@skrr-ai/cli 0.1.115 → 0.1.117

package/dist/lib/guide-pointer.js

@@ -0,0 +1,51 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.agentGuidePointerFor = agentGuidePointerFor;
+exports.agentGuidePointerLine = agentGuidePointerLine;
+/**
+ * Agent guides — the pointer a refusal carries (OSK-17977).
+ *
+ * The cheapest moment to teach is the moment something goes wrong. A section's
+ * manifest entry declares the refusal codes it `explains`; the server registry
+ * enforces that each code has exactly one section. The CLI resolves the same
+ * table OFFLINE, from its bundled copy (`generated/agent-guides.json`), so a
+ * refusal that never reached the server — and one on a CLI that cannot reach
+ * it at all — still names the section that explains it.
+ *
+ * The lookup is deliberately fragile-proof: error rendering runs this on every
+ * failure, including inside test harnesses that swap `@skrr-ai/data-provider`
+ * for a partial mock. A pointer is advisory — it must never be the reason a
+ * refusal fails to render.
+ */
+const data_provider_1 = require("@skrr-ai/data-provider");
+const agent_guides_json_1 = __importDefault(require("../generated/agent-guides.json"));
+const catalog = agent_guides_json_1.default.index?.guides ?? [];
+/**
+ * The pointer for a refusal code: `{id, section, command}`, or `null` when no
+ * section explains it, the error carries no code, or the bundled vocabulary is
+ * unavailable. Never throws.
+ */
+function agentGuidePointerFor(code) {
+    if (typeof code !== 'string' || !code)
+        return null;
+    try {
+        const address = (0, data_provider_1.findAgentGuideSectionExplaining)(catalog, code);
+        if (!address?.section)
+            return null;
+        return {
+            id: address.id,
+            section: address.section,
+            command: (0, data_provider_1.agentGuideReadCommand)(address, 'cli'),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/** The `Guide:` line a refusal's human text ends with. */
+function agentGuidePointerLine(pointer) {
+    return `Guide: ${pointer.command}`;
+}

package/dist/lib/label-scope.d.ts

@@ -36,8 +36,8 @@ export declare const HEX_COLOR_RE: RegExp;
 export declare function normalizeLabelColor(input: string): string;
 /** `--scope` / `--scope-id`, shared by every `skrr labels` command. */
 export declare const labelScopeFlags: {
-    scope: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'scope-id': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    scope: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    'scope-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
 };
 /**
  * `--allow-duplicate-name`, shared by every command that can put a live name
@@ -49,7 +49,7 @@ export declare const labelScopeFlags: {
  * only relays the override, so every surface — web, MCP, CLI — gets one answer.
  */
 export declare const allowDuplicateNameFlags: {
-    'allow-duplicate-name': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    'allow-duplicate-name': import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 export interface ResolvedLabelScope {
     scope: LabelScope;

package/dist/lib/list-output.d.ts

@@ -26,9 +26,9 @@ export declare const COMPACT_FIELDS: {
 export type ListResource = keyof typeof COMPACT_FIELDS;
 /** The three flags every projecting list command declares. */
 export declare const listOutputFlags: {
-    fields: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    compact: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-    ndjson: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    fields: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    compact: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    ndjson: import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 export type ListOutputFlags = {
     fields?: string;

