@femtomc/mu-agent 26.2.98 → 26.2.100

package/README.md

@@ -19,6 +19,26 @@ Bundled defaults now live as markdown files under `packages/agent/prompts/`:
 
 These are loaded by runtime code and are the single source of truth for default system prompts.
 
+## Bundled starter skills
+
+Bundled starter skills live under `packages/agent/prompts/skills/` and are bootstrapped
+into `~/.mu/skills/` (or `$MU_HOME/skills/`) when missing:
+
+- `mu`
+- `memory`
+- `planning`
+- `hierarchical-work-protocol`
+- `subagents`
+- `heartbeats`
+- `crons`
+- `setup-slack`
+- `setup-discord`
+- `setup-telegram`
+- `setup-neovim`
+
+Starter skills are version-synced by the CLI bootstrap path when users run `mu`
+commands after upgrading.
+
 ## Install
 
 ```bash

package/dist/operator.d.ts

@@ -105,6 +105,7 @@ export type OperatorBackendTurnInput = {
 };
 export interface MessagingOperatorBackend {
     runTurn(input: OperatorBackendTurnInput): Promise<OperatorBackendTurnResult>;
+    abortSession?(sessionId: string): Promise<boolean> | boolean;
     dispose?(): void | Promise<void>;
 }
 export type OperatorDecision = {
@@ -119,7 +120,7 @@ export type OperatorDecision = {
     operatorTurnId: string;
 } | {
     kind: "reject";
-    reason: "operator_disabled" | "operator_action_disallowed" | "operator_invalid_output" | "context_missing" | "context_ambiguous" | "context_unauthorized" | "cli_validation_failed";
+    reason: "operator_disabled" | "operator_action_disallowed" | "operator_invalid_output" | "operator_cancelled" | "context_missing" | "context_ambiguous" | "context_unauthorized" | "cli_validation_failed";
     details?: string;
     operatorSessionId: string;
     operatorTurnId: string;
@@ -191,6 +192,7 @@ export { DEFAULT_OPERATOR_SYSTEM_PROMPT };
 export declare class PiMessagingOperatorBackend implements MessagingOperatorBackend {
     #private;
     constructor(opts?: PiMessagingOperatorBackendOpts);
+    abortSession(sessionId: string): Promise<boolean>;
     runTurn(input: OperatorBackendTurnInput): Promise<OperatorBackendTurnResult>;
     dispose(): void;
 }

package/dist/operator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAmB,KAAK,mBAAmB,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,MAAM,gCAAgC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,eAAe,GAAG,gCAAgC,CAAC;AACxD,KAAK,eAAe,GAAG,gCAAgC,CAAC;AAKxD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAgCxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAG1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,MAAM,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,eAAe,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACxC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACzB;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EACH,mBAAmB,GACnB,4BAA4B,GAC5B,yBAAyB,GACzB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG;IACvC,eAAe,CAAC,EAAE,sBAAsB,CAAC;CACzC,CAAC;AAMF,qBAAa,qBAAqB;;gBAGd,IAAI,GAAE,yBAA8B;IAIhD,OAAO,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GACjF;QACA,IAAI,EAAE,UAAU,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACnB,GACD;QACA,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EACH,4BAA4B,GAC5B,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;KAChB;CAyGJ;AAED,MAAM,MAAM,yCAAyC,GAAG;IACvD,YAAY,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IAClF,YAAY,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnF,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,yCAAyC,CAAC;CACrE,CAAC;AA4MF,qBAAa,gCAAiC,YAAW,yCAAyC;;gBAM9E,IAAI,EAAE,MAAM;IAuDlB,YAAY,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK7D,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAGlC;AAED,qBAAa,wBAAwB;;gBAUjB,IAAI,EAAE,4BAA4B;IAyCxC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgHtG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAKlC;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CACrD,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAiJ1C,qBAAa,0BAA2B,YAAW,wBAAwB;;gBAgBvD,IAAI,GAAE,8BAAmC;IAmJ/C,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA8FlF,OAAO,IAAI,IAAI;CAKtB"}
