@aitne-sh/aitne 0.1.7 → 0.1.9

package/agent-assets/skills/notify/references/priority.md

@@ -0,0 +1,65 @@
+---
+kind: reference
+name: priority
+description: Notification priority levels — critical / high / normal / low — with quiet-hours behavior and per-level examples.
+---
+
+# Notification priority levels
+
+Pick the lowest priority that still preserves the user-visible
+behavior the message needs. **Default to `normal`.**
+
+| Priority | Quiet-hours | Use for |
+|---|---|---|
+| `critical` | Bypasses | Security alerts (credential leak, account lockout), data-loss risk (about to overwrite without backup, irreversible deletion in flight), system errors blocking the user from working. Wakes the user. |
+| `high` | Bypasses | Hard deadlines firing in the next 8 hours, urgent inbound messages from people the user has flagged as priority, "meeting starting now". User wants to see this even during quiet hours but not at 3 am. |
+| `normal` | Respects (dropped during quiet hours) | Regular reminders (`15 min until standup`), digest-style summaries, single-recipient FYIs the user opted into. **Default.** |
+| `low` | Respects (dropped during quiet hours) | Background updates, observational FYIs the user did not explicitly ask for, optional context. Often better as an Agent Log entry instead of a notification at all. |
+
+## Examples by level
+
+### `critical` — "3 am matters"
+
+- `AWS console session was used from an IP not on your allowlist 5 min ago — review and rotate keys if not you.`
+- `Backup job failed on the database for 3 consecutive runs — primary now 6 hours out of sync.`
+
+If the user would not want the message to wake them, it is not `critical`.
+
+### `high` — "8 hours delay matters"
+
+- `Design review at 14:00 was just moved up to 11:00 — you have a conflicting meeting.`
+- `Submission deadline for the grant is 5 pm today — draft still has 3 unresolved comments.`
+- `Inbound DM from Sarah (priority contact): "Can you call before noon?"`
+
+If the next morning would still be soon enough, it is not `high`.
+
+### `normal` — the default
+
+- `Standup starts in 15 minutes.`
+- `Daily digest: 3 emails from boss, 1 asks for Q2 plan by EOD.`
+- `Reminder you set yesterday for "call vet": now.`
+
+### `low` — opt-in informational
+
+- `Calendar found a 30-min slot at 16:00 today if you want to schedule the writeup.`
+- `Build #4291 on develop turned green (you asked to be notified).`
+
+If the user did not opt in to receiving this category of update, do not
+send `low`. Drop it to an Agent Log entry instead.
+
+## Rate-limit defaults
+
+3/hour, 12/day across all priorities (`critical` bypasses both caps).
+The agent CANNOT query `notification_log` directly (Approve-tier). Use
+`<today>` `## Agent Log` as the authoritative dedup source (look for
+`notify sent` / `DM sent` lines).
+
+`/api/notify` does NOT report rate-limit or quiet-hours suppression
+back to you — it returns `200 {status:"sent"}` even when the message is
+silently dropped inside the delivery layer. A `"sent"` response is
+therefore not proof the user saw it. Do NOT re-post the same item
+hoping for delivery; self-throttle by scanning `<today>` `## Agent Log`
+first and log `notify skipped (rate_limited)` when you choose to hold.
+If the message is time-critical and the next opportunity arises,
+upgrade to `high` (or `critical` if the situation has escalated)
+rather than re-sending at the same level.

package/agent-assets/skills/notion/SKILL.delegated.claude.md

@@ -1,6 +1,6 @@
 ---
 name: notion
-description: Load when the task touches Notion and Notion is in cross-backend delegated mode (DM session is Claude Code; `delegatedBackend` is non-Claude). All Notion operations flow through `POST /api/integrations/notion/exec`; `/api/notion/*` write/read endpoints are not active in this configuration. The label-resolution endpoint `GET /api/notion/databases` remains available.
+description: Load when the task touches Notion AND Notion is cross-backend delegated from a Claude DM session (`delegatedBackend` is non-Claude). All Notion operations flow through `POST /api/integrations/notion/exec`. `GET /api/notion/databases` remains available for label resolution.
 allowed-tools:
   - Bash(curl *)
   - Read
@@ -53,7 +53,7 @@ The daemon:
    tool against the per-task allowed-tools envelope, validates the
    final JSON against your `outputSchema`, returns it.
 
