The dcode tools command group: provision managed external tools.
Currently this exposes dcode tools install, which fetches the pinned,
SHA-256-verified ripgrep binary into ~/.deepagents/bin (the same managed
path used on first run) and is also handy for repairing a missing or stale
rg. The install script calls this verb instead of re-encoding the pinned
version + checksum table in bash.
Help rendering for dcode tools -h / dcode tools install -h is served by
ui.show_tools_help / ui.show_tools_install_help, which do not import this
module, so the help path stays light.
Accepted internal output modes for CLI subcommands.
Stable machine token for the tools install outcome, surfaced via --json.
ok (installed or already current), skipped (intentional opt-out), and
error (an install was expected but failed). Only error is unhealthy, so it
alone drives a non-zero exit code.
