@skrr-ai/cli 0.1.116 → 0.1.118

package/dist/commands/store/install.js

@@ -5,6 +5,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const agent_ref_1 = require("../../lib/agent-ref");
 const prompt_1 = require("../../lib/prompt");
+const usd_micros_1 = require("../../lib/usd-micros");
 /**
  * One line per placement, said the same way the web install rail says it: the
  * difference is whether a stranger's instructions may reach a connected
@@ -23,6 +24,7 @@ class StoreInstall extends base_command_1.BaseCommand {
         '<%= config.bin %> store install agent_abc123 --run-on local',
         '<%= config.bin %> store install agent_abc123 --share-outcomes',
         '<%= config.bin %> store install agent_abc123 --yes --json',
+        '<%= config.bin %> store install agent_abc123 --yes --expected-price 4',
     ];
     static args = {
         agent: core_1.Args.string({
@@ -45,6 +47,10 @@ class StoreInstall extends base_command_1.BaseCommand {
             char: 'y',
             description: 'Confirm a paid purchase without prompting. The price and refund terms are still printed.',
         }),
+        'expected-price': core_1.Flags.string({
+            description: 'Refuse unless the purchase would charge exactly this USD amount (e.g. 4 or 2.50; 0 pins free). ' +
+                'Use it to pin the price the person named, not just the one read now.',
+        }),
         'run-on': core_1.Flags.string({
             description: 'Where its tools may run. cloud (the default) keeps tools off connected machines; ' +
                 'local lets tools use an available connected machine in your account, selected at run time. The agent runs in the cloud either way',
@@ -121,6 +127,21 @@ class StoreInstall extends base_command_1.BaseCommand {
             });
         }
         const charge = Number(quote.charge) || 0;
+        // A caller-pinned price binds the purchase to what the PERSON named, not
+        // just to what this command read: a listing that moved, or a pin that
+        // never matched, refuses here before anything is charged (OSK-18256).
+        const expectedMicros = (0, usd_micros_1.expectedPriceFlagMicros)(flags['expected-price']);
+        if (expectedMicros === null) {
+            this.error(`--expected-price must be a USD amount with at most 2 decimals, e.g. 4 or 2.50 (got "${flags['expected-price']}")`, { exit: 2 });
+        }
+        if (expectedMicros !== undefined && expectedMicros !== charge) {
+            this.failWithCliError({
+                message: (0, usd_micros_1.expectedPriceMismatchMessage)(expectedMicros, charge),
+                code: 'EXPECTED_PRICE_MISMATCH',
+                exit: 1,
+                retryable: false,
+            });
+        }
         if (charge > 0) {
             const name = quote.listingName || agentId;
             const version = quote.versionLabel ? ` v${quote.versionLabel}` : '';
@@ -134,8 +155,11 @@ class StoreInstall extends base_command_1.BaseCommand {
             this.logToStderr(`  Buyer terms:  ${quote.buyerTerms
                 ? `${quote.buyerTerms.termsVersion} — ${quote.buyerTerms.artifactUri}`
                 : 'not configured'}`);
+            // This path records no acceptance — answering yes buys only. Without a
+            // prior acceptance the server refuses MARKETPLACE_TERMS_ACCEPTANCE_REQUIRED.
+            this.logToStderr('  Buying requires those terms already accepted; a yes here does not accept them.');
             this.logToStderr(`  Offer:        ${quote.offerVersionId}`);
-            const confirmed = await (0, prompt_1.confirmDestructive)(`Buy ${name} for ${(0, data_provider_1.formatStoreAcquisitionPrice)(charge)} and accept the buyer terms?`, flags.yes).catch((err) => this.error(err.message, { exit: err.exit ?? 1 }));
+            const confirmed = await (0, prompt_1.confirmDestructive)(`Buy ${name} for ${(0, data_provider_1.formatStoreAcquisitionPrice)(charge)}?`, flags.yes).catch((err) => this.error(err.message, { exit: err.exit ?? 1 }));
             if (!confirmed) {
                 this.log('Cancelled. Nothing was bought.');
                 return;
@@ -168,7 +192,7 @@ class StoreInstall extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.log(JSON.stringify((0, usd_micros_1.withUsdPrices)(response), null, 2));
             return;
         }
         const installedId = response?.installedAgentId;