-`outputSchema` is **required** (4 KB cap). Defaults: `maxToolCalls=7`,
+`outputSchema` is **required** (4 KB cap). Defaults: `maxToolCalls=8`,
 `maxBudgetUsd=0.05`, `timeoutMs=60000`. Bump up to 15 / 0.50 / 300000
 for genuinely larger intents.
 

package/agent-assets/skills/notion/SKILL.delegated.codex.md

@@ -1,6 +1,6 @@
 ---
 name: notion
-description: Load when the task touches Notion and Notion is in cross-backend delegated mode (DM session is Codex CLI; `delegatedBackend` is non-Codex). All Notion operations flow through `POST /api/integrations/notion/exec`; `/api/notion/*` write/read endpoints are not active in this configuration. The label-resolution endpoint `GET /api/notion/databases` remains available.
+description: Load when the task touches Notion AND Notion is cross-backend delegated from a Codex CLI DM session (`delegatedBackend` is non-Codex). All Notion operations flow through `POST /api/integrations/notion/exec`. `GET /api/notion/databases` remains available for label resolution.
 ---
 
 # Notion (delegated, cross-backend)
@@ -48,7 +48,7 @@ The daemon:
    tool against the per-task allowed-tools envelope, validates the
    final JSON against your `outputSchema`, returns it.
 
-`outputSchema` is **required** (4 KB cap). Defaults: `maxToolCalls=7`,
+`outputSchema` is **required** (4 KB cap). Defaults: `maxToolCalls=8`,
 `maxBudgetUsd=0.05`, `timeoutMs=60000`. Bump up to 15 / 0.50 / 300000
 for genuinely larger intents.
 

package/agent-assets/skills/notion/SKILL.delegated.gemini.md

@@ -1,6 +1,6 @@
 ---
 name: notion
-description: Load when the task touches Notion and Notion is in cross-backend delegated mode (DM session is Gemini CLI; `delegatedBackend` is non-Gemini). All Notion operations flow through `POST /api/integrations/notion/exec`; `/api/notion/*` write/read endpoints are not active in this configuration. The label-resolution endpoint `GET /api/notion/databases` remains available.
+description: Load when the task touches Notion AND Notion is cross-backend delegated from a Gemini CLI DM session (`delegatedBackend` is non-Gemini). All Notion operations flow through `POST /api/integrations/notion/exec`. `GET /api/notion/databases` remains available for label resolution.
 ---
 
 # Notion (delegated, cross-backend)
@@ -48,7 +48,7 @@ The daemon:
    tool against the per-task allowed-tools envelope, validates the
    final JSON against your `outputSchema`, returns it.
 
-`outputSchema` is **required** (4 KB cap). Defaults: `maxToolCalls=7`,
+`outputSchema` is **required** (4 KB cap). Defaults: `maxToolCalls=8`,
 `maxBudgetUsd=0.05`, `timeoutMs=60000`. Bump up to 15 / 0.50 / 300000
 for genuinely larger intents.
 

package/agent-assets/skills/notion/SKILL.md

@@ -3,17 +3,12 @@ name: notion
 description: Load when the user mentions Notion or the agent needs to read, query, search, create, update, or archive Notion pages and databases. Mail is in `mail`; Calendar / external Obsidian / GitHub in `external-services`; scheduling in `schedule`.
 allowed-tools:
   - Bash(curl *)
-  - Bash(jq *)
   - Read
 ---
 
 # Notion API Reference
 
-Output language: follow `<output_language_policy>`. **Property names**
-defined in the user's Notion database are Policy A (the API contract —
-never translate them; pass them through verbatim). **Property values**
-and page body content the agent fills are Policy C (write in
-`<settings primary_language>`).
+Output language: Notion property **names** are Policy A — never translate them; pass them through verbatim as the database defines them. Property **values** and page body content are Policy C (`<settings primary_language>`). See `<output_language_policy>`.
 
