@skrr-ai/cli 0.1.116 → 0.1.117

package/dist/commands/instructions/guide.js

@@ -4,19 +4,22 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
 const node_crypto_1 = require("node:crypto");
 const base_command_1 = require("../../base-command");
 const managed_instruction_guides_json_1 = __importDefault(require("../../generated/managed-instruction-guides.json"));
-const api_fetch_1 = require("../../lib/api-fetch");
-const auth_core_init_1 = require("../../lib/auth-core-init");
-const credential_resolver_1 = require("../../lib/credential-resolver");
-const harness_context_1 = require("../../lib/harness-context");
-const keychain_1 = require("../../lib/keychain");
+const agent_guides_1 = require("../../lib/agent-guides");
+// The installed v20 instructions still name this command; the guide body they
+// ask for now lives in the tasks card. The card also dropped the membership
+// and scheduling rules, so one trailing line keeps an agent pointed at where
+// those went.
+const TASKS_GUIDE_POINTER = 'Membership and scheduling now live in `skrr guide spaces access` for Space membership ' +
+    'and `skrr guide tasks followups` for follow-ups and scheduling.';
 // Documentation stays available when a daemon-issued Agent credential is
 // unavailable. Do not run BaseCommand's mandatory credential initialization.
 class InstructionsGuide extends core_1.Command {
     static baseFlags = base_command_1.BaseCommand.baseFlags;
-    static description = 'Read the detailed task-management guide on demand';
+    static description = 'Kept for installed instructions — prints the tasks guide. `skrr guide` reads every guide.';
     static args = {
         name: core_1.Args.string({
             description: 'Guide to read',
@@ -37,55 +40,34 @@ class InstructionsGuide extends core_1.Command {
     ];
     async run() {
         const { flags } = await this.parse(InstructionsGuide);
-        let guide = managed_instruction_guides_json_1.default['oversky-task-management'];
-        let source = 'bundled';
-        let reason = flags.offline ? 'offline-requested' : 'no-session';
-        if (!flags.offline) {
-            try {
-                (0, keychain_1.setActiveProfile)(flags.profile ?? process.env.OVERSKY_PROFILE ?? '');
-                const autonomous = (0, credential_resolver_1.resolveTrustedAutonomousCredential)();
-                if (!autonomous && !flags.bare && !(0, harness_context_1.isHarnessCliContext)())
-                    await (0, auth_core_init_1.prefetchCliAuth)();
-                const credential = autonomous ??
-                    (await (0, credential_resolver_1.resolveCredential)({
-                        flagToken: flags.token,
-                        bareMode: flags.bare,
-                        allowUnreadableStoredCredential: true,
-                    }));
-                if (credential.token) {
-                    reason = 'server-unavailable';
-                    const response = await (0, api_fetch_1.apiFetch)('/api/instructions/presets/oversky-task-management/guide', { credential, signal: AbortSignal.timeout(3_000) });
-                    if ((0, node_crypto_1.createHash)('sha256').update(response.body).digest('hex') !== response.hash) {
-                        // An integrity failure, not a network failure: the server
-                        // answered, but the body it sent does not match its own hash.
-                        // Give it its own reason before the catch below can flatten it
-                        // into 'server-unavailable', which describes the opposite world.
-                        reason = 'server-hash-mismatch';
-                        throw new Error('The server guide hash does not match its body.');
-                    }
-                    guide = response;
-                    source = 'server';
-                    reason = undefined;
-                }
-            }
-            catch {
-                // A missing/unreadable auth envelope or delegated daemon cannot make
-                // a read-only local guide unavailable, and must never emit auth JSON.
-                reason ??= 'server-unavailable';
-            }
-        }
-        if (flags.json)
+        const read = await (0, agent_guides_1.readAgentGuide)({ id: 'tasks' }, flags);
+        if (!read.found)
+            return (0, agent_guides_1.writeAgentGuideMiss)(this, read.miss, flags.json);
+        const body = (0, data_provider_1.renderAgentGuideText)(read.response);
+        if (flags.json) {
+            // The ManagedInstructionGuide shape is the contract older callers read:
+            // keep its keys, but `body` is the tasks card text and `hash` its sha256,
+            // so a consumer that verifies hash against body still succeeds.
+            const preset = managed_instruction_guides_json_1.default['oversky-task-management'];
             this.log(JSON.stringify({
-                ...guide,
-                provenance: { source, fallback: source === 'bundled', ...(reason ? { reason } : {}) },
+                key: preset.key,
+                name: preset.name,
+                templateVersion: preset.templateVersion,
+                body,
+                hash: (0, node_crypto_1.createHash)('sha256').update(body, 'utf8').digest('hex'),
+                redirectedTo: 'tasks',
+                provenance: {
+                    source: read.source,
+                    fallback: read.source === 'bundled',
+                    ...(read.reason ? { reason: read.reason } : {}),
+                },
             }, null, 2));
-        else {
-            if (source === 'bundled')
-                this.logToStderr(reason === 'server-hash-mismatch'
-                    ? `The server guide’s body does not match its hash; using the CLI’s bundled task-management guide (template v${guide.templateVersion}).`
-                    : `Using the CLI’s bundled task-management guide (template v${guide.templateVersion}).`);
-            this.log(guide.body);
+            return;
         }
+        const notice = (0, agent_guides_1.agentGuideFallbackNotice)(read);
+        if (notice)
+            process.stderr.write(`${notice}\n`);
+        this.log(`${body}\n${TASKS_GUIDE_POINTER}`);
     }
 }
 exports.default = InstructionsGuide;

