robotrock 1.1.0 → 1.3.1

package/dist/eve/tools/inbox/index.d.ts

@@ -1,5 +1,6 @@
 export { CREATE_INBOX_TASK_TOOL_NAME, CreateInboxTaskToolInput, DefineCreateInboxTaskToolOptions, createInboxTaskInputSchema, createInboxTaskTool, defineCreateInboxTaskTool } from './create-task.js';
 import 'eve/tools';
+import '../../../tool-reply-guidance-C3qrT1In.js';
 import 'zod';
 import '../../../tenant-5YKDrdC-.js';
 import 'eve/context';

package/dist/eve/tools/inbox/index.js

@@ -1,9 +1,9 @@
 // src/eve/tools/inbox/create-task.ts
 import { defineTool } from "eve/tools";
-import { z as z4 } from "zod";
+import { z as z6 } from "zod";
 
 // src/schemas/index.ts
-import { z as z2 } from "zod";
+import { z as z4 } from "zod";
 
 // ../core/src/utils/safe-url.ts
 var BLOCKED_HOSTNAMES = /* @__PURE__ */ new Set([
@@ -390,13 +390,27 @@ var createAgentChatBodySchema = z.object({
   eveConnectionId: z.string().min(1).optional(),
   /** Source application id; groups the chat under an inbox section. */
   app: z.string().min(1).optional(),
-  assignTo: assignToSchema.optional(),
+  /** Email of the user who owns the chat. Required unless `parentChatId` is set. */
+  ownerEmail: z.string().email().optional(),
   title: z.string().min(1),
   messages: z.array(agentChatSeedMessageSchema).default([]),
   /** Provenance label stored on the session ("cron" | "agent" | ...). */
   source: z.string().min(1).optional()
 }).refine((data) => Boolean(data.agentIdentifier || data.parentChatId), {
   message: "Provide either agentIdentifier or parentChatId"
+}).refine((data) => Boolean(data.ownerEmail || data.parentChatId), {
+  message: "Provide ownerEmail unless parentChatId is set"
+});
+var agentChatAuditToolBodySchema = z.object({
+  eveSessionId: z.string().min(1),
+  userId: z.string().min(1),
+  toolCallId: z.string().min(1),
+  toolName: z.string().min(1),
+  input: z.record(z.string(), z.unknown()).default({}),
+  success: z.boolean(),
+  status: z.enum(["completed", "failed", "rejected"]),
+  error: z.string().optional(),
+  idempotencyKey: z.string().optional()
 });
 var agentChatAuditInputBodySchema = z.object({
   eveSessionId: z.string().min(1),
@@ -436,62 +450,175 @@ var agentChatLinkTaskBodySchema = z.object({
   toolCallId: z.string().min(1)
 });
 
+// ../core/src/schemas/tool-result-display.ts
+import { z as z2 } from "zod";
+var toolDisplayMetadataSchema = z2.object({
+  widget: z2.string().optional(),
+  title: z2.string().optional(),
+  description: z2.string().optional()
+});
+var toolDisplayEnvelopeSchema = z2.object({
+  display: toolDisplayMetadataSchema.optional(),
+  data: z2.record(z2.string(), z2.unknown()),
+  ui: z2.record(
+    z2.string(),
+    z2.object({
+      "ui:widget": z2.string().optional(),
+      "ui:title": z2.string().optional(),
+      "ui:description": z2.string().optional(),
+      "ui:options": z2.record(z2.string(), z2.unknown()).optional()
+    }).passthrough()
+  ).optional()
+});
+
+// ../core/src/schemas/agent-admin.ts
+import { z as z3 } from "zod";
+var tenantRoleSchema = z3.enum(["admin", "member"]);
+var agentAdminUserSchema = z3.object({
+  id: z3.string(),
+  email: z3.string().email(),
+  name: z3.string()
+});
+var agentAdminMemberSchema = z3.object({
+  userId: z3.string(),
+  role: z3.string(),
+  membershipKind: z3.enum(["team", "assignee"]),
+  hasLoggedIn: z3.boolean(),
+  user: agentAdminUserSchema
+});
+var agentAdminGroupSchema = z3.object({
+  id: z3.string(),
+  name: z3.string(),
+  slug: z3.string(),
+  description: z3.string().nullable(),
+  memberCount: z3.number().optional()
+});
+var agentAdminGroupDetailSchema = agentAdminGroupSchema.extend({
+  members: z3.array(
+    z3.object({
+      userId: z3.string(),
+      user: agentAdminUserSchema
+    })
+  )
+});
+var agentAdminTaskSummarySchema = z3.object({
+  id: z3.string(),
+  convexId: z3.string(),
+  status: z3.string(),
+  type: z3.string().nullable(),
+  name: z3.string().nullable(),
+  description: z3.string().nullable(),
+  validUntil: z3.number(),
+  createdAt: z3.number(),
+  threadPriority: z3.string().nullable(),
+  handledByUserId: z3.string().nullable()
+});
+var inviteMemberBodySchema = z3.object({
+  email: z3.string().email(),
+  role: tenantRoleSchema.optional()
+});
+var updateMemberRoleBodySchema = z3.object({
+  role: tenantRoleSchema
+});
+var createGroupBodySchema = z3.object({
+  name: z3.string().min(1),
+  description: z3.string().optional()
+});
+var updateGroupBodySchema = z3.object({
+  name: z3.string().min(1).optional(),
+  description: z3.string().optional()
+});
+var addGroupMemberBodySchema = z3.object({
+  userId: z3.string().min(1).describe("Convex user id or member email.")
