@skrr-ai/cli 0.1.63 → 0.1.65

package/dist/commands/goals/plan-now.d.ts

@@ -23,6 +23,12 @@ export declare function describePlannerReason(reason: string | null | undefined)
  * saying so.
  */
 export declare function plannerTickDidNotRun(result: GoalPlanNowResponse | undefined): boolean;
+/**
+ * HTTP 202: the tick was handed to the planner worker rather than awaited in
+ * the request. `processed` is absent by design — it is neither a success to
+ * count nor a skip to fail on, it is a hand-off (OSK-12748).
+ */
+export declare function plannerTickAccepted(result: GoalPlanNowResponse | undefined): boolean;
 /** Did the REQUEST give up, as opposed to the tick failing? */
 export declare function isPlannerRequestTimeout(err: unknown): boolean;
 /**

package/dist/commands/goals/plan-now.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.describePlannerReason = describePlannerReason;
 exports.plannerTickDidNotRun = plannerTickDidNotRun;
+exports.plannerTickAccepted = plannerTickAccepted;
 exports.isPlannerRequestTimeout = isPlannerRequestTimeout;
 exports.plannerTimeoutMessage = plannerTimeoutMessage;
 const core_1 = require("@oclif/core");
@@ -85,6 +86,14 @@ function describePlannerReason(reason) {
 function plannerTickDidNotRun(result) {
     return result?.ok === false || result?.processed === false;
 }
+/**
+ * HTTP 202: the tick was handed to the planner worker rather than awaited in
+ * the request. `processed` is absent by design — it is neither a success to
+ * count nor a skip to fail on, it is a hand-off (OSK-12748).
+ */
+function plannerTickAccepted(result) {
+    return result?.accepted === true;
+}
 /** Did the REQUEST give up, as opposed to the tick failing? */
 function isPlannerRequestTimeout(err) {
     const status = err?.status;
@@ -163,6 +172,22 @@ class GoalsPlanNow extends base_command_1.BaseCommand {
         }
         const r = result;
         const reasonText = describePlannerReason(r?.reason);
+        if (plannerTickAccepted(r)) {
+            // HTTP 202: the tick was handed to the planner worker — no counts exist
+            // yet, and that is the honest thing to print (OSK-12748). A 502 here used
+            // to mean "gateway gave up mid-run"; accepted means the request ended
+            // BEFORE the run, so nothing was left ambiguously in flight.
+            if (flags.json) {
+                this.log(JSON.stringify(r, null, 2));
+                return;
+            }
+            this.log(`Planner tick accepted for goal ${args.id} — running in the background.`);
+            if (r.backfilledCount) {
+                this.log(`  backfilled:  ${r.backfilledCount} existing task(s) tagged to the space.`);
+            }
+            this.log(`  Watch \`${this.config.bin} goals tasks ${args.id}\` for what it creates.`);
+            return;
+        }
         if (plannerTickDidNotRun(r)) {
             // The backfill runs BEFORE planning and unconditionally, so a skipped
             // tick can still have moved rows. Saying "nothing happened" would be the

package/dist/commands/memory/approvals/issue.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const scoped_memory_command_1 = require("../../../lib/scoped-memory-command");
+const prompt_1 = require("../../../lib/prompt");
 class MemoryApprovalsIssue extends scoped_memory_command_1.ScopedMemoryCommand {
     static description = 'Issue a short-lived user approval for Space PII or Agent-to-Space promotion';
     static flags = {
@@ -35,10 +36,12 @@ class MemoryApprovalsIssue extends scoped_memory_command_1.ScopedMemoryCommand {
                 this.error('--payload JSON is required for --purpose space_pii.', { exit: 2 });
             }
             try {
-                payload = JSON.parse(flags.payload);
+                payload = (0, prompt_1.parseJsonFlag)(flags.payload, '--payload');
             }
-            catch {
-                this.error('--payload must be valid JSON.', { exit: 2 });
+            catch (err) {
+                this.error(err instanceof Error ? err.message : '--payload must be valid JSON.', {
+                    exit: 2,
+                });
             }
         }
         else if (!flags['source-store'] || !flags['source-memory'] || !flags['source-version']) {