package/dist/commands/memory/maintain.js

@@ -16,7 +16,7 @@ class MemoryMaintain extends base_command_1.BaseCommand {
     static description = 'Apply an auditable canonical memory maintenance operation';
     static examples = [
         '<%= config.bin %> memory maintain remember \'{"path":"/notes","claim":"Ship notes on Fridays."}\' --agent agent_abc123',
-        '<%= config.bin %> memory maintain archive \'{"factId":"fact_abc"}\' --agent agent_abc123',
+        '<%= config.bin %> memory maintain archive \'{"path":"/notes/old-note"}\' --agent agent_abc123',
     ];
     static args = {
         operation: core_1.Args.string({ required: true, options: [...OPERATIONS], ignoreStdin: true }),

package/dist/commands/skills/install.d.ts

@@ -9,6 +9,7 @@ export default class SkillsInstall extends BaseCommand {
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         agent: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         service: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     /** A store 404 for a name that may be a skill on the caller's machine. */
     private failOnStoreMiss;

package/dist/commands/skills/install.js

@@ -3,12 +3,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
+const prompt_1 = require("../../lib/prompt");
 const local_skills_1 = require("../../lib/local-skills");
 class SkillsInstall extends base_command_1.BaseCommand {
-    static description = 'Install a skill from the store to a service (agent)';
+    static description = 'Install a skill from the store to a service (agent). A paid skill shows its price and asks you to confirm first.';
     static examples = [
         '<%= config.bin %> skills install <skill-id>',
         '<%= config.bin %> skills install <skill-id> --agent <agent-id>',
+        '<%= config.bin %> skills install <skill-id> --yes',
         '<%= config.bin %> skills install <skill-id> --json',
     ];
     static args = {
@@ -25,6 +27,10 @@ class SkillsInstall extends base_command_1.BaseCommand {
             description: '[DEPRECATED] Use --agent. Same meaning, kept for script compatibility.',
             hidden: true,
         }),
+        yes: core_1.Flags.boolean({
+            char: 'y',
+            description: 'Confirm a paid install without prompting. The price is still printed.',
+        }),
     };
     /** A store 404 for a name that may be a skill on the caller's machine. */
     async failOnStoreMiss(err, id) {
@@ -56,15 +62,48 @@ class SkillsInstall extends base_command_1.BaseCommand {
                 retryable: false,
             });
         }
+        // What installing would charge NOW, read before the install sends it.
+        // A paid skill shows its price and asks first; the install then pins what
+        // was shown, so a listing whose price moved in between is refused rather
+        // than charged (OSK-18042 — same convention as `store install`, OSK-12240).
+        let listing;
+        try {
+            listing = await data_provider_1.dataService.getSkill(args.id);
+        }
+        catch (err) {
+            return await this.failOnStoreMiss(err, args.id);
+        }
+        const charge = Number(listing.price) || 0;
+        if (charge > 0) {
+            const name = listing.displayName || listing.name || args.id;
+            // Printed before any prompt and even with --yes, so a scripted purchase
+            // still leaves the price it agreed to in its own output.
+            this.logToStderr(`${name} is a paid skill.`);
+            this.logToStderr(`  Price: ${(0, data_provider_1.formatStoreAcquisitionPrice)(charge)} USD`);
+            if (listing.offerVersionId) {
+                this.logToStderr(`  Offer: ${listing.offerVersionId}`);
+            }
+            const confirmed = await (0, prompt_1.confirmDestructive)(`Buy ${name} for ${(0, data_provider_1.formatStoreAcquisitionPrice)(charge)}?`, flags.yes).catch((err) => this.error(err.message, { exit: err.exit ?? 1 }));
+            if (!confirmed) {
+                this.log('Cancelled. Nothing was bought.');
+                return;
+            }
+        }
         let result;
         try {
             result = await data_provider_1.dataService.installSkill({
                 skillId: args.id,
                 targetAgentId,
+                // Pin what the person was shown: the charge always, the offer when
+                // there is one to charge under.
+                expectedPrice: charge,
+                ...(charge > 0 && listing.offerVersionId
+                    ? { expectedOfferVersionId: listing.offerVersionId }
+                    : {}),
             });
         }
         catch (err) {
-            await this.failOnStoreMiss(err, args.id);
+            return await this.failOnStoreMiss(err, args.id);
         }
         if (flags.json) {
             this.log(JSON.stringify(result, null, 2));

