@skrr-ai/cli 0.1.96 → 0.1.97

package/dist/commands/daemon/install.js

@@ -72,7 +72,7 @@ class DaemonInstall extends core_1.Command {
                 this.log('');
                 this.log('  You can install it directly instead:');
                 this.log('    macOS:   brew install dush1023/oversky/oversky');
-                this.log('    Linux:   curl -fsSL https://raw.githubusercontent.com/dush1023/OverSky/main/scripts/install-daemon.sh | bash');
+                this.log('    Linux:   curl -fsSL https://updates.skrr.ai/daemon/install.sh | bash');
                 this.exit(1);
             }
             this.log(`  Installed skrrd ${outcome.version} (${outcome.platformKey}) at ${outcome.binaryPath}`);

package/dist/commands/tasks/comments/add.js

@@ -38,7 +38,9 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
-const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const credential_resolver_1 = require("../../../lib/credential-resolver");
+const unsupported_managed_task_write_1 = require("../../../lib/unsupported-managed-task-write");
+const session_task_write_1 = require("../../../lib/session-task-write");
 const prompt_1 = require("../../../lib/prompt");
 const task_resolver_1 = require("../../../lib/task-resolver");
 // Server-side validator on `commentMarkId` (api/server/routes/tasks.js).
@@ -142,6 +144,18 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
         // pre-formed `anchor` object and have CLI flags override individual
         // fields (e.g. only --anchor-quote, keeping the JSON's commentMarkId).
         const anchor = this.buildAnchor(flags, commentBody);
+        if (anchor || flags['parent-comment'] || commentBody.parentCommentId ||
+            flags.reopen || commentBody.reopen || flags.interrupt || commentBody.interrupt) {
+            // These fields are absent from the scoped comment contract. Refuse
+            // before uploads, rather than posting a different comment than asked.
+            try {
+                (0, unsupported_managed_task_write_1.refuseUnsupportedManagedTaskWrite)('Replies, anchors and comment workflow changes');
+            }
+            catch (error) {
+                this.handleApiError(error);
+                return;
+            }
+        }
         // Merge the full JSON body with typed flags so --from-json fields like
         // mentionedAgentIds, reopen, and interrupt are preserved. Boolean flags
         // default to false; only pass them through when actually set so they
@@ -207,30 +221,18 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
             // apiFetch rather than `dataService.addTaskComment`: the shared transport
             // accepts no per-call headers, so it cannot carry the key.
             //
-            // WL-5 Step 1/2 — a session on a NARROWED credential cannot use
-            // `/api/tasks/:taskId/comments`, whose chain begins with `requireJwtAuth`.
-            // The session-scoped sibling derives the task from the claim, so it takes
-            // no taskId, and it is deliberately narrower: `body` and
+            // Retain the authenticated Agent even beside a wide delegated credential.
+            // The scoped sibling derives its Task and supports `body` and
             // `mentionedAgentIds` only. `reopen`/`interrupt` are workflow mutations
             // and are not reachable through the commenting door on that path.
-            const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('comment');
-            if (sessionPath && (flags.reopen || flags.interrupt)) {
-                // Say so rather than dropping it. A flag the user passed that silently
-                // does nothing is worse than a refusal — they would read the 201 as
-                // "the task reopened" and only find out much later that it did not.
-                this.warn('This session uses a scoped credential, where --reopen/--interrupt are not available: ' +
-                    'they are workflow changes, not comments. The comment was posted; the task was not ' +
-                    'reopened or interrupted.');
-            }
-            const mentioned = Array.isArray(mentionedFromFlag) && mentionedFromFlag.length > 0
-                ? mentionedFromFlag
-                : undefined;
-            result = sessionPath
-                ? await (0, api_fetch_1.apiFetch)(sessionPath, {
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('comment', taskRef);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
                     method: 'POST',
+                    credential: sessionWrite.credential,
                     body: {
                         body: data.body,
-                        ...(mentioned ? { mentionedAgentIds: mentioned } : {}),
+                        ...(data.mentionedAgentIds ? { mentionedAgentIds: data.mentionedAgentIds } : {}),
                     },
                     headers: { 'X-Idempotency-Key': idempotencyKey },
                 })
@@ -241,6 +243,13 @@ class TasksCommentsAdd extends base_command_1.BaseCommand {
                 });
         }
         catch (err) {
+            // Offline replay cannot preserve this live session actor. Never queue
+            // an Agent write as an ordinary Human comment. Retry the exact key
+            // while this authenticated session remains valid.
+            if ((0, credential_resolver_1.resolveTrustedAutonomousCredential)()) {
+                this.handleApiError(err);
+                return;
+            }
             // A comment body is authored content: losing it to a 503 costs the
             // writing, not just a retry. Queue it durably instead (OSK-2806). The
             // key is derived from the task + body so replaying the SAME comment

