@skrr-ai/cli 0.1.64 → 0.1.66

package/dist/commands/store/updates.js

@@ -14,7 +14,7 @@ const format_1 = require("../../lib/format");
  *
  * Three states, kept apart because they ask for three different things:
  *
- *   ready    a same-major release that will apply cleanly
+ *   ready    a same-major release is available; eligibility is checked on apply
  *   review   one that could not be applied on its own — you and the publisher
  *            both changed the same field, the release widened capabilities, or
  *            the version your copy came from is unknown
@@ -82,7 +82,7 @@ class StoreUpdates extends base_command_1.BaseCommand {
                     channel: install.updatePolicy ?? 'manual',
                     have,
                     waiting: update.versionLabel ?? '-',
-                    detail: 'applies cleanly',
+                    detail: 'available; checked on apply',
                 });
             }
             if (install.stopReason) {
@@ -122,7 +122,7 @@ class StoreUpdates extends base_command_1.BaseCommand {
             { key: 'detail', header: 'WHY', maxWidth: 46 },
         ], (line) => this.log(line));
         this.log('');
-        this.log('ready  → skrr store update <agent>');
+        this.log('ready  → available; checks run on apply: skrr store update <agent>');
         this.log('review → skrr store update <agent> --strategy replace   (takes the publisher version)');
         this.log('widened → skrr store update <agent> --accept-capabilities   (or --decline to keep yours)');
         // No command: `store install` refuses a listing you already own, and

package/dist/commands/tasks/comments/list.d.ts

@@ -1,4 +1,14 @@
 import { BaseCommand } from '../../../base-command';
+/**
+ * Comments arrive flat. Re-thread them so a reply prints under its parent —
+ * the flattened order hid which remark a reply answered (OSK-12743). Each
+ * level keeps the page's own order; a reply whose parent is on another page
+ * (or deleted) keeps its position as a root rather than vanishing.
+ */
+export declare function threadComments(items: Array<Record<string, unknown>>): Array<{
+    c: Record<string, unknown>;
+    depth: number;
+}>;
 export default class TasksCommentsList extends BaseCommand {
     static description: string;
     static examples: string[];