package/dist/commands/slack/send-as-agent.js

@@ -181,14 +181,14 @@ class SlackSendAsAgent extends base_command_1.BaseCommand {
 exports.default = SlackSendAsAgent;
 function generatedSessionIdempotencyKey(agentId, channelId, text) {
     const requestId = process.env.OVERSKY_SESSION_REQUEST_ID || process.env.OVERSKY_REQUEST_ID;
-    if (requestId)
-        return `session:slack:${requestId}`;
     const digest = crypto
         .createHash('sha256')
         .update(JSON.stringify({ agentId, channelId, text }))
         .digest('hex')
         .slice(0, 32);
-    return `session:slack:${digest}`;
+    if (requestId)
+        return `session:slack:${requestId}:${digest}`;
+    return `session:slack:${crypto.randomUUID()}`;
 }
 function formatSessionSlackResult(result, agentId, channelId) {
     const status = result.status || 'submitted';

package/dist/commands/spaces/create.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
-const outbox_1 = require("../../lib/outbox");
+const node_crypto_1 = require("node:crypto");
 const api_fetch_1 = require("../../lib/api-fetch");
 const base_command_1 = require("../../base-command");
 const label_ref_1 = require("../../lib/label-ref");
@@ -124,7 +124,13 @@ class SpacesCreate extends base_command_1.BaseCommand {
         // replay must collapse onto the write that already landed. A key sent only
         // on the replay would create a second Space instead — the exact duplicate
         // the outbox exists to prevent.
-        const idempotencyKey = (0, outbox_1.idempotencyKeyFor)('space-create', String(payload.title), JSON.stringify(payload));
+        //
+        // The key is fresh per invocation and travels with the queued write; it is
+        // never derived from the payload. A payload-derived key made a second
+        // `spaces create` with the same title and parent replay the first for 24
+        // hours, so a person who archived "Billing migration" and asked for a new
+        // one got the archived Space back, and their new work was filed inside it.
+        const idempotencyKey = `space-create_${(0, node_crypto_1.randomUUID)()}`;
         let created;
         try {
             // apiFetch rather than `dataService.createSpace`: the shared transport

package/dist/commands/spaces/guide.d.ts

@@ -0,0 +1,21 @@
+import { Command } from '@oclif/core';
+/** Local documentation must remain readable without credentials or a daemon. */
+export default class SpacesGuide extends Command {
+    static baseFlags: {
+        bare: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        token: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        raw: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    static description: string;
+    static args: {
+        section: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        offline: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    static examples: string[];
+    run(): Promise<void>;
+}

