@skrr-ai/cli 0.1.110 → 0.1.111

package/dist/commands/agents/list.d.ts

@@ -1,3 +1,4 @@
+import { type AgentListParams } from '@skrr-ai/data-provider';
 import { BaseCommand } from '../../base-command';
 /**
  * One agent document → one table row.
@@ -38,11 +39,22 @@ export declare function agentRow(a: Record<string, unknown>): {
  * Exported and pure so the wording is testable without an oclif runtime.
  */
 export declare function noAgentsEmptyMessage(bin?: string): string;
+/** Server-side selection: never download and locally filter the historical inventory. */
+export declare function agentListParams(flags: Record<string, unknown>): AgentListParams;
 export default class AgentsList extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        q: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        harness: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        readiness: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        cursor: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        all: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        fields: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        compact: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        ndjson: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/agents/list.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.orderPinnedFirst = orderPinnedFirst;
 exports.agentRow = agentRow;
 exports.noAgentsEmptyMessage = noAgentsEmptyMessage;
+exports.agentListParams = agentListParams;
+const list_output_1 = require("../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
@@ -57,14 +59,36 @@ function noAgentsEmptyMessage(bin = 'skrr') {
         `  → Start a coding session and one will be created for you: \`${bin} code\`\n` +
         `  → Or create one explicitly: \`${bin} agents create --name "..." --provider anthropic --model claude-sonnet-4-5 --target hosted-machine\``);
 }
+/** Server-side selection: never download and locally filter the historical inventory. */
+function agentListParams(flags) {
+    return {
+        requiredPermission: data_provider_1.PermissionBits.VIEW,
+        search: flags.q,
+        harnessId: flags.harness,
+        readiness: flags.readiness,
+        limit: flags.all ? undefined : flags.limit ?? 50,
+        cursor: flags.cursor,
+        // Explicit field selection may need a field outside the summary projection.
+        fields: flags.all || flags.fields ? undefined : 'summary',
+        withReadiness: 1,
+    };
+}
 class AgentsList extends base_command_1.BaseCommand {
     static description = 'List agents available to you';
     static examples = [
         '<%= config.bin %> agents list',
-        '<%= config.bin %> agents list --json',
+        '<%= config.bin %> agents list --q scout --harness <harness-id> --readiness ready --compact --json',
+        '<%= config.bin %> agents list --all --json',
     ];
     static flags = {
+        ...list_output_1.listOutputFlags,
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+        q: core_1.Flags.string({ description: 'Search Agent name or description on the server' }),
+        harness: core_1.Flags.string({ description: 'An enabled execution target must reference this harness ID' }),
+        readiness: core_1.Flags.string({ options: ['ready', 'blocked', 'unknown'], description: 'Filter server-side unattended execution admission; ready is a prerequisite check, not a guarantee of task authorization' }),
+        limit: core_1.Flags.integer({ min: 1, max: 100, description: 'Page size (default 50; maximum 100)', exclusive: ['all'] }),
+        cursor: core_1.Flags.string({ description: 'Continue from next_cursor in the previous response', exclusive: ['all'] }),
