@skrr-ai/cli 0.1.133 → 0.1.135

package/dist/base-command.d.ts

@@ -479,6 +479,7 @@ export declare abstract class BaseCommand extends Command {
      * bug (2026-09-18).
      */
     private lastApiRequestId?;
+    private jsonErrorWritten;
     /** E6: the server's `Retry-After` for the refused call, when it was a 429. */
     private lastRetryAfterMs?;
     private writeJsonCliError;

package/dist/base-command.js

@@ -1352,6 +1352,13 @@ class BaseCommand extends core_1.Command {
     }
     async catch(err) {
         if (isOclifExitError(err)) {
+            // oclif's default ExitError handler calls process.exit immediately.
+            // A JSON error already written to a pipe may still be buffered, so let
+            // Node drain stdout naturally while preserving the requested exit code.
+            if (this.jsonErrorWritten) {
+                process.exitCode = err.oclif?.exit ?? 1;
+                return;
+            }
             return super.catch(err);
         }
         // Canonical Task Model v1 removed several `tasks complete` flags outright,
@@ -2155,6 +2162,7 @@ class BaseCommand extends core_1.Command {
      * bug (2026-09-18).
      */
     lastApiRequestId;
+    jsonErrorWritten = false;
     /** E6: the server's `Retry-After` for the refused call, when it was a 429. */
     lastRetryAfterMs;
     writeJsonCliError({ message, code, status, exit, retryable, details, requestId, }) {
@@ -2182,6 +2190,7 @@ class BaseCommand extends core_1.Command {
                 ...(details ? { details } : {}),
             },
         }), null, 2));
+        this.jsonErrorWritten = true;
         this.exit(exit);
     }
     /**

package/dist/commands/agent/message/send.js

@@ -133,7 +133,7 @@ class AgentMessageSend extends base_command_1.BaseCommand {
             description: 'Path to a canonical intent JSON payload, or "-" for stdin',
         }),
         'idempotency-key': core_1.Flags.string({
-            description: 'Stable retry key for this intent; auto-derived when omitted',
+            description: 'Stable retry key; overrides the key in --from-json, or is auto-derived when neither is supplied',
         }),
         kind: core_1.Flags.string({
             description: 'Semantic kind; prefer milestone, status, decision, blocker, or result (legacy progress/question accepted)',

package/dist/commands/agents/schedule-trace.js

@@ -113,6 +113,7 @@ class AgentsScheduleTrace extends base_command_1.BaseCommand {
             { key: 'status', header: 'STATUS' },
             { key: 'summary', header: 'SUMMARY', maxWidth: 48 },
         ], (line) => this.log(line));
+        (0, schedule_1.renderTodoPolicyTraceDetails)(events, (line) => this.log(line));
         // Which collection each column came from — the trace reconciles four
         // sources and the reader should be able to go check one.
         if (trace.sourcePolicy) {

package/dist/commands/commitments/create.d.ts

@@ -1,5 +1,7 @@
 import { BaseCommand } from '../../base-command';
 import { type AgentGuidePointer } from '../../lib/guide-pointer';
+/** Do not silently discard a JSON source's scope or event filters. */
+export declare function applyWatchedSourceFlags(payload: Record<string, unknown>, built: Array<Record<string, unknown>> | undefined): void;
 /**
  * True only when the authored create body can materialize at least one event
  * binding. A polling-only source must not make `--event-driven` look successful