package/dist/commands/memory/stores/update.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const scoped_memory_command_1 = require("../../../lib/scoped-memory-command");
+const prompt_1 = require("../../../lib/prompt");
 class MemoryStoresUpdate extends scoped_memory_command_1.ScopedMemoryCommand {
     static description = 'Update Memory Store metadata with revision CAS';
     static flags = {
@@ -18,10 +19,12 @@ class MemoryStoresUpdate extends scoped_memory_command_1.ScopedMemoryCommand {
         const store = await this.resolveStore(flags, { write: true });
         let attributes;
         try {
-            attributes = JSON.parse(flags.attributes);
+            attributes = (0, prompt_1.parseJsonFlag)(flags.attributes, '--attributes');
         }
-        catch {
-            this.error('--attributes must be valid JSON.', { exit: 2 });
+        catch (err) {
+            this.error(err instanceof Error ? err.message : '--attributes must be valid JSON.', {
+                exit: 2,
+            });
         }
         const body = {
             attributes,

package/dist/commands/skills/visibility.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../base-command';
+export default class SkillsVisibility extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        public: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        private: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        price: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/skills/visibility.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../base-command");
+class SkillsVisibility extends base_command_1.BaseCommand {
+    static description = 'Publish or unpublish an owned skill with a governed Store release';
+    static examples = [
+        '<%= config.bin %> store artifacts release skill <skill-id> --versionLabel 1.0 --artifactRef skill:<skill-id> --permission-manifest <json>',
+        '<%= config.bin %> skills visibility <skill-id> --public',
+        '<%= config.bin %> skills visibility <skill-id> --private',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Skill ID', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        public: core_1.Flags.boolean({ description: 'Publish the skill', exclusive: ['private'] }),
+        private: core_1.Flags.boolean({ description: 'Unpublish the skill', exclusive: ['public'] }),
+        price: core_1.Flags.integer({ description: 'Listing price in micro-USD' }),
+        json: core_1.Flags.boolean({ description: 'Output the result as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(SkillsVisibility);
+        if (!flags.public && !flags.private) {
+            this.error('Pass either --public or --private.', { exit: 2 });
+        }
+        if (flags.private && flags.price !== undefined) {
+            this.error('--price applies only when publishing with --public.', { exit: 2 });
+        }
+        let result;
+        try {
+            result = await data_provider_1.dataService.setSkillVisibility({
+                skillId: args.id,
+                isPublic: flags.public === true,
+                ...(flags.price !== undefined ? { price: flags.price } : {}),
+            });
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+        if (flags.json) {
+            this.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        this.log(`Set skill ${args.id} visibility: ${flags.public ? 'public' : 'private'}`);
+    }
+}
+exports.default = SkillsVisibility;

package/dist/commands/store/admissions/approve.d.ts

@@ -11,6 +11,7 @@ export default class StoreAdmissionsApprove extends BaseCommand {
         id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
+        artifact: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         kind: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         note: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;

package/dist/commands/store/admissions/approve.js

@@ -13,6 +13,7 @@ class StoreAdmissionsApprove extends base_command_1.BaseCommand {
     static examples = [
         '<%= config.bin %> store admissions approve ar_abc123',
         '<%= config.bin %> store admissions approve skill_abc123 --kind skill',
+        '<%= config.bin %> store admissions approve store_release_abc123 --artifact',
     ];
     static args = {
         id: core_1.Args.string({
@@ -22,6 +23,7 @@ class StoreAdmissionsApprove extends base_command_1.BaseCommand {
         }),
     };
     static flags = {
+        artifact: core_1.Flags.boolean({ description: 'The id is a Skill or Action artifact release' }),
         kind: core_1.Flags.string({
             description: 'The id is a listing, not a release',
             options: ['skill', 'action'],
@@ -33,9 +35,13 @@ class StoreAdmissionsApprove extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(StoreAdmissionsApprove);
         try {
-            const result = flags.kind
-                ? await data_provider_1.dataService.approveStoreListingAdmission(flags.kind, args.id, flags.note)
-                : await data_provider_1.dataService.approveStoreReleaseAdmission(args.id, flags.note);
+            if (flags.artifact && flags.kind)
+                this.error('Use either --artifact or --kind');
+            const result = flags.artifact
+                ? await data_provider_1.dataService.approveStoreArtifactAdmission(args.id, flags.note)
+                : flags.kind
+                    ? await data_provider_1.dataService.approveStoreListingAdmission(flags.kind, args.id, flags.note)
+                    : await data_provider_1.dataService.approveStoreReleaseAdmission(args.id, flags.note);
             if (flags.json) {
                 this.log(JSON.stringify(result, null, 2));
                 return;

