v1.0.19

Highlights

• Added arkcli profile apikey get [--profile <name>] [--plain] for deterministic local automation against the API key stored in a selected profile, with structured JSON by default and an explicit plaintext mode.
• Expanded arkcli helper with DeepSeek Harness, Pi, and WorkBuddy support, corrected Hermes Skills CLI routing, fixed selector redraw artifacts, and clamped DeepSeek Harness ArkModels token limits to the gateway contract.
• Added the Volc-only Cloud Computer (CUA) capability to the Agent Plan Harness dashboard for eligible personal Large/Max plans, while keeping installation warn-only and product-gated.
• Hardened POSIX Skills update transactions by moving the lock outside the package tree, holding the exact lock identity across staging/cutover/rollback, and preserving the commit point when cleanup reports an error.

Distribution

• Consolidated update guidance into arkcli-shared, refreshed Helper and fine-tuning workflow guidance, and published a 24-Skill Volc bundle.
• Published @volcengine/ark-cli@1.0.19 with CDN-primary binaries and Skills.
• Verified all six platform binaries and the historical same-ref Volc Skill bundle against the frozen npm manifest and CN CDN payload; the stable CDN path now reconciles lost upload responses from remote facts.

Compatibility

• No intentional breaking CLI changes.
• profile apikey get --plain writes secret material to stdout and is intended only for trusted local automation.
• Production automatic installation remains unavailable in v1.0.19; explicit arkcli update and update checks remain available.
• GitHub remains a fallback; the Volcengine CDN remains the primary binary and Skills source.