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAmB,KAAK,mBAAmB,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,MAAM,gCAAgC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,eAAe,GAAG,gCAAgC,CAAC;AACxD,KAAK,eAAe,GAAG,gCAAgC,CAAC;AAOxD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAgCxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAG1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,MAAM,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,eAAe,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACxC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7E,YAAY,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAC7D,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACzB;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EACH,mBAAmB,GACnB,4BAA4B,GAC5B,yBAAyB,GACzB,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG;IACvC,eAAe,CAAC,EAAE,sBAAsB,CAAC;CACzC,CAAC;AAMF,qBAAa,qBAAqB;;gBAGd,IAAI,GAAE,yBAA8B;IAIhD,OAAO,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GACjF;QACA,IAAI,EAAE,UAAU,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACnB,GACD;QACA,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EACH,4BAA4B,GAC5B,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;KAChB;CAyGJ;AAED,MAAM,MAAM,yCAAyC,GAAG;IACvD,YAAY,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IAClF,YAAY,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnF,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,yCAAyC,CAAC;CACrE,CAAC;AAmPF,qBAAa,gCAAiC,YAAW,yCAAyC;;gBAM9E,IAAI,EAAE,MAAM;IAuDlB,YAAY,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK7D,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAGlC;AAED,qBAAa,wBAAwB;;gBAWjB,IAAI,EAAE,4BAA4B;IA2DxC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyItG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAMlC;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CACrD,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAiJ1C,qBAAa,0BAA2B,YAAW,wBAAwB;;gBAiBvD,IAAI,GAAE,8BAAmC;IAmK/C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqBjD,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAgHlF,OAAO,IAAI,IAAI;CAKtB"}

package/dist/operator.js

@@ -7,6 +7,8 @@ import { createMuSession } from "./session_factory.js";
 import { DEFAULT_OPERATOR_SYSTEM_PROMPT } from "./default_prompts.js";
 const OPERATOR_RESPONSE_MAX_CHARS = 12_000;
 const SAFE_RESPONSE_RE = new RegExp(`^[\\s\\S]{1,${OPERATOR_RESPONSE_MAX_CHARS}}$`);
+const OPERATOR_TIMEOUT_MIN_MS = 1_000;
+const OPERATOR_TIMEOUT_HARD_CAP_MS = 10 * 60 * 1_000;
 export const OperatorApprovedCommandSchema = z.discriminatedUnion("kind", [
     z.object({ kind: z.literal("status") }),
     z.object({ kind: z.literal("ready") }),
@@ -161,12 +163,48 @@ function defaultTurnId() {
     return `turn-${crypto.randomUUID()}`;
 }
 function buildOperatorFailureFallbackMessage(code) {
+    const reasonLine = code === "operator_timeout"
+        ? "The operator turn exceeded the messaging timeout before a safe response was produced."
+        : code === "operator_busy"
+            ? "Another operator turn is already in progress for this conversation."
+            : code === "operator_empty_response"
+                ? "The operator completed without a usable response payload."
+                : code === "operator_cancelled"
+                    ? "The operator turn was cancelled before completion."