+});
+var listTasksQuerySchema = z3.object({
+  statusFilter: z3.enum(["all", "open", "handled", "expired"]).optional(),
+  typeFilter: z3.string().optional(),
+  appFilter: z3.string().optional(),
+  sortField: z3.enum(["type", "date", "status", "validUntil"]).optional(),
+  sortDirection: z3.enum(["asc", "desc"]).optional(),
+  limit: z3.coerce.number().int().positive().max(100).optional(),
+  cursor: z3.string().optional()
+});
+var searchTasksQuerySchema = z3.object({
+  q: z3.string().min(1),
+  limit: z3.coerce.number().int().positive().max(100).optional()
+});
+var assignTasksResultSchema = z3.object({
+  taskId: z3.string(),
+  success: z3.boolean(),
+  message: z3.string().optional(),
+  name: z3.string().nullable().optional(),
+  description: z3.string().nullable().optional(),
+  type: z3.string().nullable().optional()
+});
+var assignTasksResponseSchema = z3.object({
+  results: z3.array(assignTasksResultSchema)
+});
+var assignTasksBodySchema = z3.object({
+  taskIds: z3.array(z3.string().min(1)).min(1).max(100),
+  assignTo: assignToSchema.refine(
+    (value) => (value.users?.length ?? 0) > 0 || (value.groups?.length ?? 0) > 0,
+    { message: "assignTo needs at least one user email or group slug." }
+  )
+});
+
 // src/schemas/index.ts
-var handlerUrlSchema2 = z2.string().refine((url) => isAllowedHandlerUrl(url), {
+var handlerUrlSchema2 = z4.string().refine((url) => isAllowedHandlerUrl(url), {
   message: HANDLER_URL_ERROR
 });
-var jsonSchema7Schema2 = z2.custom(
+var jsonSchema7Schema2 = z4.custom(
   (val) => typeof val === "object" && val !== null,
   { message: "Must be a valid JSON Schema object" }
 );
-var uiSchemaSchema2 = z2.custom((val) => typeof val === "object" && val !== null, {
+var uiSchemaSchema2 = z4.custom((val) => typeof val === "object" && val !== null, {
   message: "Must be a valid UiSchema object"
 });
-var webhookHandlerSchema2 = z2.object({
-  type: z2.literal("webhook"),
+var webhookHandlerSchema2 = z4.object({
+  type: z4.literal("webhook"),
   url: handlerUrlSchema2,
-  headers: z2.record(z2.string(), z2.string())
+  headers: z4.record(z4.string(), z4.string())
 });
 var triggerHandlerSchema2 = webhookHandlerSchema2.extend({
-  type: z2.literal("trigger"),
-  tokenId: z2.string().min(1)
+  type: z4.literal("trigger"),
+  tokenId: z4.string().min(1)
 });
-var handlerSchema2 = z2.discriminatedUnion("type", [webhookHandlerSchema2, triggerHandlerSchema2]);
-var taskActionInputSchema2 = z2.object({
-  id: z2.string().min(1),
-  title: z2.string().min(1),
-  description: z2.string().optional(),
+var handlerSchema2 = z4.discriminatedUnion("type", [webhookHandlerSchema2, triggerHandlerSchema2]);
+var taskActionInputSchema2 = z4.object({
+  id: z4.string().min(1),
+  title: z4.string().min(1),
+  description: z4.string().optional(),
   schema: jsonSchema7Schema2.optional(),
   ui: uiSchemaSchema2.optional(),
-  data: z2.record(z2.string(), z2.unknown()).optional()
+  data: z4.record(z4.string(), z4.unknown()).optional()
 });
 var taskActionSchema2 = taskActionInputSchema2.extend({
-  handlers: z2.array(handlerSchema2).min(1).optional()
+  handlers: z4.array(handlerSchema2).min(1).optional()
 });
-var uiFieldSchemaSchema2 = z2.object({
-  "ui:widget": z2.string().optional(),
-  "ui:title": z2.string().optional(),
-  "ui:description": z2.string().optional(),
-  "ui:options": z2.record(z2.string(), z2.unknown()).optional(),
-  items: z2.lazy(() => z2.record(z2.string(), uiFieldSchemaSchema2)).optional()
+var uiFieldSchemaSchema2 = z4.object({
+  "ui:widget": z4.string().optional(),
+  "ui:title": z4.string().optional(),
+  "ui:description": z4.string().optional(),
+  "ui:options": z4.record(z4.string(), z4.unknown()).optional(),