 Base URL: `http://localhost:8321`. All calls via `curl -s` with
 `Content-Type: application/json` on POST/PATCH/PUT. URL-encode spaces in paths.
@@ -85,8 +80,9 @@ Moves to trash (~30 days). Restore via `PATCH` with `{ "in_trash": false }`.
 
 - During `routine.hourly_check` this skill is **read-only** — no creates,
   property updates, content patches, or archives.
-- No bulk operations without user confirmation.
+- No bulk operations without user confirmation. If you're about to update
+  3+ pages at once, stop and ask the user first.
 - Writes are Autonomous; the daemon does not DM the owner. Single ops
-  only — the agent's own judgment is the gate, not the daemon. If you're
-  about to update 3+ pages at once, stop and ask the user. Call
-  `POST /api/notify` when the user would want immediate awareness.
+  only — the agent's own judgment is the gate, not the daemon. The
+  message-discipline contract for any `POST /api/notify` call you issue
+  here is in the `notify` skill — do not invent ad-hoc phrasing rules.

package/agent-assets/skills/notion/SKILL.native.claude.md

@@ -1,9 +1,8 @@
 ---
 name: notion
-description: Load when the task touches Notion and Notion is in native mode bound to Claude (`nativeBackend === "claude"`). Use the in-session Notion connector your harness exposes directly; the daemon does not proxy Notion. `/api/notion/databases` (label → UUID config dump) is the only daemon route still reachable.
+description: Load when the task touches Notion AND Notion is in native mode bound to Claude (`nativeBackend === "claude"`). Use the in-session Notion connector directly; the daemon does not proxy Notion. `/api/notion/databases` (label → UUID dump) is the only daemon route still reachable.
 allowed-tools:
   - Bash(curl *)
-  - Bash(jq *)
   - Read
 ---
 
@@ -12,12 +11,16 @@ allowed-tools:
 > **Refusal directive — read first.** Notion is in `native` mode bound
 > to Claude. Do **NOT** call any of:
 >
-> - `POST /api/integrations/notion/exec` (returns `410` with
->   `X-Integration-Mode: native`)
-> - `POST /api/integrations/notion/reconcile` (410)
-> - `/api/notion/query`, `/api/notion/search`, `/api/notion/pages`,
->   `/api/notion/pages/<id>/content` (each route-prefix 410 in native
+> - `POST /api/integrations/notion/exec` (returns `409 mode_mismatch`
+>   in native mode — this route is NOT route-gated and carries no
+>   `X-Integration-Mode` header; `/exec` only succeeds in `delegated`
 >   mode)
+> - `POST /api/integrations/notion/reconcile` (not route-gated either;
+>   an LLM-issued notion reconcile returns `400 validation_error` on the
+>   window-key allowlist, which is calendar-only)
+> - `/api/notion/query`, `/api/notion/search`, `/api/notion/pages`,
+>   `/api/notion/pages/<id>/content` (each route-prefix returns `410`
+>   with `X-Integration-Mode: native` — these ARE route-gated)
 >
 > Reach Notion through the in-session Notion connector your harness
 > exposes. Your tool menu lists every available tool at session start
@@ -151,7 +154,7 @@ instead).
 When `routine.hourly_check.native.claude.md`'s Step 0c fetches recent
 Notion edits, POST each materialised page to `/api/observations`. The
 daemon computes `contentHash` server-side via
-`@personal-agent/shared/observations-hash.ts`; pass `payload` verbatim.
+`@aitne/shared/observations-hash.ts`; pass `payload` verbatim.
 