+        all: core_1.Flags.boolean({ description: 'Full historical inventory and full Agent payloads (unbounded); filters still apply' }),
     };
     async run() {
         this.requireAuth();
@@ -75,15 +99,20 @@ class AgentsList extends base_command_1.BaseCommand {
             // web client passes when listing agents a user can see (see
             // client/src/routes/ChatRoute.tsx). EDIT would restrict to agents the
             // user can modify.
-            response = await data_provider_1.dataService.listAgents({
-                requiredPermission: data_provider_1.PermissionBits.VIEW,
-            });
+            response = await data_provider_1.dataService.listAgents(agentListParams(flags));
         }
         catch (err) {
             this.handleApiError(err);
         }
-        if (flags.json) {
-            this.log(JSON.stringify((0, web_url_1.withDataUrls)(this.cliConfig.baseURL, response, web_url_1.agentUrlFrom), null, 2));
+        // An older server silently ignoring readiness would return unsafe matches.
+        if (flags.readiness && response?.readiness_filter_applied !== flags.readiness) {
+            this.error('The server did not confirm execution-readiness filtering. Upgrade the server before selecting executors with --readiness.');
+        }
+        if (flags.json || flags.ndjson) {
+            this.printList((0, list_output_1.shapeListResponse)((0, web_url_1.withDataUrls)(this.cliConfig.baseURL, response, web_url_1.agentUrlFrom), {
+                resource: 'agent', fields: flags.fields, compact: flags.compact,
+                requestedLimit: flags.all ? undefined : flags.limit ?? 50,
+            }), Boolean(flags.ndjson));
             return;
         }
         // AgentListResponse shape has varied — accept { data }, { agents }, or a
@@ -92,8 +121,10 @@ class AgentsList extends base_command_1.BaseCommand {
         const items = Array.isArray(r)
             ? r
             : (r?.data ?? r?.agents ?? []);
+        for (const note of (0, list_output_1.textModeProjectionNotes)(flags))
+            this.log(note);
         if (items.length === 0) {
-            this.log(noAgentsEmptyMessage(this.config.bin));
+            this.log(flags.q || flags.harness || flags.readiness ? 'No agents match these filters. Broaden --q, --harness, or --readiness.' : noAgentsEmptyMessage(this.config.bin));
             return;
         }
         // Best-effort: a list that cannot read pins still lists, unordered by them.
@@ -107,15 +138,21 @@ class AgentsList extends base_command_1.BaseCommand {
         const rows = orderPinnedFirst(items, preferences).map((item) => ({
             pinned: item.pinned ? 'pinned' : '',
             ...agentRow(item),
+            harness: (0, format_1.formatCell)(item.harnessName ?? item.harnessId, 'unassigned'),
+            readiness: (0, format_1.formatCell)(item.executionReadiness?.state, 'unknown'),
             url: (0, web_url_1.agentUrlFrom)(this.cliConfig.baseURL, item) ?? '-',
         }));
         (0, format_1.renderTable)(rows, [
             { key: 'pinned', header: 'PINNED' },
             { key: 'id', header: 'ID' },
             { key: 'name', header: 'NAME', maxWidth: 30 },
-            { key: 'description', header: 'DESCRIPTION', maxWidth: 60 },
+            { key: 'harness', header: 'HARNESS', maxWidth: 30 },
+            { key: 'readiness', header: 'ADMISSION' },
             { key: 'url', header: 'URL', maxWidth: 72 },
         ], (line) => this.log(line));
+        const page = response;
+        if (page?.has_more && page.after)
+            this.log(`More agents available. Continue with --cursor ${page.after}`);
     }
 }
 exports.default = AgentsList;