+  items: z4.lazy(() => z4.record(z4.string(), uiFieldSchemaSchema2)).optional()
 }).passthrough();
-var contextUiSchema2 = z2.record(z2.string(), uiFieldSchemaSchema2).optional();
-var contextDataSchema2 = z2.object({
-  data: z2.record(z2.string(), z2.unknown()),
+var contextUiSchema2 = z4.record(z4.string(), uiFieldSchemaSchema2).optional();
+var contextDataSchema2 = z4.object({
+  data: z4.record(z4.string(), z4.unknown()),
   ui: contextUiSchema2
 }).optional();
 var TASK_CONTEXT_FORMAT_VERSION2 = 2;
-var taskContextObjectBaseSchema2 = z2.object({
-  app: z2.string().min(1).optional(),
-  type: z2.string().min(1),
-  name: z2.string().min(1),
-  description: z2.string().optional(),
-  validUntil: z2.string().optional(),
+var taskContextObjectBaseSchema2 = z4.object({
+  app: z4.string().min(1).optional(),
+  type: z4.string().min(1),
+  name: z4.string().min(1),
+  description: z4.string().optional(),
+  validUntil: z4.string().optional(),
   context: contextDataSchema2,
-  contextVersion: z2.literal(2).optional(),
+  contextVersion: z4.literal(2).optional(),
   /** @deprecated Use `contextVersion`. Accepted on ingest only. */
-  version: z2.literal(2).optional(),
-  actions: z2.array(taskActionSchema2).min(1, "At least one action is required")
+  version: z4.literal(2).optional(),
+  actions: z4.array(taskActionSchema2).min(1, "At least one action is required")
 });
 function normalizeTaskContextVersion2(data) {
   const { version: legacyVersion, contextVersion, ...rest } = data;
@@ -507,7 +634,7 @@ function refineContextPublicUrls2(data, ctx) {
   const error = validateContextPublicUrls(data.context);
   if (error) {
     ctx.addIssue({
-      code: z2.ZodIssueCode.custom,
+      code: z4.ZodIssueCode.custom,
       message: error,
       path: ["context"]
     });
@@ -516,9 +643,9 @@ function refineContextPublicUrls2(data, ctx) {
 var taskContextSchema2 = taskContextObjectSchema2.superRefine(
   refineContextPublicUrls2
 );
-var assignToSchema2 = z2.object({
-  users: z2.array(z2.string().email()).optional(),
-  groups: z2.array(z2.string().min(1)).optional()
+var assignToSchema2 = z4.object({
+  users: z4.array(z4.string().email()).optional(),
+  groups: z4.array(z4.string().min(1)).optional()
 }).refine(
   (data) => {
     const groups = data.groups ?? [];
@@ -529,7 +656,7 @@ var assignToSchema2 = z2.object({
   },
   { message: 'Cannot combine "all" with other group slugs' }
 );
-var threadUpdateMessageSchema2 = z2.string().min(1).max(500);
+var threadUpdateMessageSchema2 = z4.string().min(1).max(500);
 var threadUpdateStatuses2 = [
   "info",
   "queued",
@@ -539,15 +666,15 @@ var threadUpdateStatuses2 = [
   "failed",
   "cancelled"
 ];
-var threadUpdateStatusSchema2 = z2.enum(threadUpdateStatuses2);
-var threadUpdateInputSchema2 = z2.object({
+var threadUpdateStatusSchema2 = z4.enum(threadUpdateStatuses2);
+var threadUpdateInputSchema2 = z4.object({
   message: threadUpdateMessageSchema2,
   status: threadUpdateStatusSchema2.optional()
 });
 var taskPriorities2 = ["low", "normal", "high", "urgent"];
-var taskPrioritySchema2 = z2.enum(taskPriorities2);
-var agentTelemetrySchema2 = z2.object({
-  version: z2.string().min(1)
+var taskPrioritySchema2 = z4.enum(taskPriorities2);
+var agentTelemetrySchema2 = z4.object({
+  version: z4.string().min(1)
 });
 var createTaskBodySchema2 = taskContextObjectBaseSchema2.extend({
   assignTo: assignToSchema2.optional(),
@@ -555,7 +682,7 @@ var createTaskBodySchema2 = taskContextObjectBaseSchema2.extend({
    * Groups related tasks together. When omitted, the server generates one and
    * returns it so the caller can reuse it on later tasks in the same thread.