package/dist/commands/tasks/complete.js

@@ -40,7 +40,7 @@ const task_closure_1 = require("../../lib/task-closure");
 const api_fetch_1 = require("../../lib/api-fetch");
 const outbox_1 = require("../../lib/outbox");
 const prompt_1 = require("../../lib/prompt");
-const session_task_endpoints_1 = require("../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../lib/session-task-write");
 const task_resolver_1 = require("../../lib/task-resolver");
 const task_extras_1 = require("../../lib/task-extras");
 const web_url_1 = require("../../lib/web-url");
@@ -290,9 +290,11 @@ class TasksComplete extends base_command_1.BaseCommand {
         };
         const idempotencyKey = optionalString(input.idempotencyKey) ||
             (0, outbox_1.idempotencyKeyFor)('task-complete', identity.id, JSON.stringify(payload));
-        const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('completion');
+        const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('completion', identity.id);
         let taskId = identity.id;
-        if (!sessionPath) {
+        if (sessionWrite)
+            taskId = sessionWrite.taskId;
+        else {
             try {
                 const resolved = await this.resolveTaskReference(identity.id);
                 taskId = String(resolved);
@@ -303,8 +305,9 @@ class TasksComplete extends base_command_1.BaseCommand {
         }
         let result;
         try {
-            result = await (0, api_fetch_1.apiFetch)(sessionPath || (0, task_extras_1.taskCompletePath)(taskId), {
+            result = await (0, api_fetch_1.apiFetch)(sessionWrite?.path || (0, task_extras_1.taskCompletePath)(taskId), {
                 method: 'POST',
+                credential: sessionWrite?.credential,
                 body: { ...payload, idempotencyKey },
                 headers: { 'X-Idempotency-Key': idempotencyKey },
             });

package/dist/commands/tasks/deliverable/add.js

@@ -42,7 +42,7 @@ const base_command_1 = require("../../../base-command");
 const task_asset_upload_1 = require("../../../lib/task-asset-upload");
 const outbox_1 = require("../../../lib/outbox");
 const api_fetch_1 = require("../../../lib/api-fetch");
-const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../../lib/session-task-write");
 const tasks_1 = require("../../../lib/tasks");
 function defaultDeliverableIdempotencyKey(task, payload) {
     // A retry of one exact observation keeps its key. A new version, provider,
@@ -192,10 +192,11 @@ class TasksDeliverableAdd extends base_command_1.BaseCommand {
                 idempotencyKey: flags['idempotency-key'] ||
                     defaultDeliverableIdempotencyKey(args.task, observation),
             };
-            const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('deliverable');
-            result = sessionPath
-                ? await (0, api_fetch_1.apiFetch)(sessionPath, {
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('deliverable', args.task);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
                     method: 'POST',
+                    credential: sessionWrite.credential,
                     body: payload,
                 })
                 : await data_provider_1.dataService.addTaskDeliverable(args.task, payload);

