@skrr-ai/cli 0.1.115 → 0.1.117

package/dist/base-command.d.ts

@@ -477,6 +477,12 @@ export interface ParsedGlobals {
     workspace?: string;
 }
 export declare function parseGlobalFlags(argv: readonly string[]): ParsedGlobals;
+/**
+ * The typed refusal code an API error body carries, wherever this codebase has
+ * put it: canonical `code` (or `errorType`) first, then the legacy
+ * code-spelled-in-`error` shape.
+ */
+export declare function refusalCodeOf(body: Record<string, unknown> | null | undefined): string | undefined;
 /**
  * The typed `code` and message an API refusal carried, read the way
  * `handleApiError` reads them, for a command that answers one code itself
@@ -621,6 +627,21 @@ export declare function errorBodyMessage(body: unknown): string | undefined;
  * from there, so no caller reads two places. A lifted `details.message` cannot replace it.
  */
 export declare function envelopeDetails(body: Record<string, unknown> | null | undefined): unknown;
+type UnsupportedFlagRemedyTarget = {
+    command: string;
+    flags: readonly string[];
+};
+type UnsupportedFlagRemedy = {
+    fix: string;
+    targets: readonly UnsupportedFlagRemedyTarget[];
+};
+/**
+ * Specific corrections for habitual flags that look plausible but do not belong
+ * to the command that received them. Keep the replacement command and every
+ * flag it names explicit: the spec checks this table against the shipped
+ * manifest, so a useful refusal cannot slowly point at a removed form.
+ */
+export declare const UNSUPPORTED_FLAG_REMEDIES: Readonly<Record<string, Readonly<Record<string, UnsupportedFlagRemedy>>>>;
 /**
  * The hint for a `Nonexistent flags:` refusal, or null. Two cases:
  *  - a flag retired from THIS command, which this command does not define again: where it went;