package/dist/lib/lookbackPlans.d.ts

@@ -1,4 +1,4 @@
-import { lookbackPlansApi, isLookbackMutationOutcomeUnknown, type CreateLookbackPlanRequest, type LookbackPlan, type LookbackPlanInput } from '@skrr-ai/data-provider';
+import { lookbackPlansApi, isLookbackMutationOutcomeUnknown, type CreateLookbackPlanRequest, type LookbackPlan, type LookbackPlanInput, type LookbackPlansScope } from '@skrr-ai/data-provider';
 export { lookbackPlansApi, isLookbackMutationOutcomeUnknown };
 export declare function lookbackInputFailure(error: unknown): {
     code: "LOOKBACK_INVALID_FIELD" | "LOOKBACK_INVALID_TIME" | "LOOKBACK_INVALID_TIMEZONE" | "LOOKBACK_AMBIGUOUS_TIME" | "LOOKBACK_NONEXISTENT_TIME" | "LOOKBACK_LIMIT_EXCEEDED";
@@ -23,14 +23,28 @@ export declare function lookbackUnconfirmedFailure(details: Record<string, unkno
         remedy: string;
     };
 };
-export declare const lookbackPlanIdArg: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+export declare const lookbackPlanIdArg: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
 /** JSON can be the plan itself or the canonical create envelope. Never copy identity fields. */
 export declare function lookbackCreateBody(input: Record<string, unknown>, explicitAgentId?: string): CreateLookbackPlanRequest;
 /** Validate time forms locally; admission time and authorization remain server authoritative. */
 export declare function lookbackInput(raw: unknown, allowPast?: boolean): LookbackPlanInput;
-export declare function lookbackPlanSummary(plan: LookbackPlan): string;
+type PlanSummary = {
+    id: string;
+    state: string;
+    revision: number;
+    title?: string;
+    objective?: string;
+    purpose?: string;
+    steps: Array<{
+        state: string;
+        runAt: string;
+    }>;
+};
+export declare function lookbackPlanSummary(plan: PlanSummary): string;
 export declare function lookbackArmingLine(result: {
     plan: LookbackPlan;
     reused?: boolean;
     armed: boolean;
 }): string;
+/** An empty list is only "none" for the workspace it looked in: name it (OSK-17930). */
+export declare function lookbackPlansEmptyMessage(scope?: LookbackPlansScope): string;