package/dist/commands/tasks/events/append.js

@@ -5,7 +5,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
-const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../../lib/session-task-write");
 const task_artifact_flags_1 = require("../../../lib/task-artifact-flags");
 const tasks_1 = require("../../../lib/tasks");
 class TasksEventsAppend extends base_command_1.BaseCommand {
@@ -99,17 +99,18 @@ class TasksEventsAppend extends base_command_1.BaseCommand {
                 ? deliverables.map((ref) => ({ label: 'deliverable', ref }))
                 : undefined,
         };
-        const path = await (0, session_task_endpoints_1.sessionScopedTaskPath)('event');
+        let sessionWrite;
         let result;
         try {
-            result = path
-                ? await (0, api_fetch_1.apiFetch)(path, { method: 'POST', body: data })
+            sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('event', task.id);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, { method: 'POST', body: data, credential: sessionWrite.credential })
                 : await data_provider_1.dataService.appendTaskWorkEvent({ taskId: task.id, data: data });
         }
         catch (error) {
             this.handleApiError(error);
         }
-        if (path && result && typeof result === 'object' && 'entry' in result)
+        if (sessionWrite && result && typeof result === 'object' && 'entry' in result)
             result = result.entry;
         if (flags.json)
             return this.log(JSON.stringify(result, null, 2));

package/dist/commands/tasks/expectations/assess.js

@@ -6,7 +6,7 @@ const base_command_1 = require("../../../base-command");
 const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
-const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../../lib/session-task-write");
 class TasksExpectationsAssess extends base_command_1.BaseCommand {
     static description = 'Assess one current Task Expectation with evidence and a reason';
     // Both positionals are declared optional because oclif REJECTS an args table
@@ -136,9 +136,9 @@ class TasksExpectationsAssess extends base_command_1.BaseCommand {
                     ? flags['idempotency-key']
                     : (0, outbox_1.idempotencyKeyFor)('task-expectation-assessment', task.id, JSON.stringify({ expectationId: id, ...payload })),
             };
-            const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('assessment');
-            return sessionPath
-                ? await (0, api_fetch_1.apiFetch)(sessionPath, { method: 'POST', body: data })
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('assessment', task.id);
+            return sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, { method: 'POST', body: data, credential: sessionWrite.credential })
                 : await data_provider_1.dataService.assessTaskExpectation({ taskId: task.id, expectationId: id, data });
         };
         if (flags.all) {

package/dist/commands/tasks/move.js

@@ -5,7 +5,8 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const api_fetch_1 = require("../../lib/api-fetch");
 const http_error_1 = require("../../lib/http-error");
 const workflow_state_hint_1 = require("../../lib/workflow-state-hint");
-const session_task_endpoints_1 = require("../../lib/session-task-endpoints");
+const unsupported_managed_task_write_1 = require("../../lib/unsupported-managed-task-write");
+const session_task_write_1 = require("../../lib/session-task-write");
 const base_command_1 = require("../../base-command");
 const task_closure_1 = require("../../lib/task-closure");
 const web_url_1 = require("../../lib/web-url");
@@ -78,6 +79,15 @@ class TasksMove extends base_command_1.BaseCommand {
         }
         const taskRef = await this.resolveEntityRef('task', taskIdentity.id);
         const projectId = (0, projects_1.resolveTaskProjectFlag)(flags.project);
+        if (projectId !== undefined) {
+            try {
+                (0, unsupported_managed_task_write_1.refuseUnsupportedManagedTaskWrite)('Project changes', 'mcp__tasks__task_update');
+            }
+            catch (error) {
+                this.handleApiError(error);
+                return;
+            }
+        }
         if (!flags.status && projectId === undefined) {
             this.failWithCliError({
                 message: 'Nothing to move. Pass --status <status>, --project <project-id>, or both.',
@@ -92,16 +102,10 @@ class TasksMove extends base_command_1.BaseCommand {
         let updated;
         try {
             if (flags.status) {
-                // WL-5 Step 1/2 — a session on a NARROWED credential cannot use
-                // `/api/tasks/:taskId/move`: that chain begins with `requireJwtAuth`,
-                // which cannot decode an `agst_`. The session-scoped sibling derives
-                // the task from the claim instead, so it takes no taskId at all.
-                //
-                // `null` here is the ordinary answer — a human, or a delegated session
-                // still holding a wide credential. See `sessionScopedTaskPath`.
-                const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('move');
-                if (sessionPath) {
-                    const res = (await (0, api_fetch_1.apiFetch)(sessionPath, {
+                const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('move', taskRef);
+                if (sessionWrite) {
+                    const res = (await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
+                        credential: sessionWrite.credential,
                         method: 'POST',
                         body: {
                             status: flags.status,