package/dist/commands/spaces/guide.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../base-command");
+const agent_guides_1 = require("../../lib/agent-guides");
+/** Local documentation must remain readable without credentials or a daemon. */
+class SpacesGuide extends core_1.Command {
+    static baseFlags = base_command_1.BaseCommand.baseFlags;
+    static description = 'Alias of `skrr guide spaces views` — the Space perspective map. `skrr guide spaces` reads the whole guide.';
+    static args = {
+        section: core_1.Args.string({
+            description: 'A section of the spaces guide to read instead of `views`',
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output the guide and source provenance as JSON' }),
+        offline: core_1.Flags.boolean({
+            description: 'Read the bundled release guides without checking credentials or the server',
+        }),
+    };
+    static examples = [
+        '<%= config.bin %> spaces guide',
+        '<%= config.bin %> spaces guide goals',
+        '<%= config.bin %> spaces guide --json',
+    ];
+    async run() {
+        const { args, flags } = await this.parse(SpacesGuide);
+        const read = await (0, agent_guides_1.readAgentGuide)({ id: 'spaces', section: args.section ?? 'views' }, flags);
+        if (!read.found)
+            return (0, agent_guides_1.writeAgentGuideMiss)(this, read.miss, flags.json);
+        if (flags.json) {
+            process.stdout.write((0, agent_guides_1.agentGuideJson)(read));
+            return;
+        }
+        process.stdout.write((0, data_provider_1.renderAgentGuideText)(read.response));
+    }
+}
+exports.default = SpacesGuide;

package/dist/commands/spaces/index.d.ts

@@ -9,7 +9,6 @@ declare const PERSPECTIVES: SpacePerspective[];
 export default class Spaces extends BaseCommand {
     static description: string;
     static examples: string[];
-    static aliases: string[];
     static flags: {
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };

package/dist/commands/spaces/index.js

@@ -102,12 +102,7 @@ const PERSPECTIVES = [
 exports.PERSPECTIVES = PERSPECTIVES;
 class Spaces extends base_command_1.BaseCommand {
     static description = 'Discover space perspectives and the CLI commands for each one';
-    static examples = [
-        '<%= config.bin %> spaces',
-        '<%= config.bin %> spaces --json',
-        '<%= config.bin %> spaces guide',
-    ];
-    static aliases = ['spaces guide'];
+    static examples = ['<%= config.bin %> spaces', '<%= config.bin %> spaces --json'];
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output the perspective guide as JSON' }),
     };

package/dist/commands/tasks/checkout.js

@@ -61,11 +61,10 @@ class TasksCheckout extends base_command_1.BaseCommand {
             result = await data_provider_1.dataService.checkoutTask({ taskId: taskRef, runId });
         }
         catch (err) {
-            const e = err;
-            if (e.status === 409) {
+            if ((0, base_command_1.apiRefusal)(err).code === 'TASK_ALREADY_CHECKED_OUT') {
                 // Dedicated exit code for "conflict" so scripts can distinguish
                 // "already checked out" from other failures without string-matching
-                // the message.
+                // the message. Other 409s have their own server-provided reason.
                 this.error('Task is already checked out by another run.', { exit: 9 });
             }
             this.handleApiError(err);

package/dist/commands/tasks/comments/add.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const credential_resolver_1 = require("../../../lib/credential-resolver");
 const unsupported_managed_task_write_1 = require("../../../lib/unsupported-managed-task-write");
@@ -188,7 +187,7 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
         // ONE key for the original attempt and any later replay — see the comment
         // in `spaces create`. A key sent only on the replay would post a second
         // comment whenever the original landed and its response was lost.
-        const idempotencyKey = (0, outbox_1.idempotencyKeyFor)('task-comment', taskRef, JSON.stringify(data));
+        const idempotencyKey = `task-comment_${(0, node_crypto_1.randomUUID)()}`;
         let result;
         try {
             // apiFetch rather than `dataService.addTaskComment`: the shared transport
@@ -225,9 +224,8 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
             }
             // A comment body is authored content: losing it to a 503 costs the
             // writing, not just a retry. Queue it durably instead (OSK-2806). The
-            // key is derived from the task + body so replaying the SAME comment
-            // collapses server-side rather than posting it twice; a genuinely
-            // different comment on the same task hashes differently and still posts.
+            // key is kept from the original attempt, so replaying this queued intent
+            // collapses server-side rather than posting it twice.
             this.queueWriteOrFail(err, {
                 command: 'tasks comments add',
                 summary: `comment on task ${taskRef}`,

