@geekbeer/minion 2.49.1 → 2.51.1

package/core/config.js

@@ -13,7 +13,6 @@
  * - AGENT_PORT: Port for the local agent server (default: 8080)
  * - MINION_USER: System user running the agent (used to resolve home directory)
  * - REFLECTION_TIME: Daily self-reflection time in HH:MM format (e.g., "03:00")
- * - TIMEZONE: Timezone for reflection schedule (default: "Asia/Tokyo")
  */
 
 const os = require('os')
@@ -92,8 +91,8 @@ const config = {
 
   // Self-reflection schedule (自己反省時間)
   // Daily time to automatically run end-of-day processing (log + memory extraction + session clear)
+  // Time is interpreted in the system's local timezone (set via TZ env var or OS settings)
   REFLECTION_TIME: process.env.REFLECTION_TIME ?? '03:00',  // "HH:MM" format, empty = disabled
-  TIMEZONE: process.env.TIMEZONE || 'Asia/Tokyo',
 }
 
 /**

package/core/lib/reflection-scheduler.js

@@ -2,14 +2,16 @@
  * Reflection Scheduler (自己反省スケジューラ)
  *
  * Built-in server-level scheduler that triggers end-of-day processing
- * (daily log generation + memory extraction + session clear) at a configured time.
+ * (daily log generation + memory extraction) at a configured time.
+ * Chat session is preserved to maintain conversation continuity.
  *
  * Unlike routines (user-deletable), this is a core architectural feature
  * that ensures the minion regularly consolidates its conversation history.
  *
  * Configuration:
  *   REFLECTION_TIME - Time to run daily reflection (format: "HH:MM", e.g., "03:00")
- *   TIMEZONE        - Timezone for the schedule (default: "Asia/Tokyo")
+ *
+ * Time is interpreted in the system's local timezone (set via TZ env var or OS settings).
  *
  * @module core/lib/reflection-scheduler
  */
@@ -42,6 +44,18 @@ function parseToCron(timeStr) {
   return `0 ${minute} ${hour} * * *`
 }
 
+/**
+ * Get the system's local timezone name.
+ * @returns {string} IANA timezone string (e.g., "Asia/Tokyo", "UTC")
+ */
+function getSystemTimezone() {
+  try {
+    return Intl.DateTimeFormat().resolvedOptions().timeZone
+  } catch {
+    return 'UTC'
+  }
+}
+
 /**
  * Start the reflection scheduler.
  * If REFLECTION_TIME is not configured, the scheduler remains inactive.
@@ -63,15 +77,15 @@ function start(runQuickLlmCall) {
     return
   }
 
-  const timezone = config.TIMEZONE || 'Asia/Tokyo'
+  const systemTz = getSystemTimezone()
 
   try {
-    cronJob = new Cron(cronExpr, { timezone }, async () => {
+    cronJob = new Cron(cronExpr, async () => {
       await runReflection()
     })
 
     const nextRun = cronJob.nextRun()
-    console.log(`[ReflectionScheduler] Scheduled at ${reflectionTime} (${timezone}), next run: ${nextRun ? nextRun.toISOString() : 'unknown'}`)
+    console.log(`[ReflectionScheduler] Scheduled at ${reflectionTime} (system timezone: ${systemTz}), next run: ${nextRun ? nextRun.toISOString() : 'unknown'}`)
   } catch (err) {
     console.error(`[ReflectionScheduler] Failed to start: ${err.message}`)
   }
@@ -89,7 +103,7 @@ function stop() {
 }
 
