@skrr-ai/cli 0.1.95 → 0.1.97

package/dist/commands/signals/monitors/transitions.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const signals_1 = require("../../../lib/signals");
+class MonitorsTransitions extends base_command_1.BaseCommand {
+    static description = 'List the recorded state transitions of a Signal Monitor';
+    static flags = { json: core_1.Flags.boolean({ description: 'Output as JSON' }) };
+    static args = { id: core_1.Args.string({ required: true, ignoreStdin: true }) };
+    async run() {
+        this.requireAuth();
+        const { args } = await this.parse(MonitorsTransitions);
+        const result = await signals_1.signalsApi.monitorTransitions(args.id);
+        this.log(JSON.stringify(result, null, 2));
+    }
+}
+exports.default = MonitorsTransitions;

package/dist/commands/signals/monitors/validate.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../../base-command';
+export default class MonitorsValidate extends BaseCommand {
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'from-json': import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/signals/monitors/validate.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const signals_1 = require("../../../lib/signals");
+const prompt_1 = require("../../../lib/prompt");
+class MonitorsValidate extends base_command_1.BaseCommand {
+    static description = 'Compile-only check of a Monitor definition; nothing is persisted';
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+        'from-json': core_1.Flags.string({
+            description: 'JSON file path, or - for stdin (a Monitor definition document)',
+            required: true,
+        }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(MonitorsValidate);
+        const body = await (0, prompt_1.readJsonBody)(flags['from-json']);
+        const result = await signals_1.signalsApi.validateMonitor(body);
+        this.log(JSON.stringify(result, null, 2));
+    }
+}
+exports.default = MonitorsValidate;

package/dist/commands/signals/schemas/list.d.ts

@@ -0,0 +1,8 @@
+import { BaseCommand } from '../../../base-command';
+export default class SchemasList extends BaseCommand {
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/signals/schemas/list.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const signals_1 = require("../../../lib/signals");
+class SchemasList extends base_command_1.BaseCommand {
+    static description = 'List Signal schemas (read-only)';
+    static flags = { json: core_1.Flags.boolean({ description: 'Output as JSON' }) };
+    async run() {
+        this.requireAuth();
+        await this.parse(SchemasList);
+        const result = await signals_1.signalsApi.listSchemas();
+        this.log(JSON.stringify(result, null, 2));
+    }
+}
+exports.default = SchemasList;

package/dist/commands/signals/schemas/show.d.ts

@@ -0,0 +1,11 @@
+import { BaseCommand } from '../../../base-command';
+export default class SchemasShow extends BaseCommand {
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/signals/schemas/show.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const signals_1 = require("../../../lib/signals");
+class SchemasShow extends base_command_1.BaseCommand {
+    static description = 'Show one Signal schema (read-only)';
+    static flags = { json: core_1.Flags.boolean({ description: 'Output as JSON' }) };
+    static args = { id: core_1.Args.string({ required: true, ignoreStdin: true }) };
+    async run() {
+        this.requireAuth();
+        const { args } = await this.parse(SchemasShow);
+        const result = await signals_1.signalsApi.showSchema(args.id);
+        this.log(JSON.stringify(result, null, 2));
+    }
+}
+exports.default = SchemasShow;

package/dist/commands/signals/sources/list.d.ts

@@ -0,0 +1,8 @@
+import { BaseCommand } from '../../../base-command';
+export default class SourcesList extends BaseCommand {
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/signals/sources/list.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const signals_1 = require("../../../lib/signals");
+class SourcesList extends base_command_1.BaseCommand {
+    static description = 'List Signal sources (read-only; credentials are never shown)';
+    static flags = { json: core_1.Flags.boolean({ description: 'Output as JSON' }) };
+    async run() {
+        this.requireAuth();
+        await this.parse(SourcesList);
+        const result = await signals_1.signalsApi.listSources();
+        this.log(JSON.stringify(result, null, 2));
+    }
+}
+exports.default = SourcesList;