package/dist/base-command.js

@@ -1,8 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Flags = exports.BaseCommand = exports.resolveProfileFromArgv = void 0;
+exports.Flags = exports.UNSUPPORTED_FLAG_REMEDIES = exports.BaseCommand = exports.resolveProfileFromArgv = void 0;
 exports.assigneePayloadNeedsResolution = assigneePayloadNeedsResolution;
 exports.parseGlobalFlags = parseGlobalFlags;
+exports.refusalCodeOf = refusalCodeOf;
 exports.apiRefusal = apiRefusal;
 exports.withSubject = withSubject;
 exports.describeHarnessUnavailable = describeHarnessUnavailable;
@@ -31,6 +32,7 @@ const json_mode_1 = require("./lib/json-mode");
 const failed_lookup_1 = require("./lib/failed-lookup");
 const internal_id_1 = require("./lib/internal-id");
 const http_error_1 = require("./lib/http-error");
+const guide_pointer_1 = require("./lib/guide-pointer");
 // Re-exported from its home in `lib/keychain`, beside the other profile
 // functions. It lived here while `init()` was its only caller; a lib module
 // needing it would otherwise have to import the command base class, and with
@@ -209,8 +211,11 @@ class BaseCommand extends core_1.Command {
     /** Decorate an object when a command owns its own JSON/signal serializer. */
     jsonOperationResult(value, options = {}) {
         return (0, json_output_1.withCliOperation)(value, {
-            command: this.id ?? '', mode: 'execute', outcome: 'succeeded',
-            ...this.jsonOperationContext, ...options,
+            command: this.id ?? '',
+            mode: 'execute',
+            outcome: 'succeeded',
+            ...this.jsonOperationContext,
+            ...options,
         });
     }
     printJsonOperation(value, options = {}) {
@@ -644,22 +649,24 @@ class BaseCommand extends core_1.Command {
         let existingTask = options.existingTask;
         // An ordinary UUID patch must keep its old request count. Only a readable
         // scoped reference needs a current Task read to discover its Space.
-        const needsScope = ['projectId', 'goalId'].some(field => {
+        const needsScope = ['projectId', 'goalId'].some((field) => {
             const value = payload[field];
-            return typeof value === 'string' && value.trim() &&
-                !/^[\da-f-]{36}$/i.test(value) && !/^[\da-f]{24}$/i.test(value);
+            return (typeof value === 'string' &&
+                value.trim() &&
+                !/^[\da-f-]{36}$/i.test(value) &&
+                !/^[\da-f]{24}$/i.test(value));
         });
         try {
             if (needsScope && !payload.spaceId && !existingTask && options.taskId) {
                 const key = `task:${options.taskId}`;
                 if (!cache.has(key))
                     cache.set(key, data_provider_1.dataService.getTask(options.taskId, { enrich: false }));
-                existingTask = await cache.get(key);
+                existingTask = (await cache.get(key));
             }
             await (0, task_resource_references_1.resolveTaskResourceReferences)(payload, {
                 existingTask,
                 cache,
-                resolveSpace: value => this.resolveSpaceReference(value),
+                resolveSpace: (value) => this.resolveSpaceReference(value),
             });
         }
         catch (error) {
@@ -713,7 +720,9 @@ class BaseCommand extends core_1.Command {
             if (!Array.isArray(envelope?.data) || envelope?.has_more === true) {
                 this.failWithCliError({
                     message: 'The Space lookup is incomplete or unavailable, so a unique match cannot be established. Use a canonical Space id, or narrow the search with spaces list --q <name>.',
-                    code: 'SPACE_REF_LOOKUP_INCOMPLETE', exit: 2, retryable: false,
+                    code: 'SPACE_REF_LOOKUP_INCOMPLETE',
+                    exit: 2,
+                    retryable: false,
                 });
             }
             const rows = envelope.data;