package/dist/lib/lookbackPlans.js

@@ -7,6 +7,7 @@ exports.lookbackCreateBody = lookbackCreateBody;
 exports.lookbackInput = lookbackInput;
 exports.lookbackPlanSummary = lookbackPlanSummary;
 exports.lookbackArmingLine = lookbackArmingLine;
+exports.lookbackPlansEmptyMessage = lookbackPlansEmptyMessage;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 Object.defineProperty(exports, "lookbackPlansApi", { enumerable: true, get: function () { return data_provider_1.lookbackPlansApi; } });
@@ -20,7 +21,9 @@ class LookbackValidationError extends Error {
     }
 }
 function lookbackInputFailure(error) {
-    const repair = { stage: 'validation', retryCondition: 'correct_input',
+    const repair = {
+        stage: 'validation',
+        retryCondition: 'correct_input',
         remedy: 'Correct the indicated input field before submitting again.',
         ...(error instanceof LookbackValidationError ? { field: error.issue.field } : {}),
     };
@@ -28,19 +31,29 @@ function lookbackInputFailure(error) {
         code: error instanceof LookbackValidationError ? error.issue.code : 'LOOKBACK_INVALID_FIELD',
         message: error instanceof Error ? error.message : String(error),
         // BaseCommand's machine envelope carries additive domain facts in details.
-        details: repair, exit: 2, retryable: false,
+        details: repair,
+        exit: 2,
+        retryable: false,
     };
 }
 function lookbackUnconfirmedFailure(details) {
     return {
-        code: 'LOOKBACK_OUTCOME_UNCONFIRMED', message: 'The plan update outcome could not be confirmed. Read the original source or known plan before submitting another change.',
-        exit: 5, retryable: false,
-        details: { stage: 'lifecycle', retryCondition: 'read_original_source_or_known_plan',
-            remedy: 'Read the known plan or original source. Do not submit a replacement source or blindly repeat this mutation.', ...details },
+        code: 'LOOKBACK_OUTCOME_UNCONFIRMED',
+        message: 'The plan update outcome could not be confirmed. Read the original source or known plan before submitting another change.',
+        exit: 5,
+        retryable: false,
+        details: {
+            stage: 'lifecycle',
+            retryCondition: 'read_original_source_or_known_plan',
+            remedy: 'Read the known plan or original source. Do not submit a replacement source or blindly repeat this mutation.',
+            ...details,
+        },
     };
 }
 exports.lookbackPlanIdArg = core_1.Args.string({
-    description: 'Lookback plan id', required: true, ignoreStdin: true,
+    description: 'Lookback plan id',
+    required: true,
+    ignoreStdin: true,
     parse: async (value) => {
         if (!value.trim())
             throw new Error('Plan id is empty; see `skrr followups plans list`');
@@ -58,7 +71,8 @@ function lookbackCreateBody(input, explicitAgentId) {
         throw new Error(`Unknown lookback input fields: ${unknown.join(', ')}`);
     if (envelope) {
         for (const field of ['agentId', 'endpointId', 'endpointTarget', 'pinnedConversationId']) {
-            if (input[field] !== undefined && (typeof input[field] !== 'string' || !input[field].trim())) {
+            if (input[field] !== undefined &&
+                (typeof input[field] !== 'string' || !input[field].trim())) {
                 throw new Error(`${field} must be a non-empty string`);
             }
         }
@@ -72,10 +86,15 @@ function lookbackCreateBody(input, explicitAgentId) {
         agentId: agent.id,
         producer: agent.boundToSession ? 'agent_in_turn' : 'user_explicit',
         plan: lookbackInput(envelope ? input.plan : input),
-        ...(envelope && input.endpointId !== undefined ? { endpointId: input.endpointId } : {}),
-        ...(envelope && input.endpointTarget !== undefined ? { endpointTarget: input.endpointTarget } : {}),
+        ...(envelope && input.endpointId !== undefined
+            ? { endpointId: input.endpointId }
+            : {}),
+        ...(envelope && input.endpointTarget !== undefined
+            ? { endpointTarget: input.endpointTarget }
+            : {}),
         ...(envelope && input.pinnedConversationId !== undefined
-            ? { pinnedConversationId: input.pinnedConversationId } : {}),
+            ? { pinnedConversationId: input.pinnedConversationId }
+            : {}),
     };
 }
 /** Validate time forms locally; admission time and authorization remain server authoritative. */
@@ -88,10 +107,11 @@ function lookbackInput(raw, allowPast = false) {
     return raw;
 }
 function lookbackPlanSummary(plan) {
-    const next = plan.steps.filter((step) => step.state === 'pending')
-        .reduce((earliest, step) => !earliest || Date.parse(step.runAt) < Date.parse(earliest.runAt) ? step : earliest, undefined);
-    return `${plan.id}  [${plan.state}] r${plan.revision}  ${plan.title || plan.objective}` +
-        `  ${plan.steps.length} lookbacks${next ? `  next:${next.runAt}` : ''}`;
+    const next = plan.steps
+        .filter((step) => step.state === 'pending')
+        .reduce((earliest, step) => (!earliest || Date.parse(step.runAt) < Date.parse(earliest.runAt) ? step : earliest), undefined);
+    return (`${plan.id}  [${plan.state}] r${plan.revision}  ${plan.title || plan.purpose || plan.objective || 'Accepted schedule'}` +
+        `  ${plan.steps.length} lookbacks${next ? `  next:${next.runAt}` : ''}`);
 }
 function lookbackArmingLine(result) {
     if (['cancelled', 'completed', 'failed'].includes(result.plan.state)) {
@@ -100,3 +120,11 @@ function lookbackArmingLine(result) {
     const status = result.armed ? 'armed' : 'saved; scheduling is pending';
     return `Lookback plan ${result.plan.id} ${status}${result.reused ? ' (existing plan)' : ''}.`;
 }
+/** An empty list is only "none" for the workspace it looked in: name it (OSK-17930). */
+function lookbackPlansEmptyMessage(scope) {
+    if (!scope)
+        return 'No lookback plans.';
+    if (!scope.workspaceId)
+        return "No lookback plans in no workspace (use --workspace to read a workspace's plans).";
+    return `No lookback plans in workspace ${scope.workspaceId}${scope.source === 'default' ? ' (your default; use --workspace to read another)' : ''}.`;
+}

package/dist/lib/member-output.d.ts

@@ -1,6 +1,6 @@
 /** Member discovery promises identity and access, not image transport credentials. */
 export declare const memberImageFlags: {
-    'include-images': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    'include-images': import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 /** Only the explicit image flag expands a member; --raw affects storage fields only. */
 export declare function memberAvatar(raw: {

package/dist/lib/memory-scope.d.ts

@@ -13,9 +13,9 @@ import type { MemoryScope } from '@skrr-ai/data-provider';
  * `resolveMemoryScope(flags)` into the `MemoryScope` the data-service accepts.
  */
 export declare const memoryScopeFlags: {
-    agent: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    tier: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'pool-workspace': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    agent: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    tier: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'pool-workspace': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
 };
 export interface MemoryScopeFlagValues {
     agent?: string;