 **Batch when you have more than one page.** Use
 `POST /api/observations/batch` with up to 200 items in one

package/agent-assets/skills/notion/SKILL.native.codex.md

@@ -1,9 +1,8 @@
 ---
 name: notion
-description: Load when the task touches Notion and Notion is in native mode bound to Codex (`nativeBackend === "codex"`). Use the in-session Notion connector your Codex harness exposes directly; the daemon does not proxy Notion. `/api/notion/databases` (label → UUID config dump) is the only daemon route still reachable.
+description: Load when the task touches Notion AND Notion is in native mode bound to Codex (`nativeBackend === "codex"`). Use the Codex Notion connector directly; daemon does not proxy Notion. `/api/notion/databases` (label → UUID dump) is the only daemon route still reachable.
 allowed-tools:
   - Bash(curl *)
-  - Bash(jq *)
   - Read
 ---
 
@@ -12,11 +11,16 @@ allowed-tools:
 > **Refusal directive — read first.** Notion is in `native` mode bound
 > to Codex. Do **NOT** call any of:
 >
-> - `POST /api/integrations/notion/exec` (returns `410` with
->   `X-Integration-Mode: native`)
-> - `POST /api/integrations/notion/reconcile` (410)
+> - `POST /api/integrations/notion/exec` (returns `409 mode_mismatch`
+>   in native mode — this route is NOT route-gated and carries no
+>   `X-Integration-Mode` header; `/exec` only succeeds in `delegated`
+>   mode)
+> - `POST /api/integrations/notion/reconcile` (not route-gated either;
+>   an LLM-issued notion reconcile returns `400 validation_error` on the
+>   window-key allowlist, which is calendar-only)
 > - `/api/notion/query`, `/api/notion/search`, `/api/notion/pages`,
->   `/api/notion/pages/<id>/content` (each route-prefix 410)
+>   `/api/notion/pages/<id>/content` (each route-prefix returns `410`
+>   with `X-Integration-Mode: native` — these ARE route-gated)
 >
 > Reach Notion through the in-session Notion connector your harness
 > exposes. Your tool menu lists every available tool at session start

package/agent-assets/skills/notion/SKILL.native.gemini.md

@@ -1,9 +1,8 @@
 ---
 name: notion
-description: Load when the task touches Notion and Notion is in native mode bound to Gemini (`nativeBackend === "gemini"`). Use the in-session Notion connector your Gemini harness exposes directly; the daemon does not proxy Notion. `/api/notion/databases` (label → UUID config dump) is the only daemon route still reachable.
+description: Load when the task touches Notion AND Notion is in native mode bound to Gemini (`nativeBackend === "gemini"`). Use the Gemini Notion connector directly; daemon does not proxy Notion. `/api/notion/databases` (label → UUID dump) is the only daemon route still reachable.
 allowed-tools:
   - Bash(curl *)
-  - Bash(jq *)
   - Read
 ---
 
@@ -12,11 +11,16 @@ allowed-tools:
 > **Refusal directive — read first.** Notion is in `native` mode bound
 > to Gemini. Do **NOT** call any of:
 >
-> - `POST /api/integrations/notion/exec` (returns `410` with
->   `X-Integration-Mode: native`)
-> - `POST /api/integrations/notion/reconcile` (410)
+> - `POST /api/integrations/notion/exec` (returns `409 mode_mismatch`
+>   in native mode — this route is NOT route-gated and carries no
+>   `X-Integration-Mode` header; `/exec` only succeeds in `delegated`
+>   mode)
+> - `POST /api/integrations/notion/reconcile` (not route-gated either;
+>   an LLM-issued notion reconcile returns `400 validation_error` on the
+>   window-key allowlist, which is calendar-only)
 > - `/api/notion/query`, `/api/notion/search`, `/api/notion/pages`,
->   `/api/notion/pages/<id>/content` (each route-prefix 410)
+>   `/api/notion/pages/<id>/content` (each route-prefix returns `410`
+>   with `X-Integration-Mode: native` — these ARE route-gated)
 >
 > Reach Notion through the in-session Notion connector your harness
 > exposes (typically a user-installed Notion MCP server registered

package/agent-assets/skills/observations/SKILL.md

@@ -8,12 +8,7 @@ allowed-tools:
 