 /**
- * Reschedule after config change (e.g., REFLECTION_TIME or TIMEZONE updated via API).
+ * Reschedule after config change (e.g., REFLECTION_TIME updated via API).
  * Requires that start() was called previously with a runQuickLlmCall function.
  */
 function reschedule() {
@@ -122,7 +136,7 @@ async function runReflection() {
   try {
     const result = await runEndOfDay({
       runQuickLlmCall: llmCallFn,
-      clearSession: true,
+      clearSession: false,
     })
 
     if (result.daily_log) {
@@ -143,13 +157,12 @@ async function runReflection() {
  */
 function getStatus() {
   const reflectionTime = config.REFLECTION_TIME || ''
-  const timezone = config.TIMEZONE || 'Asia/Tokyo'
   const nextRun = cronJob ? cronJob.nextRun() : null
 
   return {
     enabled: !!cronJob,
     reflection_time: reflectionTime,
-    timezone,
+    timezone: getSystemTimezone(),
     next_run: nextRun ? nextRun.toISOString() : null,
   }
 }

package/core/routes/health.js

@@ -51,11 +51,15 @@ async function healthRoutes(fastify) {
 
   // Get current status
   fastify.get('/api/status', async () => {
+    let systemTimezone = 'UTC'
+    try { systemTimezone = Intl.DateTimeFormat().resolvedOptions().timeZone } catch {}
+
     return {
       status: currentStatus,
       current_task: currentTask,
       uptime: process.uptime(),
       version,
+      timezone: systemTimezone,
       timestamp: new Date().toISOString(),
       llm_services: getLlmServices(),
       llm_command_configured: isLlmCommandConfigured(),

package/core/routes/workflows.js

@@ -176,6 +176,7 @@ async function workflowRoutes(fastify, opts) {
           pipeline_skill_names: pipelineSkillNames,
           content: workflow.content || '',
           project_id: effectiveProjectId,
+          ...(workflow.pipeline_steps?.length > 0 && { pipeline_steps: workflow.pipeline_steps }),
         }),
       })
 
@@ -244,6 +245,10 @@ async function workflowRoutes(fastify, opts) {
       const updatedWorkflows = await workflowStore.upsertByName({
         name: workflow.name,
         pipeline_skill_names: workflow.pipeline_skill_names,
+        pipeline_steps: (workflow.pipeline || []).map(step => ({
+          assigned_role: step.assigned_role,
+          requires_review: step.requires_review || false,
+        })),
         content: workflow.content || '',
         project_id: workflow.project_id || null,
       })

package/core/stores/daily-log-store.js

@@ -42,8 +42,8 @@ function isValidDate(date) {
 }
 
 /**
- * List all daily logs with date and file size.
- * @returns {Promise<Array<{ date: string, size: number }>>} Sorted descending by date
+ * List all daily logs with date, file size, and timestamps.
+ * @returns {Promise<Array<{ date: string, size: number, created_at: string, updated_at: string }>>} Sorted descending by date
  */
 async function listLogs() {
   await ensureDir()
@@ -61,7 +61,12 @@ async function listLogs() {
     if (!isValidDate(date)) continue
     try {
       const stat = await fs.stat(path.join(LOGS_DIR, file))
-      logs.push({ date, size: stat.size })
+      logs.push({
+        date,
+        size: stat.size,
+        created_at: stat.birthtime.toISOString(),
+        updated_at: stat.mtime.toISOString(),
+      })
     } catch {
       // Skip unreadable
     }

package/core/stores/workflow-store.js

@@ -82,7 +82,7 @@ async function findByName(name) {
  * Upsert a workflow by name.
  * If exists: updates definition only (preserves schedule/local state).
  * If new: creates with inactive schedule.
- * @param {object} workflowData - { name, pipeline_skill_names, content, project_id }
+ * @param {object} workflowData - { name, pipeline_skill_names, pipeline_steps, content, project_id }
  * @returns {Promise<Array>} Updated workflows array
  */
 async function upsertByName(workflowData) {
@@ -99,11 +99,15 @@ async function upsertByName(workflowData) {
     if (workflowData.project_id !== undefined) {
       workflows[index].project_id = workflowData.project_id
     }
+    if (workflowData.pipeline_steps !== undefined) {
+      workflows[index].pipeline_steps = workflowData.pipeline_steps
+    }
   } else {
     workflows.push({
       id: crypto.randomUUID(),
       name: workflowData.name,
       pipeline_skill_names: workflowData.pipeline_skill_names,
+      pipeline_steps: workflowData.pipeline_steps || [],
       content: workflowData.content || '',
       project_id: workflowData.project_id || null,
       cron_expression: '',

