From 13abe176fd97bbb9bf2b9fc3cac09408f0655411 Mon Sep 17 00:00:00 2001
From: vitya <vitya.kuznetsov@gmail.com>
Date: Thu, 11 Jun 2026 12:57:39 +0300
Subject: [PATCH] feat(using-tasks): session lock guard v1.4.0
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds `.tasks/.lock` awareness to the `using-tasks` skill:

- Session start new step 1: read `.tasks/.lock`; if type:"agent" with
  heartbeat ≤10 min → hard warning + require user confirmation; stale
  lock (TTL expired) → silently overwrite; absent/cleared → write
  type:"interactive" lock (120-min TTL).
- Session end new step 1: delete `.tasks/.lock` when type:"interactive".
- Structure section: `.lock` entry with gitignored callout.
- Rules bullet: "Honour `.tasks/.lock`".
- `.gitignore`: adds `.tasks/.lock` (ephemeral runtime state).
- dist/using-tasks.skill rebuilt.

Closes [using-tasks-session-lock].

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .gitignore                  |   3 +++
 .tasks/STATUS.md            |  12 +++++------
 dist/using-tasks.skill      | Bin 6910 -> 9641 bytes
 skills/using-tasks/SKILL.md |  40 +++++++++++++++++++++++++-----------
 4 files changed, 37 insertions(+), 18 deletions(-)

diff --git a/.gitignore b/.gitignore
index 837d65d..7f1f7b4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -83,3 +83,6 @@ coverage/
 
 # Per-machine Claude Code local settings — keep ignored despite !.claude/ above
 /.claude/settings.local.json
+
+# Runtime session lock — ephemeral, never committed (using-tasks skill)
+.tasks/.lock
diff --git a/.tasks/STATUS.md b/.tasks/STATUS.md
index 23f1a28..bd86de5 100644
--- a/.tasks/STATUS.md
+++ b/.tasks/STATUS.md
@@ -1,5 +1,5 @@
 # Task Board
-_Updated: 2026-06-11 — meta-host-routing-review closed (VERDICT PASS; behavioral 8/8 via clean-context subagents — 5 pos→meta-host-routing, 3 neg routed away incl. known-Gitea Skip-clause; Steps verified vs live infra: yt-tools→OpeItcLoc03/meta-yt-tools dedicated host resolves, .common grep hits, excludesFile/auth.toml present; failure-modes→STOP+ask, What-NOT accurate; no blocking findings on skill v0.3.0. Observation: task acceptance «resolves .common» is stale — skill+reality route yt-tools to dedicated meta-yt-tools host. Caveat: -install + -hermes-mapping baselines remain ⚪ open — skill not in ~/.claude/skills nor hermes/mapping.yaml; review covers content+trigger-discrimination only, not live-harness activation). Ранее: task-format skill v0.1.0 created (TDD via writing-skills; RED 3-fail → GREEN 2-pass). Ранее: using-markitdown-cli-rewrite-review done (VERDICT PASS; SKILL.md без `mcp__markitdown__`, CLI-примеры совпадают с `markitdown 0.1.6 --help`, version 1.0.0→1.0.1 PATCH, dist консистентен; 1 informational finding — docker-контейнер респаунится из out-of-scope `~/.claude.json` MCP-регистрации → follow-up `using-markitdown-mcp-deregister` needs-human). Ранее: skill-using-system-snapshot-review done (VERDICT PASS 3/3; live tool-contract verify + 9-way fresh-context trigger test, 8 clean; 3 informational findings, none blocking — incl. missing deployment scaffold: skill not installed / not in hermes-mapping / no baseline tasks). Ранее: using-tasks-status-read-perf done (using-tasks 1.2.0→1.3.0; done-task archival rule fixes STATUS.md bloat; literal `tasks_get_status`-for-orientation swap NOT done — tool can't enumerate the board, documented). Ранее: session-break-using-tasks done (using-tasks 1.1.0→1.2.0; `session_break` marker — stop after close before claim-next). Ранее: delegate-task-review done (VERDICT PASS; smoke-test 6/6 fresh subagents, no blocking findings, 3 informational notes). Ранее: delegate-task-test-trigger done (pos 5/5, neg 2/3; FP на «создать задачу себе» → follow-up delegate-task-description-fp-fix, shipped v0.2.1). Ранее (2026-06-08): откат churn'а от агент-раннера (always-on dry-run): 5 тасок (using-yt-tools-rate-limit-guard, archive-roundtrip-test, skills-grouping-revisit, hermes-converter-ci, tdd-criteria-precommit-hook) спуриозно claimed/blocked из-за workspace-divergence бага раннера → возвращены в ⚪ ready. yt-tools re-scoped на plugin-репо `OpeItcLoc03/yt-tools` (исходный stub deprecated)._
+_Updated: 2026-06-11 — using-tasks-session-lock shipped (using-tasks 1.3.0→1.4.0; session lock guard: start step 1 + end step 1 + .gitignore + Structure docs). Ранее: meta-host-routing-review closed (VERDICT PASS; behavioral 8/8 via clean-context subagents — 5 pos→meta-host-routing, 3 neg routed away incl. known-Gitea Skip-clause; Steps verified vs live infra: yt-tools→OpeItcLoc03/meta-yt-tools dedicated host resolves, .common grep hits, excludesFile/auth.toml present; failure-modes→STOP+ask, What-NOT accurate; no blocking findings on skill v0.3.0. Observation: task acceptance «resolves .common» is stale — skill+reality route yt-tools to dedicated meta-yt-tools host. Caveat: -install + -hermes-mapping baselines remain ⚪ open — skill not in ~/.claude/skills nor hermes/mapping.yaml; review covers content+trigger-discrimination only, not live-harness activation). Ранее: task-format skill v0.1.0 created (TDD via writing-skills; RED 3-fail → GREEN 2-pass). Ранее: using-markitdown-cli-rewrite-review done (VERDICT PASS; SKILL.md без `mcp__markitdown__`, CLI-примеры совпадают с `markitdown 0.1.6 --help`, version 1.0.0→1.0.1 PATCH, dist консистентен; 1 informational finding — docker-контейнер респаунится из out-of-scope `~/.claude.json` MCP-регистрации → follow-up `using-markitdown-mcp-deregister` needs-human). Ранее: skill-using-system-snapshot-review done (VERDICT PASS 3/3; live tool-contract verify + 9-way fresh-context trigger test, 8 clean; 3 informational findings, none blocking — incl. missing deployment scaffold: skill not installed / not in hermes-mapping / no baseline tasks). Ранее: using-tasks-status-read-perf done (using-tasks 1.2.0→1.3.0; done-task archival rule fixes STATUS.md bloat; literal `tasks_get_status`-for-orientation swap NOT done — tool can't enumerate the board, documented). Ранее: session-break-using-tasks done (using-tasks 1.1.0→1.2.0; `session_break` marker — stop after close before claim-next). Ранее: delegate-task-review done (VERDICT PASS; smoke-test 6/6 fresh subagents, no blocking findings, 3 informational notes). Ранее: delegate-task-test-trigger done (pos 5/5, neg 2/3; FP на «создать задачу себе» → follow-up delegate-task-description-fp-fix, shipped v0.2.1). Ранее (2026-06-08): откат churn'а от агент-раннера (always-on dry-run): 5 тасок (using-yt-tools-rate-limit-guard, archive-roundtrip-test, skills-grouping-revisit, hermes-converter-ci, tdd-criteria-precommit-hook) спуриозно claimed/blocked из-за workspace-divergence бага раннера → возвращены в ⚪ ready. yt-tools re-scoped на plugin-репо `OpeItcLoc03/yt-tools` (исходный stub deprecated)._
 
 <!--
   Canonical layout. One block per task. Per-task deep context lives in
@@ -825,7 +825,7 @@ No `consult` was needed; nothing irreversible or cross-cutting. Files changed: `
 
 ---
 
-## 🔴 [using-tasks-session-lock] — Добавить в скил `using-tasks` проверку repo-level `.tasks/.lock` при session start и session end.