package/dist/commands/store/admissions/list.js

@@ -45,6 +45,12 @@ class StoreAdmissionsList extends base_command_1.BaseCommand {
                     name: l.name || '',
                     facets: (l.admission?.facets || []).join(','),
                 })),
+                ...(result.artifacts || []).map((a) => ({
+                    kind: `${a.entityType} artifact`,
+                    id: a.releaseId,
+                    name: `${a.entityId} v${a.versionLabel}`,
+                    facets: (a.admission?.facets || []).join(','),
+                })),
             ];
             if (!rows.length) {
                 this.log('Nothing waiting for review.');

package/dist/commands/store/admissions/refuse.d.ts

@@ -10,6 +10,7 @@ export default class StoreAdmissionsRefuse extends BaseCommand {
         id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
     };
     static flags: {
+        artifact: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         kind: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         note: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;

package/dist/commands/store/admissions/refuse.js

@@ -12,6 +12,7 @@ class StoreAdmissionsRefuse extends base_command_1.BaseCommand {
     static examples = [
         '<%= config.bin %> store admissions refuse ar_abc123 --note "unbounded network egress"',
         '<%= config.bin %> store admissions refuse act_abc123 --kind action --note "reason"',
+        '<%= config.bin %> store admissions refuse store_release_abc123 --artifact --note "reason"',
     ];
     static args = {
         id: core_1.Args.string({
@@ -21,6 +22,7 @@ class StoreAdmissionsRefuse extends base_command_1.BaseCommand {
         }),
     };
     static flags = {
+        artifact: core_1.Flags.boolean({ description: 'The id is a Skill or Action artifact release' }),
         kind: core_1.Flags.string({
             description: 'The id is a listing, not a release',
             options: ['skill', 'action'],
@@ -32,9 +34,13 @@ class StoreAdmissionsRefuse extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(StoreAdmissionsRefuse);
         try {
-            const result = flags.kind
-                ? await data_provider_1.dataService.refuseStoreListingAdmission(flags.kind, args.id, flags.note || '')
-                : await data_provider_1.dataService.refuseStoreReleaseAdmission(args.id, flags.note || '');
+            if (flags.artifact && flags.kind)
+                this.error('Use either --artifact or --kind');
+            const result = flags.artifact
+                ? await data_provider_1.dataService.refuseStoreArtifactAdmission(args.id, flags.note || '')
+                : flags.kind
+                    ? await data_provider_1.dataService.refuseStoreListingAdmission(flags.kind, args.id, flags.note || '')
+                    : await data_provider_1.dataService.refuseStoreReleaseAdmission(args.id, flags.note || '');
             if (flags.json) {
                 this.log(JSON.stringify(result, null, 2));
                 return;

package/dist/commands/store/artifacts/release.d.ts

@@ -1,6 +1,8 @@
 import { BaseCommand } from '../../../base-command';
+export declare function parsePermissionManifest(value: string): Record<string, string[]>;
 export default class StoreArtifactsRelease extends BaseCommand {
     static description: string;
+    static examples: string[];
     static args: {
         entityType: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
         entityId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
@@ -8,6 +10,7 @@ export default class StoreArtifactsRelease extends BaseCommand {
     static flags: {
         versionLabel: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
         artifactRef: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'permission-manifest': import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
         price: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspaceId: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;