    */
-  threadId: z2.string().min(1).optional(),
+  threadId: z4.string().min(1).optional(),
   /**
    * Optional thread priority. When set, applies to the whole thread and
    * overwrites any previous priority. Omit on later tasks to leave unchanged.
@@ -570,6 +697,65 @@ var createTaskBodySchema2 = taskContextObjectBaseSchema2.extend({
 }).transform(normalizeTaskContextVersion2).superRefine(refineContextPublicUrls2);
 var threadUpdateBodySchema = threadUpdateInputSchema2;
 
+// ../core/src/handler-retry.ts
+var HANDLER_RETRY_DELAYS_MS = [
+  6e4,
+  // 1m
+  3e5,
+  // 5m
+  18e5,
+  // 30m
+  36e5,
+  // 1h
+  216e5,
+  // 6h
+  864e5,
+  // 24h
+  1728e5
+  // 48h
+];
+var HANDLER_MAX_ATTEMPTS = HANDLER_RETRY_DELAYS_MS.length + 1;
+
+// ../core/src/attribution/index.ts
+import { z as z5 } from "zod";
+
+// ../core/src/app-url.ts
+var PRODUCTION_APP_URL = "https://app.robotrock.io";
+var PRODUCTION_API_URL = "https://api.robotrock.io/v1";
+var DEV_API_URL = "http://localhost:4001/v1";
+var APP_SIGNUP_URL = `${PRODUCTION_APP_URL}/sign-up`;
+function normalizeRobotRockApiBaseUrl(baseUrl) {
+  const trimmed = baseUrl.trim().replace(/\/+$/, "");
+  if (trimmed.endsWith("/v1")) {
+    return trimmed;
+  }
+  return `${trimmed}/v1`;
+}
+function getRobotRockApiBaseUrl() {
+  const explicit = process.env.ROBOTROCK_BASE_URL?.trim() || process.env.ROBOTROCK_API_URL?.trim();
+  if (explicit) {
+    return normalizeRobotRockApiBaseUrl(explicit);
+  }
+  if (process.env.NODE_ENV === "production") {
+    return PRODUCTION_API_URL;
+  }
+  return DEV_API_URL;
+}
+
+// ../core/src/attribution/index.ts
+var ATTRIBUTION_COOKIE_MAX_AGE = 60 * 60 * 24 * 90;
+var attributionSchema = z5.object({
+  utmSource: z5.string().optional(),
+  utmMedium: z5.string().optional(),
+  utmCampaign: z5.string().optional(),
+  utmContent: z5.string().optional(),
+  utmTerm: z5.string().optional(),
+  gclid: z5.string().optional(),
+  landingUrl: z5.string().optional(),
+  referrer: z5.string().optional(),
+  capturedAt: z5.number()
+});
+
 // src/approval-result.ts
 var TaskTimeoutError = class extends Error {
   constructor(message) {
@@ -644,77 +830,27 @@ function getErrorMessage(data, fallback) {
   return fallback;
 }
 
-// ../core/src/handler-retry.ts
-var HANDLER_RETRY_DELAYS_MS = [
-  6e4,
-  // 1m
-  3e5,
-  // 5m
-  18e5,
-  // 30m
-  36e5,
-  // 1h
-  216e5,
-  // 6h
-  864e5,
-  // 24h
-  1728e5
-  // 48h
-];
-var HANDLER_MAX_ATTEMPTS = HANDLER_RETRY_DELAYS_MS.length + 1;
-
-// ../core/src/attribution/index.ts
-import { z as z3 } from "zod";
-
-// ../core/src/app-url.ts
-var PRODUCTION_APP_URL = "https://app.robotrock.io";
-var PRODUCTION_API_URL = "https://api.robotrock.io/v1";
-var DEV_API_URL = "http://localhost:4001/v1";
-var APP_SIGNUP_URL = `${PRODUCTION_APP_URL}/sign-up`;
-function normalizeRobotRockApiBaseUrl(baseUrl) {
-  const trimmed = baseUrl.trim().replace(/\/+$/, "");
-  if (trimmed.endsWith("/v1")) {
-    return trimmed;
-  }
-  return `${trimmed}/v1`;
-}
-function getRobotRockApiBaseUrl() {
-  const explicit = process.env.ROBOTROCK_BASE_URL?.trim() || process.env.ROBOTROCK_API_URL?.trim();
-  if (explicit) {
-    return normalizeRobotRockApiBaseUrl(explicit);
-  }
-  if (process.env.NODE_ENV === "production") {
-    return PRODUCTION_API_URL;
-  }
-  return DEV_API_URL;