package/dist/commands/signals/sources/receipts.d.ts

@@ -0,0 +1,11 @@
+import { BaseCommand } from '../../../base-command';
+export default class SourcesReceipts extends BaseCommand {
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/signals/sources/receipts.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const signals_1 = require("../../../lib/signals");
+class SourcesReceipts extends base_command_1.BaseCommand {
+    static description = 'List recent redacted receipts of a Signal source';
+    static flags = { json: core_1.Flags.boolean({ description: 'Output as JSON' }) };
+    static args = { id: core_1.Args.string({ required: true, ignoreStdin: true }) };
+    async run() {
+        this.requireAuth();
+        const { args } = await this.parse(SourcesReceipts);
+        const result = await signals_1.signalsApi.sourceReceipts(args.id);
+        this.log(JSON.stringify(result, null, 2));
+    }
+}
+exports.default = SourcesReceipts;

package/dist/commands/signals/sources/show.d.ts

@@ -0,0 +1,11 @@
+import { BaseCommand } from '../../../base-command';
+export default class SourcesShow extends BaseCommand {
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/signals/sources/show.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const signals_1 = require("../../../lib/signals");
+class SourcesShow extends base_command_1.BaseCommand {
+    static description = 'Show one Signal source (read-only)';
+    static flags = { json: core_1.Flags.boolean({ description: 'Output as JSON' }) };
+    static args = { id: core_1.Args.string({ required: true, ignoreStdin: true }) };
+    async run() {
+        this.requireAuth();
+        const { args } = await this.parse(SourcesShow);
+        const result = await signals_1.signalsApi.showSource(args.id);
+        this.log(JSON.stringify(result, null, 2));
+    }
+}
+exports.default = SourcesShow;

package/dist/commands/spaces/usage.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../base-command';
+export default class SpacesUsage extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        window: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/spaces/usage.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../base-command");
+const space_usage_1 = require("../../lib/space-usage");
+class SpacesUsage extends base_command_1.BaseCommand {
+    static description = 'Show attributed Space spend and coverage (requires Space owner permissions or workspace administrator)';
+    static args = {
+        id: core_1.Args.string({ description: 'Space ID', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean(),
+        window: core_1.Flags.string({ options: ['1d', '7d', '30d', '90d'], default: '30d' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(SpacesUsage);
+        const space = await this.resolveEntityRef('space', args.id);
+        try {
+            const result = await (0, space_usage_1.getSpaceUsage)(space, flags.window);
+            this.log(flags.json ? JSON.stringify(result, null, 2) : (0, space_usage_1.formatSpaceSpend)(result));
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = SpacesUsage;

package/dist/commands/spaces/workflows/run.js

@@ -6,6 +6,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
 const space_output_1 = require("../../../lib/space-output");
+const workflow_run_budget_1 = require("../../../lib/workflow-run-budget");
 /**
  * A run node's human-facing attention note, or '' when nothing is wrong.
  *
@@ -59,6 +60,8 @@ class SpacesWorkflowsRun extends base_command_1.BaseCommand {
             }), null, 2));
         this.log(`Run: ${run.id}`);
         this.log(`Status: ${run.status}`);
+        for (const line of (0, workflow_run_budget_1.describeRunBudget)(run))
+            this.log(line);
         if (runUrl)
             this.log(`URL: ${runUrl}`);
         const nodes = (run.nodes || []);

package/dist/commands/spaces/workflows/runs.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WORKFLOW_RUNS_COLUMNS = void 0;
+const workflow_run_budget_1 = require("../../../lib/workflow-run-budget");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
@@ -75,7 +76,7 @@ class SpacesWorkflowsRuns extends base_command_1.BaseCommand {
             id: run.id,
             definition: run.definitionId,
             version: run.version === undefined ? '-' : `v${run.version}`,
-            status: run.status,
+            status: (0, workflow_run_budget_1.runStatusLabel)(run),
             updated: String(run.updatedAt ?? '-'),
         })), exports.WORKFLOW_RUNS_COLUMNS, (line) => this.log(line));
     }