package/dist/commands/agents/releases/known-issues/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../../base-command");
@@ -34,7 +35,7 @@ class AgentsReleasesKnownIssuesList extends base_command_1.BaseCommand {
         }
         const issues = release.knownIssues ?? [];
         if (flags.json) {
-            this.log(JSON.stringify({ releaseId: release.id, knownIssues: issues }, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)({ releaseId: release.id, knownIssues: issues }, 'knownIssues'));
             return;
         }
         if (issues.length === 0) {

package/dist/commands/agents/releases/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -35,7 +36,10 @@ class AgentsReleasesList extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(AgentsReleasesList);
         const result = await data_provider_1.dataService.getAgentReleases(args.agentId);
-        this.log(flags.json ? this.agentJson(args.agentId, result) : renderReleases(result.data ?? []));
+        if (flags.json)
+            this.printJsonResult((0, list_output_1.listResult)(this.withAgentContext(args.agentId, result)));
+        else
+            this.log(renderReleases(result.data ?? []));
         if (!flags.json)
             this.printAgentUrl(args.agentId);
     }

package/dist/commands/agents/releases/trusted-publishers/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../../base-command");
@@ -27,7 +28,7 @@ class AgentsReleasesTrustedPublishersList extends base_command_1.BaseCommand {
             const result = await data_provider_1.dataService.getAgentTrustedPublishers(args.agentId);
             const bindings = result.data ?? [];
             if (flags.json) {
-                this.log(JSON.stringify(bindings, null, 2));
+                this.printJsonResult((0, list_output_1.listResult)(bindings));
                 return;
             }
             if (bindings.length === 0) {

package/dist/commands/agents/roles/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const roles_1 = require("../../../lib/roles");
@@ -15,7 +16,7 @@ class RolesList extends base_command_1.BaseCommand {
         try {
             const result = await roles_1.roleApi.list(args.id);
             if (flags.json) {
-                this.log(JSON.stringify(result, null, 2));
+                this.printJsonResult((0, list_output_1.listResult)(result, 'roles'));
                 return;
             }
             for (const role of result.roles)

package/dist/commands/agents/skills/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -37,7 +38,7 @@ class AgentsSkillsList extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(response));
             return;
         }
         if (flags.quiet)

package/dist/commands/agents/todos/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const schedule_1 = require("../../../lib/schedule");
@@ -33,7 +34,7 @@ class AgentsTodosList extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(response, 'todos'));
             return;
         }
         (0, schedule_1.renderTodoList)(response.todos ?? [], (line) => this.log(line));

package/dist/commands/agents/triggers/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../../lib/list-output");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const triggers_1 = require("../../../lib/triggers");
@@ -53,7 +54,7 @@ class AgentsTriggersList extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(response, 'triggers'));
             return;
         }
         (0, triggers_1.renderTriggerList)(response.triggers ?? [], (line) => this.log(line));

package/dist/commands/api-keys/list.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const list_output_1 = require("../../lib/list-output");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const managed_agent_keys_1 = require("../../lib/managed-agent-keys");
@@ -23,7 +24,7 @@ class ApiKeysList extends base_command_1.BaseCommand {
             return;
         }
         if (flags.json) {
-            this.log(JSON.stringify(keys, null, 2));
+            this.printJsonResult((0, list_output_1.listResult)(keys));
             return;
         }
         if (keys.length === 0) {

package/dist/commands/apps/channel.d.ts

@@ -0,0 +1,20 @@
+import { AppsCommand } from '../../lib/apps-command';
+/**
+ * Which update channel an installation follows. The Store's channel (`store channel`), for an installed App:
+ * `manual` waits for you, `auto_minor` lets the platform move it to a later public version of the same
+ * interface major, and `beta` also lets it take versions their publisher released as beta (the channel is the
+ * opt-in). A move never widens what you approved: a version that asks for more waits for `apps reconsent`.
+ */
+export default class AppsChannel extends AppsCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        installation: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        channel: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        expected: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/apps/channel.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const apps_command_1 = require("../../lib/apps-command");
+/**
+ * Which update channel an installation follows. The Store's channel (`store channel`), for an installed App:
+ * `manual` waits for you, `auto_minor` lets the platform move it to a later public version of the same
+ * interface major, and `beta` also lets it take versions their publisher released as beta (the channel is the
+ * opt-in). A move never widens what you approved: a version that asks for more waits for `apps reconsent`.
+ */
+class AppsChannel extends apps_command_1.AppsCommand {
+    static description = 'Choose how an installation is updated: manual (you move it), auto_minor (the platform moves it to a later public version of the same major) or beta (also versions released as beta). A version that asks for more than you approved still waits for your approval.';
+    static examples = [
+        '<%= config.bin %> apps channel appi_abc auto_minor',
+        '<%= config.bin %> apps channel appi_abc beta',
+        '<%= config.bin %> apps channel appi_abc manual',
+    ];
+    static args = {
+        installation: core_1.Args.string({
+            description: 'The installation id (appi_...)',
+            required: true,
+            ignoreStdin: true,
+        }),
+        channel: core_1.Args.string({
+            description: `One of ${data_provider_1.STORE_UPDATE_CHANNELS.join(', ')}`,
+            required: true,
+            ignoreStdin: true,
+            options: [...data_provider_1.STORE_UPDATE_CHANNELS],
+        }),
+    };
+    static flags = {
+        expected: core_1.Flags.string({
+            description: 'Change it only if it still follows this channel; otherwise nothing changes',
+            options: [...data_provider_1.STORE_UPDATE_CHANNELS],
+        }),
+        json: core_1.Flags.boolean({ description: 'Output the result as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AppsChannel);
+        try {
+            const result = await data_provider_1.dataService.setAppInstallationUpdatePolicy(args.installation, {
+                channel: args.channel,
+                ...(flags.expected === undefined ? {} : { expectedChannel: flags.expected }),
+            });
+            if (flags.json) {
+                this.printJsonResult(result);
+                return;
+            }
+            this.log(result.unchanged
+                ? `${result.installationId} already follows the ${result.updatePolicy} channel.`
+                : `${result.installationId} now follows the ${result.updatePolicy} channel.`);
+            if (result.updatePolicy === 'beta') {
+                this.log('Versions their publisher released as beta can now reach this installation. A version that asks for more than you approved waits for your approval (`' +
+                    `${this.config.bin} apps reconsent\`).`);
+            }
+        }
+        catch (error) {
+            this.failInstallation(error);
+        }
+    }
+}
+exports.default = AppsChannel;