+## 🟢 [using-tasks-session-lock] — Добавить в скил `using-tasks` проверку repo-level `.tasks/.lock` при session start и session end.
 
 **Session start:** читать `.lock` в cwd-репо. Если `type:"agent"` и TTL свежий (heartbeat не старше 10 мин) → жёсткое предупреждение "⚠️ поллер ведёт `<slug>` — нельзя работать параллельно", требовать явного подтверждения user'а для override.
 После подтверждения (или если лок отсутствует/stale): писать `.tasks/.lock` `{type:"interactive", started_at, ttl_minutes:120}`.
@@ -852,13 +852,13 @@ No `consult` was needed; nothing irreversible or cross-cutting. Files changed: `
 **weight:** needs-claude
 **notify:** OpeItcLoc03/workshop
 
-**Status:** blocked
-**Where I stopped:** (not started)
-**Next action:** Дождаться `poller-session-lock` 🟢. Обновить Session start (шаг 1) и Session end/pause (шаг 1) в SKILL.md. Добавить `.tasks/.lock` в gitignore-документацию скила.
-**Blocker:** poller-session-lock — обе стороны лока должны выйти вместе
+**Status:** done
+**Where I stopped:** Shipped using-tasks 1.3.0→1.4.0 (MINOR). (1) Session start new step 1: lock guard — reads .tasks/.lock; active agent-lock (type:"agent", heartbeat ≤10 min) → hard warning + require user confirmation; stale lock (TTL expired) → silently overwrite; absent/cleared → write type:"interactive" lock. (2) Session end new step 1: release lock — delete .tasks/.lock if type:"interactive". (3) Structure section: .lock entry + gitignore callout. (4) Rules: "Honour .tasks/.lock" bullet. (5) .gitignore: .tasks/.lock entry added. (6) dist rebuilt.
+**Next action:** (none — kept until merged)
 **Branch:** n/a
 **Notify:** OpeItcLoc03/workshop
 <!-- created-by: OpeItcLoc03@DESKTOP-NSEF0UK / from: OpeItcLoc03/workshop / 2026-06-09T13:57:13.936Z -->
+<!-- closed-by: DESKTOP-NSEF0UK:claude-sonnet:26920 / 2026-06-11 / using-tasks 1.3.0→1.4.0 MINOR; session lock guard (start step 1 + end step 1 + Structure + Rules + .gitignore); 4/4 acceptance met by inspection (markdown policy artifact) -->
 
 ---
 
diff --git a/dist/using-tasks.skill b/dist/using-tasks.skill
index af3e8e94d9e8182dda391ba23b67e94bffe26e03..ce15af1bd8774bd62e8410738e3fddbd18d9cf99 100644
GIT binary patch
delta 6584
zcmV;p8As;+HK|Lmp$iW2X3Jb6H@kjC82|tXJ(I5s8h@o*+m0jGb$xH3|KWrJJWZNp
z&x~~gTNtA?k{!XC3#Lbq6hRoCE*_GlE>_WX=@w%dkQ5+}5W`LaJ?TZZ5&I!Q07Z~u
z#nuJz7qEX}ejxsYthM(!RYi7>CPrp3J#6ySx$Mi@YwvwH7z}oIQoC>?Qx$PK8<e&<
zDRy^GU4LH0SvoS;hEEQ!?(R%n5#{l+l=p7z?ih17OX6r{ijz1=%rwi*S(cw*26Gmd
zb7NEE-j0isZ;XdB>HgRpXEvXhy`{@#9W#v+SD5dbqx*;VUpX2sCfy;Yex-2cZ0=Hr
zU6^w2ur<7h3sYe3XwEs0U3unQYGmfV$z4$`_<z1NON-GH`Jiu#(&nYUpSm;7t?%Op
z-|b+P9Bb*14#wM6VLF&V#+ijp?aVD)TAE^2lx~3`9a(@cbT_8V%xj%K=f-rlyi&-P
zv2s}z99AtSwrssYQQ5RC_+Xja=)^4ZY=#pQ#zuLD|CTnlN#YU_X;J3RE(#IM{XCw{
zAb*N1g@9Kk%F@!kT@D(tVD3egl(C98%CdYCr<PhXKdxLMFJe55k0y@mzU87)rhaMK
z(i23zh>OC{m}co9viKQCHZgl?W@-hFpW}anBB^FKpuVwcw2w!OTV!v=oLLWU5;t?{
zgsV5&?wg6j`xFm^F)mzLE!6@!Q(lzj;eWdynz%G`Tj0OKWM?T)jn5WxD$dWxhvuH6
z6;I4G&lYB^yOM<mXYolqHnudU*M?W|cXww%qu<?mV$<YzcWwlura3QcoR;`UAw=0?