package/dist/commands/tasks/complete.js

@@ -1,12 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.describePendingReview = describePendingReview;
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const task_closure_1 = require("../../lib/task-closure");
 const api_fetch_1 = require("../../lib/api-fetch");
 const task_recurrence_outcome_1 = require("../../lib/task-recurrence-outcome");
-const outbox_1 = require("../../lib/outbox");
 const prompt_1 = require("../../lib/prompt");
 const session_task_write_1 = require("../../lib/session-task-write");
 const task_resolver_1 = require("../../lib/task-resolver");
@@ -278,8 +278,7 @@ class TasksComplete extends base_command_1.BaseCommand {
             expectedSpecVersion: typeof input.expectedSpecVersion === 'number' ? input.expectedSpecVersion : undefined,
             ...(input.force === true ? { force: true } : {}),
         };
-        const idempotencyKey = optionalString(input.idempotencyKey) ||
-            (0, outbox_1.idempotencyKeyFor)('task-complete', identity.id, JSON.stringify(payload));
+        const idempotencyKey = optionalString(input.idempotencyKey) || `task-complete_${(0, node_crypto_1.randomUUID)()}`;
         const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('completion', identity.id);
         let taskId = identity.id;
         if (sessionWrite)

package/dist/commands/tasks/deliverable/add.d.ts

@@ -1,5 +1,5 @@
 import { BaseCommand } from '../../../base-command';
-export declare function defaultDeliverableIdempotencyKey(task: string, payload: Record<string, unknown>): string;
+export declare function defaultDeliverableIdempotencyKey(): string;
 /**
  * `skrr tasks deliverable add <task> <kind>:<identity>[@<location>]`
  *

package/dist/commands/tasks/deliverable/add.js

@@ -37,18 +37,16 @@ exports.defaultDeliverableIdempotencyKey = defaultDeliverableIdempotencyKey;
 exports.statusNotApplied = statusNotApplied;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const task_asset_upload_1 = require("../../../lib/task-asset-upload");
-const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_write_1 = require("../../../lib/session-task-write");
 const tasks_1 = require("../../../lib/tasks");
-function defaultDeliverableIdempotencyKey(task, payload) {
-    // A retry of one exact observation keeps its key. A new version, provider,
-    // digest, or expectation binding is a different observation.
-    return (0, outbox_1.idempotencyKeyFor)('task-deliverable', task, JSON.stringify(payload));
+function defaultDeliverableIdempotencyKey() {
+    return `task-deliverable_${(0, node_crypto_1.randomUUID)()}`;
 }
 /**
  * `skrr tasks deliverable add <task> <kind>:<identity>[@<location>]`
@@ -192,8 +190,7 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
             };
             const payload = {
                 ...observation,
-                idempotencyKey: flags['idempotency-key'] ||
-                    defaultDeliverableIdempotencyKey(args.task, observation),
+                idempotencyKey: flags['idempotency-key'] || defaultDeliverableIdempotencyKey(),
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('deliverable', args.task);
             result = sessionWrite

package/dist/commands/tasks/expectations/assess.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_write_1 = require("../../../lib/session-task-write");
@@ -135,7 +135,7 @@ class TasksExpectationsAssess extends base_command_1.BaseCommand {
                 // settling exactly one Expectation while reporting several.
                 idempotencyKey: reuseCallerKey
                     ? flags['idempotency-key']
-                    : (0, outbox_1.idempotencyKeyFor)('task-expectation-assessment', task.id, JSON.stringify({ expectationId: id, ...payload })),
+                    : `task-expectation-assessment_${(0, node_crypto_1.randomUUID)()}`,
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('assessment', task.id);
             return sessionWrite

package/dist/commands/tasks/guide.d.ts

@@ -1,10 +1,18 @@
 import { Command } from '@oclif/core';
 /** Local documentation must remain readable without credentials or a daemon. */
 export default class TasksGuide extends Command {
+    static baseFlags: {
+        bare: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        token: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        raw: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
     static description: string;
     static examples: string[];
     static flags: {
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        offline: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/tasks/guide.js

