Skill actions

The arinova_skill umbrella exposes eight managed actions. Skill enablement is stored per user; a missing user_skill_enablement row means enabled.

Sub-action	Flat action	Cost	Confirmation
image_gen	arinova.skill.image_gen	40 points/call	none
image_edit	arinova.skill.image_edit	60 points/call	none
voice_tts	arinova.skill.voice_tts	15 points/started 1,000 characters	none
sound_effects	arinova.skill.sound_effects	2 points/started second	none
voice_stt	arinova.skill.voice_stt	4 points/started 60 seconds	none
music_gen	arinova.skill.music_gen	150 points/started 60 seconds	none
web_search	arinova.skill.web_search	5 points/call	none
install_from_url (deprecated)	arinova.skill.install_from_url	10 points/call	user confirm

Generated speech, sound effects, and music are persisted as owned File Center MP3 files. Speech-to-text accepts only an owned File Center audio/video UUID; its duration is read by the server before wallet reservation and is checked again before the provider call. voice_stt remains private because its input is an owned file. Provider identity is retained only in usage and settlement receipts, never in the action result.

install_from_url

arinova.skill.install_from_url is deprecated as of 2026-07-25 and remains registered only for the first-stage compatibility window. Agents must not invoke it for new imports. Guide the user to /skills?tab=my, where Import from GitHub provides the user-led replacement flow.

The replacement accepts HTTPS SKILL.md URLs on github.com and raw.githubusercontent.com. It validates and scans the source before showing the complete content, source revision when available, and content digest for review. The user must confirm any overwrite and choose which Agents to attach; choosing none leaves the imported skill unattached. New attachments use manual activation.

The deprecated action keeps its existing 10-point, user-confirmed execution contract during this compatibility stage. It is not the replacement for the free web flow and will be removed only in the separately approved second deprecation stage.

Private Office version-history actions

Version history may contain content removed from the live resource, so every action below is private-only. The triggering user must retain edit-grade resource access and the executing Agent must retain a direct or Space write grant. Results contain bounded summaries/previews, never compressed snapshot bytes.

Product domain	Actions
arinova.sheet	list_versions, get_version, create_named_version, restore_version
arinova.slide	list_versions, get_version, create_named_version, restore_version, copy_version
arinova.mindmap	list_versions, get_version, create_named_version, restore_version, copy_version
arinova.form	list_versions, get_version, create_named_version, restore_version

restore_version always uses UserConfirm, strict drift checking, an expectedHeadVersionId, and a mandatory pre-restore checkpoint. Workbook, Slide, and Mindmap restore changes the existing resource in place. Form restore only replaces the editable draft; the prior publication stays live until an explicit Publish and existing responses keep their original revisions.

Slide and Mindmap expose copy_version as the preferred safe-recovery action. Workbook and Form copies remain available through their product/API history surfaces, where the existing copy conventions own naming and destination behavior. Every successful copy result uses the canonical resource deep-link builder and starts fresh history.

Existing mutating Workbook, Slide, Mindmap, and Form Actions attribute automatic or mandatory checkpoints with Agent identity, action/call correlation, and a bounded operation summary. Replaying an Action idempotency key cannot create a second named version, restore, or copy.

See Office version history for checkpoint, retention, and permission semantics.