package/dist/commands/commitments/create.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyWatchedSourceFlags = applyWatchedSourceFlags;
 exports.hasEventCapableWatchedSource = hasEventCapableWatchedSource;
 exports.assertEventDrivenWatchedSource = assertEventDrivenWatchedSource;
 exports.createCadenceFromFlags = createCadenceFromFlags;
@@ -36,6 +37,17 @@ function configuredId(config, ...keys) {
         return typeof value === 'string' && value.trim().length > 0;
     });
 }
+/** Do not silently discard a JSON source's scope or event filters. */
+function applyWatchedSourceFlags(payload, built) {
+    if (!built)
+        return;
+    if (payload.watchedSources !== undefined) {
+        throw new Error('Cannot combine watchedSources in --from-json with watched-source flags: ' +
+            'the flags would replace the entire JSON list, including its filters. ' +
+            'Remove watchedSources from the JSON to use flags, or remove the watched-source flags to keep the JSON.');
+    }
+    payload.watchedSources = built;
+}
 function hasStructurallyValidExplicitEvent(config) {
     const events = config?.events;
     if (!Array.isArray(events))
@@ -456,8 +468,7 @@ JSON
                 githubEvents: (0, triggers_1.splitRepeated)(flags['github-event']),
                 githubRepository: flags.repo,
             });
-            if (built)
-                payload.watchedSources = built;
+            applyWatchedSourceFlags(payload, built);
             const cadence = createCadenceFromFlags({
                 eventDriven: flags['event-driven'],
                 cadence: flags.cadence,

package/dist/commands/memory/maintain.js

@@ -38,15 +38,31 @@ class MemoryMaintain extends base_command_1.BaseCommand {
             this.error('input must be a JSON object');
         }
         let result;
+        // Keep stdout machine-readable for --json; progress goes only to stderr.
+        const waiting = args.operation === 'remember' ? setTimeout(() => {
+            process.stderr.write('Still waiting for the memory save; the result is not confirmed yet.\n');
+        }, 4000) : null;
+        waiting?.unref();
         try {
             if (args.operation === 'remember')
-                result = await data_provider_1.dataService.rememberAgentMemory(flags.agent, input);
+                result = await data_provider_1.dataService.rememberAgentMemory(flags.agent, input, { timeoutMs: 60000 });
             else
                 result = await data_provider_1.dataService.maintainAgentMemory(flags.agent, args.operation, input);
         }
         catch (error) {
+            const e = error;
+            const status = e?.status ?? e?.response?.status;
+            const transportLost = ['ECONNABORTED', 'ETIMEDOUT', 'ECONNRESET', 'EPIPE', 'ERR_NETWORK', 'ECONNREFUSED', 'EAI_AGAIN'].includes(e?.code || '') ||
+                e?.name === 'TimeoutError' || /fetch failed|socket hang up|network error|timed out|timeout/i.test(e?.message || '');
+            if (args.operation === 'remember' && ((status !== undefined && status >= 500) || (!status && transportLost))) {
+                this.error('The memory save was not confirmed. It may have succeeded; check the Agent’s Memory or retry the exact same command.', { code: 'MEMORY_OUTCOME_UNKNOWN' });
+            }
             this.handleApiError(error);
         }
+        finally {
+            if (waiting)
+                clearTimeout(waiting);
+        }
         if (flags.json)
             this.log(this.agentJson(flags.agent, result));
         else {

package/dist/commands/memory/search.js

@@ -6,7 +6,7 @@ const scoped_memory_command_1 = require("../../lib/scoped-memory-command");
 const format_1 = require("../../lib/format");
 const memory_scope_1 = require("../../lib/memory-scope");
 class MemorySearch extends scoped_memory_command_1.ScopedMemoryCommand {
-    static description = 'Semantic (hybrid vector + text) search over a memory pool — the same ranking the agent sees';
+    static description = 'Search a compatibility memory pool, or specify --scope or --store for canonical Memory';
     static examples = [
         '<%= config.bin %> memory search "dark mode preference"',
         '<%= config.bin %> memory search "billing" --agent agent_abc123',
@@ -68,13 +68,18 @@ class MemorySearch extends scoped_memory_command_1.ScopedMemoryCommand {
         catch (err) {
             this.handleApiError(err);
         }
+        const canonicalHint = flags.agent
+            ? 'Canonical Agent Memory is separate. Search with the same --agent and --scope agent:<agent-id>.'
+            : 'This is a compatibility pool. Search canonical Memory with --agent and --scope agent:<agent-id> or space:<space-id>.';
         if (flags.json) {
-            this.log(JSON.stringify(response, null, 2));
+            this.log(JSON.stringify({ ...response, memorySource: 'compatibility_pool', canonicalSearchHint: canonicalHint }, null, 2));
             return;
         }
         const results = response.results ?? [];
+        this.log('Compatibility-pool memory search:');
+        this.log(canonicalHint);
         if (results.length === 0) {
-            this.log(`No memories matched "${args.query}".`);
+            this.log(`No compatibility-pool memories matched "${args.query}".`);
             return;
         }
         const rows = results.map((r) => ({