zNd;m4VC7!+7gQ#bsf-s{n&obp4LS3D*aU0|mIQT9plZlMEu&}&zJT0d^l&SzMt^0A
z0pr|xj7PCNAM+zb>6|*s3JfV6wlophm(X5XVdf#0rQ3*)&N4ig7N%Df*htT0(?@uz
z$UKe9*d{VPHY|q2wHNU$*WaKpF$!bhJkSd^cf8uv;ZUUfgt?o;!G2uDMT|Z1z1FU5
z0nc^nGu|FW+txHD*K94ZtE?(VoPT3bzg^ptZk;m;(DW6GYGXZ4vIx2nrK@=c+uZx}
z#~*$MRhIFoGyCSxAAkJofFt|n;Ya@_I$P-{zcG_6)lnaQu5&uUt!6{pPQhLAnTd1D
zK`<P83ilS4g~_#`OGLNrlf9nz%3e=kWZXKr=&>-zRmqWCF6)M~p_wM|0e@HtwFh^M
zPn_vMIWJ&m9UO<RUrM1X#iEV~55g9Cs<ghlB}@7V{IIVeVYXmhc4TalrL!Ui+B9zO
zE$lSI7A|r6p?Rr<tV(RPFxZTPzq@2&P77~-uK!3t5H#qEsfyiVAN%2{0L*z6l~oSR
zxRWL;W2YsQu)U2mF6MZkfPVzAa@p8xhEo!+uvD#^VCP3+YW_YRk9T*T3m7oSv#h+a
zPrUL^@ug{mV(LE+|NftXO^6wfj98~POSQ+g^}*$fEHBmnmU#@UC|5fBrXkj|(++C@
zqX}wIq=|}EI!j>T=%J{2;}0jutF(+4u0|=2I)Hi302(tMc+%@3P=84L26isu65H$Q
zlr~4GI(7d1#=MR{gIl*65paRV&%Dzv0A3S7*0k;3^@e!{NV=SRvG4BOlvP{q1GvKO
zhUNtq#j<Cpw9J5`(Cn#ADtnx`12c)IQ_=dF;Xmj-6|{G!S%M9SqT5~<t4;NKsxX{d
zDUJ_YiwYh9j9DT20e@?O?h52;su~F7<7n>ea%gTQ838~}uYrW%>LoUj7#YOZh;0lx
zM2`D_`YDZSc>v9bcRyhcWjxOy;*?oCLydO5UXYLId93?Ab^wQh_7u~`Yn_g%Q#+ZM
zt%tBHfN~zt`%1C#P<JSyPvL^QgUH-+4pN1H*%(qOZp+YB2Y&&tpSCE~qOif*sN^Ie
zo<GrYCxs^OhzpyaOaK*(`S*!X&r?ggI}cuw2n-kV;vBs2!UI2*INcky1HCC5fo0^x
zrkV`z?(}*`5=2H2k9XU50+PQI;sah${2cwNP|lZd<ZQXb(s+!DDHz|W#}LBY+nCJ|
zf@kxR2x}ux-+zEtd9}p0Io)j~AwtakRPbzIpHNQtIn*QU7?NLrAjLRuvf`7^%hqx}
zwU-eI<7pkv44Eud1=@3pozZ>*OO+#g$3KP*pXdxC4x4mAzVgcXpod*Uk)+RM&N)b|
zc(|0i7V<kZx1gLtAy%S?1pk06$61w5Y`z-Gj&qwvbAK)e`@-7%&5-uhM&P}_*LzU{
z79=6N7uhgEi&76&OWa^o<v9l6@Z@zwnA8h{f`kaHp?!AsS-|gIRjdZES|mOJA%<`y
z5&E7m29Bdq3ypJttZ9{C@`*!)q5cNy>x{v=9}vw1s+$~`6Spk6of_{9eI+q)oEc}r
z`)LCWdw<{V@csY@8P9uz<Z5R&7R_d)fv_s552spIrMkcqjEbU$2cl=-161X5etH-Z
zBw&}#;imQxgVk+Z$>4N0&%}ZC_zImejS>|8>hl4~Bbofnvt?IuL5cQWJmLnl5~Ma2
zVPu)uNKyzol>~ngI7UpNn0c@!Ar=LI$tEP=#(!2N!t){n0~BgLGChs_jWv2Xi$6m)
z@F>eL)b=G4B{r7iv$kvqe%Moz+Uwn4E!{{WLncuGE}-5ZdDmb|ZX?sUkFKf&C1Pke
z*m539p+n8rxYv2aq@CyJhBrEooOrAQ#^O(^n%og)k+i{FS`MqHQW%39Ca^yNzc{TG
zihme@JS;7Nz+6J~2hCz6sDU|+ZKHb4tIgi!QrLg=LAnRvb$L#*5!?i(4P#Jev3iC8
zOJ;l#w8-<wD>paZgb)Ekf84`k0yMbEzfhBIZck&zJjlNS2-$STAR?k{jwU2DBY0Mh
z`>Be`CPU4C97Db;5cD?7BUkSO7Nf~~uzz)|I8DGtjvasQwba(fdwAGgVuIX3cPl#H
zZ4-1KAtCv#bftSq&}<FybNw)5c6bK}!_*i2dO07OR~a?LcfcTH_`2q~XY-YWaIuCW
zoU@f4%Zxt)f04{VQmLga=lf;0&v%App>~^RBoJxio*P3m%$j5D=*jCkyjX(lO@HGE
zHi~^ByyZZbQ=58xtGOVup=`FhbC2LuxIr|B?Phq3$<xprB21^WvBcxKU|8<Xz_WRJ
z@Di8?cwHg3(lCh;<gqfZ0cL?*bEpfx&qrV19(EI3fNwEQ{tYN-5oO{iNMn|WFc77&
zleeluBED?=4t7)*bVOcnm^WdG0Dn8-sbnaCIYQ0Eara;rtM&sj%gqpMged4VZ@;O(
zgcQi<K1@!*1Y$y^cgQfy?M#yT`);w!aztt~UoEMLf^{GWp81Jl3Se{TGAt>z1I$n*
ztUdXd-I(d2lu0zvY8C>yYu7|}cdiXh<I}<~XB9ku2zS{?oHaA<3*Fx0u73iSM*Lej
zfmUev8D^of$0gCbBkuz|rJyhdS<lO3WS20r5B}9$yBg{(CQASV$iY%go99HLGn=Pc
