v1.0.20

Highlights

• Fresh stable global installations now enter guarded automatic patch-update enrollment. The first successful human command completes a grace step, the second grants install-bound consent, and only later eligible commands may install an update.
• Automatic updates fail closed outside interactive human sessions: AI Skill invocations, CI/non-TTY runs, Client Preview, configuration and update commands, and internal maintenance do not consume enrollment steps or trigger installation.
• Manual reinstall or downgrade suspends prior automatic consent. Run arkcli config set update.mode automatic to opt back in, or arkcli config set update.mode disabled to keep update notices without silent installation.
• Completed automatic-update results are persisted and reported once on the next eligible human command, including recovery after interruption.

Distribution

• Published @volcengine/ark-cli@1.0.20 with guarded automatic-update support across POSIX and Windows installations.
• Synchronized Volc Skills, references, and evaluations with the new enrollment, opt-out, one-command suppression, and recovery contracts.
• Verified exact-install consent, transactional update behavior, fresh-install bootstrap state, public npm convergence, and platform-specific online probes.

Compatibility

• The public update.mode values are now automatic and disabled. Existing notify configuration remains readable and is interpreted as disabled, but automation that asserts the literal notify value should migrate to disabled.
• ARKCLI_NO_UPDATE_NOTIFIER=1 fully suppresses implicit update checks, notices, enrollment progress, and automatic installation for one command.
• Resetting configuration revokes automatic-update consent and clears its install marker.
• GitHub remains a fallback; the Volcengine CDN remains the primary binary and Skills source.