package/dist/commands/memory/versions/show.js

@@ -12,7 +12,9 @@ class MemoryVersionsShow extends scoped_memory_command_1.ScopedMemoryCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(MemoryVersionsShow);
         const result = await this.memoryHistoryApi(flags, { versionId: args.id });
-        this.print(result, flags.json, `${result.id}  ${result.operation}\n${JSON.stringify(result.payloadSnapshot, null, 2)}`);
+        this.print(result, flags.json, `${result.id}  ${result.operation}\n${JSON.stringify(result.payloadSnapshot, null, 2)}${result.projection?.kind === 'legacy_episode_omitted'
+            ? '\nAn invalid historical episode reference was omitted; the content hash identifies the original stored payload.'
+            : ''}`);
     }
 }
 exports.default = MemoryVersionsShow;

package/dist/commands/triggers/authorization.d.ts

@@ -0,0 +1,14 @@
+import { BaseCommand } from '../../base-command';
+export default class TriggersAuthorization extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        revoke: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        restore: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/triggers/authorization.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../base-command");
+const triggers_1 = require("../../lib/triggers");
+class TriggersAuthorization extends base_command_1.BaseCommand {
+    static description = 'Revoke or restore a trigger’s user-directed authorization grant';
+    static examples = [
+        '<%= config.bin %> triggers authorization <trigger-id> --revoke',
+        '<%= config.bin %> triggers authorization <trigger-id> --restore --json',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Trigger ID', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        revoke: core_1.Flags.boolean({ description: 'Withdraw the existing grant', exclusive: ['restore'] }),
+        restore: core_1.Flags.boolean({ description: 'Restore the existing grant', exclusive: ['revoke'] }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(TriggersAuthorization);
+        if (!flags.revoke && !flags.restore) {
+            this.failWithCliError({
+                message: 'Choose --revoke or --restore for the existing authorization grant.',
+                code: 'AUTHORIZATION_ACTION_REQUIRED',
+                exit: 2,
+                retryable: false,
+            });
+        }
+        let result;
+        try {
+            result = await triggers_1.triggerApi.setAuthorizationRevoked(args.id, flags.revoke === true);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        if (flags.json) {
+            this.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        this.log(flags.revoke ? 'Authorization revoked.' : 'Authorization restored.');
+    }
+}
+exports.default = TriggersAuthorization;

package/dist/commands/triggers/create.d.ts

@@ -78,6 +78,7 @@ export default class TriggersCreate extends BaseCommand {
         'allow-unknown-event': import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
+    private warnMissingSelfSchedule;
     /**
      * The server creates the trigger and then says whether something already
      * watches the same thing. Printed AFTER the summary, and the sentence itself

package/dist/commands/triggers/create.js

@@ -324,6 +324,7 @@ class TriggersCreate extends base_command_1.BaseCommand {
         }
         if (trigger.dryRun) {
             this.log('Trigger accepted by dry run.');
+            this.warnMissingSelfSchedule(trigger);
             return;
         }
         this.log('Created trigger:');
@@ -331,6 +332,15 @@ class TriggersCreate extends base_command_1.BaseCommand {
         if (url)
             this.log(`View it at ${url}`);
         this.warnDuplicateSubscriptions(trigger);
+        this.warnMissingSelfSchedule(trigger);
+    }
+    warnMissingSelfSchedule(trigger) {
+        const warnings = trigger?.warnings;
+        if (!Array.isArray(warnings))
+            return;
+        const warning = warnings.find((item) => item && typeof item === 'object' && item.code === 'self_scheduled_without_next_run');
+        if (typeof warning?.message === 'string')
+            this.warn(warning.message);
     }
     /**
      * The server creates the trigger and then says whether something already