package/docs/api-reference.md

@@ -179,10 +179,11 @@ Configuration via `PUT /api/config/env`:
 
 | Key | Format | Default | Description |
 |-----|--------|---------|-------------|
-| `REFLECTION_TIME` | `HH:MM` | (disabled) | Daily reflection time (e.g., `"03:00"`) |
-| `TIMEZONE` | IANA tz | `Asia/Tokyo` | Timezone for the schedule |
+| `REFLECTION_TIME` | `HH:MM` | `03:00` | Daily reflection time (interpreted in system timezone) |
 
-Example — set reflection at 3:00 AM JST:
+Timezone follows the system setting (Docker: `TZ` env var, VPS: `timedatectl`).
+
+Example — set reflection at 3:00 AM:
 ```bash
 curl -X PUT /api/config/env \
   -H "Authorization: Bearer $TOKEN" \
@@ -201,7 +202,7 @@ Changes via the config API take effect immediately (no restart required).
 | GET | `/api/config/backup` | Download config files as tar.gz |
 | POST | `/api/config/restore` | Restore config from tar.gz |
 
-Allowed keys: `LLM_COMMAND`, `REFLECTION_TIME`, `TIMEZONE`
+Allowed keys: `LLM_COMMAND`, `REFLECTION_TIME`
 
 ### Commands
 
@@ -252,6 +253,64 @@ Response:
 
 PUT body: `{ "content": "markdown string" }`
 
+### Project Variables (PM only)
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| POST | `/api/minion/me/project/[id]/variables/[key]` | プロジェクト変数を設定（upsert） |
+| DELETE | `/api/minion/me/project/[id]/variables/[key]` | プロジェクト変数を削除 |
+
+POST body:
+```json
+{
+  "value": "variable value (max 2000 chars)"
+}
+```
+
+Key format: `/^[A-Za-z_][A-Za-z0-9_]{0,99}$/`（環境変数命名規約）
+
+Response:
+```json
+{
+  "success": true,
+  "key": "MY_VAR",
+  "value": "variable value"
+}
+```
+
+プロジェクト変数はワークフロー実行時に `extra_env` としてミニオンに渡される。
+
+### Workflow Variables (PM only)
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| POST | `/api/minion/me/project/[id]/workflows/[wfId]/variables/[key]` | ワークフロー変数を設定（upsert） |
+| DELETE | `/api/minion/me/project/[id]/workflows/[wfId]/variables/[key]` | ワークフロー変数を削除 |
+
+POST body:
+```json
+{
+  "value": "variable value (max 2000 chars)"
+}
+```
+
+Key format: `/^[A-Za-z_][A-Za-z0-9_]{0,99}$/`
+
+Response:
+```json
+{
+  "success": true,
+  "key": "MY_VAR",
+  "value": "variable value"
+}
+```
+
+ワークフロー変数はプロジェクト変数を上書きする（同名キーの場合）。実行時のマージ順序:
+1. ミニオンローカル変数
+2. ミニオンシークレット
+3. プロジェクト変数
+4. ワークフロー変数（最優先）
+
 ### Workflows (project-scoped, versioned)
 
 | Method | Endpoint | Description |

package/docs/task-guides.md

@@ -20,13 +20,28 @@ SKILL.md フォーマット:
 ```markdown
 ---
 name: my-skill
-display_name: My Skill
 description: What this skill does
+requires:
+  mcp_servers: [playwright, supabase]
+  cli_tools: [git, node]
 ---
 