package/dist/commands/apps/check-draft.d.ts

@@ -0,0 +1,12 @@
+import { AppsCommand } from '../../lib/apps-command';
+export default class AppsCheckDraft extends AppsCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        app: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/apps/check-draft.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const apps_command_1 = require("../../lib/apps-command");
+const appsCheck_1 = require("../../lib/appsCheck");
+class AppsCheckDraft extends apps_command_1.AppsCommand {
+    static description = "Run the platform's check on an app's draft in the cloud: the same findings `apps check` gives a local directory, plus the rule that app.json's id is the app's slug.";
+    static examples = ['<%= config.bin %> apps check-draft habit-tracker'];
+    static args = {
+        app: core_1.Args.string({
+            description: 'The app id (app_...) or its slug',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output { appId, rev, check } as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AppsCheckDraft);
+        const appId = await this.appId(args.app);
+        try {
+            const result = await data_provider_1.dataService.checkAppDraft(appId);
+            if (flags.json) {
+                this.printJsonResult(result, { ok: result.check.ok });
+            }
+            else {
+                this.log(`rev: ${result.rev}`);
+                this.log((0, appsCheck_1.formatAppCheckReport)(result.check).join('\n'));
+            }
+            if (!result.check.ok)
+                this.exit(1);
+        }
+        catch (error) {
+            this.failApps(error);
+        }
+    }
+}
+exports.default = AppsCheckDraft;

package/dist/commands/apps/check.d.ts

@@ -0,0 +1,42 @@
+import { Command } from '@oclif/core';
+/**
+ * `skrr apps check [dir]`: the offline self-check of an app's package, the one a harness runs in Bash
+ * before it writes the draft back.
+ *
+ * It extends `Command`, not `BaseCommand`, for the reason `widgets check` does: it reads a directory
+ * and prints, so it must work with no sign-in and no network (a sandboxed harness has neither), and it
+ * reaches no API, so there is no route for the CLI/API parity spec to hold it to. The check is the
+ * platform's own (`checkAppPackage`, which the server runs on a draft too), plus the frame heuristics of
+ * `skrr widgets check` on the entry files. Use `apps check-draft <app>` to run the server's check on a
+ * draft in the cloud.
+ *
+ * Exit codes: 0 no error finding; 1 at least one; 2 the directory could not be read. `--strict` also fails
+ * on a warning that is not merely low-key (an `info` finding about the store is not one); `--store` also
+ * fails when a finding would keep the app out of the store (a block, something it could not read under the
+ * default policy). A security finding is never an ERROR: drafts and private installs are not held back.
+ */
+export declare const APPS_CHECK_EXIT: {
+    readonly ok: 0;
+    readonly notOk: 1;
+    readonly unreadable: 2;
+};
+export default class AppsCheck extends Command {
+    static description: string;
+    static examples: string[];
+    static args: {
+        dir: import("@oclif/core/lib/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        strict: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        store: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        id: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    /**
+     * `--json` output. This command extends `Command` and not `BaseCommand` (it is offline), so it cannot call
+     * `printJsonResult`; it says `ok` the same way (`withOk`: the report's own `ok` is kept, a failure document
+     * already carries `ok: false`).
+     */
+    private printJson;
+    run(): Promise<void>;
+}