+                    : "An internal operator runtime/formatting error interrupted the turn.";
     return [
-        "I ran into an internal operator formatting/runtime issue and could not complete that turn safely.",
+        "I could not complete that turn safely.",
         `Code: ${code}`,
-        "You can retry, or use an explicit /mu command (for example: /mu status or /mu issue list).",
+        reasonLine,
+        "You can retry this request in plain conversational text.",
     ].join("\n");
 }
+function classifyBackendFailureCode(err) {
+    if (!(err instanceof Error)) {
+        return "operator_backend_error";
+    }
+    const message = err.message.trim().toLowerCase();
+    if (message.includes("pi operator timeout") || message.includes("operator timeout")) {
+        return "operator_timeout";
+    }
+    if (message.includes("operator_empty_response")) {
+        return "operator_empty_response";
+    }
+    if (message.includes("agent is already processing")) {
+        return "operator_busy";
+    }
+    if (message.includes("aborted") || message.includes("cancelled")) {
+        return "operator_cancelled";
+    }
+    return "operator_backend_error";
+}
+function parseOperatorControlDirective(commandText) {
+    const normalized = commandText.trim().toLowerCase();
+    if (normalized === "cancel" || normalized === "abort" || normalized === "/mu cancel" || normalized === "/mu abort") {
+        return "cancel";
+    }
+    return null;
+}
 function isAgentBusyError(err) {
     if (!(err instanceof Error)) {
         return false;
@@ -375,6 +413,7 @@ export class MessagingOperatorRuntime {
     #turnIdFactory;
     #conversationSessionStore;
     #sessionByConversation = new Map();
+    #suppressedCancelledTurnsBySession = new Map();
     constructor(opts) {
         this.#backend = opts.backend;
         this.#broker = opts.broker ?? new ApprovedCommandBroker();
@@ -414,6 +453,22 @@ export class MessagingOperatorRuntime {
         }
         return created;
     }
+    #markSuppressedCancelledTurn(sessionId) {
+        const next = (this.#suppressedCancelledTurnsBySession.get(sessionId) ?? 0) + 1;
+        this.#suppressedCancelledTurnsBySession.set(sessionId, next);
+    }
+    #consumeSuppressedCancelledTurn(sessionId) {
+        const current = this.#suppressedCancelledTurnsBySession.get(sessionId) ?? 0;
+        if (current <= 0) {
+            return false;
+        }
+        if (current === 1) {
+            this.#suppressedCancelledTurnsBySession.delete(sessionId);
+            return true;
+        }
+        this.#suppressedCancelledTurnsBySession.set(sessionId, current - 1);
+        return true;
+    }
     async handleInbound(opts) {
         const sessionId = await this.#resolveSessionId(opts.inbound, opts.binding);
         const turnId = this.#turnIdFactory();
@@ -433,6 +488,21 @@ export class MessagingOperatorRuntime {
                 operatorTurnId: turnId,
             };
         }
+        const controlDirective = parseOperatorControlDirective(opts.inbound.command_text);
+        if (controlDirective === "cancel") {
+            const aborted = (await this.#backend.abortSession?.(sessionId)) ?? false;
+            if (aborted) {
+                this.#markSuppressedCancelledTurn(sessionId);
+            }
+            return {
+                kind: "response",
+                message: aborted
+                    ? "Cancelled the in-flight operator turn for this conversation."
+                    : "No in-flight operator turn is active for this conversation.",
+                operatorSessionId: sessionId,
+                operatorTurnId: turnId,
+            };
+        }
         let pendingFlashes = [];
         try {
             pendingFlashes = await loadPendingSessionFlashes({
@@ -475,9 +545,18 @@ export class MessagingOperatorRuntime {
             }
         }
         catch (err) {
+            const failureCode = classifyBackendFailureCode(err);
+            if (failureCode === "operator_cancelled" && this.#consumeSuppressedCancelledTurn(sessionId)) {
+                return {
+                    kind: "reject",