@@ -894,7 +903,9 @@ class BaseCommand extends core_1.Command {
         if (!Array.isArray(envelope?.data) || envelope?.has_more === true) {
             this.failWithCliError({
                 message: 'The Task-title lookup is incomplete or unavailable, so a unique match cannot be established. Use a Task id/ref from tasks list --q <title>.',
-                code: 'TASK_REF_LOOKUP_INCOMPLETE', exit: 2, retryable: false,
+                code: 'TASK_REF_LOOKUP_INCOMPLETE',
+                exit: 2,
+                retryable: false,
             });
         }
         const rows = envelope.data;
@@ -1270,6 +1281,10 @@ class BaseCommand extends core_1.Command {
         if (retiredHint) {
             err.message = `${err.message}\n\n${retiredHint}`;
         }
+        const unsupportedFlagHint = unsupportedFlagRemedyForMessage(err.message || '', this.id);
+        if (unsupportedFlagHint && !err.message.includes(unsupportedFlagHint.fix)) {
+            err.message = `${err.message}\n\n${unsupportedFlagHint.fix}`;
+        }
         // Sibling domains spell one lifecycle differently (`in_progress` for a
         // space, `active` for a goal), and oclif's enum refusal named neither the
         // difference nor the value to use (OSK-9735).
@@ -1287,13 +1302,19 @@ class BaseCommand extends core_1.Command {
         const httpBody = (0, http_error_1.httpBodyOf)(err);
         const httpStatus = (0, http_error_1.httpStatusOf)(err);
         if (httpBody && httpStatus !== undefined && httpStatus >= 400) {
-            const bodyCode = stringProp(httpBody, 'code') || stringProp(httpBody, 'errorType');
+            const bodyCode = refusalCodeOf(httpBody);
             const bodyMessage = stringProp(httpBody, 'message') || stringProp(httpBody, 'error');
             err.code ??= bodyCode || `HTTP_${httpStatus}`;
             if (bodyMessage && !err.message.includes(bodyMessage)) {
                 err.message = `${bodyMessage} — ${err.message}`;
             }
         }
+        // A refusal a guide section explains points the reader at it (OSK-17977):
+        // text gets a `Guide:` line as the message's last line, --json a `guide`
+        // field. Resolved offline from the bundled registry — never a request on
+        // an already-failing path — and absent for a code nothing explains.
+        const code = err.code ?? parseCliErrorCode(err);
+        const guide = (0, guide_pointer_1.agentGuidePointerFor)(code);
         if (this.wantsJsonOutput()) {
             const exit = err.exitCode ?? err.oclif?.exit ?? 1;
             process.exitCode = exit;
@@ -1301,17 +1322,23 @@ class BaseCommand extends core_1.Command {
             this.log(JSON.stringify(this.jsonOperationError({
                 ok: false,
                 error: {
-                    code: err.code ?? parseCliErrorCode(err),
+                    code,
                     message: err.message || String(err),
                     retryable: err.retryable ?? false,
                     command: this.id ?? null,
                     server: this.cliConfig?.baseURL ?? null,
                     ...parseErrorRemedy(err, this.id, this.config?.bin),
+                    ...(guide ? { guide } : {}),
                     ...(details ? { details } : {}),
                 },
             }), null, 2));
             return;
         }
+        if (guide) {
+            const line = (0, guide_pointer_1.agentGuidePointerLine)(guide);
+            if (!err.message.includes(line))
+                err.message = `${err.message}\n\n${line}`;
+        }
         return super.catch(err);
     }
     error(input, options = {}) {
@@ -1381,7 +1408,7 @@ class BaseCommand extends core_1.Command {
             this.lastApiRequestId = e.requestId;
             this.lastRetryAfterMs = e.retryAfterMs;
             const body = parseErrorBody(e.body);
-            const bodyCode = stringProp(body, 'code') || stringProp(body, 'errorType');
