Guru Merge Task Delivery

Name: Guru Merge Task Delivery
Author: castbox

ASecurity

Merge one reviewed active-task Delivery PR through a semantic live gate, exact merge-commit trailers, and terminal recovery.

8 stars

0 votes

0 copies

0 views

Added 9/20/2026

databasesbashgit

Works with

terminal

Security Analysis

A100/100

Scanned 9/20/2026

Install to Claude Code

$npx -y skills add castbox/guru-trellis --skill guru-merge-task-delivery --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Guru Merge Task Delivery?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Guru Merge Task Delivery

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/castbox-guru-merge-task-delivery-guru-trellis/badge)](https://www.skillsdirectory.com/skills/castbox-guru-merge-task-delivery-guru-trellis)

More formats (shields.io, HTML) on the badges page.

Download Zip

Files

SKILL.md

---
name: guru-merge-task-delivery
description: Merge one reviewed active-task Delivery PR through a semantic live gate, exact merge-commit trailers, and terminal recovery.
---

# Guru Merge Task Delivery

Use this Skill only after `guru-publish-task-delivery:ready_for_merge`. Read
[references/contract.md](references/contract.md), preview the exact active task
and live PR facts, then complete the six-dimension semantic review.

`delivered` requires one dialogue-local confirmation for the displayed
repository, PR, expected head, merge method, subject, body, and action identity.
After confirmation invoke the sole public transaction entry:

```bash
scripts/invoke.sh --input <ready-for-merge.json> \
  --review-input <semantic-review.json> --json
```

The reviewed merge body ends with exactly these trailers:

```text
Guru-Task-Identity: <stable-task-id>
Guru-Delivery-Schema: 1
Guru-Delivery-Head: <40-hex-reviewed-head>
```

The public invocation performs one pre-read, at most one expected-head
`--merge` mutation, and one post-read. Repeating the same invocation after
output loss reconstructs the same `delivered` result from live PR, commit,
parent, base-ref, and trailer facts without repeating the mutation.

The package also exposes the deterministic read-only command:

```bash
scripts/discover-task-deliveries.sh --input <delivery-history-query.json>
```

It reconstructs all matching historical Delivery facts from the target-base
first-parent merge history and exact GitHub PR/merge identity. It ignores
merges without Delivery trailers and is independent of PR body text, deleted
head branches, and the task's current branch or worktree binding.

`merge_blocked`, `implementation_required`, and `review_refresh_required` do
not request merge confirmation and perform no remote mutation. Fail closed on
stale task, head, base, PR body, checks, policy, message, gate, or terminal
identity. Never use squash or rebase fallback, parse PR body as Delivery
history, mutate an Issue, complete or archive a task, run Finish, or clean a
branch/worktree/runtime owned by another step.

Attribution

castbox

View source More from castbox →

SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

--- name: guru-merge-task-delivery description: Merge one reviewed active-task Delivery PR through a semantic live gate, exact merge-commit trailers, and terminal recovery. --- # Guru Merge Task Delivery Use this Skill only after `guru-publish-task-delivery:ready_for_merge`. Read [references/contract.md](references/contract.md), preview the exact active task and live PR facts, then complete the six-dimension semantic review. `delivered` requires one dialogue-local confirmation for the displayed repository, PR, expected head, merge method, subject, body, and action identity. After confirmation invoke the sole public transaction entry: ```bash scripts/invoke.sh --input <ready-for-merge.json> \ --review-input <semantic-review.json> --json ``` The reviewed merge body ends with exactly these trailers: ```text Guru-Task-Identity: <stable-task-id> Guru-Delivery-Schema: 1 Guru-Delivery-Head: <40-hex-reviewed-head> ``` The public invocation performs one pre-read, at most one expected-head `--merge` mutation, and one post-read. Repeating the same invocation after output loss reconstructs the same `delivered` result from live PR, commit, parent, base-ref, and trailer facts without repeating the mutation. The package also exposes the deterministic read-only command: ```bash scripts/discover-task-deliveries.sh --input <delivery-history-query.json> ``` It reconstructs all matching historical Delivery facts from the target-base first-parent merge history and exact GitHub PR/merge identity. It ignores merges without Delivery trailers and is independent of PR body text, deleted head branches, and the task's current branch or worktree binding. `merge_blocked`, `implementation_required`, and `review_refresh_required` do not request merge confirmation and perform no remote mutation. Fail closed on stale task, head, base, PR body, checks, policy, message, gate, or terminal identity. Never use squash or rebase fallback, parse PR body as Delivery history, mutate an Issue, complete or archive a task, run Finish, or clean a branch/worktree/runtime owned by another step.