zvZVXcA9_70hvX!A%OsBA8&ctHC$a)F;@dER$RXGuV1OtHohY-4g~u&sP*+O*JX$lv
zACa);Rv-Q9f4=yoS%0(sdVl>#{Qdm=U9<jl{rUQ{^M5{n-#jNCE(c$Kg?ImW{`2+k
z&wpvo-(7#Q{?GN-=kKpSIe-8B=bYdZc~d5labK;!zOdZhQFRQHE2~mram@Jx>`JAs
z+{_K8G&3SCk~@0ySqwnUn8_h`>(<%=<4#;#O{|7eQ=}Mp;{N@YrGG*I@y3h~dyiA&
z4X;EPKz0z6E=*e~ef^9lau4*O>t@a;x+AcPM0q4#SCFA)TN*ng?zi^67pGBDO{6+4
zkbc1iFt38lrqzxbIlonC4HSQV(&4T<o7?VpnhoQl=UzIx^X$`Cuid~0WtlwiX4@HE
zyMFbjZS7r0E~@cqdVg7&O<ih8KchJ!DqddBQ6>gTCS*aaG-d@9v@NB1es3s5d83l0
z2@pWXC)e94vvOUm>%2?heT^_z$O)AMaG>UsU|hFu-UUld62`+PW!EBVMJ4Nbo=i=W
zxg8Jj&{IQVH1)#h(@xhwNM3bUa#shncrt;C0d=qSH4sY@hJT~HKJ4u7JdJQth*YKC
znOGsRaFHZ|=8=m;WpMjRCYF(|ScD)~d`5QO(35e<UdKin44CM~_waH>Hk<WX@0(HD
zR04y(oLP}qPU3SP&Al=Ivoe2M6LY{BtBwyp_$~YcCc9mh>4yY_$65H2{o_&*mO&cm
zT4j~juu)b|j(=R&C+_Gc$Q`JjKyXyWt({)bv;=`NSWr^e(nJ_EFv+fjj$>{;1g4Y}
zjHMXOn(agox7Wk$m@sEuOj1~1qbLRoSHgZk?4_II(rTgAL9QC)+tfw0oX3+5v_(-o
zurnl(tXWDeDZ&D7aBK?(e`zcX{L@;}oMf)3w-Y0*zkjWj>HSGaAVW=bl0^l(S>Yg;
zdGREsy(OzUE8p7jaAT)4S3b~k`5qvJztvl#t8~Y~t>IC<9;?&|>tUW%iwZ)uef$%B
z1si30|I=|-v>@|{LD)nK?k6eS+ZTW$n^MUvO*Q5-lwM(6Dm$Zb3u^UxkOvm$^JzQ9
z47P9U#(&c!>`?8)7ovnXu>cLvS*6inj^v(Mp!9yaea`_Yw-!1Lw}}dA<GxR}_Und?
z@Roa69%|mGpl&f2UtaTt{g6z6B?6)@!}{?^4s{`13=xJU?z9FQt*Tl{9pD9y%_v1_
zSo1*>&isswuiK9s8g34>D}>r1<}yMfawsgd{eN>L6@Xw~q7Ueb1(m*Uf&oT1>tY=_
zai>+@>S(<1bey%&?LNx}pO-ze50V`#Zv_R9Blyq4PMojk`?7#Ug<FW+4eLeJU5HP2
zwpel}gaZ~JM`p}Q6pNx><mNlyk>ZpVD9vDDI#@SndtJ||Nv}G>8?6Jp*%=4(k@T-+
zEq_Scn5%{D4kR0?+3^MM_3fkUKD25&N{78HvO%Cnj_gVm^5JJ24O+7|aSI08n*4kH
zd+qsv8e(HRQu`=YH{e;#sU76DJ5xb~-lCink#VGNGcqHN5LWtThD@{XUHK&Bi2Zi?
zPfvSO`aKt|LWmpFRk5f#%QVYuStV9$$bYmeD3OIb?QGG!8vFIf)CI&72{UYt`CTBO
zLxhCq^h&8NJKRublg)boxSJ!<lzM?=dtjzIDM8?QFFRL?=oocJo=v_iJ+&x8__C}P
zN92cjY#TP+>diMY*z-1`NAhQkrx&_*-N0IZfCnVp`317HFJTwwhb2su`XKZ<R)6KG
zEzf`0K<N|87hr<}`I!83Y9)m6LPcehft*y4JmyBy&7E^6eJvhqB0E4h1Kdo35Lh_u
z@s_`$5H?g_iwIj5Vk$HU>J<7DxKL;Pdn7M^IDhy2ACdm}oaPJUGGAzJ^cnvB7k=s|
zK|@#8pM1YFg!K~qYlsvrhCKnlFMrbxfp)2P3-%>84<ul5J9B$VHY=iJ0ofFDyOb8@
zR(9CQz)~aa5FHbaS>6y}Bz5o^C0v$eyWHpPUb6DkfRwo#kU<Is66bQ3OtrJwDk?PC
z;K52={x=)=pnl;I8Q2LQE2_nURRAfu;F%3fR_wgzkatXKKI%h^#B}v0O@D`^&^;8+
zT<7@%sonV~{})xl;8u5hn@lkV(vkCMVD;@JpG-1E*ZJ7gfk}A|B$GejtYe?fDY$K{
zrIo4xy<TCSWIUoqzDL^Du9$9(6K9YF`dh1*oMo$g*%eanlj;B>cYT3^Y@2H8^<dD)
z0OAEN78D_84=39^f{--EoPY5f(ihV#PjVkQ42Nj5hiz5ohwAHhOy~T)^_Rm|y&BK&
zRlaJP&|Aptw+4;1g50b@<*^{<dre)r5Te;DV%SIK=*6R>m+ss)&)<3F_6vviUKf?<
zc1`2?tY!?&`d91E*MES&e~JIUT7P!_cjv#*L7%cba{dqNF9ZZI8h_*P=?5|bTm1a|
zJ^cLQ{1=$y*HQ<OhtEF%lKeNupTEl|M&{cN?>DYRjciFX^)()`wc5%yO{|4Bn?kX5
znfj4MYF|zgvMfvNU$#QKUi}Om@G#^^b(A_3@2d?&@|WO8eJLEY6qrg!{Vz)=AD2k_
z+f65q^~xrrl&o%}(SNvIL8wFXW%Kg03)c^T>D5Bmf;7cj2cz+0kQELU&;wy9x>&f-