+                    reason: "operator_cancelled",
+                    operatorSessionId: sessionId,
+                    operatorTurnId: turnId,
+                };
+            }
             return {
                 kind: "response",
-                message: buildOperatorFailureFallbackMessage("operator_backend_error"),
+                message: buildOperatorFailureFallbackMessage(failureCode),
                 operatorSessionId: sessionId,
                 operatorTurnId: turnId,
             };
@@ -521,6 +600,7 @@ export class MessagingOperatorRuntime {
     }
     async stop() {
         this.#sessionByConversation.clear();
+        this.#suppressedCancelledTurnsBySession.clear();
         await this.#backend.dispose?.();
         await this.#conversationSessionStore?.stop?.();
     }
@@ -657,12 +737,14 @@ export class PiMessagingOperatorBackend {
     #persistSessions;
     #sessionDirForRepoRoot;
     #sessions = new Map();
+    #activePromptCountsBySession = new Map();
     constructor(opts = {}) {
         this.#provider = opts.provider;
         this.#model = opts.model;
         this.#thinking = opts.thinking ?? "minimal";
         this.#systemPrompt = opts.systemPrompt ?? DEFAULT_OPERATOR_SYSTEM_PROMPT;
-        this.#timeoutMs = Math.max(1_000, Math.trunc(opts.timeoutMs ?? 90_000));
+        const requestedTimeoutMs = Math.max(OPERATOR_TIMEOUT_MIN_MS, Math.trunc(opts.timeoutMs ?? 90_000));
+        this.#timeoutMs = Math.min(requestedTimeoutMs, OPERATOR_TIMEOUT_HARD_CAP_MS);
         this.#extensionPaths = opts.extensionPaths ?? [];
         this.#sessionFactory = opts.sessionFactory ?? createMuSession;
         this.#nowMs = opts.nowMs ?? Date.now;
@@ -681,6 +763,7 @@ export class PiMessagingOperatorBackend {
             return;
         }
         this.#sessions.delete(sessionId);
+        this.#activePromptCountsBySession.delete(sessionId);
         try {
             entry.session.dispose();
         }
@@ -703,6 +786,18 @@ export class PiMessagingOperatorBackend {
             this.#disposeSession(sessionId);
         }
     }
+    #incrementActivePrompt(sessionId) {
+        const next = (this.#activePromptCountsBySession.get(sessionId) ?? 0) + 1;
+        this.#activePromptCountsBySession.set(sessionId, next);
+    }
+    #decrementActivePrompt(sessionId) {
+        const current = this.#activePromptCountsBySession.get(sessionId) ?? 0;
+        if (current <= 1) {
+            this.#activePromptCountsBySession.delete(sessionId);
+            return;
+        }
+        this.#activePromptCountsBySession.set(sessionId, current - 1);
+    }
     #sessionPersistence(repoRoot, sessionId) {
         if (!this.#persistSessions) {
             return undefined;
@@ -784,6 +879,27 @@ export class PiMessagingOperatorBackend {
             // best effort audit
         }
     }
+    async abortSession(sessionId) {
+        const activeCount = this.#activePromptCountsBySession.get(sessionId) ?? 0;
+        if (activeCount <= 0) {
+            return false;
+        }
+        const record = this.#sessions.get(sessionId);
+        if (!record) {
+            return false;
+        }
+        const abortFn = record.session.abort;
+        if (!abortFn) {
+            return false;
+        }
+        try {
+            await abortFn.call(record.session);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
     async runTurn(input) {
         const sessionRecord = await this.#resolveSession(input.sessionId, input.inbound.repo_root);
         const session = sessionRecord.session;
@@ -820,11 +936,29 @@ export class PiMessagingOperatorBackend {
         });
         const promptText = buildOperatorPrompt(input);
         const promptOnce = async () => {
+            let timeoutHandle = null;
             const timeoutPromise = new Promise((_, reject) => {
-                setTimeout(() => reject(new Error("pi operator timeout")), this.#timeoutMs);
+                timeoutHandle = setTimeout(() => {
+                    const abortFn = session.abort;
+                    if (abortFn) {
+                        void abortFn.call(session).catch(() => {
+                            // Best effort abort on timeout.