package/dist/commands/store/releases.js

@@ -4,6 +4,8 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
+const store_listing_1 = require("../../lib/store-listing");
+const usd_micros_1 = require("../../lib/usd-micros");
 /**
  * What versions of a published agent exist.
  *
@@ -34,7 +36,7 @@ class StoreReleases extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.log(JSON.stringify((0, usd_micros_1.withUsdPrices)(response), null, 2));
             return;
         }
         const items = response?.data ?? [];
@@ -45,7 +47,7 @@ class StoreReleases extends base_command_1.BaseCommand {
         (0, format_1.renderTable)(items.map((r) => ({
             id: String(r.id ?? '-'),
             version: String(r.versionLabel ?? '-'),
-            price: r.price ? String(r.price) : 'free',
+            price: (0, store_listing_1.formatListingPrice)(typeof r.price === 'number' ? r.price : null),
             published: r.publishedAt ? String(r.publishedAt).slice(0, 10) : '-',
             changelog: String(r.changelog ?? ''),
         })), [

package/dist/commands/store/show.js

@@ -6,6 +6,7 @@ const base_command_1 = require("../../base-command");
 const agent_ref_1 = require("../../lib/agent-ref");
 const format_1 = require("../../lib/format");
 const store_listing_1 = require("../../lib/store-listing");
+const usd_micros_1 = require("../../lib/usd-micros");
 const web_url_1 = require("../../lib/web-url");
 /** How many releases the detail view lists; `store releases` lists them all. */
 const RECENT_RELEASES = 5;
@@ -88,7 +89,7 @@ class StoreShow extends base_command_1.BaseCommand {
         const listingUrl = (0, web_url_1.webUrl)(this.cliConfig.baseURL, { kind: 'storeListing', agentId });
         const releaseRows = (releases.value?.data ?? []).slice(0, RECENT_RELEASES);
         if (flags.json) {
-            this.log(JSON.stringify({
+            this.log(JSON.stringify((0, usd_micros_1.withUsdPrices)({
                 agent: listing,
                 publisher: {
                     handle,
@@ -102,7 +103,7 @@ class StoreShow extends base_command_1.BaseCommand {
                 ...(releases.error ? { releasesError: releases.error } : {}),
                 url: listingUrl,
                 installCommand,
-            }, null, 2));
+            }), null, 2));
             return;
         }
         const version = listing.versionLabel ? `v${listing.versionLabel}` : 'no version label';

package/dist/commands/store/tip.js

@@ -42,12 +42,12 @@ class StoreTip extends base_command_1.BaseCommand {
         try {
             const result = await data_provider_1.dataService.tipStoreAgent(args.agentId, { amountMicros, tipId });
             if (flags.json) {
-                this.log(JSON.stringify(result, null, 2));
+                this.log(JSON.stringify((0, usd_micros_1.withUsdPrices)(result), null, 2));
                 return;
             }
             this.log(result.replayed
                 ? `Already tipped under ${tipId}; nothing new was charged.`
-                : `Tipped $${(result.amountMicros / 1_000_000).toFixed(2)} (tip ${tipId}).`);
+                : `Tipped ${(0, data_provider_1.formatStoreAcquisitionPrice)(result.amountMicros)} (tip ${tipId}).`);
         }
         catch (err) {
             this.handleApiError(err);

package/dist/commands/tasks/checkout.js

@@ -61,11 +61,10 @@ class TasksCheckout extends base_command_1.BaseCommand {
             result = await data_provider_1.dataService.checkoutTask({ taskId: taskRef, runId });
         }
         catch (err) {
-            const e = err;
-            if (e.status === 409) {
+            if ((0, base_command_1.apiRefusal)(err).code === 'TASK_ALREADY_CHECKED_OUT') {
                 // Dedicated exit code for "conflict" so scripts can distinguish
                 // "already checked out" from other failures without string-matching
-                // the message.
+                // the message. Other 409s have their own server-provided reason.
                 this.error('Task is already checked out by another run.', { exit: 9 });
             }
             this.handleApiError(err);