 # Observations Review & Source Access
 
-Output language: follow `<output_language_policy>`. This skill routes
-observations into other Policy B destinations (`today.md`, `roadmap.md`,
-`projects/*.md`) — write-ups inherit the destination file's policy
-(English skeleton, body in `<settings primary_language>`) via the
-`today` / `roadmap` / `context` / `project-doc` skills you call to land
-the update.
+Output language: write-ups inherit the destination file's policy via the `today` / `roadmap` / `context` / `project-doc` skills you call. See `<output_language_policy>`.
 
 ## Workflow
 
@@ -22,8 +17,8 @@ the update.
 2. Group related observations before acting.
 3. For each group, apply the **fetch decision** (below) — `summary_text` + `novelty_score` are pre-computed by the daemon's per-observation summarizer; only `novelty_score >= 2` warrants full content fetch.
 4. Decide actionability:
-   - Update `today.md` for TODOs, blockers, decisions, or deadlines
-   - Update `roadmap.md` or `projects/*.md` only for material project-state changes
+   - Update `state/today.md` for TODOs, blockers, decisions, or deadlines
+   - Update `plans/roadmap.md` or `projects/*.md` only for material project-state changes
    - Schedule a wake-up if the observation implies a future reminder
 5. Apply the smallest meaningful set of context updates.
 6. Mark processed observations consumed via the bulk endpoint
@@ -143,6 +138,16 @@ that caps each curl invocation at one HTTP request and strips heredoc
 bodies before URL validation. The batch endpoint resolves the
 cardinality mismatch without weakening either hook.
 