package/dist/commands/spaces/workflows/update.d.ts

@@ -1,7 +1,9 @@
 import { type WorkflowDraft, type WorkflowGraph } from '@skrr-ai/data-provider';
 import { BaseCommand } from '../../../base-command';
 type WorkflowPatch = Record<string, unknown>;
-export declare function buildWorkflowUpdatePayload({ body, title, description, clearDescription, graph, draft, semanticRevision, presentationRevision, }: {
+/** `90m`, `4h`, `2d` to milliseconds; null when malformed or outside the shared bounds. */
+export declare function parseWorkflowDuration(text: string): number | null;
+export declare function buildWorkflowUpdatePayload({ body, title, description, clearDescription, graph, draft, semanticRevision, presentationRevision, maxDurationMs, }: {
     body: WorkflowPatch;
     title?: string;
     description?: string;
@@ -10,6 +12,7 @@ export declare function buildWorkflowUpdatePayload({ body, title, description, c
     draft?: Omit<WorkflowDraft, 'semanticRevision' | 'presentationRevision'>;
     semanticRevision?: number;
     presentationRevision?: number;
+    maxDurationMs?: number | null;
 }): WorkflowPatch;
 /** Update metadata or the mutable draft; executable changes use optimistic concurrency. */
 export default class SpacesWorkflowsUpdate extends BaseCommand {
@@ -28,6 +31,8 @@ export default class SpacesWorkflowsUpdate extends BaseCommand {
         graph: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         draft: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'semantic-revision': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'max-duration': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'clear-max-duration': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'presentation-revision': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;

package/dist/commands/spaces/workflows/update.js

@@ -1,12 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseWorkflowDuration = parseWorkflowDuration;
 exports.buildWorkflowUpdatePayload = buildWorkflowUpdatePayload;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const prompt_1 = require("../../../lib/prompt");
 const space_output_1 = require("../../../lib/space-output");
-function buildWorkflowUpdatePayload({ body, title, description, clearDescription, graph, draft, semanticRevision, presentationRevision, }) {
+/** `90m`, `4h`, `2d` to milliseconds; null when malformed or outside the shared bounds. */
+function parseWorkflowDuration(text) {
+    const match = /^(\d+)\s*([mhd])$/i.exec(text.trim());
+    if (!match)
+        return null;
+    const unit = { m: 60_000, h: 3_600_000, d: 86_400_000 }[match[2].toLowerCase()];
+    const ms = Number(match[1]) * unit;
+    return (0, data_provider_1.isValidWorkflowMaxDurationMs)(ms) ? ms : null;
+}
+function buildWorkflowUpdatePayload({ body, title, description, clearDescription, graph, draft, semanticRevision, presentationRevision, maxDurationMs, }) {
     return (0, prompt_1.mergeDefined)(body, {
         title,
         description: clearDescription ? null : description,
@@ -14,6 +24,7 @@ function buildWorkflowUpdatePayload({ body, title, description, clearDescription
         draft,
         expectedSemanticRevision: semanticRevision,
         expectedPresentationRevision: presentationRevision,
+        maxDurationMs,
     });
 }
 /** Update metadata or the mutable draft; executable changes use optimistic concurrency. */
@@ -23,6 +34,8 @@ class SpacesWorkflowsUpdate extends base_command_1.BaseCommand {
         '<%= config.bin %> spaces workflows update <space-id> <workflow-id> --title "Release train"',
         '<%= config.bin %> spaces workflows update <space-id> <workflow-id> --graph workflow.json',
         '<%= config.bin %> spaces workflows update <space-id> <workflow-id> --draft canvas-draft.json --json',
+        '<%= config.bin %> spaces workflows update <space-id> <workflow-id> --max-duration 4h',
+        '<%= config.bin %> spaces workflows update <space-id> <workflow-id> --clear-max-duration',
     ];
     static args = {
         spaceId: core_1.Args.string({ description: 'Owning Space ID', required: true, ignoreStdin: true }),
@@ -45,6 +58,10 @@ class SpacesWorkflowsUpdate extends base_command_1.BaseCommand {
         'semantic-revision': core_1.Flags.integer({
             description: 'Expected semantic revision; defaults to the latest server value',
         }),
+        'max-duration': core_1.Flags.string({
+            description: 'Run duration limit, e.g. 90m, 4h or 2d. A run still open past it is cancelled with WORKFLOW_RUN_DEADLINE. Applies from the next publish; runs already started keep their deadline',
+        }),
+        'clear-max-duration': core_1.Flags.boolean({ description: 'Remove the run duration limit' }),
         'presentation-revision': core_1.Flags.integer({
             description: 'Expected presentation revision; defaults to the latest server value',
         }),
@@ -57,6 +74,20 @@ class SpacesWorkflowsUpdate extends base_command_1.BaseCommand {
         if (flags.description !== undefined && flags['clear-description']) {
             this.error('Pass either --description or --clear-description, not both.', { exit: 2 });
         }
+        if (flags['max-duration'] !== undefined && flags['clear-max-duration']) {
+            this.error('Pass either --max-duration or --clear-max-duration, not both.', { exit: 2 });
+        }
+        let maxDurationMs;
+        if (flags['clear-max-duration'])
+            maxDurationMs = null;
+        else if (flags['max-duration'] !== undefined) {
+            const parsedDuration = parseWorkflowDuration(flags['max-duration']);
+            if (parsedDuration === null) {
+                this.error(`--max-duration must look like 90m, 4h or 2d, between ${(0, data_provider_1.describeWorkflowDuration)(data_provider_1.WORKFLOW_MAX_DURATION_MIN_MS)} and ${(0, data_provider_1.describeWorkflowDuration)(data_provider_1.WORKFLOW_MAX_DURATION_MAX_MS)}.`, { exit: 2 });
+                return;
+            }
+            maxDurationMs = parsedDuration;
+        }
         if ((flags['semantic-revision'] === undefined) !==
             (flags['presentation-revision'] === undefined)) {
             this.error('Pass both --semantic-revision and --presentation-revision together.', {
@@ -86,9 +117,10 @@ class SpacesWorkflowsUpdate extends base_command_1.BaseCommand {
             draft,
             semanticRevision: flags['semantic-revision'],
             presentationRevision: flags['presentation-revision'],
+            maxDurationMs,
         });
         if (Object.keys(patch).length === 0) {
-            this.error('Nothing to update. Pass metadata, --graph, --draft, or --from-json.', {
+            this.error('Nothing to update. Pass metadata, --max-duration, --graph, --draft, or --from-json.', {
                 exit: 2,
             });
         }