package/dist/commands/tasks/comments/add.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const credential_resolver_1 = require("../../../lib/credential-resolver");
 const unsupported_managed_task_write_1 = require("../../../lib/unsupported-managed-task-write");
@@ -188,7 +187,7 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
         // ONE key for the original attempt and any later replay — see the comment
         // in `spaces create`. A key sent only on the replay would post a second
         // comment whenever the original landed and its response was lost.
-        const idempotencyKey = (0, outbox_1.idempotencyKeyFor)('task-comment', taskRef, JSON.stringify(data));
+        const idempotencyKey = `task-comment_${(0, node_crypto_1.randomUUID)()}`;
         let result;
         try {
             // apiFetch rather than `dataService.addTaskComment`: the shared transport
@@ -225,9 +224,8 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
             }
             // A comment body is authored content: losing it to a 503 costs the
             // writing, not just a retry. Queue it durably instead (OSK-2806). The
-            // key is derived from the task + body so replaying the SAME comment
-            // collapses server-side rather than posting it twice; a genuinely
-            // different comment on the same task hashes differently and still posts.
+            // key is kept from the original attempt, so replaying this queued intent
+            // collapses server-side rather than posting it twice.
             this.queueWriteOrFail(err, {
                 command: 'tasks comments add',
                 summary: `comment on task ${taskRef}`,

package/dist/commands/tasks/complete.js

@@ -1,12 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.describePendingReview = describePendingReview;
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const task_closure_1 = require("../../lib/task-closure");
 const api_fetch_1 = require("../../lib/api-fetch");
 const task_recurrence_outcome_1 = require("../../lib/task-recurrence-outcome");
-const outbox_1 = require("../../lib/outbox");
 const prompt_1 = require("../../lib/prompt");
 const session_task_write_1 = require("../../lib/session-task-write");
 const task_resolver_1 = require("../../lib/task-resolver");
@@ -278,8 +278,7 @@ class TasksComplete extends base_command_1.BaseCommand {
             expectedSpecVersion: typeof input.expectedSpecVersion === 'number' ? input.expectedSpecVersion : undefined,
             ...(input.force === true ? { force: true } : {}),
         };
-        const idempotencyKey = optionalString(input.idempotencyKey) ||
-            (0, outbox_1.idempotencyKeyFor)('task-complete', identity.id, JSON.stringify(payload));
+        const idempotencyKey = optionalString(input.idempotencyKey) || `task-complete_${(0, node_crypto_1.randomUUID)()}`;
         const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('completion', identity.id);
         let taskId = identity.id;
         if (sessionWrite)

package/dist/commands/tasks/deliverable/add.d.ts

@@ -1,5 +1,5 @@
 import { BaseCommand } from '../../../base-command';
-export declare function defaultDeliverableIdempotencyKey(task: string, payload: Record<string, unknown>): string;
+export declare function defaultDeliverableIdempotencyKey(): string;
 /**
  * `skrr tasks deliverable add <task> <kind>:<identity>[@<location>]`
  *

package/dist/commands/tasks/deliverable/add.js

@@ -37,18 +37,16 @@ exports.defaultDeliverableIdempotencyKey = defaultDeliverableIdempotencyKey;
 exports.statusNotApplied = statusNotApplied;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const task_asset_upload_1 = require("../../../lib/task-asset-upload");
-const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_write_1 = require("../../../lib/session-task-write");
 const tasks_1 = require("../../../lib/tasks");
-function defaultDeliverableIdempotencyKey(task, payload) {
-    // A retry of one exact observation keeps its key. A new version, provider,
-    // digest, or expectation binding is a different observation.
-    return (0, outbox_1.idempotencyKeyFor)('task-deliverable', task, JSON.stringify(payload));
+function defaultDeliverableIdempotencyKey() {
+    return `task-deliverable_${(0, node_crypto_1.randomUUID)()}`;
 }
 /**
  * `skrr tasks deliverable add <task> <kind>:<identity>[@<location>]`
@@ -192,8 +190,7 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
             };
             const payload = {
                 ...observation,
-                idempotencyKey: flags['idempotency-key'] ||
-                    defaultDeliverableIdempotencyKey(args.task, observation),
+                idempotencyKey: flags['idempotency-key'] || defaultDeliverableIdempotencyKey(),
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('deliverable', args.task);
             result = sessionWrite

package/dist/commands/tasks/expectations/assess.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_write_1 = require("../../../lib/session-task-write");
@@ -135,7 +135,7 @@ class TasksExpectationsAssess extends base_command_1.BaseCommand {
                 // settling exactly one Expectation while reporting several.
                 idempotencyKey: reuseCallerKey
                     ? flags['idempotency-key']
-                    : (0, outbox_1.idempotencyKeyFor)('task-expectation-assessment', task.id, JSON.stringify({ expectationId: id, ...payload })),
+                    : `task-expectation-assessment_${(0, node_crypto_1.randomUUID)()}`,
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('assessment', task.id);
             return sessionWrite