package/dist/commands/apps/check.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APPS_CHECK_EXIT = void 0;
+const core_1 = require("@oclif/core");
+const appsCheck_1 = require("../../lib/appsCheck");
+const appsFs_1 = require("../../lib/appsFs");
+const json_output_1 = require("../../lib/json-output");
+/**
+ * `skrr apps check [dir]`: the offline self-check of an app's package, the one a harness runs in Bash
+ * before it writes the draft back.
+ *
+ * It extends `Command`, not `BaseCommand`, for the reason `widgets check` does: it reads a directory
+ * and prints, so it must work with no sign-in and no network (a sandboxed harness has neither), and it
+ * reaches no API, so there is no route for the CLI/API parity spec to hold it to. The check is the
+ * platform's own (`checkAppPackage`, which the server runs on a draft too), plus the frame heuristics of
+ * `skrr widgets check` on the entry files. Use `apps check-draft <app>` to run the server's check on a
+ * draft in the cloud.
+ *
+ * Exit codes: 0 no error finding; 1 at least one; 2 the directory could not be read. `--strict` also fails
+ * on a warning that is not merely low-key (an `info` finding about the store is not one); `--store` also
+ * fails when a finding would keep the app out of the store (a block, something it could not read under the
+ * default policy). A security finding is never an ERROR: drafts and private installs are not held back.
+ */
+exports.APPS_CHECK_EXIT = { ok: 0, notOk: 1, unreadable: 2 };
+class AppsCheck extends core_1.Command {
+    static description = "Check an app's package in a local directory, offline: the manifest, the files it names, sizes, JavaScript syntax, what the frame would refuse, and the capability calls the script makes against the ones app.json declares. Needs no sign-in. A symbolic link in the directory is refused, never followed.";
+    static examples = [
+        '<%= config.bin %> apps check',
+        '<%= config.bin %> apps check ./habit-tracker --json',
+    ];
+    static args = {
+        dir: core_1.Args.string({
+            description: 'The package directory (default: the current one)',
+            required: false,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output the report as JSON' }),
+        strict: core_1.Flags.boolean({
+            description: 'Also fail (exit 1) on warnings (a low-key "info" finding about the store is not one)',
+            default: false,
+        }),
+        store: core_1.Flags.boolean({
+            description: 'Also fail (exit 1) when a finding would keep the app out of the store: a block, or something the check could not read that the policy holds back',
+            default: false,
+        }),
+        id: core_1.Flags.string({ description: "The app's slug: the manifest id must be it" }),
+    };
+    /**
+     * `--json` output. This command extends `Command` and not `BaseCommand` (it is offline), so it cannot call
+     * `printJsonResult`; it says `ok` the same way (`withOk`: the report's own `ok` is kept, a failure document
+     * already carries `ok: false`).
+     */
+    printJson(value) {
+        const text = JSON.stringify((0, json_output_1.withOk)(value), null, 2);
+        this.log(text);
+    }
+    async run() {
+        const { args, flags } = await this.parse(AppsCheck);
+        let pkg;
+        try {
+            pkg = (0, appsFs_1.readPackageDir)(args.dir ?? '.');
+        }
+        catch (error) {
+            const message = error instanceof appsFs_1.AppsFsError ? error.message : String(error?.message ?? error);
+            const code = error instanceof appsFs_1.AppsFsError ? error.code : 'unreadable';
+            if (flags.json) {
+                this.printJson({ ok: false, error: { code, message } });
+            }
+            else {
+                process.stderr.write(`error: ${message}\n`);
+            }
+            this.exit(exports.APPS_CHECK_EXIT.unreadable);
+        }
+        const report = (0, appsCheck_1.checkLocalFiles)(pkg.files, flags.id === undefined ? {} : { expectedId: flags.id });
+        if (flags.json) {
+            this.printJson({ ...report, root: pkg.root, skipped: pkg.skipped });
+        }
+        else {
+            this.log((0, appsCheck_1.formatAppCheckReport)(report).join('\n'));
+            if (pkg.skipped.length > 0)
+                this.log(`left out: ${pkg.skipped.join(', ')}`);
+        }
+        const warnings = report.issues.filter((i) => i.severity === 'warn' && i.tier !== 'info').length;
+        const keptOut = flags.store && report.security !== undefined && !report.security.store.admitted;
+        const failed = !report.ok || (flags.strict && warnings > 0) || keptOut;
+        this.exit(failed ? exports.APPS_CHECK_EXIT.notOk : exports.APPS_CHECK_EXIT.ok);
+    }
+}
+exports.default = AppsCheck;