package/dist/commands/tasks/report.js

@@ -8,6 +8,8 @@ const task_report_1 = require("../../lib/task-report");
 const task_resolver_1 = require("../../lib/task-resolver");
 const tasks_1 = require("../../lib/tasks");
 const task_artifact_flags_1 = require("../../lib/task-artifact-flags");
+const api_fetch_1 = require("../../lib/api-fetch");
+const session_task_write_1 = require("../../lib/session-task-write");
 const web_url_1 = require("../../lib/web-url");
 /**
  * Compatibility spelling for submitting a versioned Task Result.
@@ -108,10 +110,13 @@ class TasksReport extends base_command_1.BaseCommand {
                 continue;
             }
             try {
-                const recorded = await data_provider_1.dataService.addTaskDeliverable(task.id, {
-                    ...parsed.value,
-                    idempotencyKey: (0, outbox_1.idempotencyKeyFor)('task-deliverable', task.id, ref),
-                });
+                const data = { ...parsed.value, idempotencyKey: (0, outbox_1.idempotencyKeyFor)('task-deliverable', task.id, ref) };
+                const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('deliverable', task.id);
+                const recorded = sessionWrite
+                    ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
+                        method: 'POST', body: data, credential: sessionWrite.credential,
+                    })
+                    : await data_provider_1.dataService.addTaskDeliverable(task.id, data);
                 resourceLinkIds.push(recorded.link.id);
             }
             catch (error) {
@@ -146,13 +151,16 @@ class TasksReport extends base_command_1.BaseCommand {
         };
         let result;
         try {
-            result = await data_provider_1.dataService.submitTaskResult({
-                taskId: task.id,
-                data: {
-                    ...payload,
-                    idempotencyKey: (0, outbox_1.idempotencyKeyFor)('task-result', task.id, JSON.stringify(payload)),
-                },
-            });
+            const data = {
+                ...payload,
+                idempotencyKey: (0, outbox_1.idempotencyKeyFor)('task-result', task.id, JSON.stringify(payload)),
+            };
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('result', task.id);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
+                    method: 'POST', body: data, credential: sessionWrite.credential,
+                })
+                : await data_provider_1.dataService.submitTaskResult({ taskId: task.id, data });
         }
         catch (error) {
             this.handleApiError(error);

package/dist/commands/tasks/result/submit.js

@@ -41,7 +41,7 @@ const task_resolver_1 = require("../../../lib/task-resolver");
 const web_url_1 = require("../../../lib/web-url");
 const api_fetch_1 = require("../../../lib/api-fetch");
 const task_closure_1 = require("../../../lib/task-closure");
-const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../../lib/session-task-write");
 function parseJson(value, label) {
     if (!value)
         return undefined;
@@ -181,10 +181,11 @@ class TasksResultSubmit extends base_command_1.BaseCommand {
                 idempotencyKey: flags['idempotency-key'] ||
                     (0, outbox_1.idempotencyKeyFor)('task-result', task.id, JSON.stringify(payload)),
             };
-            const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('result');
-            result = sessionPath
-                ? await (0, api_fetch_1.apiFetch)(sessionPath, {
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('result', task.id);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
                     method: 'POST',
+                    credential: sessionWrite.credential,
                     body: data,
                 })
                 : await data_provider_1.dataService.submitTaskResult({ taskId: task.id, data });

package/dist/commands/tasks/resume/save.js

@@ -6,7 +6,7 @@ const base_command_1 = require("../../../base-command");
 const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
-const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../../lib/session-task-write");
 const prompt_1 = require("../../../lib/prompt");
 class TasksResumeSave extends base_command_1.BaseCommand {
     static description = 'Save recovery state without publishing a visible Task Update';
@@ -53,10 +53,11 @@ class TasksResumeSave extends base_command_1.BaseCommand {
                 idempotencyKey: flags['idempotency-key'] ||
                     (0, outbox_1.idempotencyKeyFor)('task-resume', task.id, JSON.stringify(resume)),
             };
-            const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('resume');
-            result = sessionPath
-                ? await (0, api_fetch_1.apiFetch)(sessionPath, {
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('resume', task.id);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
                     method: 'POST',
+                    credential: sessionWrite.credential,
                     body: payload,
                 })
                 : await data_provider_1.dataService.saveTaskResumePoint({ taskId: task.id, data: payload });