package/dist/commands/tasks/guide.d.ts

@@ -1,10 +1,18 @@
 import { Command } from '@oclif/core';
 /** Local documentation must remain readable without credentials or a daemon. */
 export default class TasksGuide extends Command {
+    static baseFlags: {
+        bare: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        token: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        raw: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
     static description: string;
     static examples: string[];
     static flags: {
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        offline: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/tasks/guide.js

@@ -1,20 +1,33 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
-const task_operations_1 = require("../../lib/task-operations");
-const json_output_1 = require("../../lib/json-output");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../base-command");
+const agent_guides_1 = require("../../lib/agent-guides");
 /** Local documentation must remain readable without credentials or a daemon. */
 class TasksGuide extends core_1.Command {
-    static description = 'Find the commands for Task planning, dependencies, preflight, execution, and results';
-    static examples = ['<%= config.bin %> tasks guide', '<%= config.bin %> tasks guide --json'];
-    static flags = { json: core_1.Flags.boolean({ description: 'Output the local operations guide as JSON' }) };
+    static baseFlags = base_command_1.BaseCommand.baseFlags;
+    static description = 'Alias of `skrr guide tasks commands` — the Task command map. `skrr guide tasks` reads the whole guide.';
+    static examples = [
+        '<%= config.bin %> tasks guide',
+        '<%= config.bin %> tasks guide --json',
+    ];
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output the guide and source provenance as JSON' }),
+        offline: core_1.Flags.boolean({
+            description: 'Read the bundled release guides without checking credentials or the server',
+        }),
+    };
     async run() {
         const { flags } = await this.parse(TasksGuide);
-        if (flags.json)
-            this.log(JSON.stringify((0, json_output_1.withOk)((0, task_operations_1.taskOperationsGuide)(this.config.bin)), null, 2));
-        else
-            for (const line of (0, task_operations_1.taskOperationsGuideLines)(this.config.bin))
-                this.log(line);
+        const read = await (0, agent_guides_1.readAgentGuide)({ id: 'tasks', section: 'commands' }, flags);
+        if (!read.found)
+            return (0, agent_guides_1.writeAgentGuideMiss)(this, read.miss, flags.json);
+        if (flags.json) {
+            process.stdout.write((0, agent_guides_1.agentGuideJson)(read));
+            return;
+        }
+        process.stdout.write((0, data_provider_1.renderAgentGuideText)(read.response));
     }
 }
 exports.default = TasksGuide;

package/dist/commands/tasks/report.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
-const outbox_1 = require("../../lib/outbox");
 const task_report_1 = require("../../lib/task-report");
 const task_resolver_1 = require("../../lib/task-resolver");
 const tasks_1 = require("../../lib/tasks");
@@ -110,11 +110,13 @@ class TasksReport extends base_command_1.BaseCommand {
                 continue;
             }
             try {
-                const data = { ...parsed.value, idempotencyKey: (0, outbox_1.idempotencyKeyFor)('task-deliverable', task.id, ref) };
+                const data = { ...parsed.value, idempotencyKey: `task-deliverable_${(0, node_crypto_1.randomUUID)()}` };
                 const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('deliverable', task.id);
                 const recorded = sessionWrite
                     ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
-                        method: 'POST', body: data, credential: sessionWrite.credential,
+                        method: 'POST',
+                        body: data,
+                        credential: sessionWrite.credential,
                     })
                     : await data_provider_1.dataService.addTaskDeliverable(task.id, data);
                 resourceLinkIds.push(recorded.link.id);
@@ -153,12 +155,14 @@ class TasksReport extends base_command_1.BaseCommand {
         try {
             const data = {
                 ...payload,
-                idempotencyKey: (0, outbox_1.idempotencyKeyFor)('task-result', task.id, JSON.stringify(payload)),
+                idempotencyKey: `task-result_${(0, node_crypto_1.randomUUID)()}`,
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('result', task.id);
             result = sessionWrite
                 ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
-                    method: 'POST', body: data, credential: sessionWrite.credential,
+                    method: 'POST',
+                    body: data,
+                    credential: sessionWrite.credential,
                 })
                 : await data_provider_1.dataService.submitTaskResult({ taskId: task.id, data });
         }