 Skill instructions here...
 ```
 
+フロントマターのフィールド:
+
+| Field | Required | Description |
+|-------|----------|-------------|
+| `name` | Yes | スキル識別子（小文字・ハイフン・数字） |
+| `description` | Yes | スキルの説明 |
+| `requires` | No | 実行に必要な依存関係 |
+| `requires.mcp_servers` | No | 必要な MCP サーバー名のリスト |
+| `requires.cli_tools` | No | 必要な CLI ツール名のリスト |
+
+`requires` を宣言すると、ワークフロー実行前にミニオンの環境と照合する事前チェック（readiness check）が行われる。
+未宣言の場合は常に実行可能と見なされる。
+
 ### 2. HQ に反映する
 
 ```bash

package/linux/minion-cli.sh

@@ -308,19 +308,6 @@ do_setup() {
   ENV_CONTENT+="MINION_USER=${TARGET_USER}\n"
   ENV_CONTENT+="REFLECTION_TIME=03:00\n"
 
-  # Detect system timezone (IANA format)
-  local SYS_TZ=""
-  if command -v timedatectl &>/dev/null; then
-    SYS_TZ=$(timedatectl show --property=Timezone --value 2>/dev/null || true)
-  fi
-  if [ -z "$SYS_TZ" ] && [ -f /etc/timezone ]; then
-    SYS_TZ=$(cat /etc/timezone 2>/dev/null | tr -d '[:space:]')
-  fi
-  if [ -z "$SYS_TZ" ] && [ -L /etc/localtime ]; then
-    SYS_TZ=$(readlink /etc/localtime | sed 's|.*/zoneinfo/||')
-  fi
-  ENV_CONTENT+="TIMEZONE=${SYS_TZ:-Asia/Tokyo}\n"
-
   echo -e "$ENV_CONTENT" | $SUDO tee /opt/minion-agent/.env > /dev/null
   $SUDO chown "${TARGET_USER}:${TARGET_USER}" /opt/minion-agent/.env
   echo "  -> /opt/minion-agent/.env generated"

package/linux/routes/chat.js

@@ -22,9 +22,8 @@ const path = require('path')
 const { verifyToken } = require('../../core/lib/auth')
 const { config } = require('../../core/config')
 const chatStore = require('../../core/stores/chat-store')
-const memoryStore = require('../../core/stores/memory-store')
-const dailyLogStore = require('../../core/stores/daily-log-store')
 const { runEndOfDay } = require('../../core/lib/end-of-day')
+const { DATA_DIR } = require('../../core/lib/platform')
 
 /** @type {import('child_process').ChildProcess | null} */
 let activeChatChild = null
@@ -205,21 +204,24 @@ async function chatRoutes(fastify) {
 async function buildContextPrefix(message, context, sessionId) {
   const parts = []
 
-  // Inject memory + daily logs on new sessions only (not on --resume)
+  // Tell the LLM where to find memory and daily logs (content is NOT injected)
   if (!sessionId) {
-    try {
-      const memorySnippet = await memoryStore.getContextSnippet(2000)
-      const dailyLogSnippet = await dailyLogStore.getContextSnippet(3, 1500)
-
-      if (memorySnippet) {
-        parts.push('[ミニオンメモリ（長期記憶）]', memorySnippet, '')
-      }
-      if (dailyLogSnippet) {
-        parts.push('[最近のデイリーログ]', dailyLogSnippet, '')
-      }
-    } catch (err) {
-      console.error('[Chat] Failed to load memory/daily-log context:', err.message)
-    }
+    const memoryDir = require('path').join(DATA_DIR, 'memory')
+    const dailyLogDir = require('path').join(DATA_DIR, 'daily-logs')
+    parts.push(
+      '[長期記憶・デイリーログについて]',
+      'あなたには長期記憶（メモリ）とデイリーログがあります。内容は毎回読み込まれません。',
+      '必要なときだけ以下のファイルを読んで参照してください：',
+      `- メモリ索引: ${memoryDir}/MEMORY.md（概要一覧。詳細は個別の .md ファイルを読む）`,
+      `- デイリーログ: ${dailyLogDir}/YYYY-MM-DD.md（日付別の作業記録）`,
+      '',
+      '参照すべきタイミング:',
+      '- 過去の作業や決定事項を思い出す必要があるとき',
+      '- ユーザーの好みやフィードバックを確認したいとき',
+      '- 以前の作業の続きをするとき',
+      '- わからないことがあり、過去に記録した情報が役立ちそうなとき',
+      ''
+    )
   }
 