+                        });
+                    }
+                    reject(new Error("pi operator timeout"));
+                }, this.#timeoutMs);
             });
-            await Promise.race([session.prompt(promptText, { expandPromptTemplates: false }), timeoutPromise]);
+            try {
+                await Promise.race([session.prompt(promptText, { expandPromptTemplates: false }), timeoutPromise]);
+            }
+            finally {
+                if (timeoutHandle) {
+                    clearTimeout(timeoutHandle);
+                    timeoutHandle = null;
+                }
+            }
         };
+        this.#incrementActivePrompt(input.sessionId);
         try {
             try {
                 await promptOnce();
@@ -848,6 +982,7 @@ export class PiMessagingOperatorBackend {
             throw err;
         }
         finally {
+            this.#decrementActivePrompt(input.sessionId);
             unsub();
             sessionRecord.lastUsedAtMs = Math.trunc(this.#nowMs());
         }

package/dist/session_factory.d.ts

@@ -18,6 +18,7 @@ export type MuSession = {
     prompt: (text: string, options?: {
         expandPromptTemplates?: boolean;
     }) => Promise<void>;
+    abort?: () => Promise<void>;
     dispose: () => void;
     bindExtensions: (bindings: any) => Promise<void>;
     agent: {

package/dist/session_factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session_factory.d.ts","sourceRoot":"","sources":["../src/session_factory.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,wBAAwB,GAAG,WAAW,GAAG,iBAAiB,GAAG,KAAK,GAAG,MAAM,CAAC;AAExF,MAAM,MAAM,wBAAwB,GAAG;IACtC,IAAI,CAAC,EAAE,wBAAwB,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,wBAAwB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACvB,SAAS,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;IAC1D,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,cAAc,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE;QAChB,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;CACF,CAAC;AAkCF,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CA2CnF"}
+{"version":3,"file":"session_factory.d.ts","sourceRoot":"","sources":["../src/session_factory.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,wBAAwB,GAAG,WAAW,GAAG,iBAAiB,GAAG,KAAK,GAAG,MAAM,CAAC;AAExF,MAAM,MAAM,wBAAwB,GAAG;IACtC,IAAI,CAAC,EAAE,wBAAwB,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,wBAAwB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACvB,SAAS,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;IAC1D,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,cAAc,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE;QAChB,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;CACF,CAAC;AAkCF,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CA2CnF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@femtomc/mu-agent",
-  "version": "26.2.98",
+  "version": "26.2.100",
   "description": "Shared operator runtime for mu assistant sessions and serve extensions.",
   "keywords": [
     "mu",
@@ -24,7 +24,7 @@
     "themes/**"
   ],
   "dependencies": {
-    "@femtomc/mu-core": "26.2.98",
+    "@femtomc/mu-core": "26.2.100",
     "@mariozechner/pi-agent-core": "^0.53.0",
     "@mariozechner/pi-ai": "^0.53.0",
     "@mariozechner/pi-coding-agent": "^0.53.0",

package/prompts/skills/crons/SKILL.md

@@ -0,0 +1,204 @@
+---
+name: crons
+description: "Runs cron-program lifecycle workflows for wall-clock scheduling, recurring automation, and scheduler diagnostics. Use when creating, tuning, or repairing time-based automation."
+---
+
+# crons
+
+Use this skill when the user asks to schedule, inspect, tune, or debug `mu cron` automation.
+
+## Contents
+
+- [Core contract](#core-contract)
+- [Preflight checks](#preflight-checks)
+- [Schedule kinds](#schedule-kinds)
+- [Cron lifecycle workflow](#cron-lifecycle-workflow)
+- [Prompt design for scheduled runs](#prompt-design-for-scheduled-runs)
+- [Diagnostics and recovery](#diagnostics-and-recovery)
+- [Evaluation scenarios](#evaluation-scenarios)
+
+## Core contract
+
+1. **Use explicit schedule semantics**
+   - Choose the right schedule kind (`at`, `every`, or `cron`) instead of overloading one pattern.
+   - Keep schedule intent readable in `title` and `reason` fields.
+
+2. **CLI-first lifecycle control**
+   - Create/update/trigger/enable/disable/delete via `mu cron ...` commands.
+   - Do not hand-edit `cron.jsonl`.
+
+3. **Bounded execution prompts**
+   - Scheduled runs should execute one bounded control-loop pass and exit.
+   - Avoid prompts that imply unbounded autonomous execution.
+
+4. **Read -> mutate -> verify**
+   - Inspect scheduler/program state first.
+   - After changes, re-read and trigger a smoke run.
+
+## Preflight checks
+
+```bash
+mu status --pretty
+mu control status --pretty
+mu control identities --all --pretty
+mu cron stats --pretty
+mu cron list --limit 20 --pretty
+```
+
+If user expects channel delivery, verify linked operator identity for that channel
+before diagnosing cron execution as broken.
+
+## Schedule kinds
+
+1. **One-shot (`at`)**
+   - Run once at an absolute time.
+   - Flags: `--schedule-kind at --at <iso8601>` (or `--at-ms <epoch-ms>`)
+
+2. **Fixed interval (`every`)**
+   - Run repeatedly on fixed millisecond cadence.