package/dist/commands/store/artifacts/release.js

@@ -1,10 +1,38 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.parsePermissionManifest = parsePermissionManifest;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
+const permissionFields = [
+    'tools',
+    'connectors',
+    'dataScopes',
+    'networkDomains',
+    'secretNames',
+];
+function parsePermissionManifest(value) {
+    const parsed = JSON.parse(value);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error('The permission manifest must be an object');
+    }
+    const manifest = parsed;
+    if (Object.keys(manifest).some((key) => !permissionFields.includes(key)) ||
+        permissionFields.some((key) => {
+            const entries = manifest[key];
+            return (!Array.isArray(entries) ||
+                !entries.every((entry) => typeof entry === 'string' && entry.trim() === entry && entry.length > 0) ||
+                new Set(entries).size !== entries.length);
+        })) {
+        throw new Error('The permission manifest must explicitly declare five arrays of unique, non-empty strings');
+    }
+    return manifest;
+}
 class StoreArtifactsRelease extends base_command_1.BaseCommand {
     static description = 'Publish an immutable dependency release for your own skill or action';
+    static examples = [
+        '<%= config.bin %> store artifacts release skill <skill-id> --versionLabel 1.0 --artifactRef skill:<skill-id> --permission-manifest <json>',
+    ];
     static args = {
         entityType: core_1.Args.string({ required: true, ignoreStdin: true }),
         entityId: core_1.Args.string({ required: true, ignoreStdin: true }),
@@ -12,6 +40,10 @@ class StoreArtifactsRelease extends base_command_1.BaseCommand {
     static flags = {
         versionLabel: core_1.Flags.string({ required: true }),
         artifactRef: core_1.Flags.string({ required: true }),
+        'permission-manifest': core_1.Flags.string({
+            required: true,
+            description: 'Explicit JSON declaration of tools, connectors, dataScopes, networkDomains, and secretNames used by this release',
+        }),
         price: core_1.Flags.integer({ description: 'Price in micro-USD; omit for zero-price' }),
         workspaceId: core_1.Flags.string({ description: 'Publish as this workspace' }),
         json: core_1.Flags.boolean({ description: 'Output JSON' }),
@@ -19,9 +51,19 @@ class StoreArtifactsRelease extends base_command_1.BaseCommand {
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(StoreArtifactsRelease);
+        let permissionManifest;
+        try {
+            permissionManifest = parsePermissionManifest(flags['permission-manifest']);
+        }
+        catch {
+            this.error('--permission-manifest must declare tools, connectors, dataScopes, networkDomains, and secretNames as string arrays', {
+                exit: 2,
+            });
+        }
         const result = await data_provider_1.dataService.publishStoreArtifactRelease(args.entityType, args.entityId, {
             versionLabel: flags.versionLabel,
             artifactRef: flags.artifactRef,
+            permissionManifest,
             ...(flags.price !== undefined ? { price: flags.price } : {}),
             ...(flags.workspaceId ? { publishAs: { workspaceId: flags.workspaceId } } : {}),
         });

package/dist/commands/store/installs.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from '../../base-command';
+/** The buyer's installed copies, including stopped copies and their source releases. */
+export default class StoreInstalls extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/store/installs.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../base-command");
+const format_1 = require("../../lib/format");
+/** The buyer's installed copies, including stopped copies and their source releases. */
+class StoreInstalls extends base_command_1.BaseCommand {
+    static description = 'List your Store installs and the releases they came from';
+    static examples = [
+        '<%= config.bin %> store installs',
+        '<%= config.bin %> store installs --json',
+    ];
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(StoreInstalls);
+        let response;
+        try {
+            response = await data_provider_1.dataService.getStoreInstalls();
+        }
+        catch (error) {
+            this.handleApiError(error);
+            return;
+        }
+        const installs = response?.installs ?? [];
+        if (flags.json) {
+            this.log(JSON.stringify({ object: 'list', data: installs }, null, 2));
+            return;
+        }
+        if (installs.length === 0) {
+            this.log('No Store installs found.');
+            return;
+        }
+        (0, format_1.renderTable)(installs.map((install) => ({
+            agent: install.agentId,
+            copy: install.installedAgentId ?? '-',
+            release: install.installedReleaseId ?? '-',
+            version: install.installedVersionLabel ?? '-',
+            state: install.copyMissing ? 'copy missing' : install.stopReason ? 'stopped' : 'installed',
+            reason: install.stopReason ?? '-',
+        })), [
+            { key: 'agent', header: 'LISTING' },
+            { key: 'copy', header: 'YOUR COPY' },
+            { key: 'release', header: 'RELEASE' },
+            { key: 'version', header: 'VERSION' },
+            { key: 'state', header: 'STATE' },
+            { key: 'reason', header: 'REASON', maxWidth: 40 },
+        ], (line) => this.log(line));
+    }
+}
+exports.default = StoreInstalls;

package/dist/commands/store/updates.js

@@ -82,7 +82,7 @@ class StoreUpdates extends base_command_1.BaseCommand {
                     channel: install.updatePolicy ?? 'manual',
                     have,
                     waiting: update.versionLabel ?? '-',
-                    detail: 'applies cleanly',
+                    detail: 'available; changes and capabilities are checked when you update',
                 });
             }
             if (install.stopReason) {

package/dist/commands/tasks/comments/list.d.ts

@@ -1,4 +1,14 @@
 import { BaseCommand } from '../../../base-command';
+/**
+ * Comments arrive flat. Re-thread them so a reply prints under its parent —
+ * the flattened order hid which remark a reply answered (OSK-12743). Each
+ * level keeps the page's own order; a reply whose parent is on another page
+ * (or deleted) keeps its position as a root rather than vanishing.
+ */
+export declare function threadComments(items: Array<Record<string, unknown>>): Array<{
+    c: Record<string, unknown>;
+    depth: number;
+}>;
 export default class TasksCommentsList extends BaseCommand {
     static description: string;
     static examples: string[];

package/dist/commands/tasks/comments/list.js

@@ -1,11 +1,46 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.threadComments = threadComments;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
 const principal_display_1 = require("../../../lib/principal-display");
 const task_resolver_1 = require("../../../lib/task-resolver");
+/**
+ * Comments arrive flat. Re-thread them so a reply prints under its parent —
+ * the flattened order hid which remark a reply answered (OSK-12743). Each
+ * level keeps the page's own order; a reply whose parent is on another page
+ * (or deleted) keeps its position as a root rather than vanishing.
+ */
+function threadComments(items) {
+    const byId = new Map(items.map((c) => [String(c.id ?? c._id), c]));
+    const children = new Map();
+    const roots = [];
+    for (const c of items) {
+        const parentId = c.parentCommentId ? String(c.parentCommentId) : null;
+        if (parentId && byId.has(parentId)) {
+            const siblings = children.get(parentId) ?? [];
+            siblings.push(c);
+            children.set(parentId, siblings);
+        }
+        else {
+            roots.push(c);
+        }
+    }
+    const threaded = [];
+    const emit = (c, depth) => {
+        threaded.push({ c, depth });
+        // The list arrives newest-first; inside a thread, oldest→newest reads as
+        // the conversation happened.
+        for (const child of (children.get(String(c.id ?? c._id)) ?? []).slice().reverse()) {
+            emit(child, depth + 1);
+        }
+    };
+    for (const root of roots)
+        emit(root, 0);
+    return threaded;
+}
 class TasksCommentsList extends base_command_1.BaseCommand {
     static description = 'List comments on a task';
     static examples = [
@@ -72,15 +107,24 @@ class TasksCommentsList extends base_command_1.BaseCommand {
         // space roster (or the caller's own record) can see them; ids that cannot
         // resolve print unchanged.
         const principalNames = await (0, principal_display_1.resolvePrincipalNames)(items.map((c) => c.authorAgentId ?? c.authorUserId ?? c.author));
-        const rows = items.map((c) => ({
-            time: (0, format_1.localTime)(c.createdAt),
-            // The server enriches authors directly (_authorUserName/_authorAgentName);
-            // the roster lookup is the fallback for a deployment that predates it.
-            author: String(c._authorUserName ?? c._authorAgentName ?? '') ||
-                (0, principal_display_1.displayPrincipal)(c.authorAgentId ?? c.authorUserId ?? c.author, principalNames),
-            body: (0, format_1.truncate)(String(c.body ?? c.content ?? '-'), 60),
-            id: String(c.id ?? c._id ?? '-'),
-        }));
+        const threaded = threadComments(items);
+        const rows = threaded.map(({ c, depth }) => {
+            const reactions = c.reactions
+                ?.map((r) => `${r.emoji ?? ''}${r.count ?? ''}`)
+                .filter(Boolean)
+                .join(' ');
+            const state = c.status === 'resolved' || c.resolvedAt ? 'resolved' : undefined;
+            const suffix = [state, reactions].filter(Boolean).join(' · ');
+            return {
+                time: (0, format_1.localTime)(c.createdAt),
+                // The server enriches authors directly (_authorUserName/_authorAgentName);
+                // the roster lookup is the fallback for a deployment that predates it.
+                author: String(c._authorUserName ?? c._authorAgentName ?? '') ||
+                    (0, principal_display_1.displayPrincipal)(c.authorAgentId ?? c.authorUserId ?? c.author, principalNames),
+                body: (0, format_1.truncate)(String(c.body ?? c.content ?? '-'), 60) + (suffix ? `  [${suffix}]` : ''),
+                id: `${depth > 0 ? '  '.repeat(depth) + '↳ ' : ''}${String(c.id ?? c._id ?? '-')}`,
+            };
+        });
         (0, format_1.renderTable)(rows, [
             { key: 'time', header: 'TIME' },
             { key: 'author', header: 'AUTHOR', maxWidth: 30 },

package/dist/commands/tasks/comments/react.js

@@ -14,7 +14,9 @@ class TasksCommentsReact extends base_command_1.BaseCommand {
         commentId: core_1.Args.string({ description: 'Comment UUID', required: true, ignoreStdin: true }),
     };
     static flags = {
-        task: core_1.Flags.string({ description: 'Task ID; overrides daemon runtime context' }),
+        task: core_1.Flags.string({
+            description: 'Task ID; required when not running inside a daemon task session (OSK-12742)',
+        }),
         emoji: core_1.Flags.string({ description: 'Emoji reaction (up to 16 characters)', required: true }),
         json: core_1.Flags.boolean({ description: 'Output the raw response as JSON' }),
     };

package/dist/commands/tasks/deliverable/add.d.ts

@@ -1,4 +1,5 @@
 import { BaseCommand } from '../../../base-command';
+export declare function defaultDeliverableIdempotencyKey(task: string, payload: Record<string, unknown>): string;
 /**
  * `skrr tasks deliverable add <task> <kind>:<identity>[@<location>]`
  *

package/dist/commands/tasks/deliverable/add.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultDeliverableIdempotencyKey = defaultDeliverableIdempotencyKey;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const core_1 = require("@oclif/core");
@@ -43,6 +44,11 @@ const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
 const tasks_1 = require("../../../lib/tasks");
+function defaultDeliverableIdempotencyKey(task, payload) {
+    // A retry of one exact observation keeps its key. A new version, provider,
+    // digest, or expectation binding is a different observation.
+    return (0, outbox_1.idempotencyKeyFor)('task-deliverable', task, JSON.stringify(payload));
+}
 /**
  * `skrr tasks deliverable add <task> <kind>:<identity>[@<location>]`
  *
@@ -155,6 +161,7 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
                 taskId: args.task,
                 filePath: archivePath,
                 identity: parsed.value.identity,
+                kind: parsed.value.kind,
                 title: flags.title,
                 expectationIds: flags.expectation,
                 requestedStatus: status,
@@ -170,7 +177,7 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
         }
         let result;
         try {
-            const payload = {
+            const observation = {
                 ...parsed.value,
                 ...(status ? { status } : {}),
                 title: flags.title,
@@ -179,8 +186,11 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
                 contentDigest: flags['content-digest'],
                 expectationIds: flags.expectation,
                 runId: flags['run-id'],
+            };
+            const payload = {
+                ...observation,
                 idempotencyKey: flags['idempotency-key'] ||
-                    (0, outbox_1.idempotencyKeyFor)('task-deliverable', args.task, JSON.stringify({ coordinate: parsed.value, status })),
+                    defaultDeliverableIdempotencyKey(args.task, observation),
             };
             const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('deliverable');
             result = sessionPath
@@ -249,6 +259,7 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
                 role: 'deliverable',
                 ledger: {
                     identity: opts.identity,
+                    kind: opts.kind,
                     title: opts.title,
                     expectationIds: opts.expectationIds,
                 },

package/dist/commands/tasks/deliverable/list.js

@@ -23,6 +23,20 @@ function fidelityLabel(value) {
             return value || 'unknown fidelity';
     }
 }
+/**
+ * One coordinate CAN name several pinned versions — v1 and v2 of the same
+ * report share title and locator, so without a discriminator the rows look
+ * identical (OSK-12798). The content digest is the honest one when pinned;
+ * otherwise the version's own id suffix is the distinguisher.
+ */
+function versionLabel(item) {
+    if (item.contentDigest) {
+        const [algo, hex] = item.contentDigest.split(':');
+        return `digest ${algo}:${(hex || '').slice(0, 12)}`;
+    }
+    const id = (item.resourceVersionId || '').replace(/^wrv_/, '');
+    return id ? `version ${id.slice(0, 12)}` : 'version unpinned';
+}
 class TasksDeliverableList extends base_command_1.BaseCommand {
     static description = 'List Deliverables with exact version, location, and evidence state';
     static args = {
@@ -51,7 +65,7 @@ class TasksDeliverableList extends base_command_1.BaseCommand {
             this.log(`${item.linkId} · ${item.kind}${item.format ? `/${item.format}` : ''} · ` +
                 `${item.title || item.identity || '(untitled)'}\n` +
                 `  ${item.location || 'no locator'} · ${fidelityLabel(item.versionFidelity)} · ` +
-                `${item.status} · ${item.evidenceLevel}`);
+                `${versionLabel(item)} · ${item.status} · ${item.evidenceLevel}`);
         }
     }
 }