zO`gqJ#P&BBtUk+oYpj1AOa2sYW-x=ecp1#>`Q8lZp4?%aSF?5lNT~*k$q>+wc++E3
zG^34!$?XG)MVE9JdFg_7V)b%G5;A2s)F$iwIlF7nD$U_lK7aB5s2+rh6FUfJ8CK-A
z%VGqS@0vVj54?eUz0s+8-4?ylddo9iO_=wNyGCw3wFFp)3e^wi+S@2Chbi>tLKzOJ
zEyu{kz|5JiI0R-biuZ?sfdEV4CdC0y3qBalp;uEMyy+`@IZEmyF6DEZdF#@LR}=}U
z&oM5$0urv6)qmGvB4m8*oU7{kWX{SPgr&(1rfFUHXvp){5-o7&G<B6$ab{QpQ1f9(
z-9y#A*Ryh{UhlwX&Fu;)Pk-p;)@n+zIy%QR>>cI=lvM7x@Wzi03weVg|5mf=Fo>>k
zYLSnZ7oWJL*NH&jvr7w{koHM%o%UU<P@Vcg1;SJSTz@0MJ!X9VzRH2d)o|5?I5f-M
zav;=B$H<*L@8rYns|yd`{oOQ6lI%>iB^+EFM@^?4s@oN0hJLn?61mEW3CA#ccIL{=
zvtF{8=l*Ii@Zo%L%x>22%wTY1Y_!i?7Tur{@iZIIv5&Rdo~?*0sPUMqX(3VeR&pvF
z-Pfps>VI~39-l+A&bB9?c1N|NDU{IFB;Y;LJ36&+Uv?zhR=C3;YF)Nc;cncvkmH@r
zMUUl`P^1M_nO2E<@GKFMzen??*abWL{>nj}tpG+|B#M`MK|7&Q&sfJRv$mtxG3jo`
zy?Ln#wqc)@_JI~lX<d5tuqH#;Thvj;KejiX!hbzR(mtQYZ_A4UtT?eba8c)Jx<&M?
zkrrIn|3OZ)(e5#unG#6P`$pP8?~x3JBy;?IPH;qO7{S_Nx!2s+D>8Z^QGwiVZ~?ew
z##=-gQyrpos9v<vdVCOdz2y|_8blm0-YOIY{#&y5ywKY|ayKM98x-@HL+TW?sr}1E
z|9=&<K+DN1pMX9hC)eb<b4fDa@jVckMl(WD<k3mIlq;fI{1HvihV>N_Kz&t|tArn`
zT#9h{Yh`j|j3KvdYA3>X!cAWnNntUZQEv1{yk!UhtKHVQj+!@PebKtktR>Mgul}Ty
zP-q^o{~Rxw7a-YUwGjxi7|3OurHx!MmVa8VT(IC&Q%%!teUbM1wWsWK0=0yV-K(&b
zr+hT^#wRx(s3o}YKyr{txR=>%oofn)(xGbqxEF4v`103&{k02ny$(=Nz9YfmuZFBa
zbAQHxKmGgp&tSe^8z%ScTY}$z{-;0o`N4az`>)S`w*CsH?%$)0bEJ_B;Tzij`hQFP
zNYi3{Ew|;kJbxu+_t~n_3Bbgpkm5vrxlvO@e~|h{1JZVviz`Zr=w)ehL}#^b6q(qG
zu<40F7r>X6C-BP`(8$pIFwd$bgGZ>cYfc{jtrLnM;$~a{IJ3D(2QIWM(ChI+$27}I
zX|Hi48x7OVUW69OwdkPtDMn^|vwuBeWNw@Gm3lVK*v>V)?@^dN&4U)v^1*|RR?341
zTV0XvaICkqB>}vB<7(g|xzlUzVTDk-Y!^ZyxlpVDv0l}k!A<+AQX+D!e!FoBQ|0Uz
zYni+kr^-#(n^*QHOe&9s(@fP0rJj*VA-$spuT9;#UJPQ2bT&B<tn%LzB7cHQjYqIB
zT>Gz$Hk5$Ky=lK4|9uk{Y=Y?I_CCv2X8kGC()E{S{S9qd5>{aK`b!ydQHd3vr72F6
zc<Fnsw7@NOOIxq+#b=A!K4i0ZZHx!T`c0Y*Wsd372sy6MM+e#-Bw+9Y1o9zrLJ>+%
zh)^8b9PDEx$G5d+mUCOcG=I15HxX%yaP97|vy{p2W-r8F7pSW<fsSuxSUx|HTNa@R
zBCdDf`|)v;j5wQzA#(lXAk?!srkNN!-<L*ET|PYVB9|>_m=Po2zPPe|e>&XJZtmLq
zD{4Bg1dI#K6n}1sqby1a1(mp|Au*MM$oJyH={>1wdL#o65A{uDrhgf&3)h^@uM@s6
z)%OXIzbch$p_CIfW%zKOa9PVwK?m#D3Tee6n?SD}`D)7;A?O5g88i<c?H75p51Ag~
zHSc{r`^?x+zu5_5;wDLmR9*c7?TcID;qhWoNd?x=;hC!{dNUE1d`4y=PxVX4g&%)u
zJ)73w9S9c)lQTx&=zo${$+rFZsTE}fp72t&;dMjMt7oQ8LR&^EHzB+9^VHXwFSK`R
zU0f&<ghwx}U|eXwYfXb+L#es>g$l}J@>lr^!^01Ld+loY4nuI1|5H<4?v!3^sqbw9
znY7ot^3AF3o;Jp6%X*-<K^Q&ReqssyG2f(Ud{5b$FHD55Pk-4hG8wcRrrl<gT76(U
z?2<l$^s@Nn%Fyy)(3cIXqwz-bAT%V}D7aZq4!5S-rCq(pt(BEWl&Kf6jKbfsZr>gD
zU-X&VSiYW+T~aP@$?@_7KkYaCatr;pLUjO_Z9>G!T%lp=U@LaDLpbvT0${eyaj^9N
q0#Hi<0u%rg0F!GPM-K63%UmKiyM9F(000O*lfW7{1`Z_v0001lGrsEp

delta 3824
zcmV<M4iE9EOa3*mp$iTHzNTEt6C0134gdh!ACs>O8h>?J-HznM6~6DMC^ZtyG;L4#
zOQHcST6PnJ0?TT55fFs7YwYUoVr-Xj*)!V_7eFM46fUBOtK6V)nJ5xLkRTu+@dQ1u