+   - Flags: `--schedule-kind every --every-ms <ms>`
+   - Optional alignment: `--anchor-ms <epoch-ms>`
+
+3. **Cron expression (`cron`)**
+   - Run by cron expression.
+   - Flags: `--schedule-kind cron --expr "<cron-expr>" --tz <timezone>`
+
+## Cron lifecycle workflow
+
+### 1) Inspect scheduler and programs
+
+```bash
+mu cron stats --pretty
+mu cron list --limit 20 --pretty
+mu cron get <program-id> --pretty
+```
+
+Use `--json --pretty` for full records.
+
+### 2) Create a cron program
+
+One-shot example:
+
+```bash
+mu cron create \
+  --title "One-shot audit" \
+  --schedule-kind at \
+  --at 2026-02-22T02:00:00Z \
+  --reason oneshot_audit
+```
+
+Fixed interval example:
+
+```bash
+mu cron create \
+  --title "Every 10m check" \
+  --schedule-kind every \
+  --every-ms 600000 \
+  --reason periodic_check
+```
+
+Cron-expression example:
+
+```bash
+mu cron create \
+  --title "Nightly maintenance" \
+  --schedule-kind cron \
+  --expr "0 2 * * *" \
+  --tz UTC \
+  --reason nightly_maintenance
+```
+
+### 3) Update schedule or enablement
+
+```bash
+mu cron update <program-id> --enabled false
+mu cron update <program-id> --schedule-kind every --every-ms 300000
+mu cron update <program-id> --schedule-kind cron --expr "0 3 * * *" --tz UTC
+mu cron enable <program-id>
+mu cron disable <program-id>
+```
+
+### 4) Trigger smoke run
+
+```bash
+mu cron trigger <program-id> --reason smoke_test
+```
+
+Then verify:
+
+```bash
+mu cron get <program-id> --pretty
+mu store tail events --limit 40 --pretty
+mu store tail cp_operator_turns --limit 40 --pretty
+```
+
+### 5) Delete obsolete programs
+
+```bash
+mu cron delete <program-id>
+```
+
+## Prompt design for scheduled runs
+
+Use concise prompts with explicit bounded-pass behavior.
+
+Example:
+
+```text
+Review open issues for root <root-id>. Perform exactly one bounded step:
+select one ready task (or report blocked), apply one action, verify state,
+post concise summary, then exit.
+```
+
+For DAG execution workloads, combine with:
+- `planning`
+- `hierarchical-work-protocol`
+- `subagents`
+- `heartbeats` (for short-cadence wake loops)
+
+## Diagnostics and recovery
+
+When cron automation appears stalled or misfiring:
+
+1. Confirm scheduler + program state:
+
+```bash
+mu cron stats --pretty
+mu cron list --enabled true --limit 50 --pretty
+mu cron get <program-id> --pretty
+```
+
+2. Trigger manually to separate scheduler timing issues from execution issues:
+
+```bash
+mu cron trigger <program-id> --reason manual_recovery_test
+```
+
+3. Inspect runtime evidence:
+
+```bash
+mu store tail events --limit 60 --pretty
+mu store tail cp_operator_turns --limit 60 --pretty
+mu store tail cp_outbox --limit 40 --pretty
+```
+
+4. Apply smallest recovery step:
+- fix schedule-kind/flags mismatch
+- correct timezone (`--tz`)
+- simplify prompt scope
+- toggle enablement (`disable` -> `enable`)
+- relink channel identity if delivery is absent
+
+## Evaluation scenarios
+
+1. **One-shot schedule execution (`at`)**
+   - Setup: `mu cron create --schedule-kind at --at <future-iso>`.
+   - Expected: program executes once, records deterministic status, then does not re-fire.
+
+2. **Interval schedule retune (`every`)**
+   - Setup: active interval schedule at 10m.
+   - Expected: `mu cron update ... --every-ms 300000` changes cadence to 5m without recreating program ID.
+
+3. **Cron expression + timezone correctness**
+   - Setup: cron expression schedule with explicit timezone.
+   - Expected: next-run alignment matches timezone expectations; manual trigger succeeds and logs are auditable.