+> **If `mcp__aitne-observations__submit_observations` is in your allowed
+> tools (the `routine.fetch_window` pre-pass on Claude), submit the batch
+> through that MCP tool instead of the curl below.** The structured
+> transport never goes through the SDK bash preflight, so Unicode-bearing
+> payloads (NBSP/ZWS in subjects, U+3000 in titles) can't trip its
+> `too-complex` gate and cascade to a denied curl / wasted retry /
+> `budget-cap`. The tool input is the same `{"observations":[…]}` envelope
+> and the response is identical. The curl form below is the fallback for
+> sessions without the MCP tool (the hourly check, Codex/Gemini).
+
 ```bash
 curl -s -X POST http://localhost:8321/api/observations/batch \
   -H 'Content-Type: application/json' \
@@ -195,8 +200,8 @@ Hard limits:
 ### POST /api/observations/consume
 
 Marks one or more observations consumed. **Bulk-only** — there is no
-per-id endpoint (`POST /api/observations/<id>/consume` returns 404).
-Always use this shape, even for a single id.
+per-id endpoint (`POST /api/observations/<id>/consume` returns 405
+`use_bulk_endpoint`). Always use this shape, even for a single id.
 
 Copy the `correlationId` value verbatim from the
 `<event_correlation_id>…</event_correlation_id>` tag in your turn
@@ -235,7 +240,9 @@ you to.**
 
 ### GET /api/observations/stats
 
-`curl -s http://localhost:8321/api/observations/stats` → `{ "total", "pending", "bySource": {...}, "byActor": {...} }`
+`curl -s http://localhost:8321/api/observations/stats` → `{ "totalPending", "oldestPendingObservedAt", "bySource": [{ "source", "pendingCount", "oldestObservedAt" }], "summaryStatusCounts": {...}, "noveltyDistribution": [...] }`
+
+`totalPending` is the single count of unconsumed observations (no separate `total` / `pending` keys). `bySource` is an **array** of per-source rows, not a map. There is no `byActor`. `summaryStatusCounts` / `noveltyDistribution` are summarizer-health telemetry.
 
 ---
 
@@ -272,7 +279,10 @@ current state.
 
 <!-- mode:direct:notion -->
 ```bash
-curl -s "http://localhost:8321/api/notion/query?databaseId=xxx"
+# ?database= takes a database LABEL (default "tasks"), not a UUID.
+# An unrecognized label returns 404 notion.database_not_found with the
+# list of valid labels; an absent param silently uses "tasks".
+curl -s "http://localhost:8321/api/notion/query?database=tasks"
 ```
 <!-- /mode:direct:notion -->
 <!-- mode:delegated-same:notion -->
@@ -336,8 +346,9 @@ names and the canonical search / fetch call shapes. Resolve
 `<databaseId>` first via the un-gated config dump
 (`curl -s http://localhost:8321/api/notion/databases`) and pass the
 UUID to the connector's data-source / search tool. Do NOT call
-`/api/notion/*` (410) or `/api/integrations/notion/exec` (also 410
-in native mode).
+`/api/notion/*` (410) or `/api/integrations/notion/exec` (returns 409
+`mode_mismatch` in native mode — the `/exec` path is not route-gated,
+so it is the handler, not the 410 gate, that rejects it).
 <!-- /mode:native:notion -->
 <!-- mode:disabled:notion -->
 Notion is disabled — there is no live source. Treat the observation

package/agent-assets/skills/project-doc/SKILL.md

@@ -8,11 +8,7 @@ allowed-tools:
 
 # Project Doc
 
-Output language: follow `<output_language_policy>`. Project docs are
-Policy B — H2/H3 headers from `agent-assets/templates/projects/` and
-`agent-assets/templates/git/` are skeleton (English); body prose,
-bullets, and summaries are written in `<settings primary_language>`.
-Preserve user-customized headers verbatim.
+Output language: project docs are Policy B — see `<output_language_policy>`. Template H2/H3 headers stay English skeleton; body prose, bullets, and summaries are in `<settings primary_language>`. Preserve user-customized headers verbatim.
 
 Use this skill for Git-backed context documents under the unified
 repositories layout (see
@@ -32,7 +28,7 @@ carries (project keeps `## Lifecycle Phases`, repo-only stays light).
 ## Hard rules
 
 - Write only through `/api/context/*`. Never edit files directly on disk.
-- Do not modify `today.md`, `roadmap.md`, `user/*`, `rules/*`, or
+- Do not modify `state/today.md`, `plans/roadmap.md`, `user/*`, `rules/*`, or
   unrelated context files.
 - Preserve valid frontmatter. The overview file uses `type: git-project`,
   the journal file uses `type: git-journal`. Both carry an ISO `updated`

package/agent-assets/skills/project-doc/curation.json

@@ -6,8 +6,8 @@
       "kind": "knowledge_layout",
       "anchor": "<!-- CURATION:knowledge_layout id=\"project-shape\" -->",
       "human_label": "Project / git-repo file shape",
-      "description": "Required sections in projects/*.md and git-repos/*.md, and what each section holds",
-      "scope_paths": ["projects/*.md", "git-repos/*.md"]