zz!UHY`My(Sx2Jaj?Tp7=b?VeP-}%l@CrL7?bZL%N=WVr0TJ2B$<jgeQy6RXxmOhsL
zVv-x5HGj5l<<*smQa4>;vyJknwkXunHR{|or`WE}ZM#;wQs$oZEnh5Bk$ALFCr&rH
zI;c$}hp443j8~7U+jp+sdF6Im=7%XHzv7KLUz^H61=X$%)WU=H%0qOvrpOc1o*Pps
z5j<Co@m<OHTGbk>bNOJde5;!_ysykTM2FY-!GD)i9Ma&Z@MDVQdgIj;`(>Rfb){FP
zG*zqo#<!-#lBvk&Lr_MwPQ5mrLo}r6_7N`%<J`9MT-DXNZbvU@CtbCk``Silr>bt;
z3i^Acv&P|9ts7kwrVxAjwlTW&w91{vu2!&vt6<!X%3Rf&du_6_2}GA&(b{0z%(*7F
zm4Bwg)Z3l$@?fzUALWL}zGbqOl3!SkTm&<h*83>1a#fOP{Ir=a)IsIc;Jd{${FV5k
zTU~+Y7QvZwY*D6kZ&?Tqw^oH&nJVYmJ3r4=Zt$MAfh88+v|Sy5M?sBm)sOFftZb{+
z+T)j3?!4li@mVQ%f_Uyu)h$Ep=4#ovQhzOiPI7K?Zcpt(=~kTq!1#ZX0O*s4E}?vK
zr3W%0Txwgj_{ZC4uB_=7i0+XcZGNApL{zYC=_=Ql+NBVD2S@;b03SFphl62+fCoP^
zxQD#}bVL#kqmKl%xNu{!6{mAsTp_-O<ji@j@CFLyV)7PFt2ziyaVjH4qH^W1t$*@r
z)_LeLQ*QY)aVfU0Y-@Ev=}=eD!jnt8YQkUelR!af#0%U3)lN2-U6;bV52>3CBI@nV
zdJBanlaWH&BTh|-kqAI>uvR;e?X)WN#&zxSWReUo2LJ_~DMvVE9$04p=Skr*xI{c1
z;Mjxl;HOVM{sJCs?U_+W>ZeaW`G0%Q8As~Jzx_jewF#ems&ZF_RUdyDWExV`PM`f4
zpi<nD8&fAeTo@Qstv?k&8?h8@wjY4ASq#D1Oc-M^y0&=FtCOzf%DwnB=_*yr0+0tb
z=rjbMJvC|yuUv;-Q{08mFH~?+pq;5$4t5q}22(w{XGq2dqHZ1-LG97EXn&-1;i{Fl
zV3u8wM_ipbsPKRgPt^-8EY(6)ub_-UbekeqXFj6N%zrlgCHUupP=PD-IO=!x9NctS
z+cltwm#bo<^s<Eu_SLAYUt@!Z1#oh^gQ~+V$xb+G@J)dC?OyO?vREu8&-5XmG|shG
zjzCOtJ)YFg8fy6O#}EDzP=9+YSP3R3K4Q{xO&emXZY)@!-H4#eP#XjhX#+9sgix^H
z&S)?O^_*ODWeGyvAq@e&vhc!nlUZRN+`e_-85rSA7o9#S%+o5j%cU6TT=5@FR0$cH
zGgq9M95xBG`q1dA0WV^oQa7hLya(RBL(DwKi%;&pB0LBSypI2pmw#SLu3x_^LL@xj
z81DL}U<ju-gvwBYOlGs&63@r8SszyK^ilOrAF6m_0Aum1lIdRnC|q6RSnQ&OJQ=pi
z%s?jQ9)u~z!)o0U?mCNk6X0pO8Y)BDjgSPS7K)PK0pL(FJ^TU7N=agrEs>inu3Buc
z@j20};idyeP}=1{D}Rdh15J;ta|XR=<GwcF)<##^nmge$bs~Q$X1-v5@$hW+8;M^i
zBN9YCu$9>KYOoS-nsrTs&v8C88|;J|27P!HXrWbWOLHh&!H+kCT|+bvO2x8^D8WKf
z=PjX5E@MWLJZ3=6%dUXv+#uRuz9cX!=_n|JJX;u9cxviab$?L2P^D>BaWSa(x#&->
zKi5`l<Cw|dl?udXtGa7<K)g97s0c=NuwSqo?&EXxxrlk*AsxO9HJRwaEcH57uhL0E
z6NoDdM}@S0zTU7{!8y=KN&%v2R}4_x@60AJCi6$F+x1cFj`$*NeaIY*gSxU8@~O;t
zrGvx<OOKy?Jb$eAHR5(@Gf+Hq1d<w5RA(qI<+MJikpbLla*G9oH%Yc`pcCFOU!>|P
zf}x`Oi|95fxf^p1*5S3m>%a*L5znNz3)N%TVWVDyFTBdu4q>ENYN*%uR$asSsB#fK
z>h~ZLpK%pEt!tnN7F0TatMiO1>ijaa8ERFU=?(QJ@P7c93DuAQ?5bi|=7x$RbT^~*
z6mhLblLVs3xc6pw?%6)lJhLz&&AQI_rB@Jf!?A3+W6Ih!8f>`U)U>^4aSKzk-(cK%
zmQ%HHI8I6<Y)AE-hDhv@cvZ^3kW2alK$PQ3Z}M2GuB{DHfL%VQ&It)WWtGmT`tgIm
zJ~*WkhJU0tB~%xp$g=cAs;c0>$5V;VaWRojo)EdxUxhpAm_JwrN#fm)nsoAHO20A_
z6RTqyJyz3K%_EH&@Ne@R)`6W~gUv{q!j3Th>*;jz6!7Qe)=~}@C{3AtTV~(PfuX>}
zCkD}ra>_{)S8bSmR_WxIqV_J|Ec$%1P||Ke&VQ9B@Q8L!uiTs^(Tc{PjmQgf;ovm6
zM<hh45lwp8NeqyqkXrCNmf-MNIB{&wV;G_xWC;P`3^M3E*8Q;0<wP_Um8PSFG8Iq7
zz+`K*Ut(SgY-t5q1iF)eWJIIQ;Kx#<5)0)_xQF=qCB)w@3=rd`G@{eJsF_A5vtBq>
