppsChannel extends apps_command_1.AppsCommand {
+    static description = 'Choose how an installation is updated: manual (you move it), auto_minor (the platform moves it to a later public version of the same major) or beta (also versions released as beta). A version that asks for more than you approved still waits for your approval.';
+    static examples = [
+        '<%= config.bin %> apps channel appi_abc auto_minor',
+        '<%= config.bin %> apps channel appi_abc beta',
+        '<%= config.bin %> apps channel appi_abc manual',
+    ];
+    static args = {
+        installation: core_1.Args.string({
+            description: 'The installation id (appi_...)',
+            required: true,
+            ignoreStdin: true,
+        }),
+        channel: core_1.Args.string({
+            description: `One of ${data_provider_1.STORE_UPDATE_CHANNELS.join(', ')}`,
+            required: true,
+            ignoreStdin: true,
+            options: [...data_provider_1.STORE_UPDATE_CHANNELS],
+        }),
+    };
+    static flags = {
+        expected: core_1.Flags.string({
+            description: 'Change it only if it still follows this channel; otherwise nothing changes',
+            options: [...data_provider_1.STORE_UPDATE_CHANNELS],
+        }),
+        json: core_1.Flags.boolean({ description: 'Output the result as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AppsChannel);
+        try {
+            const result = await data_provider_1.dataService.setAppInstallationUpdatePolicy(args.installation, {
+                channel: args.channel,
+                ...(flags.expected === undefined ? {} : { expectedChannel: flags.expected }),
+            });
+            if (flags.json) {
+                this.printJsonResult(result);
+                return;
+            }
+            this.log(result.unchanged
+                ? `${result.installationId} already follows the ${result.updatePolicy} channel.`
+                : `${result.installationId} now follows the ${result.updatePolicy} channel.`);
+            if (result.updatePolicy === 'beta') {
+                this.log('Versions their publisher released as beta can now reach this installation. A version that asks for more than you approved waits for your approval (`' +
+                    `${this.config.bin} apps reconsent\`).`);
+            }
+        }
+        catch (error) {
+            this.failInstallation(error);
+        }
+    }
+}
+exports.default = AppsChannel;

package/dist/commands/apps/check-draft.d.ts

@@ -0,0 +1,12 @@
+import { AppsCommand } from '../../lib/apps-command';
+export default class AppsCheckDraft extends AppsCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        app: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}