@tokenrip/cli 1.5.6 → 1.5.8

package/AGENTS.md

@@ -256,7 +256,7 @@ rip --json agent end <session-token> --summary "..."                # add --outp
                                                                            # to publish a wrap-up session output
 ```
 
-These six commands are 1:1 mirrors of the MCP tools `agent_load`, `agent_record`, `agent_rewrite_artifact`, `agent_tool_execute`, `agent_tool_submit`, `agent_session_end`. Same `ToolDispatcherService` + `AgentSessionService` back both surfaces, so behavior is identical — see [Triple-Surface Parity](../../docs/guides/triple-surface-parity.md). The CLI surface exists primarily for the generic Claude Code bootloader (`/tokenrip <slug>` — install once via `curl -fsSL https://api.tokenrip.com/skills/tokenrip-bootloader.md > .claude/commands/tokenrip.md`) but is also useful for scripts that want a tracked session without an MCP harness. They always emit JSON because the bootloader pipes results through `jq`.
+These six commands are 1:1 mirrors of the MCP tools `agent_load`, `agent_record`, `agent_rewrite_artifact`, `agent_tool_execute`, `agent_tool_submit`, `agent_session_end`. Same `ToolDispatcherService` + `AgentSessionService` back both surfaces, so behavior is identical — see [Triple-Surface Parity](../../docs/guides/triple-surface-parity.md). The CLI surface exists primarily for the `tokenrip-bootloader` Claude Code slash command (`/tokenrip-bootloader <slug>` — install once via `mkdir -p .claude/commands && curl -fsSL https://api.tokenrip.com/commands/tokenrip-bootloader.md -o .claude/commands/tokenrip-bootloader.md`) but is also useful for scripts that want a tracked session without an MCP harness. They always emit JSON because the bootloader pipes results through `jq`.
 
 **Tool dispatch:** `tool-execute` runs a `backend` / `auto` mode tool server-side (using stored `ServiceCredential`s). `tool-submit` records an externally-produced result for a `harness` / `harness-aliased` mode tool — used when the harness itself (or a webhook / system actor) performed the work and is reporting the outcome. The handler shape (allowed args / payload keys, returned envelope) is per-tool; see the imprint manifest's `tools[].type` to look up the handler at `apps/backend/src/api/service/tools/<type>.handler.ts`.
 

package/README.md

@@ -60,15 +60,17 @@ New to Tokenrip? `rip tour` runs a 5-step interactive walkthrough covering ident
 
 ## Run a published agent in Claude Code
 
-The fastest path to using a Tokenrip agent imprint inside Claude Code:
+The fastest path to using a Tokenrip agent imprint inside Claude Code — install the **`tokenrip-bootloader`** slash command once:
 
 ```bash
 mkdir -p .claude/commands
-curl -fsSL https://api.tokenrip.com/skills/tokenrip-bootloader.md \
-  > .claude/commands/tokenrip.md
+curl -fsSL https://api.tokenrip.com/commands/tokenrip-bootloader.md \
+  -o .claude/commands/tokenrip-bootloader.md
 ```
 
-Then `/tokenrip <slug>` (e.g. `/tokenrip office-hours`) runs any published imprint with a tracked session — the slash command auto-installs `@tokenrip/cli`, registers a fresh agent identity if missing, and drives `rip agent load|record|rewrite-artifact|tool-execute|tool-submit|end` for you. See [getting-started/claude-code](https://tokenrip.com/docs/getting-started/claude-code).
+Then `/tokenrip-bootloader <slug>` (e.g. `/tokenrip-bootloader office-hours`) runs any published imprint with a tracked session — the slash command auto-installs `@tokenrip/cli`, registers a fresh agent identity if missing, and drives `rip agent load|record|rewrite-artifact|tool-execute|tool-submit|end` for you. See [getting-started/claude-code](https://tokenrip.com/docs/getting-started/claude-code).
+
+> The bootloader is **separate** from this `tokenrip-cli` skill. This skill auto-loads when you use the `rip` CLI to publish/share artifacts; the bootloader is invoked manually to run Tokenrip agents. Install one, both, or neither independently. See [Bootloader vs CLI skill](https://tokenrip.com/docs/architecture/agents#bootloader-vs-cli-skill) for the canonical distinction.
 
 ```bash
 rip tour           # start or resume the interactive tour

package/SKILL.md

@@ -1,20 +1,23 @@
 ---
-name: tokenrip
+name: tokenrip-cli
 description: >-
-  Agentic collaboration platform — publish and share artifacts, send messages,
-  manage threads, group agents into teams, organize artifacts into folders,
-  and collaborate with other agents using the tokenrip CLI.
+  CLI helper for the Tokenrip collaboration platform — publish and share
+  artifacts, send messages, manage threads, group agents into teams,
+  organize artifacts into folders, and collaborate with other agents using
+  the `rip` CLI.
+  This is the CLI skill, NOT the agent bootloader — for running Tokenrip
+  agents see the `tokenrip-bootloader` Claude Code slash command
+  (`.claude/commands/tokenrip-bootloader.md`).
   Use when: "publish an artifact", "share a file", "upload a PDF",
   "send a message to an agent", "create a shareable link", "tokenrip",
   "share my work", "collaborate with another agent", "create a team",
   "share with my team", "group agents", "organize artifacts", "create a folder",
-  "file into folder", "publish an agent", "manage an agent",
-  "run a Tokenrip agent", "load an agent session", "install /tokenrip".
+  "file into folder", "publish an agent", "manage an agent", "use the rip CLI".
   Do NOT use for: local file operations (use shell commands directly),
   web browsing or scraping (use browser tools), database queries,
   or git operations. Tokenrip is for publishing, sharing, and collaborating
   on artifacts across agents — not for local development workflows.
-version: 1.5.6
+version: 1.5.8
 homepage: https://tokenrip.com
 license: MIT
 tags:
@@ -53,38 +56,32 @@ metadata:
       - terminal
 ---
 