package/dist/commands/apps/create.d.ts

@@ -0,0 +1,15 @@
+import { AppsCommand } from '../../lib/apps-command';
+export default class AppsCreate extends AppsCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        slug: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        name: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        from: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/apps/create.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const apps_command_1 = require("../../lib/apps-command");
+const appsFs_1 = require("../../lib/appsFs");
+const appsCheck_1 = require("../../lib/appsCheck");
+class AppsCreate extends apps_command_1.AppsCommand {
+    static description = 'Create an app and its draft. With no --from you get a starter that already passes the check; with --from <dir> the draft starts as that directory (read without following symbolic links).';
+    static examples = [
+        '<%= config.bin %> apps create habit-tracker --name "Habit Tracker"',
+        '<%= config.bin %> apps create habit-tracker --from ./habit-tracker',
+    ];
+    static args = {
+        slug: core_1.Args.string({
+            description: "The app's slug: lower-case words joined by single hyphens. It is the id in app.json.",
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output { app, draft, check } as JSON' }),
+        name: core_1.Flags.string({ description: 'Shown name for the starter manifest' }),
+        description: core_1.Flags.string({ description: 'One-sentence description for the starter manifest' }),
+        from: core_1.Flags.string({
+            description: 'Start from the files of this directory instead of the starter',
+        }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AppsCreate);
+        try {
+            const files = flags.from
+                ? (0, appsFs_1.readPackageDir)(flags.from).files.map((file) => ({
+                    path: file.path,
+                    content: file.content,
+                }))
+                : undefined;
+            const result = await data_provider_1.dataService.createApp({
+                slug: args.slug,
+                ...(flags.name === undefined ? {} : { name: flags.name }),
+                ...(flags.description === undefined ? {} : { description: flags.description }),
+                ...(files === undefined ? {} : { files }),
+            });
+            if (flags.json) {
+                this.printJsonResult(result);
+                return;
+            }
+            this.log(`created ${result.app.id} (${result.app.slug})`);
+            this.log(`rev: ${result.draft.rev}, files: ${result.draft.files.count}`);
+            for (const line of (0, appsCheck_1.formatAppCheckReport)(result.check))
+                this.log(line);
+        }
+        catch (error) {
+            this.failApps(error);
+        }
+    }
+}
+exports.default = AppsCreate;

package/dist/commands/apps/data/put.d.ts

@@ -0,0 +1,18 @@
+import { AppsCommand } from '../../../lib/apps-command';
+export default class AppsDataPut extends AppsCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        installation: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        collection: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        doc: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'from-file': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        stdin: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'expected-rev': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}