+      "description": "Required sections in git/<slug>/overview.md (git-managed repos) and projects/*.md (non-git manual projects), and what each section holds",
+      "scope_paths": ["projects/*.md", "git/*/overview.md"]
     },
     {
       "id": "slug-grammar",
@@ -15,7 +15,7 @@
       "anchor": "<!-- CURATION:convention_notes id=\"slug-grammar\" -->",
       "human_label": "Project slug grammar",
       "description": "Slug format, length cap, reserved stems",
-      "scope_paths": ["projects/*.md", "git-repos/*.md"]
+      "scope_paths": ["projects/*.md", "git/*/overview.md"]
     }
   ]
 }

package/agent-assets/skills/project-doc/seeds/project-shape.seed.json

@@ -14,11 +14,14 @@
       ]
     },
     {
-      "path": "git-repos/*.md",
-      "purpose": "Per-repository context for non-project watched repositories",
+      "path": "git/*/overview.md",
+      "purpose": "Per-repository overview for every git-managed repo (replaces the retired git-repos/*.md layout)",
       "sections": [
-        { "heading": "## Activity", "contains": "summarised recent activity for the watched repo" },
-        { "heading": "## Recent Pushes", "contains": "list of push events with dates and short summaries" }
+        { "heading": "## Summary", "contains": "one-paragraph description of the repo and its current state" },
+        { "heading": "## Architecture", "contains": "structural notes on the repo's layout and components" },
+        { "heading": "## Notable Changes", "contains": "human-readable notes on important commits or decisions" },
+        { "heading": "## Open Threads", "contains": "manual prose; follow-ups and pending questions, preserved verbatim" },
+        { "heading": "## Daily Activity Log", "contains": "rolling 30-day window of summarised activity" }
       ]
     }
   ]

package/agent-assets/skills/project-doc/seeds/slug-grammar.seed.json

@@ -4,17 +4,17 @@
     {
       "topic": "Slug format",
       "rule": "Project and repo slugs are kebab-case, lowercase letters with hyphens between words.",
-      "example": "projects/cost-explorer.md, git-repos/personal-agent.md"
+      "example": "plans/projects/cost-explorer.md, git/personal-agent/overview.md"
     },
     {
       "topic": "Slug length",
       "rule": "Slugs are 32 characters or fewer, including the hyphens but excluding the .md suffix.",
-      "example": "projects/personal-agent-skills.md is at the upper bound"
+      "example": "plans/projects/personal-agent-skills.md is at the upper bound"
     },
     {
       "topic": "Reserved stems",
       "rule": "Stems _index and _archive are reserved for daemon-maintained files and not in use as project slugs.",
-      "example": "projects/_index.md is a directory listing, not a project file"
+      "example": "plans/projects/_index.md is a directory listing, not a project file"
     }
   ]
 }

package/agent-assets/skills/reading/SKILL.md

@@ -156,9 +156,19 @@ Response:
 
 Update book status, rating, or notes.
 
+**Approve tier (Bearer required).** This is an operator/dashboard-gated
+write — an autonomous agent curl from a session workdir carries no
+`Authorization: Bearer` header and will be rejected with **401** before
+the handler runs. Do NOT call this autonomously and do NOT assume the
+update landed; book status/rating/notes corrections are made by the user
+via the dashboard. (Body shape, for reference: `status` enum
+`reading|completed|abandoned`, `rating` 1-5, `notes`.)
+
 ```bash
+# Operator/dashboard-only — requires Authorization: Bearer (Approve tier).
 curl -s -X PATCH "http://localhost:8321/api/books/1" \
   -H "Content-Type: application/json" \
+  -H "Authorization: Bearer <operator-token>" \
   -d '{"status": "completed", "rating": 4}'
 ```
 
@@ -185,8 +195,8 @@ Currently reading: 3
 New highlights: 34
 
 ### Completed This Month
-1. "Deep Work" by Cal Newport — ★★★★★
-2. "Atomic Habits" by James Clear — ★★★★
+1. "Deep Work" by Cal Newport — rating: 5/5
+2. "Atomic Habits" by James Clear — rating: 4/5
 
 ### Currently Reading
 - "Thinking, Fast and Slow" by Daniel Kahneman (47 highlights)

package/agent-assets/skills/reading/references/reading-taste.md

@@ -146,12 +146,12 @@ the sweep to write the refreshed metadata and YAML `updated` date.
 
 ### First-write registration (_index.md)
 
-The `user/_index.md` file indexes available topic files. When
+The `identity/_index.md` file indexes available topic files. When
 creating `reading-taste.md` for the first time (GET returned 404),
 append a one-line entry to the index so other flows can discover it:
 
 ```bash
-curl -s -X PATCH http://localhost:8321/api/context/user/_index \
+curl -s -X PATCH http://localhost:8321/api/context/identity/_index \
   -H 'Content-Type: application/json' \
   -d '{"section": "topics", "mode": "append", "content": "- reading-taste — derived taste profile + rolling book candidates (updated weekly)"}'
 ```