-}
-
-// ../core/src/attribution/index.ts
-var ATTRIBUTION_COOKIE_MAX_AGE = 60 * 60 * 24 * 90;
-var attributionSchema = z3.object({
-  utmSource: z3.string().optional(),
-  utmMedium: z3.string().optional(),
-  utmCampaign: z3.string().optional(),
-  utmContent: z3.string().optional(),
-  utmTerm: z3.string().optional(),
-  gclid: z3.string().optional(),
-  landingUrl: z3.string().optional(),
-  referrer: z3.string().optional(),
-  capturedAt: z3.number()
-});
-
 // src/auth-headers.ts
+var ROBOTROCK_ACTING_USER_ID_HEADER = "x-robotrock-acting-user-id";
 function buildRobotRockAuthHeaders(auth) {
   if (auth.kind === "apiKey") {
-    return {
+    const headers2 = {
       "X-Api-Key": auth.apiKey
     };
+    if (auth.actingUserId?.trim()) {
+      headers2[ROBOTROCK_ACTING_USER_ID_HEADER] = auth.actingUserId.trim();
+    }
+    return headers2;
   }
-  return {
+  const headers = {
     Authorization: `Bearer ${auth.token}`,
     "X-RobotRock-Tenant-Slug": auth.tenantSlug,
     "X-RobotRock-Connection-Id": auth.connectionId
   };
+  if (auth.actingUserId?.trim()) {
+    headers[ROBOTROCK_ACTING_USER_ID_HEADER] = auth.actingUserId.trim();
+  }
+  return headers;
 }
 function resolveRobotRockAuthConfig(overrides) {
   if (overrides?.agentService) {
@@ -858,6 +994,29 @@ function createChatsApi(config) {
         );
       }
     },
+    async logToolExecution(input) {
+      const validation = agentChatAuditToolBodySchema.safeParse(input);
+      if (!validation.success) {
+        throw new RobotRockError(
+          `Invalid audit tool input: ${validation.error.issues[0]?.message}`,
+          400,
+          validation.error.issues
+        );
+      }
+      const response = await fetch(`${config.baseUrl}/agent-chats/audit-tool`, {
+        method: "POST",
+        headers: headers(),
+        body: JSON.stringify(validation.data)
+      });
+      if (!response.ok) {
+        const data = await parseResponseBody(response);
+        throw new RobotRockError(
+          getErrorMessage(data, "Failed to log chat tool execution"),
+          response.status,
+          data
+        );
+      }
+    },
     async linkTask(input) {
       const validation = agentChatLinkTaskBodySchema.safeParse(input);
       if (!validation.success) {
@@ -960,7 +1119,9 @@ var RobotRock = class {
       create: (task) => this.createTaskRequest(task),
       get: (taskId) => this.getTaskById(taskId),
       cancel: (taskId) => this.cancelTaskRequest(taskId),
-      sendUpdate: (input) => this.sendThreadUpdate(input)
+      sendUpdate: (input) => this.sendThreadUpdate(input),
+      list: (input) => this.listTasksRequest(input),
+      search: (input) => this.searchTasksRequest(input)
     };
     this.chats = createChatsApi({
       baseUrl: this.baseUrl,
@@ -1157,6 +1318,47 @@ var RobotRock = class {
       );
     }
   }
+  async listTasksRequest(input) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(input ?? {})) {
+      if (value !== void 0 && value !== "") {
+        params.set(key, String(value));
+      }
+    }
+    const suffix = params.size > 0 ? `?${params.toString()}` : "";
+    const response = await fetch(`${this.baseUrl}/tasks${suffix}`, {
+      method: "GET",
+      headers: this.authHeaders()
+    });
+    const data = await parseResponseBody(response);