package/dist/commands/triggers/fire-detail.js

@@ -29,6 +29,23 @@ function describeFireAuditDetail(detail, fireId, triggerId) {
         lines.push(`Duration:     ${String(detail.durationMs)}ms`);
     if (detail.conversationId)
         lines.push(`Conversation: ${String(detail.conversationId)}`);
+    const metadata = detail.metadata;
+    if (metadata && typeof metadata === 'object' && !Array.isArray(metadata)) {
+        const record = metadata;
+        if (record.recordKind === 'schedule_end_marker') {
+            lines.push('Note:         Schedule ended after the prior fire; this is not another occurrence.');
+            if (typeof record.afterOccurrenceId === 'string')
+                lines.push(`After fire:   ${record.afterOccurrenceId}`);
+        }
+        const debounce = record.debounce;
+        if (debounce && typeof debounce === 'object' && !Array.isArray(debounce)) {
+            const { retryAt, windowMs } = debounce;
+            if (typeof retryAt === 'string' && retryAt.trim())
+                lines.push(`Retry at:     ${retryAt}`);
+            if (typeof windowMs === 'number' && Number.isFinite(windowMs))
+                lines.push(`Debounce:     ${windowMs}ms`);
+        }
+    }
     // Tool calls refused during a turn that was delivered: `triggers show` points here for the facts.
     lines.push(...(0, triggers_1.fireRefusalLines)(detail.metadata));
     return lines;

package/dist/commands/triggers/prune.js

@@ -80,8 +80,18 @@ class TriggersPrune extends base_command_1.BaseCommand {
         // number that sizes the sweep, and `perUser` the cap it frees.
         const reclaimable = ownerWide ? quota.perUserReclaimable : quota.reclaimable;
         if (flags['dry-run']) {
+            let preview;
+            try {
+                preview = await triggers_1.triggerApi.prunePreview({
+                    ...target,
+                    ...(flags.limit ? { limit: flags.limit } : {}),
+                });
+            }
+            catch (err) {
+                this.handleApiError(err);
+            }
             if (flags.json) {
-                this.log(JSON.stringify({ dryRun: true, ownerWide, wouldDelete: reclaimable, quota }, null, 2));
+                this.log(JSON.stringify({ ...preview, quota }, null, 2));
                 return;
             }
             if (ownerWide) {
@@ -92,9 +102,11 @@ class TriggersPrune extends base_command_1.BaseCommand {
                 this.log(`Scope:       ${quota.scopeKind}`);
                 this.log(`Active:      ${quota.active} / ${quota.limit} (${quota.remaining} free)`);
             }
-            this.log(`Reclaimable: ${reclaimable} disabled trigger(s)`);
+            this.log(`Would delete: ${preview.wouldDelete} disabled trigger(s)`);
+            for (const id of preview.ids)
+                this.log(`  ${id}`);
             this.log('');
-            this.log('Dry run — nothing was deleted.');
+            this.log('Dry run — nothing was deleted. Candidates can change before pruning.');
             return;
         }
         if (reclaimable === 0) {