+            const bodyCode = refusalCodeOf(body);
             // A body path the person never typed is read back as the flag that wrote it (OSK-15313).
             // The server answers every error with `message` (OSK-16986); `errorBodyMessage` keeps the
             // older `error` string and the nested `/v1` shape as fallbacks for a server without it.
@@ -1978,6 +2005,9 @@ class BaseCommand extends core_1.Command {
     /** E6: the server's `Retry-After` for the refused call, when it was a 429. */
     lastRetryAfterMs;
     writeJsonCliError({ message, code, status, exit, retryable, details, requestId, }) {
+        // The guide section that explains this code, when one does — the `guide`
+        // half of the `Guide:` line the text path appends.
+        const guide = (0, guide_pointer_1.agentGuidePointerFor)(code);
         this.log(JSON.stringify(this.jsonOperationError({
             ok: false,
             error: {
@@ -1987,6 +2017,7 @@ class BaseCommand extends core_1.Command {
                 retryable,
                 command: this.id ?? null,
                 server: this.cliConfig?.baseURL ?? null,
+                ...(guide ? { guide } : {}),
                 // The id the server logged this refusal against. Without it, a
                 // refused call can only be matched to a log line by guessing from
                 // timestamps — which, with several clients on one account,
@@ -2012,7 +2043,11 @@ class BaseCommand extends core_1.Command {
             process.stderr.write(`${line}\n`);
     }
     wantsJsonOutput() {
-        return (0, json_mode_1.wantsJsonFromArgv)(this.argv);
+        // `this.argv` is only populated by oclif's parse path; a command run
+        // programmatically (an Object.create'd harness, an embedded child) has
+        // none — and this is called inside failWithCliError, where crashing turns
+        // a graceful refusal into a TypeError that masks the real error.
+        return (0, json_mode_1.wantsJsonFromArgv)(this.argv ?? []);
     }
 }
 exports.BaseCommand = BaseCommand;
@@ -2092,6 +2127,27 @@ function stringProp(obj, key) {
     const value = obj?.[key];
     return typeof value === 'string' && value.trim() ? value.trim() : undefined;
 }
+/**
+ * Lower_snake is how the scoped-Memory REST surface (and older routes like it)
+ * spelled a refusal code in `error`, where the canonical envelope expects human
+ * text (OSK-18250). A released server still answers that way, so a code-shaped
+ * `error` is read as the code — reported in the upper-case spelling the code
+ * vocabulary and `parseMemoryApiError` already use. Anything else in `error`
+ * (a sentence, a bare word) is text and stays out of `code`.
+ */
+const LEGACY_ERROR_FIELD_CODE = /^[a-z][a-z0-9]*(?:_[a-z0-9]+)+$/;
+/**
+ * The typed refusal code an API error body carries, wherever this codebase has
+ * put it: canonical `code` (or `errorType`) first, then the legacy
+ * code-spelled-in-`error` shape.
+ */
+function refusalCodeOf(body) {
+    const direct = stringProp(body ?? null, 'code') || stringProp(body ?? null, 'errorType');
+    if (direct)
+        return direct;
+    const legacy = stringProp(body ?? null, 'error');
+    return legacy && LEGACY_ERROR_FIELD_CODE.test(legacy) ? legacy.toUpperCase() : undefined;
+}
 /**
  * The typed `code` and message an API refusal carried, read the way
  * `handleApiError` reads them, for a command that answers one code itself
@@ -2102,7 +2158,7 @@ function apiRefusal(err) {
         return {};
     const body = parseErrorBody(err.body);
     return {
-        code: stringProp(body, 'code') || stringProp(body, 'errorType'),
+        code: refusalCodeOf(body),
         message: errorBodyMessage(body),
         ...(body ? { body } : {}),
     };
@@ -2419,7 +2475,7 @@ function describeDaemonScopedCredential(bin, scope = 'daemon', source) {
 function isTypedServerRefusal(body) {
     if (!body || typeof body !== 'object')