+    if (!response.ok) {
+      throw new RobotRockError(
+        getErrorMessage(data, "Failed to list tasks"),
+        response.status,
+        data
+      );
+    }
+    return data;
+  }
+  async searchTasksRequest(input) {
+    const params = new URLSearchParams({ q: input.q });
+    if (input.limit !== void 0) {
+      params.set("limit", String(input.limit));
+    }
+    const response = await fetch(`${this.baseUrl}/tasks/search?${params.toString()}`, {
+      method: "GET",
+      headers: this.authHeaders()
+    });
+    const data = await parseResponseBody(response);
+    if (!response.ok) {
+      throw new RobotRockError(
+        getErrorMessage(data, "Failed to search tasks"),
+        response.status,
+        data
+      );
+    }
+    return data;
+  }
 };
 function createClient(config) {
   return new RobotRock(config);
@@ -1476,37 +1678,60 @@ async function postRobotRockLinkChatTask(ctx, input) {
   }
 }
 
+// src/eve/tool-reply-guidance.ts
+var TOOL_REPLY_GUIDANCE_FIELD = "replyGuidance";
+var CREATE_INBOX_TASK_REPLY_GUIDANCE = "A task card shows title, assignee, and inbox status in chat. Do not restate task ID, assignee, or delegation details from the card. Only mention next steps or answer the user's question.";
+function withReplyGuidance(result, guidance) {
+  return {
+    ...result,
+    [TOOL_REPLY_GUIDANCE_FIELD]: guidance
+  };
+}
+
 // src/eve/tools/inbox/create-task.ts
 var CREATE_INBOX_TASK_TOOL_NAME = "create_robotrock_task";
-var actionSchema = z4.object({
-  id: z4.string().min(1).describe("Stable action id, e.g. approve or reject."),
-  title: z4.string().min(1).describe("Button label shown in the inbox."),
-  description: z4.string().min(1).optional()
+var actionSchema = z6.object({
+  id: z6.string().min(1).describe("Stable action id, e.g. approve or reject."),
+  title: z6.string().min(1).describe("Button label shown in the inbox."),
+  description: z6.string().min(1).optional()
 });
-var assignToSchema3 = z4.object({
-  users: z4.array(z4.string().email()).optional().describe("Assignee emails \u2014 only these users (plus group members) see the task."),
-  groups: z4.array(z4.string().min(1)).optional().describe('Group slugs, e.g. "finance". Only members of these groups see the task.')
+var assignToSchema3 = z6.object({
+  users: z6.array(z6.string().email()).optional().describe("Assignee emails \u2014 only these users (plus group members) see the task."),
+  groups: z6.array(z6.string().min(1)).optional().describe(
+    'Group slugs, e.g. "finance" or virtual "admins". Virtual "all" means everyone; omit assignTo for the same effect.'
+  )
 }).optional().refine(
   (value) => value === void 0 || (value.users?.length ?? 0) > 0 || (value.groups?.length ?? 0) > 0,
   { message: "assignTo needs at least one user email or group slug." }
+).refine(
+  (value) => {
+    const groups = value?.groups ?? [];
+    if (groups.includes("all") && groups.length > 1) {
+      return false;
+    }
+    return true;
+  },
+  { message: 'Cannot combine "all" with other group slugs' }
 );
-var contextSchema = z4.object({
-  data: z4.record(z4.string(), z4.unknown()).optional().describe("Structured fields shown in the inbox task detail."),
-  ui: z4.record(z4.string(), z4.unknown()).optional().describe("Optional ui:* hints keyed by context.data field name.")