@@ -1,20 +1,33 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
-const task_operations_1 = require("../../lib/task-operations");
-const json_output_1 = require("../../lib/json-output");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../base-command");
+const agent_guides_1 = require("../../lib/agent-guides");
 /** Local documentation must remain readable without credentials or a daemon. */
 class TasksGuide extends core_1.Command {
-    static description = 'Find the commands for Task planning, dependencies, preflight, execution, and results';
-    static examples = ['<%= config.bin %> tasks guide', '<%= config.bin %> tasks guide --json'];
-    static flags = { json: core_1.Flags.boolean({ description: 'Output the local operations guide as JSON' }) };
+    static baseFlags = base_command_1.BaseCommand.baseFlags;
+    static description = 'Alias of `skrr guide tasks commands` — the Task command map. `skrr guide tasks` reads the whole guide.';
+    static examples = [
+        '<%= config.bin %> tasks guide',
+        '<%= config.bin %> tasks guide --json',
+    ];
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output the guide and source provenance as JSON' }),
+        offline: core_1.Flags.boolean({
+            description: 'Read the bundled release guides without checking credentials or the server',
+        }),
+    };
     async run() {
         const { flags } = await this.parse(TasksGuide);
-        if (flags.json)
-            this.log(JSON.stringify((0, json_output_1.withOk)((0, task_operations_1.taskOperationsGuide)(this.config.bin)), null, 2));
-        else
-            for (const line of (0, task_operations_1.taskOperationsGuideLines)(this.config.bin))
-                this.log(line);
+        const read = await (0, agent_guides_1.readAgentGuide)({ id: 'tasks', section: 'commands' }, flags);
+        if (!read.found)
+            return (0, agent_guides_1.writeAgentGuideMiss)(this, read.miss, flags.json);
+        if (flags.json) {
+            process.stdout.write((0, agent_guides_1.agentGuideJson)(read));
+            return;
+        }
+        process.stdout.write((0, data_provider_1.renderAgentGuideText)(read.response));
     }
 }
 exports.default = TasksGuide;

package/dist/commands/tasks/report.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
-const outbox_1 = require("../../lib/outbox");
 const task_report_1 = require("../../lib/task-report");
 const task_resolver_1 = require("../../lib/task-resolver");
 const tasks_1 = require("../../lib/tasks");
@@ -110,11 +110,13 @@ class TasksReport extends base_command_1.BaseCommand {
                 continue;
             }
             try {
-                const data = { ...parsed.value, idempotencyKey: (0, outbox_1.idempotencyKeyFor)('task-deliverable', task.id, ref) };
+                const data = { ...parsed.value, idempotencyKey: `task-deliverable_${(0, node_crypto_1.randomUUID)()}` };
                 const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('deliverable', task.id);
                 const recorded = sessionWrite
                     ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
-                        method: 'POST', body: data, credential: sessionWrite.credential,
+                        method: 'POST',
+                        body: data,
+                        credential: sessionWrite.credential,
                     })
                     : await data_provider_1.dataService.addTaskDeliverable(task.id, data);
                 resourceLinkIds.push(recorded.link.id);
@@ -153,12 +155,14 @@ class TasksReport extends base_command_1.BaseCommand {
         try {
             const data = {
                 ...payload,
-                idempotencyKey: (0, outbox_1.idempotencyKeyFor)('task-result', task.id, JSON.stringify(payload)),
+                idempotencyKey: `task-result_${(0, node_crypto_1.randomUUID)()}`,
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('result', task.id);
             result = sessionWrite
                 ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
-                    method: 'POST', body: data, credential: sessionWrite.credential,
+                    method: 'POST',
+                    body: data,
+                    credential: sessionWrite.credential,
                 })
                 : await data_provider_1.dataService.submitTaskResult({ taskId: task.id, data });
         }

package/dist/commands/tasks/resource/add.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const tasks_1 = require("../../../lib/tasks");
 const RESOURCE_ROLES = ['input', 'reference', 'evidence', 'attachment', 'deliverable'];
 class TasksResourceAdd extends base_command_1.BaseCommand {
@@ -58,8 +58,7 @@ class TasksResourceAdd extends base_command_1.BaseCommand {
             expectationIds: flags.expectation,
             resultId: flags['result-id'],
             runId: flags['run-id'],
-            idempotencyKey: flags['idempotency-key'] ||
-                (0, outbox_1.idempotencyKeyFor)('task-resource', args.task, JSON.stringify({ role: args.role, coordinate: parsed.value, status: flags.status })),
+            idempotencyKey: flags['idempotency-key'] || `task-resource_${(0, node_crypto_1.randomUUID)()}`,
         };
         let result;
         try {

package/dist/commands/tasks/result/submit.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const web_url_1 = require("../../../lib/web-url");
 const api_fetch_1 = require("../../../lib/api-fetch");
@@ -148,8 +148,7 @@ class TasksResultSubmit extends base_command_1.BaseCommand {
         try {
             const data = {
                 ...payload,
-                idempotencyKey: flags['idempotency-key'] ||
-                    (0, outbox_1.idempotencyKeyFor)('task-result', task.id, JSON.stringify(payload)),
+                idempotencyKey: flags['idempotency-key'] || `task-result_${(0, node_crypto_1.randomUUID)()}`,
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('result', task.id);
             result = sessionWrite