package/dist/commands/tasks/review.js

@@ -6,7 +6,7 @@ const base_command_1 = require("../../base-command");
 const outbox_1 = require("../../lib/outbox");
 const task_resolver_1 = require("../../lib/task-resolver");
 const api_fetch_1 = require("../../lib/api-fetch");
-const session_task_endpoints_1 = require("../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../lib/session-task-write");
 class TasksReview extends base_command_1.BaseCommand {
     static description = 'Accept or request changes on one exact Task Result';
     static args = {
@@ -38,9 +38,9 @@ class TasksReview extends base_command_1.BaseCommand {
                 idempotencyKey: flags['idempotency-key'] ||
                     (0, outbox_1.idempotencyKeyFor)('task-review', task.id, JSON.stringify(payload)),
             };
-            const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('review');
-            result = sessionPath
-                ? await (0, api_fetch_1.apiFetch)(sessionPath, { method: 'POST', body: data })
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('review', task.id);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, { method: 'POST', body: data, credential: sessionWrite.credential })
                 : await data_provider_1.dataService.reviewTaskResult({ taskId: task.id, data });
         }
         catch (error) {

package/dist/commands/tasks/updates/add.js

@@ -39,7 +39,7 @@ const base_command_1 = require("../../../base-command");
 const outbox_1 = require("../../../lib/outbox");
 const task_resolver_1 = require("../../../lib/task-resolver");
 const api_fetch_1 = require("../../../lib/api-fetch");
-const session_task_endpoints_1 = require("../../../lib/session-task-endpoints");
+const session_task_write_1 = require("../../../lib/session-task-write");
 function parseJsonObject(value, label) {
     if (!value)
         return undefined;
@@ -176,10 +176,11 @@ class TasksUpdatesAdd extends base_command_1.BaseCommand {
                 resume: resume,
                 idempotencyKey,
             };
-            const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('update');
-            result = sessionPath
-                ? await (0, api_fetch_1.apiFetch)(sessionPath, {
+            const sessionWrite = await (0, session_task_write_1.sessionTaskWrite)('update', task.id);
+            result = sessionWrite
+                ? await (0, api_fetch_1.apiFetch)(sessionWrite.path, {
                     method: 'POST',
+                    credential: sessionWrite.credential,
                     body: payload,
                 })
                 : await data_provider_1.dataService.appendTaskUpdate({ taskId: task.id, data: payload });

package/dist/lib/mailbox-human-command.js

@@ -30,7 +30,7 @@ class MailboxHumanCommand extends base_command_1.BaseCommand {
         }
         if (this.credentialProvenance?.kind === 'daemon-handoff') {
             this.failWithCliError({
-                message: 'Mailbox metadata requires a direct human CLI sign-in. Run `skrr login` in your own terminal, then try again.',
+                message: 'Mailbox metadata requires a direct human CLI sign-in. Run `skrr login --device-code` in your own terminal to skip the daemon broker, then try again.',
                 code: 'MAILBOX_HUMAN_CLI_REQUIRED',
                 exit: 2,
                 retryable: false,

package/dist/lib/session-task-write.d.ts

@@ -0,0 +1,18 @@
+import type { SessionTaskOperation } from './session-task-endpoints';
+/**
+ * A canonical Task write must retain its authenticated session actor even if
+ * the daemon also grants the CLI a wide credential. The wide credential names
+ * its account, not the Agent that is executing this Task. Passing the trusted
+ * session credential explicitly makes apiFetch keep the server's bound actor.
+ * Human invocations continue through their ordinary Task endpoints.
+ */
+export declare function sessionTaskWrite(operation: Exclude<SessionTaskOperation, 'read'>, requestedTask: string, env?: Record<string, string | undefined>): Promise<{
+    path: string;
+    credential: import("@skrr-ai/auth-core/dist/esm/credentialResolver").ResolvedCredential;
+    taskId: string;
+    task: {
+        id?: string;
+        _id?: string;
+        identifier?: string;
+    } & Record<string, unknown>;
+} | null>;