+var contextSchema = z6.object({
+  data: z6.record(z6.string(), z6.unknown()).optional().describe("Structured fields shown in the inbox task detail."),
+  ui: z6.record(z6.string(), z6.unknown()).optional().describe(
+    "Optional ui:* hints keyed by context.data field name (ui:widget, ui:title, ui:options). Use currency for amounts, date for ISO timestamps, link/image for URLs. Load the robotrock skill \u2192 context-widgets reference for the full widget catalog."
+  )
 }).optional();
-var createInboxTaskInputSchema = z4.object({
-  type: z4.string().min(1).describe("Task category slug, e.g. refund-approval or budget-approval."),
-  name: z4.string().min(1).describe("Short title shown in the inbox list."),
-  description: z4.string().min(1).optional(),
-  actions: z4.array(actionSchema).min(1).describe("At least one reviewer action (approve, reject, etc.)."),
+var createInboxTaskInputSchema = z6.object({
+  type: z6.string().min(1).describe("Task category slug, e.g. refund-approval or budget-approval."),
+  name: z6.string().min(1).describe("Short title shown in the inbox list."),
+  description: z6.string().min(1).optional(),
+  actions: z6.array(actionSchema).min(1).describe("At least one reviewer action (approve, reject, etc.)."),
   assignTo: assignToSchema3.describe(
     "Limit visibility to specific users and/or groups. Omit to show the task to everyone in the tenant."
   ),
   context: contextSchema,
-  validUntilHours: z4.number().positive().optional().describe("Optional deadline in hours from now. Defaults to the tenant task TTL."),
-  priority: z4.enum(["low", "normal", "high", "urgent"]).optional(),
-  updateMessage: z4.string().min(1).optional().describe("Optional thread status update logged when the task is created."),
-  delegationReason: z4.string().min(1).optional().describe(
+  validUntilHours: z6.number().positive().optional().describe("Optional deadline in hours from now. Defaults to the tenant task TTL."),
+  priority: z6.enum(["low", "normal", "high", "urgent"]).optional(),
+  updateMessage: z6.string().min(1).optional().describe("Optional thread status update logged when the task is created."),
+  delegationReason: z6.string().min(1).optional().describe(
     "User-facing explanation of why the requester cannot self-approve and the task was routed elsewhere. Required when assignTo excludes the caller."
   )
 });
@@ -1519,7 +1744,7 @@ function defaultResolveDelegationReason(input) {
 }
 function defineCreateInboxTaskTool(options) {
   return defineTool({
-    description: "Create a RobotRock inbox task and assign it to users or groups. Does not wait for a response. Only call this after the user explicitly asked to create/send/delegate an inbox task, or after they confirmed via ask_question. Never create a task silently when the user only asked for a preview, dummy example, or explanation. Always set delegationReason when assignTo excludes the caller. For refund approvals include chargeId, amount, currency, and reason in context.data.",
+    description: "Create a RobotRock inbox task and assign it to users or groups. Does not wait for a response. Only call this after the user explicitly asked to create/send/delegate an inbox task, or after they confirmed via ask_question. Never create a task silently when the user only asked for a preview, dummy example, or explanation. Always set delegationReason when assignTo excludes the caller. For refund approvals include chargeId, amount, currency, and reason in context.data. The dashboard renders a task card \u2014 do not restate task ID, assignee, or delegation details in your reply.",
     inputSchema: createInboxTaskInputSchema,
     async execute(input, ctx) {
       const caller = requireTenantCaller(ctx);
@@ -1536,14 +1761,17 @@ function defineCreateInboxTaskTool(options) {
         publicTaskId: task.taskId,
         toolCallId: ctx.callId
       });
-      return {
-        ...task,
-        name: input.name,
-        assignedTo: input.assignTo ?? null,
-        requestedBy: caller.email,
-        delegationReason: delegationReason ?? null,
-        message: delegationReason ? `${delegationReason} This chat updates when the assignee decides.` : "Task created in RobotRock. Assignees can handle it from their inbox; this chat will update when they decide."
-      };
+      return withReplyGuidance(
+        {
+          ...task,
+          name: input.name,
+          assignedTo: input.assignTo ?? null,
+          requestedBy: caller.email,
+          delegationReason: delegationReason ?? null,
+          message: delegationReason ? `${delegationReason} This chat updates when the assignee decides.` : "Task created in RobotRock. Assignees can handle it from their inbox; this chat will update when they decide."
+        },
+        CREATE_INBOX_TASK_REPLY_GUIDANCE
+      );
     }
   });
 }