   if (context) {

package/linux/routes/config.js

@@ -18,10 +18,10 @@ const { resolveEnvFilePath: resolveEnvFilePathFromPlatform } = require('../../co
 const reflectionScheduler = require('../../core/lib/reflection-scheduler')
 
 /** Keys that can be read/written via the config API */
-const ALLOWED_ENV_KEYS = ['LLM_COMMAND', 'REFLECTION_TIME', 'TIMEZONE']
+const ALLOWED_ENV_KEYS = ['LLM_COMMAND', 'REFLECTION_TIME']
 
 /** Keys that trigger a reflection scheduler reschedule when changed */
-const REFLECTION_KEYS = ['REFLECTION_TIME', 'TIMEZONE']
+const REFLECTION_KEYS = ['REFLECTION_TIME']
 
 const BACKUP_PATHS = [
   '~/.claude',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekbeer/minion",
-  "version": "2.49.1",
+  "version": "2.51.1",
   "description": "AI Agent runtime for Minion - manages status and skill deployment on VPS",
   "main": "linux/server.js",
   "bin": {

package/win/lib/process-manager.js

@@ -52,7 +52,7 @@ function detectProcessManager() {
  * @param {string} npmInstallCmd - The npm install command to run
  * @param {string} stopCmd - Command/script block to stop the agent
  * @param {string} startCmd - Command/script block to start the agent
- * @returns {string} - Shell command that writes and launches the update script
+ * @returns {string} - Path to the generated update script (.ps1)
  */
 function buildUpdateScript(npmInstallCmd, stopCmd, startCmd) {
   const dataDir = path.join(os.homedir(), '.minion')
@@ -83,11 +83,13 @@ function buildUpdateScript(npmInstallCmd, stopCmd, startCmd) {
     `}`,
   ].join('\n')
 
-  // Write the script to disk and launch it detached
+  // Write the script to disk
   try { fs.mkdirSync(dataDir, { recursive: true }) } catch { /* exists */ }
   fs.writeFileSync(scriptPath, ps1, 'utf-8')
 
-  return `powershell -ExecutionPolicy Bypass -Command "Start-Process powershell -ArgumentList '-ExecutionPolicy Bypass -WindowStyle Hidden -File \\"${scriptPath}\\"' -WindowStyle Hidden"`
+  // Return script path — caller uses spawn() with detached:true to launch it,
+  // avoiding cmd.exe quoting issues and -WindowStyle Hidden hangs in non-interactive sessions.
+  return scriptPath
 }
 