package/dist/lib/session-task-write.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionTaskWrite = sessionTaskWrite;
+const api_fetch_1 = require("./api-fetch");
+const credential_resolver_1 = require("./credential-resolver");
+const session_task_endpoints_1 = require("./session-task-endpoints");
+/**
+ * A canonical Task write must retain its authenticated session actor even if
+ * the daemon also grants the CLI a wide credential. The wide credential names
+ * its account, not the Agent that is executing this Task. Passing the trusted
+ * session credential explicitly makes apiFetch keep the server's bound actor.
+ * Human invocations continue through their ordinary Task endpoints.
+ */
+async function sessionTaskWrite(operation, requestedTask, env = process.env) {
+    const credential = (0, credential_resolver_1.resolveTrustedAutonomousCredential)(env);
+    if (!credential)
+        return null;
+    const sessionId = env.OVERSKY_SESSION_ID?.trim();
+    if (!credential.token || !sessionId) {
+        throw Object.assign(new Error('Task writes require this runtime’s bound session credential.'), {
+            code: 'SESSION_TASK_CREDENTIAL_MISSING',
+        });
+    }
+    const prefix = `/api/agentic/sessions/${encodeURIComponent(sessionId)}`;
+    // A scoped endpoint derives its Task and ignores a caller's Task id. Check
+    // the requested coordinate first, so naming a sibling cannot quietly finish
+    // the bound Task instead. The server independently rechecks the live binding
+    // and checkout when committing the write.
+    const bound = await (0, api_fetch_1.apiFetch)(`${prefix}/task`, {
+        credential,
+    });
+    if (!bound.id || !(0, session_task_endpoints_1.requestMatchesBoundTask)(bound, requestedTask)) {
+        throw Object.assign(new Error(`This session is bound to task ${bound.identifier || bound.id || '?'} and cannot write the requested Task.`), {
+            code: 'SESSION_SCOPE_TASK_MISMATCH',
+        });
+    }
+    return {
+        path: `${prefix}/${session_task_endpoints_1.SESSION_TASK_PATH_SUFFIX[operation]}`,
+        credential,
+        taskId: bound.id,
+        task: bound,
+    };
+}