package/dist/commands/tasks/cascade-status.d.ts

@@ -1,4 +1,6 @@
 import { BaseCommand } from '../../base-command';
+/** Skip counts, the stall reason and per-task join reasons, as printed lines. */
+export declare function cascadeSkipLines(s: Record<string, unknown>): string[];
 export default class TasksCascadeStatus extends BaseCommand {
     static description: string;
     static examples: string[];

package/dist/commands/tasks/cascade-status.js

@@ -1,8 +1,33 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.cascadeSkipLines = cascadeSkipLines;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
+/** Skip counts, the stall reason and per-task join reasons, as printed lines. */
+function cascadeSkipLines(s) {
+    const lines = [
+        `Skipped:              ${s.skipped ?? 0}`,
+        `Skipped duplicate:    ${s.skippedDuplicate ?? 0}`,
+        `Waiting for Human:    ${s.humanBlocked ?? s.humanWaitingCount ?? s.waitingForHuman ?? '-'}`,
+    ];
+    if (s.stalledReason)
+        lines.push(`Waiting reason:       ${s.stalledReason}`);
+    if (s.stalledReason === 'waiting_on_timed_out_human')
+        lines.push("                      a person's task timed out and was never completed; the cascade stopped");
+    if (Number(s.unresolvedHumanCount) > 0)
+        lines.push(`Unresolved human:    ${s.unresolvedHumanCount} (finished without a person completing these tasks)`);
+    const tasks = (Array.isArray(s.tasks) ? s.tasks : []);
+    for (const task of tasks) {
+        if (task.abortUnconfirmed)
+            lines.push(`${task.identifier || task.taskId}: cancelled; the task may still be running - check it`);
+        else if (task.cancelUnconfirmed)
+            lines.push(`${task.identifier || task.taskId}: cancelled (not confirmed in the run record; the stored row may still read otherwise)`);
+        else if (task.reason || task.joinNote)
+            lines.push(`${task.identifier || task.taskId}: ${task.reason || task.joinNote}`);
+    }
+    return lines;
+}
 class TasksCascadeStatus extends base_command_1.BaseCommand {
     static description = 'Show cascade pipeline status for a task';
     static examples = [
@@ -36,7 +61,8 @@ class TasksCascadeStatus extends base_command_1.BaseCommand {
         this.log(`Total Tasks:          ${s.totalTasks ?? s.total ?? '-'}`);
         this.log(`Completed:            ${s.completedTasks ?? s.completed ?? '-'}`);
         this.log(`Failed:               ${s.failedTasks ?? s.failed ?? '-'}`);
-        this.log(`Waiting for Human:    ${s.humanWaitingCount ?? s.waitingForHuman ?? '-'}`);
+        for (const line of cascadeSkipLines(s))
+            this.log(line);
     }
 }
 exports.default = TasksCascadeStatus;