 /**
@@ -113,20 +115,20 @@ function buildAllowedCommands(procMgr) {
     }
     commands['update-agent'] = {
       description: 'Update @geekbeer/minion to latest version and restart',
-      command: buildUpdateScript(
+      spawnArgs: ['powershell', ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', buildUpdateScript(
         'npm install -g @geekbeer/minion@latest',
         stopBlock,
         startBlock,
-      ),
+      )]],
       deferred: true,
     }
     commands['update-agent-dev'] = {
       description: 'Update @geekbeer/minion from Verdaccio (dev) and restart',
-      command: buildUpdateScript(
+      spawnArgs: ['powershell', ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', buildUpdateScript(
         'npm install -g @geekbeer/minion@latest --registry http://verdaccio:4873',
         stopBlock,
         startBlock,
-      ),
+      )]],
       deferred: true,
     }
     commands['status-services'] = {
@@ -141,20 +143,20 @@ function buildAllowedCommands(procMgr) {
     }
     commands['update-agent'] = {
       description: 'Update @geekbeer/minion to latest version and restart',
-      command: buildUpdateScript(
+      spawnArgs: ['powershell', ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', buildUpdateScript(
         'npm install -g @geekbeer/minion@latest',
         'nssm stop minion-agent',
         'nssm start minion-agent',
-      ),
+      )]],
       deferred: true,
     }
     commands['update-agent-dev'] = {
       description: 'Update @geekbeer/minion from Verdaccio (dev) and restart',
-      command: buildUpdateScript(
+      spawnArgs: ['powershell', ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', buildUpdateScript(
         'npm install -g @geekbeer/minion@latest --registry http://verdaccio:4873',
         'nssm stop minion-agent',
         'nssm start minion-agent',
-      ),
+      )]],
       deferred: true,
     }
     commands['restart-display'] = {
@@ -173,20 +175,20 @@ function buildAllowedCommands(procMgr) {
     }
     commands['update-agent'] = {
       description: 'Update @geekbeer/minion to latest version and restart',
-      command: buildUpdateScript(
+      spawnArgs: ['powershell', ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', buildUpdateScript(
         'npm install -g @geekbeer/minion@latest',
         'net stop minion-agent',
         'net start minion-agent',
-      ),
+      )]],
       deferred: true,
     }
     commands['update-agent-dev'] = {
       description: 'Update @geekbeer/minion from Verdaccio (dev) and restart',
-      command: buildUpdateScript(
+      spawnArgs: ['powershell', ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', buildUpdateScript(
         'npm install -g @geekbeer/minion@latest --registry http://verdaccio:4873',
         'net stop minion-agent',
         'net start minion-agent',
-      ),
+      )]],
       deferred: true,
     }
     commands['status-services'] = {

package/win/minion-cli.ps1

@@ -390,17 +390,10 @@ function Invoke-Setup {
     Write-Step 4 $totalSteps "Creating config directory and .env..."
     New-Item -Path $DataDir -ItemType Directory -Force | Out-Null
     New-Item -Path $LogDir -ItemType Directory -Force | Out-Null
-    # Detect system timezone (IANA format)
-    $sysTz = 'Asia/Tokyo'
-    try {
-        $tzInfo = Get-TimeZone
-        if ($tzInfo.Id) { $sysTz = $tzInfo.Id }
-    } catch {}
     $envValues = @{
         'AGENT_PORT'         = '8080'
         'MINION_USER'        = $env:USERNAME
         'REFLECTION_TIME'    = '03:00'
-        'TIMEZONE'           = $sysTz
     }
     if ($HqUrl) { $envValues['HQ_URL'] = $HqUrl }
     if ($ApiToken) { $envValues['API_TOKEN'] = $ApiToken }

package/win/routes/chat.js

@@ -18,9 +18,7 @@ const path = require('path')
 const { verifyToken } = require('../../core/lib/auth')
 const { config } = require('../../core/config')
 const chatStore = require('../../core/stores/chat-store')
-const memoryStore = require('../../core/stores/memory-store')
-const dailyLogStore = require('../../core/stores/daily-log-store')
-const { buildExtendedPath } = require('../../core/lib/platform')
+const { buildExtendedPath, DATA_DIR } = require('../../core/lib/platform')
 const { runEndOfDay } = require('../../core/lib/end-of-day')
 
 let activeChatChild = null
@@ -168,21 +166,24 @@ async function chatRoutes(fastify) {
 async function buildContextPrefix(message, context, sessionId) {
   const parts = []
 