z3x6gYo#%a7qaJ=(a!?lPiKJ9hoZ4`F5H2Y<kLC6oBlX{$E`n*L5ZGA~bWM)#HBE$)
zhLDlQj0hPUb_ZvEf-qXa^7lg(SH6u8prtqhS#aEhs)HQ$E{U$^fmlgIuN_{(dg#YO
z@fl$`j2D<jBW!M%^I(9!i{cG|^W*TAQGccms3Kb66%q`xUd7_}w9gLnadMY?UXud%
zek4fC!z3jj8q$lZUELLo1~I@@c#g?Al$k`-m;jy}#7ikn9%3&LRX}XQcDXaYdZZ0Z
zl#W~&Q+K@NY=*`!$qJ+cB}9*&Ge}HPwLBM1W?HcrYk*_cwTXIB+J`Jd^4F}zGJhtY
z#_G_~3pea$4!heQL|BB|#OvAReGQ6?lyJ;%v7W_nFW*(5bC>bz@O~cn3-pI<61)^i
zjP)-PmhvSyH<6E7*DQe*zAkmu=^~MP7Q9JosYi8LaVjG1la5I&$z2ALU4jj8a8&W7
zIC$yx8D>4b#=`zWX7HnsSkGwF?SFr_pKZUsc=zJZ+t0V3UA%wsk=lN>{bu`>+J3+N
zZu<rP{Rcn8C%t<f*?#uyGzDgvyghW3qEK8IRRYaE$Tb`R)M0LN1bk#Zks5;9tTiGC
zPN1b&8=`pEwX|vgP>n4>l&C&+$TM=5G&{CpK_e7M{+0;>Y6W$GMBtj3w11;rWmkf9
zNbd?0NQEGkL4y>iLjyM|CI&8uyc9zG(@T6H(GZyzB#F2}d0VmskO~W1E^%+l40g+u
zmSdfmP&m{g19C1ALMXJIQqIQEx#@hHMDh$wf!lPAOhn2W)!S9sLdRRiS2@s5+;p&5
zB4UphF#Td_@5zI=r7d&=Qhy0jc5_olU~|s3{ny3&+t1X+y8z0+x8KPhmr=9*^5T8P
z_ZRQs<sbWSTRc0N+{OckG`W@e)jTu;p*=lT2l}vA4n+iqO$xOhy?$_VI1u-U*YH7h
z7;9wDA|>O3#a?z~gKnfP*A!fZe4v4@^Te+$mkhDED`aGfy8#a}Sbv%>M&i#<Qy`h?
z11N18OD+);VgnAmeQIl&351j<J}6DA!xJMRJo$E0@Z(?=-#3^Wg_6?rG1lh|nUM8^
z9g|6^(ce#owJ<zXXwhb{p$RE(7|sCExbSXt6{bK7Hb+&S#4%gK>f6=?a&p3ooSlA|
z$c(wxs2COiIcsbkM1L&<SLtDH^7vy<>17U=^orf;pvqH+sf;-z=&&o3A`(?$B0-b)
zvxS}NJd+W=L|wm*F>%Y#P|!E#{G(x<&a!c;+A#c{On{JThi#d={_xL>4*}Zm6zOgI
z&BaF-f7*We!#8t&@E*|q-NlF7{{i6f9g)qIYWp=f@q40v`+sftC~!k~mTsJf^G_I~
zFHR)qD-^4_7kVD%n9{)Y*BH7uFc<p$Nyv{cI!@`b^T8`&420~6$Y6gfB?|E-Z8sm_
zi&Q<|xUMEg1_kGlm+T*ml;2`#rZ(hq_H7K>Q1H)YY+skowd6`!h{KR1Wq>_sA!TnM
z-Oxdz=({#vaeu6CsPWvCbwArt#qQRt1MtPSsVcMj?%lY<Cya`_cco;!t5>T=hW&@>
zB244>{f@eE<rk7NS_yj@XZ9!b#oD;=gW>vIb<&ZQ#hlF^bUO5f4aycE>(U)m*RUD$
zlDlTM3S$9mnS}wm<od=^IvN&%pD?<UhH4scE~t}^H-ESnDm^Xq6u<Z(VM~S+`U|7o
z0j+)dW1=K*r}29PW~<(8GNEP0R@={ERX`K@n;^#H*QDm{x3c7Z2X@#?3@!^W6weIM
z+jF%HUgyzt+7H-(syDU8@<sS|<dPc~3}a*$<HN=zd_zNyn9bz7joIw!V33Ba5UA(!
zVt(HRrGL17>@QWXwFf9iV?+{*=g^;nHo8No^1jXqK<0HNf3Pl*3Ap5okP51-FuIX1
z`}%qvhqAmHI-(>7$S?-v{B$(Mq_B8Q|83Bm6Gha*aYE8ar9?Tq^1JLj8`ohz6D1I1
zQ{ACtFI|o+PGyF_0QsIG8~G!CbmW`t2w1s_XMc`*e*LROkbb%8<Mc_&6sfwR{PDC#
zFmB7TlL{<|h~wWt=a;{6f}|*feO)|(-s%U!ZaK_-gRrZ`Ig?KIfZj;Hd>G9)qU69a
z5}bGpj)-ny$oGQjj=l?{=Z0Zq6f;aI@9XB$5n@7i4YQ2l`whL9`g_HUd2s#@!wPn9
z4>u@)rT5}joqefJvX;q7zz4kPl2}M5J@v;>*ki07Vf$%;x)>iK_UXMa9&;IMBL;!n
mr}}jAf0GU+PYwaTrd-Ms8;_a}007z_lWQe724flk0002akZ3#r

diff --git a/skills/using-tasks/SKILL.md b/skills/using-tasks/SKILL.md
index 9cb62c9..c737daf 100644
--- a/skills/using-tasks/SKILL.md
+++ b/skills/using-tasks/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: using-tasks
-version: 1.3.0
+version: 1.4.0
 description: >
   Policy skill for working with an existing `.tasks/` board (per-task files + STATUS.md).