package/dist/commands/tasks/comments/add.js

@@ -38,7 +38,9 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
-const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const credential_resolver_1 = require("../../../lib/credential-resolver");
+const unsupported_managed_task_write_1 = require("../../../lib/unsupported-managed-task-write");
+const session_task_write_1 = require("../../../lib/session-task-write");
 const prompt_1 = require("../../../lib/prompt");
 const task_resolver_1 = require("../../../lib/task-resolver");
 // Server-side validator on `commentMarkId` (api/server/routes/tasks.js).
@@ -142,6 +144,18 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
         // pre-formed `anchor` object and have CLI flags override individual
         // fields (e.g. only --anchor-quote, keeping the JSON's commentMarkId).
         const anchor = this.buildAnchor(flags, commentBody);
+        if (anchor || flags['parent-comment'] || commentBody.parentCommentId ||
+            flags.reopen || commentBody.reopen || flags.interrupt || commentBody.interrupt) {
+            // These fields are absent from the scoped comment contract. Refuse
+            // before uploads, rather than posting a different comment than asked.
+            try {
+                (0, unsupported_managed_task_write_1.refuseUnsupportedManagedTaskWrite)('Replies, anchors and comment workflow changes');
+            }
+            catch (error) {
+                this.handleApiError(error);
+                return;
+            }
+        }
         // Merge the full JSON body with typed flags so --from-json fields like
         // mentionedAgentIds, reopen, and interrupt are preserved. Boolean flags
         // default to false; only pass them through when actually set so they
@@ -207,30 +221,18 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
             // apiFetch rather than `dataService.addTaskComment`: the shared transport
             // accepts no per-call headers, so it cannot carry the key.
             //
-            // WL-5 Step 1/2 — a session on a NARROWED credential cannot use
-            // `/api/tasks/:taskId/comments`, whose chain begins with `requireJwtAuth`.
-            // The session-scoped sibling derives the task from the claim, so it takes
-            // no taskId, and it is deliberately narrower: `body` and
+            // Retain the authenticated Agent even beside a wide delegated credential.
+            // The scoped sibling derives its Task and supports `body` and
             // `mentionedAgentIds` only. `reopen`/`interrupt` are workflow mutations
             // and are not reachable through the commenting door on that path.
-            const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('comment');
-            if (sessionPath && (flags.reopen || flags.interrupt)) {
-                // Say so rather than dropping it. A flag the user passed that silently
-                // does nothing is worse than a refusal — they would read the 201 as
-                // "the task reopened" and only find out much later that it did not.
-                this.warn('This session uses a scoped credential, where --reopen/--interrupt are not available: ' +
-                    'they are workflow changes, not comments. The comment was posted; the task was not ' +
-                    'reopened or interrupted.');
-            }
-            const mentioned = Array.isArray(mentionedFromFlag) && mentionedFromFlag.length > 0
-                ? mentionedFromFlag
-                : undefined;
-            result = sessionPath
-                ? await (0, api_fetch_1.apiFetch)(sessionPath, {
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('comment', taskRef);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
                     method: 'POST',
+                    credential: sessionWrite.credential,
                     body: {
                         body: data.body,
-                        ...(mentioned ? { mentionedAgentIds: mentioned } : {}),
+                        ...(data.mentionedAgentIds ? { mentionedAgentIds: data.mentionedAgentIds } : {}),
                     },
                     headers: { 'X-Idempotency-Key': idempotencyKey },
                 })
@@ -241,6 +243,13 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
                 });
         }
         catch (err) {
+            // Offline replay cannot preserve this live session actor. Never queue
+            // an Agent write as an ordinary Human comment. Retry the exact key
+            // while this authenticated session remains valid.
+            if ((0, credential_resolver_1.resolveTrustedAutonomousCredential)()) {
+                this.handleApiError(err);
+                return;
+            }
             // A comment body is authored content: losing it to a 503 costs the
             // writing, not just a retry. Queue it durably instead (OSK-2806). The
             // key is derived from the task + body so replaying the SAME comment