-  // Inject memory + daily logs on new sessions only (not on --resume)
+  // Tell the LLM where to find memory and daily logs (content is NOT injected)
   if (!sessionId) {
-    try {
-      const memorySnippet = await memoryStore.getContextSnippet(2000)
-      const dailyLogSnippet = await dailyLogStore.getContextSnippet(3, 1500)
-
-      if (memorySnippet) {
-        parts.push('[ミニオンメモリ（長期記憶）]', memorySnippet, '')
-      }
-      if (dailyLogSnippet) {
-        parts.push('[最近のデイリーログ]', dailyLogSnippet, '')
-      }
-    } catch (err) {
-      console.error('[Chat] Failed to load memory/daily-log context:', err.message)
-    }
+    const memoryDir = require('path').join(DATA_DIR, 'memory')
+    const dailyLogDir = require('path').join(DATA_DIR, 'daily-logs')
+    parts.push(
+      '[長期記憶・デイリーログについて]',
+      'あなたには長期記憶（メモリ）とデイリーログがあります。内容は毎回読み込まれません。',
+      '必要なときだけ以下のファイルを読んで参照してください：',
+      `- メモリ索引: ${memoryDir}/MEMORY.md（概要一覧。詳細は個別の .md ファイルを読む）`,
+      `- デイリーログ: ${dailyLogDir}/YYYY-MM-DD.md（日付別の作業記録）`,
+      '',
+      '参照すべきタイミング:',
+      '- 過去の作業や決定事項を思い出す必要があるとき',
+      '- ユーザーの好みやフィードバックを確認したいとき',
+      '- 以前の作業の続きをするとき',
+      '- わからないことがあり、過去に記録した情報が役立ちそうなとき',
+      ''
+    )
   }
 
   if (context) {

package/win/routes/commands.js

@@ -4,7 +4,7 @@
  * Same API as routes/commands.js but uses win/process-manager.js
  */
 
-const { exec } = require('child_process')
+const { exec, spawn } = require('child_process')
 const { promisify } = require('util')
 const execAsync = promisify(exec)
 
@@ -55,10 +55,28 @@ async function commandRoutes(fastify) {
     if (allowedCommand.deferred) {
       console.log(`[Command] Scheduling deferred command: ${command}`)
       setTimeout(() => {
-        exec(allowedCommand.command, { timeout: 60000, shell: true }, (err) => {
-          if (err) console.error(`[Command] Deferred command failed: ${command} - ${err.message}`)
-          else console.log(`[Command] Deferred command completed: ${command}`)
-        })
+        if (allowedCommand.spawnArgs) {
+          // Use spawn with detached:true for update scripts.
+          // Avoids cmd.exe quoting issues and -WindowStyle Hidden hangs
+          // in non-interactive sessions that caused HQ update timeouts.
+          const [cmd, args] = allowedCommand.spawnArgs
+          try {
+            const child = spawn(cmd, args, {
+              detached: true,
+              stdio: 'ignore',
+              windowsHide: true,
+            })
+            child.unref()
+            console.log(`[Command] Deferred command spawned: ${command} (pid: ${child.pid})`)
+          } catch (err) {
+            console.error(`[Command] Deferred spawn failed: ${command} - ${err.message}`)
+          }
+        } else {
+          exec(allowedCommand.command, { timeout: 60000, shell: true }, (err) => {
+            if (err) console.error(`[Command] Deferred command failed: ${command} - ${err.message}`)
+            else console.log(`[Command] Deferred command completed: ${command}`)
+          })
+        }
       }, 1000)
 
       return {

package/win/routes/config.js

@@ -15,10 +15,10 @@ const { resolveEnvFilePath } = require('../../core/lib/platform')
 
 const reflectionScheduler = require('../../core/lib/reflection-scheduler')
 
-const ALLOWED_ENV_KEYS = ['LLM_COMMAND', 'REFLECTION_TIME', 'TIMEZONE']
+const ALLOWED_ENV_KEYS = ['LLM_COMMAND', 'REFLECTION_TIME']
 
 /** Keys that trigger a reflection scheduler reschedule when changed */
-const REFLECTION_KEYS = ['REFLECTION_TIME', 'TIMEZONE']
+const REFLECTION_KEYS = ['REFLECTION_TIME']
 
 const BACKUP_PATHS = [
   '~/.claude',