package/dist/lib/outbox.d.ts

@@ -36,20 +36,6 @@ export interface OutboxEntry {
  * silently dropped.
  */
 export declare const MAX_REPLAY_ATTEMPTS = 10;
-/**
- * Derive a stable idempotency key from the write's own content.
- *
- * Content-derived rather than random, and that is the whole design: a random
- * key would make every replay of the SAME intent look like a new write, which
- * is exactly what the server-side dedupe exists to prevent. Hashing
- * (kind, scope, payload) means replaying the same comment collapses onto the
- * original, while a genuinely different comment on the same task hashes
- * differently and still posts.
- *
- * Truncated to 32 hex chars — comfortably collision-resistant for a per-user,
- * 24-hour dedupe window, and short enough to read in `skrr outbox list`.
- */
-export declare function idempotencyKeyFor(kind: string, scope: string, payload: string): string;
 export declare function isOutageFailure(err: unknown): boolean;
 export declare function isRetryableWrite(err: unknown): boolean;
 export declare function enqueueWrite(input: Omit<OutboxEntry, 'id' | 'queuedAt' | 'attempts'>, profile?: string): OutboxEntry;

package/dist/lib/outbox.js

@@ -34,7 +34,6 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MAX_REPLAY_ATTEMPTS = void 0;
-exports.idempotencyKeyFor = idempotencyKeyFor;
 exports.isOutageFailure = isOutageFailure;
 exports.isRetryableWrite = isRetryableWrite;
 exports.enqueueWrite = enqueueWrite;
@@ -93,26 +92,6 @@ const crypto = __importStar(require("node:crypto"));
  * silently dropped.
  */
 exports.MAX_REPLAY_ATTEMPTS = 10;
-/**
- * Derive a stable idempotency key from the write's own content.
- *
- * Content-derived rather than random, and that is the whole design: a random
- * key would make every replay of the SAME intent look like a new write, which
- * is exactly what the server-side dedupe exists to prevent. Hashing
- * (kind, scope, payload) means replaying the same comment collapses onto the
- * original, while a genuinely different comment on the same task hashes
- * differently and still posts.
- *
- * Truncated to 32 hex chars — comfortably collision-resistant for a per-user,
- * 24-hour dedupe window, and short enough to read in `skrr outbox list`.
- */
-function idempotencyKeyFor(kind, scope, payload) {
-    const digest = crypto
-        .createHash('sha256')
-        .update(`${kind}\u0000${scope}\u0000${payload}`)
-        .digest('hex');
-    return `${kind}_${digest.slice(0, 32)}`;
-}
 /**
  * Per-profile queue directory.
  *

package/dist/lib/proposal-decision-command.d.ts

@@ -5,15 +5,15 @@ import { BaseCommand } from '../base-command';
 export declare abstract class ProposalDecisionCommand extends BaseCommand {
     static decision: ProposalDecision;
     static args: {
-        kind: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
-        id: import("@oclif/core/lib/interfaces").Arg<string | undefined, Record<string, unknown>>;
+        kind: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+        id: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
     };
     static flags: {
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        expected: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-        reason: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'reason-code': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        until: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        expected: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        reason: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'reason-code': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        until: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/lib/publisher-profile-flags.d.ts

@@ -6,8 +6,8 @@ import type { PublisherProfileDraft } from '@skrr-ai/data-provider';
  * your personal publisher profile. The server derives the actual principal —
  * this only selects which of your profiles to address.
  */
-export declare const publishAsFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const jsonFlag: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+export declare const publishAsFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+export declare const jsonFlag: import("@oclif/core/interfaces").BooleanFlag<boolean>;
 /** A profile draft is a document; read it from a JSON file, never from argv. */
 export declare function readDraftFile(file: string): PublisherProfileDraft;
 /**

package/dist/lib/roles.d.ts

@@ -53,7 +53,7 @@ export declare const roleApi: {
                 config?: Record<string, unknown> | undefined;
             }[];
             sources: {
-                source: "space" | "tasks" | "email" | "goal" | "files" | "local" | "daemon" | "browser" | "conversations" | "slack" | "memory" | "github" | "messages" | "calendar" | "docs" | "metrics" | "agent_run" | "agent_initiatives" | "documents" | "product_metrics" | "business_metrics" | "state_monitor" | "monitor";
+                source: "space" | "tasks" | "memory" | "email" | "goal" | "files" | "local" | "daemon" | "browser" | "conversations" | "slack" | "github" | "messages" | "calendar" | "docs" | "metrics" | "agent_run" | "agent_initiatives" | "documents" | "product_metrics" | "business_metrics" | "state_monitor" | "monitor";
                 enabled: boolean;
                 config?: Record<string, unknown> | undefined;
             }[];