package/dist/generated/agent-guides.json

@@ -454,7 +454,7 @@
                         "id": "speaking",
                         "title": "A Commitment finds; its Agent speaks",
                         "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                        "tokens": 301,
+                        "tokens": 320,
                         "aliases": [],
                         "explains": []
                     },
@@ -681,7 +681,7 @@
                         "id": "idempotency-keys",
                         "title": "Idempotency keys",
                         "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                        "tokens": 202,
+                        "tokens": 230,
                         "aliases": [],
                         "explains": [
                             "idempotency_conflict"
@@ -709,7 +709,7 @@
                 ]
             }
         ],
-        "hash": "74f6b87c1bd1f851fbfe0b1ee5da04425d1b6fdafbf55445a39e121af9c4e65b",
+        "hash": "f49e16e088923137a5c6c8bd98891defefe0536246e03b3e5cc92ee4ea4e9eaf",
         "tokens": 545
     },
     "routedIndex": {
@@ -1167,7 +1167,7 @@
                         "id": "speaking",
                         "title": "A Commitment finds; its Agent speaks",
                         "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                        "tokens": 301,
+                        "tokens": 320,
                         "aliases": [],
                         "explains": []
                     },
@@ -1353,7 +1353,7 @@
                 ]
             }
         ],
-        "hash": "6960740319e60127c5a1007fd32e77afada0b14442b5f6fb810a7fee1407cb63",
+        "hash": "4981bf36d26a2768a45f209069e94372c0da86cc8658b706c3c77915fe5b5356",
         "tokens": 494
     },
     "cards": {
@@ -1747,7 +1747,7 @@
             "routed": true,
             "aliases": [],
             "body": "## Concept model\n\n| Noun | Question it answers |\n| --- | --- |\n| **Compass** | What does good look like for this Agent, and what may it never trade away? |\n| **Northstar** | Which Commitments should exist, at what priority and on what budget? |\n| **Commitment** | Which outcome does this Agent keep true, and how does it keep checking? |\n| **Check** | What did one wake of a Commitment see, decide and do? |\n\nA Commitment is not a unit of work. A **Task** is one unit of work and a **Goal** is a dated\noutcome with key results; a Commitment watches both and may create Tasks, and is neither.\n\n## Decide\n\nFive mechanisms make something happen later, and the noun alone does not pick one:\n\n| Mechanism | What it is for | The signal that picks it |\n| --- | --- | --- |\n| **Follow-up** | Coming back to one thing, once or a bounded few times: a reminder, a watch, a check-in, an agreed action | The ask ends: \"look tomorrow\", \"tell me when CI is green\" |\n| **Trigger** | Running the Agent with a set prompt on a schedule, an event, once, or on demand | The person names when, and every run does the same work |\n| **Heartbeat** | Checking in on a conversation, group chat or Space at a frequency that backs off while unread | The person wants regular contact, not an outcome held |\n| **Commitment** | Keeping an outcome true: watched sources, a cadence and a loop that decides when to act | \"Keep X true\", \"watch this metric\": no end, and stale evidence matters |\n| **Workflow** | Running a durable graph of Tasks in order | Repeatable work whose steps depend on each other |\n\nA one-off \"look at it tomorrow\" is a follow-up, never a Commitment. Standing observation is a\nCommitment with a freshness contract, not a recurring trigger or a task board left running.\n\n## Workflow\n\n### Start a Commitment\n\n1. Read the Agent's Commitments first, and change one rather than add a near-duplicate.\n2. Create it and turn it on in one call: the outcome, what it watches, how often it checks, where\n   its work goes. Turning it on runs Preflight; a refusal keeps the draft and reports the code,\n   reason and fix.\n3. Leave it a draft only when the person asked to see it first.\n4. Read it back, and tell the person what it watches, how often, and whether it is on.\n\n## Authority\n\n| Actor | May do | Only a person may do |\n| --- | --- | --- |\n| Agent | Read the Commitments of an Agent it can view; create one, change it and turn it on; request a check; pause one; decide whether a finding is worth telling the owner | Lift a stop a person made; set or clear a concurrency limit; choose the Task review policy; approve an action proposal or a cadence change; configure a Northstar's governance or decide its intents |\n| Person | Everything in both columns | — |\n\nA Commitment grants no permission: its runs work under the Agent's own. A Check never writes an\nowner-facing message, and a Compass never creates, rewrites, pauses or archives a Commitment. The\nserver cannot always tell an Agent from the person whose login it holds, so an accepted call is\nnot permission: the right-hand column stays a person's.\n\n## Live state\n\n- `skrr commitments list --agent <agent-id>` — an Agent's Commitments, with status and assessment.\n- `skrr commitments show <commitment-id>` — the contract, its next check and the last one.\n- `skrr commitments roster --agent <agent-id>` — each loop: whether it is armed, its next wake, runs today.\n\n## Related guides\n\n- `tasks` — the Tasks a Commitment creates or watches.\n- `spaces` — Goals, and Workflows: durable graphs of Tasks.\n- `agents` — the Agent a Commitment belongs to, and where its runs execute.\n- `communication` — whether, what and how to tell the owner.",