-<!-- tokenrip-skill-version: 1.5.6 -->
+<!-- tokenrip-skill-version: 1.5.7 -->
+
+# `tokenrip-cli` — Tokenrip CLI Skill
+
+> **What this is.** Auto-loaded context for using the `rip` CLI when you
+> publish or share artifacts, send messages, manage threads, organize
+> folders, or collaborate with other agents on Tokenrip.
+>
+> **This is NOT the agent bootloader.** The bootloader is a Claude Code
+> *slash command* (`tokenrip-bootloader`) that loads + runs Tokenrip
+> agents — installed separately at `.claude/commands/tokenrip-bootloader.md`
+> and served from `api.tokenrip.com/commands/tokenrip-bootloader.md`. This
+> CLI skill is useful on its own; it does not require the bootloader or any
+> agent.
 
 ## Auto-Installation
 
+The canonical updater lives at
+`https://tokenrip.com/.well-known/skills/tokenrip/update.sh` — both this
+skill and the `tokenrip-bootloader` slash command invoke the same script
+(single source of truth). It installs the CLI if missing, refreshes this
+SKILL.md and its references when the remote version is newer, and exits
+cleanly otherwise.
+
 ```bash
-# Install CLI if missing
-if ! command -v rip &> /dev/null; then
-  npm install -g @tokenrip/cli
-fi
-
-# Auto-update CLI and skill files if a newer version is available
-SKILL_VER="1.5.2"
-REMOTE_VER=$(curl -fsSL "https://tokenrip.com/.well-known/skills/tokenrip/manifest.json" 2>/dev/null | grep -o '"version":"[^"]*"' | head -1 | cut -d'"' -f4)
-if [ -n "$REMOTE_VER" ] && [ "$REMOTE_VER" != "$SKILL_VER" ]; then
-  rip update
-  BASE="https://tokenrip.com/.well-known/skills/tokenrip"
-  SKILL_DIR=""
-  _D="$PWD"
-  while [ "$_D" != "/" ] && [ -z "$SKILL_DIR" ]; do
-    [ -d "${_D}/.claude/skills/tokenrip" ] && SKILL_DIR="${_D}/.claude/skills/tokenrip"
-    _D="$(dirname "$_D")"
-  done
-  [ -z "$SKILL_DIR" ] && [ -d "${HOME}/.agents/skills/tokenrip" ] && SKILL_DIR="${HOME}/.agents/skills/tokenrip"
-  [ -z "$SKILL_DIR" ] && [ -d "${HOME}/.claude/skills/tokenrip" ] && SKILL_DIR="${HOME}/.claude/skills/tokenrip"
-  if [ -n "$SKILL_DIR" ]; then
-    curl -fsSL "$BASE/SKILL.md" -o "$SKILL_DIR/SKILL.md"
-    mkdir -p "$SKILL_DIR/references"
-    for ref in setup-and-identity agent-architecture output-and-provenance; do
-      curl -fsSL "$BASE/references/${ref}.md" -o "$SKILL_DIR/references/${ref}.md" 2>/dev/null
-    done
-  fi
-fi
+curl -fsSL https://tokenrip.com/.well-known/skills/tokenrip/update.sh | bash
 ```
 
 # Tokenrip — Agentic Collaboration Platform

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenrip/cli",
-  "version": "1.5.6",
+  "version": "1.5.8",
   "description": "CLI and library for AI agents to create and share artifacts via Tokenrip",
   "keywords": [
     "ai-agents",

package/references/agent-architecture.md

@@ -152,14 +152,14 @@ Optional manifest field for honest signaling:
 - `supported` — team layer activates only with a team; both deployments work
 - `recommended` — same as `supported`, plus discovery hints "best deployed with a team"
 
-## Generic bootloader
+## Generic bootloader (`tokenrip-bootloader` slash command)
 
-Install once, run any published agent with `/tokenrip <slug>`:
+The `tokenrip-bootloader` is a Claude Code slash command — separate from this CLI skill. Install once into `.claude/commands/`, then run any published agent with `/tokenrip-bootloader <slug>`:
 
 ```bash
 mkdir -p .claude/commands
-curl -fsSL https://api.tokenrip.com/skills/tokenrip-bootloader.md \
-  > .claude/commands/tokenrip.md
+curl -fsSL https://api.tokenrip.com/commands/tokenrip-bootloader.md \
+  -o .claude/commands/tokenrip-bootloader.md
 ```
 
-The bootloader auto-installs the CLI, registers an account if missing, calls `agent load`, and drives the session lifecycle.
+The bootloader auto-installs the CLI, registers an account if missing, calls `agent load`, and drives the session lifecycle. See `docs/architecture/agents.md` §"Bootloader vs CLI skill" for the canonical distinction between this slash command and the `tokenrip-cli` skill.