@skrr-ai/cli 0.1.83 → 0.1.85

package/README.md

@@ -404,7 +404,7 @@ PKCE / device-code flows. (The recovery-code path is unaffected.)
 
 ### Auto-broker on first use
 
-Every `sky` command (except `login`, `logout`, `pair`,
+Every `sky` command (except `login`, `logout`,
 `generate-recovery-code`) runs the daemon-broker handoff transparently
 when no token is in the keychain. So:
 
@@ -424,7 +424,7 @@ There is no opt-in flag. The mechanism is the long-term default.
   controls auth out-of-band — CI runners, ephemeral containers)
 - `OVERSKY_SKIP_DAEMON_BROKER=1` (explicit escape hatch for debugging
   or testing the PKCE flow itself)
-- The command is one of `login`, `logout`, `pair`,
+- The command is one of `login`, `logout`,
   `generate-recovery-code` — these manage their own auth lifecycle
 
 **Failure handling.** If the broker can't reach the daemon, can't read

package/dist/base-command.js

@@ -355,9 +355,9 @@ class BaseCommand extends core_1.Command {
             flagToken: parsed.token,
             bareMode: this.bareMode,
             // Auth recovery/cleanup must stay reachable even when the persisted
-            // envelope cannot initialize. Login/pair replace local authority;
+            // envelope cannot initialize. Login replaces local authority;
             // logout must always be able to erase it.
-            allowUnreadableStoredCredential: this.id === 'login' || this.id === 'logout' || this.id === 'pair',
+            allowUnreadableStoredCredential: this.id === 'login' || this.id === 'logout',
         });
         let ignoredStoredCredential = null;
         if (!this.resolvedCredential.token && !this.bareMode && !parsed.token && !harnessContext) {

package/dist/commands/agents/chat.js

@@ -265,8 +265,13 @@ class AgentsChat extends base_command_1.BaseCommand {
                 'so folding both doubles the answer: pick ONE lane. Inside a `session.output`, ' +
                 '`envelopes[].__seq` is the dedupe key and the ordering key — the same envelope is ' +
                 'delivered by more than one room, and a re-delivery repeats its `__seq`. A ' +
-                '`stream.gap` event means envelopes in that seq range never arrived and the streamed ' +
-                'text is short; `run.result` and the persisted message remain authoritative. Tool ' +
+                '`stream.gap` event means envelopes in that seq range never arrived and replay from ' +
+                'the server could not recover them; a hole replay fills, or one that held only ' +
+                'invisible envelopes (`service`, `status`), emits nothing. When the persisted message ' +
+                'could be checked, `verified` is true and `missing` names what the stream is short of ' +
+                '(`text`, `tool`), and the event arrives just before the terminal event; `verified: ' +
+                'false` means it could not be checked and the text MAY be short. `run.result` and the ' +
+                'persisted message remain authoritative. Tool ' +
                 'calls arrive as `tool.started` / `tool.completed`, once per `toolUseId`, on cloud ' +
                 'and local-harness runs alike. A `session.notice` with `notice: ' +
                 '"harness-session-reset"` means the local harness could not resume its previous ' +
@@ -376,7 +381,9 @@ class AgentsChat extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(AgentsChat);
         if (flags.quick && flags.task)
-            this.error('--task requires a runtime session; remove --quick to bind this turn.', { exit: 2 });
+            this.error('--task requires a runtime session; remove --quick to bind this turn.', {
+                exit: 2,
+            });
         if (flags.json && !flags['no-stream'] && !flags.quick) {
             this.error('--json is only supported with --no-stream or --quick; use --jsonl for streaming.', {
                 exit: 2,

package/dist/commands/agents/endpoint/connect.d.ts

@@ -0,0 +1,24 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * Mint a key that can call this agent's hosted endpoint — and nothing else —
+ * and print the URL plus the line that registers it with an MCP client.
+ *
+ * The key carries ONLY `agents:invoke`: it cannot edit an agent, list sessions,
+ * or write environments. It belongs to a Space you own, and turns run as you,
+ * billed to the payer shown. The secret is shown once.
+ */
+export default class AgentsEndpointConnect extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        space: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        name: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        env: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'expires-at': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/endpoint/connect.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const agent_endpoints_1 = require("../../../lib/agent-endpoints");
+const managed_agent_keys_1 = require("../../../lib/managed-agent-keys");
+/**
+ * Mint a key that can call this agent's hosted endpoint — and nothing else —
+ * and print the URL plus the line that registers it with an MCP client.
+ *
+ * The key carries ONLY `agents:invoke`: it cannot edit an agent, list sessions,
+ * or write environments. It belongs to a Space you own, and turns run as you,
+ * billed to the payer shown. The secret is shown once.
+ */
+class AgentsEndpointConnect extends base_command_1.BaseCommand {
+    static description = "Mint an agents:invoke key for an agent's hosted MCP endpoint and print how to connect a client (secret shown once)";
+    static examples = [
+        '<%= config.bin %> agents endpoint connect <agent-id> --space <space-id>',
+        '<%= config.bin %> agents endpoint connect <agent-id> --space <space-id> --json',
+    ];
+    static args = {
+        id: core_1.Args.string({
+            description: 'Agent ID (for a Store agent, your installed copy)',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        space: core_1.Flags.string({
+            description: 'A Space you own; the key is held by it and turns run in its workspace',
+            required: true,
+        }),
+        name: core_1.Flags.string({ description: 'Label for the key (default: mcp <agent-id>)' }),
+        env: core_1.Flags.string({ description: 'Key environment', options: ['live', 'test'] }),
+        'expires-at': core_1.Flags.string({ description: 'ISO 8601 expiry; must be in the future' }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AgentsEndpointConnect);
+        let endpoint;
+        try {
+            endpoint = await (0, agent_endpoints_1.getAgentEndpoint)(args.id);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        if (!endpoint)
+            return;
+        if (!endpoint.url || endpoint.kind === 'not_eligible') {
+            this.error(endpoint.blocked_by?.message || 'This agent has no hosted endpoint.', { exit: 1 });
+        }
+        let minted;
+        try {
+            minted = await (0, managed_agent_keys_1.createManagedAgentKey)({
+                spaceId: flags.space,
+                name: flags.name || `mcp ${args.id}`.slice(0, 200),
+                env: flags.env,
+                scopes: [agent_endpoints_1.AGENT_ENDPOINT_SCOPE],
+                expiresAt: flags['expires-at'],
+            });
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        if (!minted)
+            return;
+        if (flags.json) {
+            this.log(JSON.stringify({ endpoint, key: minted, client_command: (0, agent_endpoints_1.mcpClientCommand)(endpoint, minted.secret) }, null, 2));
+            return;
+        }
+        (0, agent_endpoints_1.printAgentEndpoint)(this, endpoint);
+        this.log('');
+        this.log(`Key       ${minted.id} (scope ${agent_endpoints_1.AGENT_ENDPOINT_SCOPE} only)`);
+        this.log(`Secret    ${minted.secret}`);
+        this.log(minted.secret_warning ||
+            'This is the only time the secret will be displayed. Store it securely.');
+        this.log('');
+        this.log('Register it with Claude Code:');
+        this.log(`  ${(0, agent_endpoints_1.mcpClientCommand)(endpoint, minted.secret)}`);
+        if (!endpoint.enabled) {
+            this.log('');
+            this.log(`The endpoint is OFF. Turn it on with: skrr agents endpoint enable ${args.id}`);
+        }
+        else if (endpoint.blocked_by) {
+            this.log('');
+            this.log(`Turns are refused right now: ${endpoint.blocked_by.code} — ${endpoint.blocked_by.message}`);
+        }
+        this.log('');
+        this.log('Replies come from the agent’s configuration: treat them as untrusted tool output.');
+    }
+}
+exports.default = AgentsEndpointConnect;

package/dist/commands/agents/endpoint/disable.d.ts

@@ -0,0 +1,18 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * Turn OFF the hosted MCP endpoint of a Store agent you installed. Takes effect
+ * at the next turn: a session already created is refused with
+ * `endpoint_not_enabled`; its history stays readable. Keys are untouched —
+ * revoke them with `skrr api-keys revoke` if they should stop working anywhere.
+ */
+export default class AgentsEndpointDisable extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/endpoint/disable.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const agent_endpoints_1 = require("../../../lib/agent-endpoints");
+/**
+ * Turn OFF the hosted MCP endpoint of a Store agent you installed. Takes effect
+ * at the next turn: a session already created is refused with
+ * `endpoint_not_enabled`; its history stays readable. Keys are untouched —
+ * revoke them with `skrr api-keys revoke` if they should stop working anywhere.
+ */
+class AgentsEndpointDisable extends base_command_1.BaseCommand {
+    static description = 'Turn off the hosted MCP endpoint of a Store agent you installed';
+    static examples = ['<%= config.bin %> agents endpoint disable <installed-agent-id>'];
+    static args = {
+        id: core_1.Args.string({
+            description: 'Your installed copy’s agent ID',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AgentsEndpointDisable);
+        let endpoint;
+        try {
+            endpoint = await (0, agent_endpoints_1.setAgentEndpointEnabled)(args.id, false);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        if (!endpoint)
+            return;
+        if (flags.json) {
+            this.log(JSON.stringify(endpoint, null, 2));
+            return;
+        }
+        (0, agent_endpoints_1.printAgentEndpoint)(this, endpoint);
+    }
+}
+exports.default = AgentsEndpointDisable;

package/dist/commands/agents/endpoint/enable.d.ts

@@ -0,0 +1,18 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * Turn ON the hosted MCP endpoint of a Store agent you installed. Off by
+ * default: installing was consent to run the release, not to expose it to every
+ * harness holding one of your keys. A self-authored agent's endpoint follows
+ * its Managed Agents API publication and has no separate switch.
+ */
+export default class AgentsEndpointEnable extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/endpoint/enable.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const agent_endpoints_1 = require("../../../lib/agent-endpoints");
+/**
+ * Turn ON the hosted MCP endpoint of a Store agent you installed. Off by
+ * default: installing was consent to run the release, not to expose it to every
+ * harness holding one of your keys. A self-authored agent's endpoint follows
+ * its Managed Agents API publication and has no separate switch.
+ */
+class AgentsEndpointEnable extends base_command_1.BaseCommand {
+    static description = 'Turn on the hosted MCP endpoint of a Store agent you installed (off by default)';
+    static examples = ['<%= config.bin %> agents endpoint enable <installed-agent-id>'];
+    static args = {
+        id: core_1.Args.string({
+            description: 'Your installed copy’s agent ID',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AgentsEndpointEnable);
+        let endpoint;
+        try {
+            endpoint = await (0, agent_endpoints_1.setAgentEndpointEnabled)(args.id, true);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        if (!endpoint)
+            return;
+        if (flags.json) {
+            this.log(JSON.stringify(endpoint, null, 2));
+            return;
+        }
+        (0, agent_endpoints_1.printAgentEndpoint)(this, endpoint);
+        this.log('');
+        this.log('Connect a client with: skrr agents endpoint connect ' + args.id + ' --space <space-id>');
+    }
+}
+exports.default = AgentsEndpointEnable;

package/dist/commands/agents/endpoint/show.d.ts

@@ -0,0 +1,16 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * Show an agent's hosted MCP endpoint: its URL, whether it is on, the exact
+ * release it runs, who pays, and the gate (if any) that would refuse a turn.
+ */
+export default class AgentsEndpointShow extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/endpoint/show.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const agent_endpoints_1 = require("../../../lib/agent-endpoints");
+/**
+ * Show an agent's hosted MCP endpoint: its URL, whether it is on, the exact
+ * release it runs, who pays, and the gate (if any) that would refuse a turn.
+ */
+class AgentsEndpointShow extends base_command_1.BaseCommand {
+    static description = "Show an agent's hosted MCP endpoint: URL, on/off, the release it runs, who pays, and what would refuse a turn";
+    static examples = [
+        '<%= config.bin %> agents endpoint show <agent-id>',
+        '<%= config.bin %> agents endpoint show <agent-id> --json',
+    ];
+    static args = {
+        id: core_1.Args.string({
+            description: 'Agent ID (for a Store agent, your installed copy)',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(AgentsEndpointShow);
+        let endpoint;
+        try {
+            endpoint = await (0, agent_endpoints_1.getAgentEndpoint)(args.id);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        if (!endpoint)
+            return;
+        if (flags.json) {
+            this.log(JSON.stringify(endpoint, null, 2));
+            return;
+        }
+        (0, agent_endpoints_1.printAgentEndpoint)(this, endpoint);
+    }
+}
+exports.default = AgentsEndpointShow;

package/dist/commands/harnesses/install-token.d.ts

@@ -2,10 +2,10 @@ import { BaseCommand } from '../../base-command';
 /**
  * Mint a token that installs a daemon on another machine.
  *
- * `skrr pair` is the interactive path and remains the one to reach for on a
- * machine you are sitting at. This exists for the case pair cannot serve: a
- * remote Linux host, provisioned from a script, where nobody will be present to
- * complete a browser flow.
+ * `skrr login` (or `skrrd pair` with a signed-in phone) is the interactive path
+ * and remains the one to reach for on a machine you are sitting at. This exists
+ * for the case neither can serve: a remote Linux host, provisioned from a
+ * script, where nobody will be present to complete a browser flow.
  *
  * The token is printed ONCE. It is a credential that adds a machine to your
  * fleet, so it is not stored and cannot be re-read.

package/dist/commands/harnesses/install-token.js

@@ -6,10 +6,10 @@ const harnesses_1 = require("../../lib/harnesses");
 /**
  * Mint a token that installs a daemon on another machine.
  *
- * `skrr pair` is the interactive path and remains the one to reach for on a
- * machine you are sitting at. This exists for the case pair cannot serve: a
- * remote Linux host, provisioned from a script, where nobody will be present to
- * complete a browser flow.
+ * `skrr login` (or `skrrd pair` with a signed-in phone) is the interactive path
+ * and remains the one to reach for on a machine you are sitting at. This exists
+ * for the case neither can serve: a remote Linux host, provisioned from a
+ * script, where nobody will be present to complete a browser flow.
  *
  * The token is printed ONCE. It is a credential that adds a machine to your
  * fleet, so it is not stored and cannot be re-read.

package/dist/commands/store/acquisitions/list.d.ts

@@ -0,0 +1,18 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * Every purchase or install an agent asked to make for you, newest first
+ * (OSK-13403). Before this, a request was only reachable by its id — one from
+ * a run nobody watched (a scheduled run, a Task run, a Slack message) could
+ * only be found by reading the database. Held requests, which a workspace
+ * Store policy refused and which wait for a human decision, are marked.
+ */
+export default class StoreAcquisitionsList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        status: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/store/acquisitions/list.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+const store_acquisition_1 = require("../../../lib/store-acquisition");
+/**
+ * Every purchase or install an agent asked to make for you, newest first
+ * (OSK-13403). Before this, a request was only reachable by its id — one from
+ * a run nobody watched (a scheduled run, a Task run, a Slack message) could
+ * only be found by reading the database. Held requests, which a workspace
+ * Store policy refused and which wait for a human decision, are marked.
+ */
+class StoreAcquisitionsList extends base_command_1.BaseCommand {
+    static description = 'List purchases and installs agents asked to make for you, including those held by a workspace Store policy';
+    static examples = [
+        '<%= config.bin %> store acquisitions list',
+        '<%= config.bin %> store acquisitions list --status pending',
+        '<%= config.bin %> store acquisitions list --json',
+    ];
+    static flags = {
+        status: core_1.Flags.string({
+            description: 'Only requests in this status',
+            options: [...data_provider_1.STORE_ACQUISITION_REQUEST_STATUSES],
+        }),
+        limit: core_1.Flags.integer({ description: 'How many to show (1-100)', min: 1, max: 100 }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(StoreAcquisitionsList);
+        let result;
+        try {
+            result = await data_provider_1.dataService.listStoreAcquisitionRequests({
+                ...(flags.status ? { status: flags.status } : {}),
+                ...(flags.limit !== undefined ? { limit: flags.limit } : {}),
+            });
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        const requests = result?.requests ?? [];
+        if (flags.json) {
+            this.log(JSON.stringify(requests, null, 2));
+            return;
+        }
+        if (requests.length === 0) {
+            this.log(flags.status ? `No requests in status ${flags.status}.` : 'No requests.');
+            return;
+        }
+        for (const request of requests) {
+            this.log((0, store_acquisition_1.describeAcquisitionRequestRow)(request));
+        }
+        this.log('');
+        this.log('Show one with: skrr store acquisitions show <request-id>');
+    }
+}
+exports.default = StoreAcquisitionsList;

package/dist/commands/store/governance/requests.js

@@ -106,6 +106,12 @@ class StoreGovernanceRequests extends base_command_1.BaseCommand {
                 this.log(`${request.requestId}  ${request.releaseId}  ${request.status}  by ${request.requesterId}`);
                 if (request.note)
                     this.log(`    note: ${request.note}`);
+                if (request.acquisitionRequestId) {
+                    // Opened for an agent's install the policy refused (OSK-13403).
+                    // Approving here admits the release; the buyer still decides the
+                    // acquisition itself.
+                    this.log(`    for agent acquisition request: ${request.acquisitionRequestId}`);
+                }
             }
         }
         catch (error) {

package/dist/commands/store/maintainers/remove.d.ts

@@ -1,12 +1,19 @@
 import { BaseCommand } from '../../../base-command';
+/**
+ * `remove` names the user the same way `add` does — `--userId` (OSK-13413).
+ * The positional form it shipped with stays accepted, with a deprecation
+ * note, so scripts written against it keep working.
+ */
 export default class StoreMaintainersRemove extends BaseCommand {
     static description: string;
+    static examples: string[];
     static args: {
         entityType: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
         entityId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
-        userId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        userId: import("@oclif/core/lib/interfaces").Arg<string | undefined, Record<string, unknown>>;
     };
     static flags: {
+        userId: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;

package/dist/commands/store/maintainers/remove.js

@@ -1,21 +1,46 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
-const core_2 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
+/**
+ * `remove` names the user the same way `add` does — `--userId` (OSK-13413).
+ * The positional form it shipped with stays accepted, with a deprecation
+ * note, so scripts written against it keep working.
+ */
 class StoreMaintainersRemove extends base_command_1.BaseCommand {
     static description = 'Revoke a listing maintainer grant';
+    static examples = [
+        '<%= config.bin %> store maintainers remove skill <skill-id> --userId <user-id>',
+    ];
     static args = {
         entityType: core_1.Args.string({ required: true, ignoreStdin: true }),
         entityId: core_1.Args.string({ required: true, ignoreStdin: true }),
-        userId: core_1.Args.string({ required: true, ignoreStdin: true }),
+        userId: core_1.Args.string({
+            required: false,
+            ignoreStdin: true,
+            description: 'Deprecated: pass --userId instead',
+        }),
+    };
+    static flags = {
+        userId: core_1.Flags.string({ description: 'The maintainer whose grant is revoked' }),
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
     };
-    static flags = { json: core_2.Flags.boolean({ description: 'Output JSON' }) };
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(StoreMaintainersRemove);
-        const result = await data_provider_1.dataService.revokeStoreListingMaintainer(args.entityType, args.entityId, args.userId);
+        if (flags.userId && args.userId && flags.userId !== args.userId) {
+            this.error('--userId and the deprecated positional user id cannot disagree', { exit: 1 });
+        }
+        const userId = flags.userId || args.userId;
+        if (!userId) {
+            this.error('--userId is required', { exit: 1 });
+            return;
+        }
+        if (!flags.userId) {
+            this.warn('Passing the user id positionally is deprecated; use `--userId <id>`, as `store maintainers add` does.');
+        }
+        const result = await data_provider_1.dataService.revokeStoreListingMaintainer(args.entityType, args.entityId, userId);
         this.log(JSON.stringify(result, null, 2));
     }
 }

package/dist/commands/store/reports/confirm-ban.d.ts

@@ -0,0 +1,19 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * The SECOND curator on a Store report ban (OSK-12597). A ban is permanent, so
+ * one curator's `store reports disposition --action ban` only records a
+ * request; this applies it. The server refuses the curator who requested it
+ * and any curator conflicted on the listing.
+ */
+export default class StoreReportsConfirmBan extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        reportId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        note: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/store/reports/confirm-ban.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const store_moderation_1 = require("../../../lib/store-moderation");
+/**
+ * The SECOND curator on a Store report ban (OSK-12597). A ban is permanent, so
+ * one curator's `store reports disposition --action ban` only records a
+ * request; this applies it. The server refuses the curator who requested it
+ * and any curator conflicted on the listing.
+ */
+class StoreReportsConfirmBan extends base_command_1.BaseCommand {
+    static description = 'Confirm a Store report ban another curator requested, which bans the listing (store_curation curators only; not the requester)';
+    static examples = [
+        '<%= config.bin %> store reports confirm-ban 6abdd6fde81800ed380ad3b2 --note "Verified the token leak"',
+    ];
+    static args = {
+        reportId: core_1.Args.string({
+            description: 'The report whose ban is waiting (from `store reports list`)',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        note: core_1.Flags.string({
+            description: 'Why you confirm (kept on the record; not shown to the publisher)',
+            required: true,
+        }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(StoreReportsConfirmBan);
+        let result;
+        try {
+            result = await (0, store_moderation_1.confirmStoreReportBan)(args.reportId, { note: flags.note });
+        }
+        catch (error) {
+            this.handleApiError(error);
+            return;
+        }
+        if (flags.json) {
+            this.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        const d = result.disposition;
+        if (d.replayed) {
+            this.log(`Already banned: report ${d.reportId} on ${d.agentId}. Nothing new was sent to the publisher.`);
+            return;
+        }
+        this.log(`Banned: ${d.agentId} (report ${d.reportId}${d.listingState ? `, listing ${d.listingState}` : ''}). Requested by ${d.requestedBy ?? '-'}, confirmed by you.`);
+        this.log(d.publisherNotified
+            ? 'The publisher was told the outcome (counts only, never who reported).'
+            : 'The ban is in effect, but the publisher notice could not be confirmed.');
+    }
+}
+exports.default = StoreReportsConfirmBan;