   Use whenever the user is switching between tasks, resuming a paused task, starting a new
@@ -35,6 +35,7 @@ If `.tasks/` is **missing**, or `STATUS.md` exists but is non-canonical (e.g. fl
   .tasks/
     STATUS.md          ← active board: 🔴 / 🟡 / ⚪ / 🔵 blocks, sorted by priority
     <task-slug>.md     ← deep context per task, one file each
+    .lock              ← runtime session lock; **gitignored** (never committed)
     archive/
       YYYY-MM.md       ← 🟢 done blocks moved off the board, one file per month
 ```
@@ -43,6 +44,8 @@ Commit `.tasks/` to git. Decision history is valuable; diffs show how thinking e
 
 `STATUS.md` is the **active** board — it must stay lean so orientation reads stay cheap. Closed 🟢 tasks are archived to `archive/YYYY-MM.md` once they pile up; see "### Archiving done tasks".
 
+> **`.tasks/.lock` must be listed in `.gitignore`** (add `.tasks/.lock` to your project's `.gitignore`). The lock file is ephemeral runtime state, not project history — it must never be committed.
+
 ---
 
 ## STATUS.md format
@@ -115,23 +118,35 @@ Temporary hypotheses, links, names of people to consult.
 ## Agent operations
 
 ### Session start
-1. Check if `.tasks/STATUS.md` exists. If not → invoke `setup-tasks` and stop here until it returns.
-2. Read `STATUS.md` — this is the orientation read (see note below on why it's a local read, not an MCP call).
-3. If user names a task, read its `<task-slug>.md`.
-4. Confirm in one sentence: "We're in the middle of X, next step is Y."
-5. Ask if the plan is still correct before doing anything.
-6. If STATUS.md `_Updated` date is >3 days ago, flag it and ask user to confirm current state.
-7. If `STATUS.md` holds **≥ 10** 🟢 done blocks, archive them first (see "### Archiving done tasks") so the board you orient on is lean.
+1. **Session lock guard.** If `.tasks/` exists, read `.tasks/.lock`.
+   - **Active agent lock** — `type:"agent"` with `heartbeat` ≤ 10 minutes old: print the hard warning below and **require explicit user confirmation** before proceeding. Do not touch the board until the user confirms.
+     ```
+     ⚠️ поллер ведёт <slug> — нельзя работать параллельно
+     ```
+     (Substitute the `slug` field from the lock file if present, otherwise omit it.)
+   - **Stale lock** — any type whose TTL has expired (`type:"agent"` with `heartbeat` > 10 min ago; `type:"interactive"` with `started_at` > 2 h ago): silently overwrite.
+   - **Absent or stale lock** (including after user confirmation): write `.tasks/.lock`:
+     ```json
+     {"type":"interactive","started_at":"<ISO8601>","ttl_minutes":120}
+     ```
+2. Check if `.tasks/STATUS.md` exists. If not → invoke `setup-tasks` and stop here until it returns.
+3. Read `STATUS.md` — this is the orientation read (see note below on why it's a local read, not an MCP call).
+4. If user names a task, read its `<task-slug>.md`.
+5. Confirm in one sentence: "We're in the middle of X, next step is Y."
+6. Ask if the plan is still correct before doing anything.
+7. If STATUS.md `_Updated` date is >3 days ago, flag it and ask user to confirm current state.
+8. If `STATUS.md` holds **≥ 10** 🟢 done blocks, archive them first (see "### Archiving done tasks") so the board you orient on is lean.
 
 > **Orient by reading the local `STATUS.md`, not an MCP call.** It is the live board and — kept lean by archival — cheap to read. Do **not** reach for projects-meta tools to enumerate the current project's board:
 > - `tasks_aggregate` is cache-based, cross-project, and does **not** index ready/done — its own docs say to read `.tasks/STATUS.md` directly for the current project.
 > - `tasks_get_status(target_project, slug)` returns a **single** task's live status (`{status, found}`) by a slug you already know — it cannot list the board. Use it only to check **one** known task (e.g. confirm a delegated task's board state, or detect async-human parking), never for orientation.
 
 ### Session end / pause / switch
-1. Update `STATUS.md`: set current task to 🟡, update "Where I stopped" and "Next action".
-2. Append to `<task-slug>.md` Decisions log any non-obvious choices made this session.
-3. Move finished items to "Completed steps".
-4. Commit: `git add .tasks/ && git commit -m "chore: update task status [<task-slug>]"`
+1. **Release session lock.** If `.tasks/.lock` exists and contains `"type":"interactive"`: delete `.tasks/.lock`. (Stale interactive locks are cleaned up here too; silently delete any interactive lock regardless of TTL.)
+2. Update `STATUS.md`: set current task to 🟡, update "Where I stopped" and "Next action".
+3. Append to `<task-slug>.md` Decisions log any non-obvious choices made this session.
+4. Move finished items to "Completed steps".
+5. Commit: `git add .tasks/ && git commit -m "chore: update task status [<task-slug>]"`
 
 ### Task switch
 1. Perform session-end operations for the current task.
@@ -222,6 +237,7 @@ Pair: `using-projects-meta` declares local-first for **reads**; this rule extend
 
 ## Rules
 
+- **Honour `.tasks/.lock`** — read the lock at session start before touching the board; write it after clearing the guard; delete it at session end/pause. Never skip the lock check when `.tasks/` exists. The lock file must be gitignored.
 - **Never lose "Where I stopped"** — most critical field. If unclear, ask before ending session.
 - **One sentence per STATUS.md field** — compress, don't write prose.
 - **Key files must be specific** — not "auth module" but `packages/auth/src/useAuth.ts:87`.