package/dist/commands/tasks/resource/add.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const tasks_1 = require("../../../lib/tasks");
 const RESOURCE_ROLES = ['input', 'reference', 'evidence', 'attachment', 'deliverable'];
 class TasksResourceAdd extends base_command_1.BaseCommand {
@@ -58,8 +58,7 @@ class TasksResourceAdd extends base_command_1.BaseCommand {
             expectationIds: flags.expectation,
             resultId: flags['result-id'],
             runId: flags['run-id'],
-            idempotencyKey: flags['idempotency-key'] ||
-                (0, outbox_1.idempotencyKeyFor)('task-resource', args.task, JSON.stringify({ role: args.role, coordinate: parsed.value, status: flags.status })),
+            idempotencyKey: flags['idempotency-key'] || `task-resource_${(0, node_crypto_1.randomUUID)()}`,
         };
         let result;
         try {

package/dist/commands/tasks/result/submit.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const web_url_1 = require("../../../lib/web-url");
 const api_fetch_1 = require("../../../lib/api-fetch");
@@ -148,8 +148,7 @@ class TasksResultSubmit extends base_command_1.BaseCommand {
         try {
             const data = {
                 ...payload,
-                idempotencyKey: flags['idempotency-key'] ||
-                    (0, outbox_1.idempotencyKeyFor)('task-result', task.id, JSON.stringify(payload)),
+                idempotencyKey: flags['idempotency-key'] || `task-result_${(0, node_crypto_1.randomUUID)()}`,
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('result', task.id);
             result = sessionWrite

package/dist/commands/tasks/resume/save.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_write_1 = require("../../../lib/session-task-write");
@@ -51,8 +51,7 @@ class TasksResumeSave extends base_command_1.BaseCommand {
                 runId: flags['run-id'],
                 expectedSpecVersion: flags['spec-version'],
                 resume: resume,
-                idempotencyKey: flags['idempotency-key'] ||
-                    (0, outbox_1.idempotencyKeyFor)('task-resume', task.id, JSON.stringify(resume)),
+                idempotencyKey: flags['idempotency-key'] || `task-resume_${(0, node_crypto_1.randomUUID)()}`,
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('resume', task.id);
             result = sessionWrite

package/dist/commands/tasks/review.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
-const outbox_1 = require("../../lib/outbox");
 const task_resolver_1 = require("../../lib/task-resolver");
 const api_fetch_1 = require("../../lib/api-fetch");
 const session_task_write_1 = require("../../lib/session-task-write");
@@ -36,8 +36,7 @@ class TasksReview extends base_command_1.BaseCommand {
         try {
             const data = {
                 ...payload,
-                idempotencyKey: flags['idempotency-key'] ||
-                    (0, outbox_1.idempotencyKeyFor)('task-review', task.id, JSON.stringify(payload)),
+                idempotencyKey: flags['idempotency-key'] || `task-review_${(0, node_crypto_1.randomUUID)()}`,
             };
             const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('review', task.id);
             result = sessionWrite

package/dist/commands/tasks/triage.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
@@ -123,7 +124,7 @@ class TasksTriage extends base_command_1.BaseCommand {
             await data_provider_1.dataService.appendTaskWorkEvent({
                 taskId: task.id,
                 data: {
-                    idempotencyKey: `triage:${action}:${task.id}`,
+                    idempotencyKey: `task-triage_${(0, node_crypto_1.randomUUID)()}`,
                     kind: 'decision',
                     summary,
                     data: { action, ...(flags.reason ? { reason: flags.reason } : {}) },

package/dist/commands/tasks/updates/add.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
-const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_write_1 = require("../../../lib/session-task-write");
@@ -130,8 +130,7 @@ class TasksUpdatesAdd extends base_command_1.BaseCommand {
                 references.push(...refs);
             }
         }
-        const idempotencyKey = flags['idempotency-key'] ||
-            (0, outbox_1.idempotencyKeyFor)('task-update', task.id, JSON.stringify({ type: flags.type, summary: flags.summary, data, resume }));
+        const idempotencyKey = flags['idempotency-key'] || `task-update_${(0, node_crypto_1.randomUUID)()}`;
         let result;
         try {
             const payload = {