package/dist/commands/tasks/comments/list.js

@@ -1,11 +1,46 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.threadComments = threadComments;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
 const principal_display_1 = require("../../../lib/principal-display");
 const task_resolver_1 = require("../../../lib/task-resolver");
+/**
+ * Comments arrive flat. Re-thread them so a reply prints under its parent —
+ * the flattened order hid which remark a reply answered (OSK-12743). Each
+ * level keeps the page's own order; a reply whose parent is on another page
+ * (or deleted) keeps its position as a root rather than vanishing.
+ */
+function threadComments(items) {
+    const byId = new Map(items.map((c) => [String(c.id ?? c._id), c]));
+    const children = new Map();
+    const roots = [];
+    for (const c of items) {
+        const parentId = c.parentCommentId ? String(c.parentCommentId) : null;
+        if (parentId && byId.has(parentId)) {
+            const siblings = children.get(parentId) ?? [];
+            siblings.push(c);
+            children.set(parentId, siblings);
+        }
+        else {
+            roots.push(c);
+        }
+    }
+    const threaded = [];
+    const emit = (c, depth) => {
+        threaded.push({ c, depth });
+        // The list arrives newest-first; inside a thread, oldest→newest reads as
+        // the conversation happened.
+        for (const child of (children.get(String(c.id ?? c._id)) ?? []).slice().reverse()) {
+            emit(child, depth + 1);
+        }
+    };
+    for (const root of roots)
+        emit(root, 0);
+    return threaded;
+}
 class TasksCommentsList extends base_command_1.BaseCommand {
     static description = 'List comments on a task';
     static examples = [
@@ -72,15 +107,24 @@ class TasksCommentsList extends base_command_1.BaseCommand {
         // space roster (or the caller's own record) can see them; ids that cannot
         // resolve print unchanged.
         const principalNames = await (0, principal_display_1.resolvePrincipalNames)(items.map((c) => c.authorAgentId ?? c.authorUserId ?? c.author));
-        const rows = items.map((c) => ({
-            time: (0, format_1.localTime)(c.createdAt),
-            // The server enriches authors directly (_authorUserName/_authorAgentName);
-            // the roster lookup is the fallback for a deployment that predates it.
-            author: String(c._authorUserName ?? c._authorAgentName ?? '') ||
-                (0, principal_display_1.displayPrincipal)(c.authorAgentId ?? c.authorUserId ?? c.author, principalNames),
-            body: (0, format_1.truncate)(String(c.body ?? c.content ?? '-'), 60),
-            id: String(c.id ?? c._id ?? '-'),
-        }));
+        const threaded = threadComments(items);
+        const rows = threaded.map(({ c, depth }) => {
+            const reactions = c.reactions
+                ?.map((r) => `${r.emoji ?? ''}${r.count ?? ''}`)
+                .filter(Boolean)
+                .join(' ');
+            const state = c.status === 'resolved' || c.resolvedAt ? 'resolved' : undefined;
+            const suffix = [state, reactions].filter(Boolean).join(' · ');
+            return {
+                time: (0, format_1.localTime)(c.createdAt),
+                // The server enriches authors directly (_authorUserName/_authorAgentName);
+                // the roster lookup is the fallback for a deployment that predates it.
+                author: String(c._authorUserName ?? c._authorAgentName ?? '') ||
+                    (0, principal_display_1.displayPrincipal)(c.authorAgentId ?? c.authorUserId ?? c.author, principalNames),
+                body: (0, format_1.truncate)(String(c.body ?? c.content ?? '-'), 60) + (suffix ? `  [${suffix}]` : ''),
+                id: `${depth > 0 ? '  '.repeat(depth) + '↳ ' : ''}${String(c.id ?? c._id ?? '-')}`,
+            };
+        });
         (0, format_1.renderTable)(rows, [
             { key: 'time', header: 'TIME' },
             { key: 'author', header: 'AUTHOR', maxWidth: 30 },

package/dist/commands/tasks/comments/react.js

@@ -14,7 +14,9 @@ class TasksCommentsReact extends base_command_1.BaseCommand {
         commentId: core_1.Args.string({ description: 'Comment UUID', required: true, ignoreStdin: true }),
     };
     static flags = {
-        task: core_1.Flags.string({ description: 'Task ID; overrides daemon runtime context' }),
+        task: core_1.Flags.string({
+            description: 'Task ID; required when not running inside a daemon task session (OSK-12742)',
+        }),
         emoji: core_1.Flags.string({ description: 'Emoji reaction (up to 16 characters)', required: true }),
         json: core_1.Flags.boolean({ description: 'Output the raw response as JSON' }),
     };

package/dist/commands/tasks/deliverable/add.d.ts

@@ -1,4 +1,5 @@
 import { BaseCommand } from '../../../base-command';
+export declare function defaultDeliverableIdempotencyKey(task: string, payload: Record<string, unknown>): string;
 /**
  * `skrr tasks deliverable add <task> <kind>:<identity>[@<location>]`
  *