package/dist/lib/task-asset-upload.js

@@ -47,9 +47,8 @@ exports.postFileToStorage = postFileToStorage;
  *   ≤25MB or image → buffered multipart (canonicalization needs the bytes)
  *   larger non-image → intent → presigned POST to S3 → complete (OSK-9867)
  *
- * Session routing follows the CREDENTIAL, resolved here once per file so a
- * narrowed agent session lands on `task-attachments*` and a human (or a
- * delegated session holding a wide credential) lands on `/api/tasks/:id/*`.
+ * Agent uploads retain the authenticated session producer even beside a wide
+ * delegated credential. Human uploads use `/api/tasks/:id/*`.
  *
  * Retry safety is server-side: the sha256 IS the asset identity, so a second
  * upload of the same bytes returns the existing ready row instead of
@@ -73,7 +72,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../base-command");
 const file_mime_1 = require("./file-mime");
 const api_fetch_1 = require("./api-fetch");
-const session_task_endpoints_1 = require("./session-task-endpoints");
+const session_task_write_1 = require("./session-task-write");
 function mb(bytes) {
     return `${Math.floor(bytes / (1024 * 1024))} MB`;
 }
@@ -89,14 +88,9 @@ function storedDigest(asset) {
  * refuses to act on any other task before a byte leaves the machine.
  */
 async function readTaskForUpload(taskId) {
-    const readPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('read');
-    if (readPath) {
-        const bound = await (0, api_fetch_1.apiFetch)(readPath);
-        if (!(0, session_task_endpoints_1.requestMatchesBoundTask)(bound, taskId)) {
-            throw new Error(`This session is bound to task ${String(bound.identifier ?? bound.id ?? '?')} — a scoped credential cannot attach files to ${taskId}.`);
-        }
-        return bound;
-    }
+    const target = await (0, session_task_write_1.sessionTaskWrite)('attachment', taskId);
+    if (target)
+        return target.task;
     return (await data_provider_1.dataService.getTask(taskId, { enrich: false }));
 }
 /**
@@ -124,14 +118,13 @@ async function uploadTaskAssetFile(opts) {
         throw new Error(`${filename} exceeds the direct-upload limit (${mb(data_provider_1.TASK_DIRECT_UPLOAD_MAX_BYTES)})`);
     }
     const direct = !isImage && size > data_provider_1.TASK_ATTACHMENT_MAX_BYTES;
-    const sessionPath = await (0, session_task_endpoints_1.sessionScopedTaskPath)('attachment');
+    const sessionTarget = await (0, session_task_write_1.sessionTaskWrite)('attachment', taskId);
     let result;
     try {
-        if (sessionPath) {
-            await readTaskForUpload(taskId);
+        if (sessionTarget) {
             result = direct
-                ? await sessionDirectUpload({ filePath, size, filename, mimeType, role, ledger })
-                : await sessionBufferedUpload({ filePath, filename, mimeType, role, ledger });
+                ? await sessionDirectUpload({ filePath, size, filename, mimeType, role, ledger }, sessionTarget)
+                : await sessionBufferedUpload({ filePath, filename, mimeType, role, ledger }, sessionTarget);
         }
         else {
             result = direct
@@ -229,9 +222,10 @@ async function genericBufferedUpload(p) {
         formData: fileFormData(p.filePath, p.filename, p.mimeType, p.role, p.ledger),
     });
 }
-async function sessionBufferedUpload(p) {
-    return (0, api_fetch_1.apiFetch)((await (0, session_task_endpoints_1.sessionScopedTaskPath)('attachment')), {
+async function sessionBufferedUpload(p, target) {
+    return (0, api_fetch_1.apiFetch)(target.path, {
         method: 'POST',
+        credential: target.credential,
         body: fileFormData(p.filePath, p.filename, p.mimeType, p.role, p.ledger),
     });
 }
@@ -267,9 +261,10 @@ async function genericDirectUpload(p) {
         attachmentId: intent.attachment.id,
     });
 }
-async function sessionDirectUpload(p) {
-    const intent = await (0, api_fetch_1.apiFetch)((await (0, session_task_endpoints_1.sessionScopedTaskPath)('attachmentIntent')), {
+async function sessionDirectUpload(p, target) {
+    const intent = await (0, api_fetch_1.apiFetch)(`${target.path}/intent`, {
         method: 'POST',
+        credential: target.credential,
         body: {
             filename: p.filename,
             mimeType: p.mimeType,
@@ -296,8 +291,9 @@ async function sessionDirectUpload(p) {
         filename: p.filename,
         mimeType: p.mimeType,
     });
-    return (0, api_fetch_1.apiFetch)((await (0, session_task_endpoints_1.sessionScopedTaskPath)('attachmentComplete')), {
+    return (0, api_fetch_1.apiFetch)(`${target.path}/complete`, {
         method: 'POST',
+        credential: target.credential,
         body: { attachmentId: intent.attachment.id },
     });
 }

package/dist/lib/unsupported-managed-task-write.d.ts

@@ -0,0 +1,2 @@
+/** Refuse before a composite command can partially mutate a Task as Human. */
+export declare function refuseUnsupportedManagedTaskWrite(operation: string, supportedTool?: string, env?: Record<string, string | undefined>): void;