package/dist/commands/tasks/complete.js

@@ -40,7 +40,7 @@ const task_closure_1 = require("../../lib/task-closure");
 const api_fetch_1 = require("../../lib/api-fetch");
 const outbox_1 = require("../../lib/outbox");
 const prompt_1 = require("../../lib/prompt");
-const session_task_endpoints_1 = require("../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../lib/session-task-write");
 const task_resolver_1 = require("../../lib/task-resolver");
 const task_extras_1 = require("../../lib/task-extras");
 const web_url_1 = require("../../lib/web-url");
@@ -290,9 +290,11 @@ class TasksComplete extends base_command_1.BaseCommand {
         };
         const idempotencyKey = optionalString(input.idempotencyKey) ||
             (0, outbox_1.idempotencyKeyFor)('task-complete', identity.id, JSON.stringify(payload));
-        const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('completion');
+        const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('completion', identity.id);
         let taskId = identity.id;
-        if (!sessionPath) {
+        if (sessionWrite)
+            taskId = sessionWrite.taskId;
+        else {
             try {
                 const resolved = await this.resolveTaskReference(identity.id);
                 taskId = String(resolved);
@@ -303,8 +305,9 @@ class TasksComplete extends base_command_1.BaseCommand {
         }
         let result;
         try {
-            result = await (0, api_fetch_1.apiFetch)(sessionPath || (0, task_extras_1.taskCompletePath)(taskId), {
+            result = await (0, api_fetch_1.apiFetch)(sessionWrite?.path || (0, task_extras_1.taskCompletePath)(taskId), {
                 method: 'POST',
+                credential: sessionWrite?.credential,
                 body: { ...payload, idempotencyKey },
                 headers: { 'X-Idempotency-Key': idempotencyKey },
             });

package/dist/commands/tasks/create.d.ts

@@ -67,6 +67,10 @@ export default class TasksCreate extends BaseCommand {
         'execution-mode': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'start-date': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'due-date': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        savings: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        per: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        effort: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        risk: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         estimate: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         tag: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'label-id': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/tasks/create.js

@@ -5,6 +5,7 @@ exports.droppedEstimateWarning = droppedEstimateWarning;
 exports.taskCreateMayHaveCommitted = taskCreateMayHaveCommitted;
 exports.taskMatchesCreateIdentity = taskMatchesCreateIdentity;
 const core_1 = require("@oclif/core");
+const task_economics_1 = require("../../lib/task-economics");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const label_ref_1 = require("../../lib/label-ref");
@@ -223,6 +224,13 @@ class TasksCreate extends base_command_1.BaseCommand {
         }),
         'start-date': core_1.Flags.string({ description: 'Planned start date (ISO string)' }),
         'due-date': core_1.Flags.string({ description: 'Due date (ISO string)' }),
+        savings: core_1.Flags.string({ description: 'Expected USD savings (requires --per)' }),
+        per: core_1.Flags.string({
+            options: ['month', 'year', 'once'],
+            description: 'Savings period (requires --savings)',
+        }),
+        effort: core_1.Flags.string({ description: 'Expected effort in hours, nonnegative' }),
+        risk: core_1.Flags.string({ options: ['low', 'medium', 'high'], description: 'Expected risk' }),
         estimate: core_1.Flags.integer({
             // Names the prerequisite AND how to satisfy it. The first version of this
             // help said the scale was reachable only from the web UI, which was true
@@ -320,6 +328,14 @@ class TasksCreate extends base_command_1.BaseCommand {
                 ? parsedExpectations.value
                 : undefined,
         });
+        try {
+            const economics = (0, task_economics_1.economicsFromFlags)(flags, body.economics);
+            if (economics)
+                payload.economics = economics;
+        }
+        catch (error) {
+            this.error(error instanceof Error ? error.message : 'Invalid economics', { exit: 2 });
+        }
         const isTemplateInstantiation = typeof payload.templateId === 'string' && payload.templateId.length > 0;
         // Template defaults (including its assigned agents) are part of the saved
         // resource. Do not let the ordinary "who owns an empty task?" policy