         return false;
-    const code = stringProp(body, 'code') || stringProp(body, 'errorType');
+    const code = refusalCodeOf(body);
     if (!code)
         return false;
     return (typeof body.cause === 'string' || typeof body.remedy === 'string' || body.retryable === false);
@@ -2442,7 +2498,7 @@ function isTypedServerRefusal(body) {
 function isApplicationCodedUnavailable(status, body) {
     if (status !== 502 && status !== 503 && status !== 504)
         return false;
-    return Boolean(stringProp(body, 'code') || stringProp(body, 'errorType'));
+    return Boolean(refusalCodeOf(body));
 }
 /**
  * The sentence `redactServerErrorResponses` substitutes for a 5xx message in
@@ -2457,7 +2513,7 @@ function isRetryableFailure(status, body) {
     const declared = body?.retryable;
     if (typeof declared === 'boolean')
         return declared;
-    const code = stringProp(body, 'code') || stringProp(body, 'errorType');
+    const code = refusalCodeOf(body);
     if (code && TERMINAL_ERROR_CODES.has(code))
         return false;
     return status === 408 || status === 425 || status === 429 || !!(status && status >= 500);
@@ -2587,6 +2643,41 @@ function envelopeDetails(body) {
  * "--outcome is now --summary" (OSK-16494). A rename is a fact about one command.
  */
 const RETIRED_FLAG_COMMANDS = new Set(['tasks:complete', 'tasks:result:submit']);
+/**
+ * Specific corrections for habitual flags that look plausible but do not belong
+ * to the command that received them. Keep the replacement command and every
+ * flag it names explicit: the spec checks this table against the shipped
+ * manifest, so a useful refusal cannot slowly point at a removed form.
+ */
+exports.UNSUPPORTED_FLAG_REMEDIES = {
+    'spaces:create': {
+        agent: {
+            fix: 'A Space is created for the authenticated caller. Add an Agent after creation with ' +
+                '`skrr spaces members add <space-id> --agent <agent-id>`.',
+            targets: [{ command: 'spaces:members:add', flags: ['agent'] }],
+        },
+    },
+    'tasks:create': {
+        agent: {
+            fix: 'Assign the Task with `--assignee-agent <agent-id>`; `--agent` does not set Task assignees.',
+            targets: [{ command: 'tasks:create', flags: ['assignee-agent'] }],
+        },
+    },
+    'followups:checkin': {
+        check: {
+            fix: 'A check-in is only a timed return. To check a condition, use ' +
+                '`skrr followups watch --check <check> --success <condition> --abort <condition> --wait <kind>`.',
+            targets: [{ command: 'followups:watch', flags: ['check', 'success', 'abort', 'wait'] }],
+        },
+    },
+};
+function unsupportedFlagRemedy(commandId, flag) {
+    return commandId ? exports.UNSUPPORTED_FLAG_REMEDIES[commandId]?.[flag] : undefined;
+}
+function unsupportedFlagRemedyForMessage(message, commandId) {
+    const match = /Nonexistent flag[s]?:?\s*(-{1,2}[\w-]+)/i.exec(message);
+    return match ? unsupportedFlagRemedy(commandId, match[1].replace(/^-+/, '')) : undefined;
+}
 /**
  * The hint for a `Nonexistent flags:` refusal, or null. Two cases:
  *  - a flag retired from THIS command, which this command does not define again: where it went;
@@ -2638,6 +2729,15 @@ function parseErrorRemedy(err, commandId, bin = 'skrr') {
         };
     }
     const nonexistent = /Nonexistent flag[s]?:?\s*(-{1,2}[\w-]+)(?:[ =]([^\s,][^,\n]*))?/i.exec(message);
+    const unsupportedFlagHint = nonexistent
+        ? unsupportedFlagRemedy(commandId, nonexistent[1].replace(/^-+/, ''))
+        : undefined;
+    if (unsupportedFlagHint) {
+        return {
+            flag: nonexistent[1].replace(/^-+/, ''),
+            fix: unsupportedFlagHint.fix,
+        };
+    }
     if (nonexistent?.[2]) {
         // `"--outcome failed"` arrived as ONE argument: the flag may well exist, so
         // "remove it" would be wrong advice. Same case retiredFlagHint explains in text.