package/dist/commands/tasks/deliverable/add.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultDeliverableIdempotencyKey = defaultDeliverableIdempotencyKey;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const core_1 = require("@oclif/core");
@@ -43,6 +44,11 @@ const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
 const tasks_1 = require("../../../lib/tasks");
+function defaultDeliverableIdempotencyKey(task, payload) {
+    // A retry of one exact observation keeps its key. A new version, provider,
+    // digest, or expectation binding is a different observation.
+    return (0, outbox_1.idempotencyKeyFor)('task-deliverable', task, JSON.stringify(payload));
+}
 /**
  * `skrr tasks deliverable add <task> <kind>:<identity>[@<location>]`
  *
@@ -155,6 +161,7 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
                 taskId: args.task,
                 filePath: archivePath,
                 identity: parsed.value.identity,
+                kind: parsed.value.kind,
                 title: flags.title,
                 expectationIds: flags.expectation,
                 requestedStatus: status,
@@ -170,7 +177,7 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
         }
         let result;
         try {
-            const payload = {
+            const observation = {
                 ...parsed.value,
                 ...(status ? { status } : {}),
                 title: flags.title,
@@ -179,8 +186,11 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
                 contentDigest: flags['content-digest'],
                 expectationIds: flags.expectation,
                 runId: flags['run-id'],
+            };
+            const payload = {
+                ...observation,
                 idempotencyKey: flags['idempotency-key'] ||
-                    (0, outbox_1.idempotencyKeyFor)('task-deliverable', args.task, JSON.stringify({ coordinate: parsed.value, status })),
+                    defaultDeliverableIdempotencyKey(args.task, observation),
             };
             const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('deliverable');
             result = sessionPath
@@ -249,6 +259,7 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
                 role: 'deliverable',
                 ledger: {
                     identity: opts.identity,
+                    kind: opts.kind,
                     title: opts.title,
                     expectationIds: opts.expectationIds,
                 },

package/dist/commands/tasks/deliverable/list.js

@@ -23,6 +23,20 @@ function fidelityLabel(value) {
             return value || 'unknown fidelity';
     }
 }
+/**
+ * One coordinate CAN name several pinned versions — v1 and v2 of the same
+ * report share title and locator, so without a discriminator the rows look
+ * identical (OSK-12798). The content digest is the honest one when pinned;
+ * otherwise the version's own id suffix is the distinguisher.
+ */
+function versionLabel(item) {
+    if (item.contentDigest) {
+        const [algo, hex] = item.contentDigest.split(':');
+        return `digest ${algo}:${(hex || '').slice(0, 12)}`;
+    }
+    const id = (item.resourceVersionId || '').replace(/^wrv_/, '');
+    return id ? `version ${id.slice(0, 12)}` : 'version unpinned';
+}
 class TasksDeliverableList extends base_command_1.BaseCommand {
     static description = 'List Deliverables with exact version, location, and evidence state';
     static args = {
@@ -51,7 +65,7 @@ class TasksDeliverableList extends base_command_1.BaseCommand {
             this.log(`${item.linkId} · ${item.kind}${item.format ? `/${item.format}` : ''} · ` +
                 `${item.title || item.identity || '(untitled)'}\n` +
                 `  ${item.location || 'no locator'} · ${fidelityLabel(item.versionFidelity)} · ` +
-                `${item.status} · ${item.evidenceLevel}`);
+                `${versionLabel(item)} · ${item.status} · ${item.evidenceLevel}`);
         }
     }
 }

package/dist/commands/tasks/lifecycle/transition.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const task_lifecycle_output_1 = require("../../../lib/task-lifecycle-output");
+const prompt_1 = require("../../../lib/prompt");
 class TasksLifecycleTransition extends base_command_1.BaseCommand {
     static description = 'Apply a declared lifecycle transition — records effects and advances the stage';
     static args = {
@@ -33,10 +34,12 @@ class TasksLifecycleTransition extends base_command_1.BaseCommand {
         let payload;
         if (flags.payload) {
             try {
-                payload = JSON.parse(flags.payload);
+                payload = (0, prompt_1.parseJsonFlag)(flags.payload, '--payload');
             }
-            catch {
-                this.error('--payload must be valid JSON.', { exit: 2 });
+            catch (err) {
+                this.error(err instanceof Error ? err.message : '--payload must be valid JSON.', {
+                    exit: 2,
+                });
             }
             if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
                 this.error('--payload must be a JSON object.', { exit: 2 });

package/dist/commands/tasks/plan/run-update.js

@@ -60,7 +60,7 @@ class TasksPlanRunUpdate extends base_command_1.BaseCommand {
         let body;
         try {
             if (flags.patch !== undefined) {
-                const parsed = JSON.parse(flags.patch);
+                const parsed = (0, prompt_1.parseJsonFlag)(flags.patch, '--patch');
                 if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
                     throw new Error('--patch must be a JSON object');
                 }

package/dist/commands/tasks/result/submit.js

@@ -210,7 +210,7 @@ class TasksResultSubmit extends base_command_1.BaseCommand {
         // which the call did not carry. Submitting a Result is not closing a Task;
         // the response now reports where it stands and this prints exactly that.
         this.log(`Submitted Result v${result.result.version} for ${task.id}.`);
-        for (const line of (0, task_closure_1.closureReport)(result.closure))
+        for (const line of (0, task_closure_1.closureReport)(result.closure, { closing: false }))
             this.log(line);
         if (url)
             this.log(`Task: ${url}`);

package/dist/commands/tasks/resume/save.js

@@ -7,6 +7,7 @@ const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const prompt_1 = require("../../../lib/prompt");
 class TasksResumeSave extends base_command_1.BaseCommand {
     static description = 'Save recovery state without publishing a visible Task Update';
     static args = {
@@ -36,10 +37,12 @@ class TasksResumeSave extends base_command_1.BaseCommand {
         const task = (0, task_resolver_1.resolveTaskIdentity)({ positionalId: args.task, flagTask: flags.task });
         let resume;
         try {
-            resume = JSON.parse(flags.snapshot);
+            resume = (0, prompt_1.parseJsonFlag)(flags.snapshot, '--snapshot');
         }
-        catch {
-            this.error('--snapshot must be a JSON object', { exit: 1 });
+        catch (err) {
+            this.error(err instanceof Error ? err.message : '--snapshot must be a JSON object', {
+                exit: 1,
+            });
         }
         let result;
         try {

package/dist/commands/tasks/updates/add.js

@@ -43,7 +43,17 @@ const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
 function parseJsonObject(value, label) {
     if (!value)
         return undefined;
-    const parsed = JSON.parse(value);
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch (err) {
+        // A bare SyntaxError ("Unexpected token …") never says WHICH flag was
+        // malformed — name it, the same way readJsonValue names its file
+        // (OSK-12753).
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(`Invalid JSON in ${label}: ${msg}`);
+    }
     if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
         throw new Error(`${label} must be a JSON object`);
     }

package/dist/lib/file-mime.js

@@ -63,6 +63,7 @@ const MIME_TYPES = {
     '.jpg': 'image/jpeg',
     '.js': 'text/javascript',
     '.json': 'application/json',
+    '.log': 'text/plain',
     '.m4a': 'audio/m4a',
     '.m4v': 'video/m4v',
     '.md': 'text/markdown',

package/dist/lib/prompt.d.ts

@@ -46,6 +46,13 @@ export declare function confirmDestructive(question: string, yesFlag: boolean, f
  * commands can surface the error via `this.handleApiError()` or similar.
  */
 export declare function readJsonValue(source: string | undefined): Promise<unknown>;
+/**
+ * Parse a flag-supplied JSON value. A bare `JSON.parse` throws a SyntaxError
+ * that never names which flag was malformed — `--data '{bad'` reads
+ * "Unexpected token" with no owner. `readJsonValue` already names its file;
+ * this is the same contract for inline flag values (OSK-12753).
+ */
+export declare function parseJsonFlag(value: string, flagName: string): unknown;
 export declare function readJsonBody(source: string | undefined): Promise<Record<string, unknown>>;
 export declare function readStdin(): Promise<string>;
 /**

package/dist/lib/prompt.js

@@ -37,6 +37,7 @@ exports.prompt = prompt;
 exports.confirm = confirm;
 exports.confirmDestructive = confirmDestructive;
 exports.readJsonValue = readJsonValue;
+exports.parseJsonFlag = parseJsonFlag;
 exports.readJsonBody = readJsonBody;
 exports.readStdin = readStdin;
 exports.mergeDefined = mergeDefined;
@@ -152,6 +153,21 @@ async function readJsonValue(source) {
     }
     return parsed;
 }
+/**
+ * Parse a flag-supplied JSON value. A bare `JSON.parse` throws a SyntaxError
+ * that never names which flag was malformed — `--data '{bad'` reads
+ * "Unexpected token" with no owner. `readJsonValue` already names its file;
+ * this is the same contract for inline flag values (OSK-12753).
+ */
+function parseJsonFlag(value, flagName) {
+    try {
+        return JSON.parse(value);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(`Invalid JSON in ${flagName}: ${msg}`);
+    }
+}
 async function readJsonBody(source) {
     const parsed = await readJsonValue(source);
     if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {

package/dist/lib/scoped-memory-command.d.ts

@@ -1,10 +1,12 @@
-import { type MemoryMount as SharedMemoryMount, type MemoryStore as SharedMemoryStore } from '@skrr-ai/data-schemas';
+import type { MemoryMount as SharedMemoryMount, MemoryStore as SharedMemoryStore } from '@skrr-ai/data-schemas';
 import { BaseCommand } from '../base-command';
 import { ApiFetchError, type ApiFetchOptions } from './api-fetch';
 export type MemoryMount = SharedMemoryMount;
 export type MemoryStore = SharedMemoryStore & {
-    mount?: SharedMemoryMount;
+    mount: SharedMemoryMount;
 };
+export declare function parseMemoryMount(value: unknown): MemoryMount;
+export declare function parseMountedMemoryStore(value: unknown): MemoryStore;
 export declare const scopedMemoryFlags: {
     agent: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
     space: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/lib/scoped-memory-command.js

@@ -1,12 +1,36 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ScopedMemoryCommand = exports.versionedMutationFlags = exports.mutationFlags = exports.scopedMemoryFlags = void 0;
+exports.parseMemoryMount = parseMemoryMount;
+exports.parseMountedMemoryStore = parseMountedMemoryStore;
 exports.parseMemoryApiError = parseMemoryApiError;
 const core_1 = require("@oclif/core");
-const data_schemas_1 = require("@skrr-ai/data-schemas");
 const node_crypto_1 = require("node:crypto");
 const base_command_1 = require("../base-command");
 const api_fetch_1 = require("./api-fetch");
+// The public CLI must not load the private data-schemas package at runtime.
+// The API validates the full wire contract; check the fields used by CLI commands
+// before treating a response as a mounted Store or mount.
+function parseMemoryMount(value) {
+    const mount = value;
+    if (!mount || typeof mount !== 'object' || typeof mount.storeId !== 'string' ||
+        typeof mount.uri !== 'string' || typeof mount.authorizationGeneration !== 'number' ||
+        !['read_only', 'read_write'].includes(String(mount.access)) ||
+        !['agent', 'current_space', 'ancestor_space'].includes(String(mount.source))) {
+        throw new Error('Invalid Memory mount response from server');
+    }
+    return mount;
+}
+function parseMountedMemoryStore(value) {
+    const store = value;
+    if (!store || typeof store !== 'object' || typeof store.id !== 'string' ||
+        typeof store.revision !== 'number' || typeof store.authorizationGeneration !== 'number' ||
+        !store.owner || !['agent', 'space'].includes(String(store.owner.kind)) ||
+        typeof store.owner.id !== 'string') {
+        throw new Error('Invalid Memory Store response from server');
+    }
+    return { ...store, mount: parseMemoryMount(store.mount) };
+}
 exports.scopedMemoryFlags = {
     agent: core_1.Flags.string({ description: 'Act through this Agent', required: true }),
     space: core_1.Flags.string({ description: 'Current Space context (required for Space scopes)' }),
@@ -126,7 +150,7 @@ class ScopedMemoryCommand extends base_command_1.BaseCommand {
     async resolveStore(flags, { write = false } = {}) {
         if (flags.store) {
             const rawStore = await this.memoryApi(flags.agent, `/stores/${encodeURIComponent(flags.store)}${this.query(flags)}`);
-            const store = data_schemas_1.MountedMemoryStoreSchema.parse(rawStore);
+            const store = parseMountedMemoryStore(rawStore);
             if (write && store.mount?.access !== 'read_write') {
                 this.error('MEMORY_STORE_READ_ONLY: selected Store is read-only', { exit: 5 });
             }
@@ -143,7 +167,7 @@ class ScopedMemoryCommand extends base_command_1.BaseCommand {
             this.error(`MEMORY_SPACE_CONTEXT_REQUIRED: --space ${id} is required when selecting ${flags.scope}.`, { exit: 2, code: 'MEMORY_SPACE_CONTEXT_REQUIRED' });
         }
         const response = await this.memoryApi(flags.agent, `/stores${this.query(flags)}`);
-        const stores = response.stores.map((store) => data_schemas_1.MountedMemoryStoreSchema.parse(store));
+        const stores = response.stores.map(parseMountedMemoryStore);
         const store = stores.find((candidate) => candidate.owner.kind === kind && candidate.owner.id === id);
         if (!store)
             this.error(`MEMORY_NOT_MOUNTED: ${flags.scope}`, { exit: 5 });

package/dist/lib/task-asset-upload.d.ts

@@ -1,3 +1,4 @@
+import type { WorkResourceKind } from '@skrr-ai/data-provider';
 export type TaskAssetRole = 'input' | 'evidence' | 'deliverable';
 /**
  * What the bytes ARE in the work ledger, for an upload that is the archived
@@ -15,6 +16,10 @@ export type TaskAssetRole = 'input' | 'evidence' | 'deliverable';
  */
 export interface TaskAssetLedgerResource {
     identity: string;
+    /** The cited artifact's coordinate kind — the Resource identity depends on
+     * it (`url:` bytes must land on the `url` Resource, not a parallel `file`
+     * one). Omitted by callers that mean the literal file (OSK-12740). */
+    kind?: WorkResourceKind;
     title?: string;
     expectationIds?: string[];
 }

package/dist/lib/task-asset-upload.js

@@ -212,6 +212,8 @@ function fileFormData(filePath, filename, mimeType, role, ledger) {
         fd.append('role', role);
     if (ledger?.identity) {
         fd.append('identity', ledger.identity);
+        if (ledger.kind)
+            fd.append('kind', ledger.kind);
         if (ledger.title)
             fd.append('title', ledger.title);
         if (ledger.expectationIds?.length) {
@@ -243,6 +245,7 @@ async function genericDirectUpload(p) {
         ...(p.ledger?.identity
             ? {
                 identity: p.ledger.identity,
+                kind: p.ledger.kind,
                 title: p.ledger.title,
                 expectationIds: p.ledger.expectationIds,
             }
@@ -275,6 +278,7 @@ async function sessionDirectUpload(p) {
             ...(p.ledger?.identity
                 ? {
                     identity: p.ledger.identity,
+                    kind: p.ledger.kind,
                     title: p.ledger.title,
                     expectationIds: p.ledger.expectationIds,
                 }

package/dist/lib/task-closure.d.ts

@@ -42,7 +42,9 @@ export type ClosureLike = TaskClosureEvaluation | {
  * gate's own details carried for a while, and they are unusable on their own —
  * the whole point is to be able to act without a second lookup.
  */
-export declare function closureReport(closure: ClosureLike): string[];
+export declare function closureReport(closure: ClosureLike, { closing }?: {
+    closing?: boolean;
+}): string[];
 /**
  * The ways forward when a closed Task refuses a Result (`TASK_REOPEN_REQUIRED`).
  *

package/dist/lib/task-closure.js

@@ -38,7 +38,7 @@ const SHORT_BLOCKER = data_provider_1.CLOSURE_BLOCKER_PHRASE;
  * gate's own details carried for a while, and they are unusable on their own —
  * the whole point is to be able to act without a second lookup.
  */
-function closureReport(closure) {
+function closureReport(closure, { closing = true } = {}) {
     if (!closure)
         return ['Closure state: not reported by this call.'];
     if (isUnavailable(closure)) {
@@ -98,9 +98,19 @@ function closureReport(closure) {
      */
     const reviewRequired = closure.blockers.some((b) => b.code === 'TASK_RESULT_REVIEW_REQUIRED');
     lines.push('');
-    lines.push(reviewRequired
-        ? 'Only an accepted independent Review — or the Task owner closing directly — settles this. The rest is recorded on resolution.closure.'
-        : 'If this Task is closed anyway, all of the above is recorded on resolution.closure — closing over it settles nothing.');
+    // `result submit` does not close anything — "if closed anyway" there read
+    // as though the submit itself had tried to close and been stamped
+    // (OSK-12757). Distinguish the non-closing report from the close one.
+    if (closing) {
+        lines.push(reviewRequired
+            ? 'Only an accepted independent Review — or the Task owner closing directly — settles this. The rest is recorded on resolution.closure.'
+            : 'If this Task is closed anyway, all of the above is recorded on resolution.closure — closing over it settles nothing.');
+    }
+    else {
+        lines.push(reviewRequired
+            ? 'Only an accepted independent Review — or the Task owner closing directly — settles this. The rest is recorded on resolution.closure at close.'
+            : 'These stay outstanding — closing the Task later records them on resolution.closure.');
+    }
     return lines;
 }
 /**

package/dist/node_modules/@skrr-ai/data-provider/index.js

@@ -42759,6 +42759,10 @@ var gR = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
   return oR.post((function(e3) {
     return "".concat(Rc(e3), "/approve-pr");
   })(e2), {});
+}, approveStoreArtifactAdmission: function(e2, t2) {
+  return oR.post((function(e3) {
+    return "".concat(er(), "/admissions/artifacts/").concat(encodeURIComponent(e3), "/approve");
+  })(e2), t2 ? { note: t2 } : {});
 }, approveStoreListingAdmission: dR, approveStoreReleaseAdmission: lR, approveWorkflowMerge: function(e2) {
   return oR.post((function(e3) {
     return "".concat(jr(), "/").concat(encodeURIComponent(e3), "/workflow/approve-merge");
@@ -43194,10 +43198,10 @@ var gR = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
   var t2 = e2.taskId, n2 = e2.data;
   return oR.post(ka(t2), n2);
 }, createTaskAttachmentUploadIntent: function(e2) {
-  var t2 = e2.taskId, n2 = e2.filename, o2 = e2.mimeType, r2 = e2.sizeBytes, a2 = e2.sha256, i2 = e2.role, s2 = e2.commentId, c2 = e2.identity, l2 = e2.title, u2 = e2.expectationIds, d2 = e2.transport;
+  var t2 = e2.taskId, n2 = e2.filename, o2 = e2.mimeType, r2 = e2.sizeBytes, a2 = e2.sha256, i2 = e2.role, s2 = e2.commentId, c2 = e2.identity, l2 = e2.kind, u2 = e2.title, d2 = e2.expectationIds, p2 = e2.transport;
   return oR.post((function(e3) {
     return "".concat(jr(), "/").concat(encodeURIComponent(e3), "/attachments/upload-intent");
-  })(t2), S(S(S(S(S(S({ filename: n2, mimeType: o2, sizeBytes: r2, sha256: a2 }, i2 ? { role: i2 } : {}), s2 ? { commentId: s2 } : {}), c2 ? { identity: c2 } : {}), c2 && l2 ? { title: l2 } : {}), c2 && (null == u2 ? void 0 : u2.length) ? { expectationIds: u2 } : {}), d2 ? { transport: d2 } : {}));
+  })(t2), S(S(S(S(S(S(S({ filename: n2, mimeType: o2, sizeBytes: r2, sha256: a2 }, i2 ? { role: i2 } : {}), s2 ? { commentId: s2 } : {}), c2 ? { identity: c2 } : {}), c2 && l2 ? { kind: l2 } : {}), c2 && u2 ? { title: u2 } : {}), c2 && (null == d2 ? void 0 : d2.length) ? { expectationIds: d2 } : {}), p2 ? { transport: p2 } : {}));
 }, createTaskFollowUp: function(e2) {
   var t2 = e2.taskId, n2 = e2.data;
   return oR.post((function(e3) {
@@ -46040,6 +46044,10 @@ var gR = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
   return oR.post((function(e3) {
     return "".concat(jr(), "/").concat(encodeURIComponent(e3), "/workflow-findings");
   })(e2), t2);
+}, refuseStoreArtifactAdmission: function(e2, t2) {
+  return oR.post((function(e3) {
+    return "".concat(er(), "/admissions/artifacts/").concat(encodeURIComponent(e3), "/refuse");
+  })(e2), { note: t2 });
 }, refuseStoreListingAdmission: pR, refuseStoreReleaseAdmission: uR, regenerateBackupCodes: function() {
   return oR.post("".concat(en, "/api/auth/2fa/backup/regenerate"));
 }, register: function(e2) {
@@ -46534,10 +46542,10 @@ var gR = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
 }, setAgentUsageCap: function(e2, t2) {
   return oR.put(Nn(e2), t2);
 }, setAgentVisibility: function(e2) {
-  var t2 = e2.agentId, n2 = e2.isPublic, o2 = e2.price, r2 = e2.shareMode, a2 = e2.changelog, i2 = e2.versionMajor, s2 = e2.versionMinor, c2 = e2.capabilityRationales, l2 = e2.supportedLanguages, u2 = e2.license, d2 = e2.sourceVisibility, p2 = { isPublic: n2 };
-  return void 0 !== o2 && (p2.price = o2), void 0 !== r2 && (p2.shareMode = r2), void 0 !== a2 && (p2.changelog = a2), void 0 !== i2 && (p2.versionMajor = i2), void 0 !== s2 && (p2.versionMinor = s2), void 0 !== c2 && (p2.capabilityRationales = c2), void 0 !== l2 && (p2.supportedLanguages = l2), void 0 !== u2 && (p2.license = u2), void 0 !== d2 && (p2.sourceVisibility = d2), oR.post((function(e3) {
+  var t2 = e2.agentId, n2 = e2.isPublic, o2 = e2.price, r2 = e2.shareMode, a2 = e2.changelog, i2 = e2.versionMajor, s2 = e2.versionMinor, c2 = e2.capabilityRationales, l2 = e2.supportedLanguages, u2 = e2.dependencies, d2 = e2.license, p2 = e2.sourceVisibility, m2 = { isPublic: n2 };
+  return void 0 !== o2 && (m2.price = o2), void 0 !== r2 && (m2.shareMode = r2), void 0 !== a2 && (m2.changelog = a2), void 0 !== i2 && (m2.versionMajor = i2), void 0 !== s2 && (m2.versionMinor = s2), void 0 !== c2 && (m2.capabilityRationales = c2), void 0 !== l2 && (m2.supportedLanguages = l2), void 0 !== u2 && (m2.dependencies = u2), void 0 !== d2 && (m2.license = d2), void 0 !== p2 && (m2.sourceVisibility = p2), oR.post((function(e3) {
     return "".concat(en, "/api/agents/").concat(e3, "/visibility");
-  })(t2), p2);
+  })(t2), m2);
 }, setAlwaysOnDesired: function(e2, t2) {
   return oR.put((n2 = e2, "".concat(en, "/api/agents/").concat(encodeURIComponent(n2), "/always-on")), t2);
   var n2;