package/dist/lib/scoped-memory-command.d.ts

@@ -15,35 +15,35 @@ export declare function memoryStoreResolutionLines(resolutions?: MemoryStoreReso
 export declare function parseMemoryMount(value: unknown): MemoryMount;
 export declare function parseMountedMemoryStore(value: unknown): MemoryStore;
 export declare const scopedMemoryFlags: {
-    agent: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-    space: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    store: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    scope: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    agent: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    space: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    store: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    scope: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 export declare const mutationFlags: {
-    'authorization-generation': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'expected-version': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'idempotency-key': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'privacy-approval': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'dry-run': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-    agent: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-    space: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    store: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    scope: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    'authorization-generation': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'expected-version': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'idempotency-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'privacy-approval': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    agent: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    space: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    store: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    scope: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 export declare const versionedMutationFlags: {
-    'expected-version': import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'authorization-generation': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'idempotency-key': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'privacy-approval': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'dry-run': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-    agent: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-    space: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    store: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    scope: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    'expected-version': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    'authorization-generation': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'idempotency-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'privacy-approval': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    agent: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    space: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    store: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    scope: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 type ScopedFlags = {
     agent: string;

package/dist/lib/session-task-write.d.ts

@@ -21,7 +21,7 @@ export declare function resetSessionTaskWriteCache(): void;
  */
 export declare function sessionTaskWrite(operation: Exclude<SessionTaskOperation, 'read'>, requestedTask: string, env?: Record<string, string | undefined>): Promise<{
     path: string;
-    credential: import("@skrr-ai/auth-core/dist/esm/credentialResolver").ResolvedCredential;
+    credential: import("./credential-resolver").ResolvedCredential;
     taskId: string;
     task: {
         id?: string;

package/dist/lib/space-custom-actions.d.ts

@@ -18,8 +18,8 @@ import type { SpaceCustomAction, SpaceMemberActionsResponse } from '@skrr-ai/dat
  * graphemes instead would accept a family emoji the server then refuses.
  */
 export declare const SPACE_CUSTOM_ACTION_ICON_MAX = 4;
-export declare const spaceCustomActionIconFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const spaceCustomActionLabelFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+export declare const spaceCustomActionIconFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+export declare const spaceCustomActionLabelFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
 /** Refuse an icon the server would refuse, with a message that says what fits. */
 export declare function spaceCustomActionIconProblem(icon: unknown): string | null;
 type SpaceWithActions = {

package/dist/lib/task-batch.d.ts

@@ -1,3 +1,13 @@
+/**
+ * Domain lib for `POST|PATCH /api/tasks/batch` (docs/architecture/task-batch-api-2026-10-08.md).
+ *
+ * `tasks create-tree` and `tasks bulk-update` reach the batch routes through
+ * `dataService.createTasksBatch|updateTasksBatch` and nothing else. This file owns
+ * the parts a command should not restate: chunking at the server cap, a
+ * tempId translation, and the "this server has no batch route" signal that
+ * sends a command back to its serial path. The shared transport owns each
+ * request's fresh idempotency key.
+ */
 import { type TaskBatchItemResult, type TaskBatchPatchItem } from '@skrr-ai/data-provider';
 export type ApiFailure = {
     message: string;
@@ -16,13 +26,6 @@ export declare function describeApiFailure(err: unknown): ApiFailure;
  */
 export declare function isBatchRouteMissing(err: unknown): boolean;
 export declare function chunkItems<T>(items: T[], size?: number): T[][];
-/**
- * Same chunk, same key: a retry of an interrupted command replays the stored
- * result instead of creating twice. The key is a fingerprint of the items, so a
- * DIFFERENT chunk can never collide with it (the server answers 422 on a key
- * reused with a different body).
- */
-export declare function batchIdempotencyKey(kind: 'create' | 'patch', items: unknown[]): string;
 export type BatchCreateNode = {
     key: string;
     parentKey?: string;

package/dist/lib/task-batch.js

@@ -4,7 +4,6 @@ exports.batchRetryPolicy = void 0;
 exports.describeApiFailure = describeApiFailure;
 exports.isBatchRouteMissing = isBatchRouteMissing;
 exports.chunkItems = chunkItems;
-exports.batchIdempotencyKey = batchIdempotencyKey;
 exports.reconcileSubmittedNodes = reconcileSubmittedNodes;
 exports.createNodesViaBatch = createNodesViaBatch;
 exports.patchTasksViaBatch = patchTasksViaBatch;
@@ -14,10 +13,10 @@ exports.patchTasksViaBatch = patchTasksViaBatch;
  * `tasks create-tree` and `tasks bulk-update` reach the batch routes through
  * `dataService.createTasksBatch|updateTasksBatch` and nothing else. This file owns
  * the parts a command should not restate: chunking at the server cap, a
- * deterministic idempotency key per chunk, tempId translation, and the "this
- * server has no batch route" signal that sends a command back to its serial path.
+ * tempId translation, and the "this server has no batch route" signal that
+ * sends a command back to its serial path. The shared transport owns each
+ * request's fresh idempotency key.
  */
-const node_crypto_1 = require("node:crypto");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const tasks_1 = require("./tasks");
 /** Normalize a thrown API error (or a per-item batch error) into one shape. */
@@ -60,16 +59,6 @@ function chunkItems(items, size = data_provider_1.TASK_BATCH_MAX_ITEMS ?? 100) {
         out.push(items.slice(i, i + size));
     return out;
 }
-/**
- * Same chunk, same key: a retry of an interrupted command replays the stored
- * result instead of creating twice. The key is a fingerprint of the items, so a
- * DIFFERENT chunk can never collide with it (the server answers 422 on a key
- * reused with a different body).
- */
-function batchIdempotencyKey(kind, items) {
-    const digest = (0, node_crypto_1.createHash)('sha256').update((0, data_provider_1.stableJson)(items)).digest('hex').slice(0, 40);
-    return `cli-${kind}-batch:${digest}`;
-}
 /** A lost response is not a lost write. Only READ here; never retry a write. */
 async function reconcileSubmittedNodes(nodes, mapping, error, deadlineAt = Date.now() + 5000) {
     const rows = [];
@@ -316,9 +305,7 @@ async function createNodesViaBatch(nodes, mapping, options = {}) {
         let response;
         try {
             options.onSubmit?.(sent);
-            response = await data_provider_1.dataService.createTasksBatch(items, {
-                idempotencyKey: batchIdempotencyKey('create', items),
-            });
+            response = await data_provider_1.dataService.createTasksBatch(items);
         }
         catch (err) {
             if (round === 1 && isBatchRouteMissing(err))
@@ -510,9 +497,7 @@ async function patchTasksViaBatch(updates) {
             continue;
         }
         try {
-            const response = await data_provider_1.dataService.updateTasksBatch(chunk, {
-                idempotencyKey: batchIdempotencyKey('patch', chunk),
-            });
+            const response = await data_provider_1.dataService.updateTasksBatch(chunk);
             for (const [i, result] of response.results.entries()) {
                 results.push({ ...result, index: offset + i });
             }

package/dist/lib/task-operations.d.ts

@@ -1,25 +1,13 @@
-/** Documentation and display paths only. The server still owns allowedActions. */
+/**
+ * Documentation and display paths only. The server still owns allowedActions.
+ *
+ * `skrr tasks guide`'s command map retired into the tasks guide's `commands`
+ * section (`skrr guide tasks commands`), the one copy every surface reads;
+ * what remains here is the action→command remedies preflight and
+ * actionability render into server-declared allowedActions.
+ */
 export declare function taskActionCommand(action: string, taskId: string, targetId: string | undefined, bin?: string, context?: {
     allowedActions?: ReadonlyArray<{
         action: string;
     }>;
 }): string | undefined;
-export declare function taskOperationsGuide(bin?: string): {
-    title: string;
-    sections: ({
-        title: string;
-        commands: {
-            command: string;
-            purpose: string;
-        }[];
-        note?: undefined;
-    } | {
-        title: string;
-        note: string;
-        commands: {
-            command: string;
-            purpose: string;
-        }[];
-    })[];
-};
-export declare function taskOperationsGuideLines(bin?: string): string[];