package/dist/commands/actions/browse.d.ts

@@ -3,12 +3,12 @@ export default class ActionsBrowse extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        category: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        q: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        cursor: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        sort: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        category: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        q: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        limit: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cursor: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        sort: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/actions/create.d.ts

@@ -3,18 +3,18 @@ export default class ActionsCreate extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        'from-json': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        name: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'display-name': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        kind: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        prompt: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'builtin-type': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'config-template': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        category: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        price: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'from-json': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        name: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'display-name': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        kind: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prompt: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'builtin-type': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'config-template': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        category: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        price: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/actions/delete.d.ts

@@ -3,11 +3,11 @@ export default class ActionsDelete extends BaseCommand {
     static description: string;
     static examples: string[];
     static args: {
-        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
-        yes: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/actions/install.d.ts

@@ -3,11 +3,12 @@ export default class ActionsInstall extends BaseCommand {
     static description: string;
     static examples: string[];
     static args: {
-        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
-        agent: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        agent: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/actions/install.js

@@ -3,11 +3,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
+const prompt_1 = require("../../lib/prompt");
 const agent_actions_1 = require("../../lib/agent-actions");
 class ActionsInstall extends base_command_1.BaseCommand {
-    static description = 'Install an action listing into an agent';
+    static description = 'Install an action listing into an agent. A paid listing shows its price and asks you to confirm first.';
     static examples = [
         '<%= config.bin %> actions install <listing-id> --agent <agent-id>',
+        '<%= config.bin %> actions install <listing-id> --agent <agent-id> --yes',
         '<%= config.bin %> actions install <listing-id> --agent <agent-id> --json',
     ];
     static args = {
@@ -16,15 +18,58 @@ class ActionsInstall extends base_command_1.BaseCommand {
     static flags = {
         agent: core_1.Flags.string({ description: 'Target agent ID', required: true }),
         json: core_1.Flags.boolean({ description: 'Output install response as JSON' }),
+        yes: core_1.Flags.boolean({
+            char: 'y',
+            description: 'Confirm a paid install without prompting. The price is still printed.',
+        }),
     };
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(ActionsInstall);
+        // What installing would charge NOW, read before the install sends it.
+        // A paid listing shows its price and asks first; the install then pins
+        // what was shown, so a listing whose price moved in between is refused
+        // rather than charged (OSK-18042 — same convention as `store install`,
+        // OSK-12240).
+        let listing;
+        try {
+            listing = await data_provider_1.dataService.getActionListing(args.id);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        let charge = Number(listing.price) || 0;
+        if (charge > 0 && String(listing.author) === (await this.resolveCurrentUserId())) {
+            // Installing a listing you published is never charged — pin what the
+            // server would actually charge, not the sticker price.
+            charge = 0;
+        }
+        if (charge > 0) {
+            const name = listing.displayName || listing.name || args.id;
+            // Printed before any prompt and even with --yes, so a scripted purchase
+            // still leaves the price it agreed to in its own output.
+            this.logToStderr(`${name} is a paid action.`);
+            this.logToStderr(`  Price: ${(0, data_provider_1.formatStoreAcquisitionPrice)(charge)} USD`);
+            if (listing.offerVersionId) {
+                this.logToStderr(`  Offer: ${listing.offerVersionId}`);
+            }
+            const confirmed = await (0, prompt_1.confirmDestructive)(`Buy ${name} for ${(0, data_provider_1.formatStoreAcquisitionPrice)(charge)}?`, flags.yes).catch((err) => this.error(err.message, { exit: err.exit ?? 1 }));
+            if (!confirmed) {
+                this.log('Cancelled. Nothing was bought.');
+                return;
+            }
+        }
         let response;
         try {
             response = await data_provider_1.dataService.installActionListing({
                 listingId: args.id,
                 targetAgentId: flags.agent,
+                // Pin what the person was shown: the charge always, the offer when
+                // there is one to charge under.
+                expectedPrice: charge,
+                ...(charge > 0 && listing.offerVersionId
+                    ? { expectedOfferVersionId: listing.offerVersionId }
+                    : {}),
             });
         }
         catch (err) {

package/dist/commands/actions/list.d.ts

@@ -3,12 +3,12 @@ export default class ActionsList extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        category: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        q: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        cursor: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        sort: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        category: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        q: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        limit: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cursor: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        sort: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/actions/publish.d.ts

@@ -3,12 +3,12 @@ export default class ActionsPublish extends BaseCommand {
     static description: string;
     static examples: string[];
     static args: {
-        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        unpublish: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        price: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        unpublish: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        price: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/actions/rate.d.ts

@@ -3,11 +3,11 @@ export default class ActionsRate extends BaseCommand {
     static description: string;
     static examples: string[];
     static args: {
-        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
-        rating: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        rating: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/actions/show.d.ts

@@ -3,10 +3,10 @@ export default class ActionsShow extends BaseCommand {
     static description: string;
     static examples: string[];
     static args: {
-        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/actions/update.d.ts

@@ -3,19 +3,19 @@ export default class ActionsUpdate extends BaseCommand {
     static description: string;
     static examples: string[];
     static args: {
-        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        'from-json': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        name: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'display-name': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        prompt: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'builtin-type': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'config-template': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        category: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        price: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'from-json': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        name: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'display-name': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        prompt: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'builtin-type': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'config-template': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        category: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        price: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/agenda/plan.d.ts

@@ -16,12 +16,12 @@ export default class AgendaPlan extends BaseCommand {
     static description: string;
     static examples: string[];
     static args: {
-        agentId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        agentId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        'space-id': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        timezone: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'space-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        timezone: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }