v0.18.0

Output contract upgrade

This release standardizes CLI output across the command surface:

• Human-readable text remains the default.
• --output json emits the compact, versioned ayx.output.v1 automation envelope. List responses are capped at 20 items by default and report the total, shown count, truncation state, and any next-page token.
• --output json-full emits the complete redacted envelope. Use it when a script needs the former JSON shape, a diagnostic payload, or export detail.
• --output-limit N changes the compact-list cap; 0 means unlimited.

Put output selection after the command path:

ayx one flows list --output json
ayx one flows list --output json-full

--output json is a breaking machine-interface change from 0.17.0. Update automations that consumed raw envelopes to request json-full while migrating to the compact contract.

One and onboarding

Every One leaf command now has a command-level output descriptor, so compact responses have consistent resource identity and view semantics. Onboarding’s keyring-unavailable test seam is now thread-scoped, making concurrent unit tests deterministic.

ayx one workflows list now presents governance data by default: owner, last updated time, and workflow version. Checksums and compiler versions remain in the full response, rather than occupying the default human view.

Authentication

The Wizard email-OTP flow is the stable default for ayx one login; Legacy remains the explicit rollback path via --auth-flow legacy or AYX_AUTH_ROLLOUT=legacy.