package/dist/lib/unsupported-managed-task-write.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refuseUnsupportedManagedTaskWrite = refuseUnsupportedManagedTaskWrite;
+const credential_resolver_1 = require("./credential-resolver");
+/** Refuse before a composite command can partially mutate a Task as Human. */
+function refuseUnsupportedManagedTaskWrite(operation, supportedTool, env = process.env) {
+    if (!(0, credential_resolver_1.resolveTrustedAutonomousCredential)(env))
+        return;
+    throw Object.assign(new Error(`${operation} have no bound-session CLI endpoint. ` +
+        (supportedTool ? `Use ${supportedTool} through this Agent’s authenticated tool runtime, or ask a person to make the change. ` : 'Ask a person to make this change. ') +
+        'No Task was changed and no files were uploaded.'), { code: 'SESSION_TASK_WRITE_UNSUPPORTED' });
+}

package/dist/node_modules/@skrr-ai/data-provider/index.js

@@ -43929,7 +43929,7 @@ var Tz = e.z.object({ t: e.z.literal("subagent-ref"), subagent: e.z.string().min
 var wz = e.z.object({ name: e.z.string().min(1), description: e.z.string().optional(), argHint: e.z.string().optional(), provider: e.z.string().optional(), execution: e.z.enum(["forward-text", "insert-text", "daemon-rpc"]).optional(), handler: e.z.string().optional(), insertText: e.z.string().optional(), category: e.z.enum(["command", "skill", "plugin", "model", "mode"]).optional(), scope: e.z.enum(["user", "project", "cli"]), bodyPreview: e.z.string().optional(), triggers: e.z.array(e.z.enum(["user", "model"])).optional(), pathHash: e.z.string().optional(), skillRoot: e.z.string().optional() });
 var Rz = e.z.object({ t: e.z.literal("slash-commands-available"), source: e.z.enum(["cli-init", "commands-dir", "codex-app-server", "acp", "skills"]), commands: e.z.array(wz) });
 var Cz = e.z.object({ t: e.z.literal("permission-ask"), requestId: e.z.string().min(1), toolUseId: e.z.string().min(1).optional(), toolName: e.z.string().min(1).optional(), inputPreview: e.z.string().optional(), defaultDecision: e.z.enum(["allow", "deny"]).optional(), timeoutMs: e.z.number().int().nonnegative().optional() });
-var Pz = e.z.object({ t: e.z.literal("permission-mode-change"), mode: e.z.enum(["default", "acceptEdits", "bypassPermissions", "plan", "auto", "manual"]), source: e.z.enum(["cli", "user"]).optional(), toolUseId: e.z.string().min(1).optional() });
+var Pz = e.z.object({ t: e.z.literal("permission-mode-change"), mode: e.z.enum(["default", "acceptEdits", "bypassPermissions", "plan", "auto", "manual"]), source: e.z.enum(["cli", "user"]).optional(), toolUseId: e.z.string().min(1).optional(), receipt: e.z.object({ version: e.z.literal(1), authority: e.z.literal("daemon-policy") }).optional() });
 var Oz = e.z.object({ t: e.z.literal("permission-resolved"), requestId: e.z.string().min(1), localId: e.z.string().min(1).optional(), decision: e.z.enum(["allow", "deny"]), by: e.z.enum(["cockpit", "avatar", "timeout", "server", "cli", "cache"]), basis: e.z.enum(["person", "mode", "policy", "session-grant"]).optional(), mode: e.z.string().min(1).max(64).optional(), surface: e.z.enum(["web", "desktop", "cli", "mobile", "daemon", "unknown"]).optional() });
 var Nz = e.z.object({ t: e.z.literal("question-ask"), requestId: e.z.string().min(1), questionId: e.z.string().min(1).optional(), prompt: e.z.string().optional(), options: e.z.array(e.z.string()).optional(), allowFreeText: e.z.boolean().optional() });
 var Mz = e.z.object({ t: e.z.literal("question-resolved"), requestId: e.z.string().min(1), localId: e.z.string().min(1).optional(), answer: e.z.string(), by: e.z.enum(["cockpit", "avatar", "timeout"]) });

package/oclif.manifest.json

@@ -130039,5 +130039,5 @@
       ]
     }
   },
-  "version": "0.1.96"
+  "version": "0.1.97"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/cli",
-  "version": "0.1.96",
+  "version": "0.1.97",
   "description": "Command-line interface for skrr",
   "license": "ISC",
   "author": "skrr",