-            "hash": "197d9b84d1a4367ecf4b7a51687604d13814ec9e9265fe662883278a7738d2fa",
+            "hash": "d9bbb541c0b955254d9795d98c26c1e7f075c98c5169c16574c457fde87fcec3",
             "tokens": 1169,
             "sections": [
                 {
@@ -1824,7 +1824,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -2027,7 +2027,7 @@
             "routed": false,
             "aliases": [],
             "body": "## Concept model\n\nAn **Agent Update** is a deliberate owner-facing message. It is conversation, not\nrecord: what durably changed belongs to the work's own records, and the message\npoints at it.\n\n## Agent Updates\n\nProactively message the owner whenever it would improve their ability to steer the work, understand\na meaningful change, or stay confidently involved. Adapt to the task, uncertainty and stakes, the\nuser's engagement, what you have already communicated, and any per-agent style direction. Do not\nfollow a fixed schedule or manufacture status chatter.\n\n- Choose the semantic kind: `milestone` for a meaningful completed stage, `status` for a\n  useful non-blocking checkpoint, `decision` for a concrete choice, `blocker` when user action is needed to\n  continue, and one `result` for the terminal outcome (including failure).\n- Declare the attention intent with `--attention ambient|notify|interrupt`: `ambient` stays in\n  the durable timeline by default, `notify` is worth seeing soon, and `interrupt` is reserved for\n  work that is blocked or genuinely time-sensitive. The system and the user choose delivery channels and native\n  presentation; attention never directly selects an Android channel, iOS interruption level, sound, or critical\n  alert, and never bypasses notification preferences, quiet hours, Focus, or rate limits.\n- Say what is newly true and what it changes for the work. Include the next step, decision, or\n  uncertainty when it would help the user; do not force every message into a fixed template.\n- Write like a capable teammate giving a busy owner a real, in-the-moment briefing — not like a\n  system log, a customer-service script, or a task template. Open on the thing itself, never on a\n  subject line (\"Status on the refactor:\", \"Quick update:\"). In the user's language, lead with the\n  fresh fact, decision, or risk; then make clear why it matters and what happens next. Where the\n  evidence is available, ground the update in one or two useful specifics: the affected thing, the\n  evidence, the timing, or the trade-off.\n  Use plain, varied sentences and only the confidence the evidence earns. Keep them short: where a\n  dash would staple two clauses into one, use two sentences instead. Be warm and direct, but\n  never manufacture familiarity, emotion, certainty, or colour that is not true. Avoid AI-shaped\n  filler such as \"I am pleased to report\", \"completed / in progress / next step\" recaps,\n  \"I will continue to monitor\", \"feel free to let me know\", ceremonial thanks, and vague claims\n  such as \"the optimization is complete\". Say the thing instead: \"The migration is in; the\n  slowest query fell from 2.8s to 420ms. I am running the full regression now and will flag any\n  breakage before merge.\" Treat that as a standard of specificity, not a rigid script. Do not make\n  a message longer merely to sound human.\n- Task context and card presentation are separate. A managed session's task context is derived\n  server-side, but a message shows no Task Card unless you explicitly choose `--attach-task-card`\n  (or `presentation.taskCard: true`). Use a card when it materially helps the user open or follow the\n  live task; omit it for ordinary conversational updates.\n- In a hand-started session, use `skrr agent message context --agent <id>` when recent\n  updates, read state, or a user's reply would help your judgment. It supplies observations, not a\n  schedule or a command to send.\n- In a skrr-managed session, do not pass task, run, or session identity: skrr derives it.\n  In a hand-started session, add `--task <task-id>` only when you know the correct task; it is\n  declared context.\n- Prefer one message for one thought. For a conversational owner DM — such as a pitch, invitation,\n  question, or progress update — when a draft exceeds roughly 320 characters or contains two independent thoughts,\n  normally use a 2–4 message human-scale sequence with `--part \"<next thought>\"` and one explicit semantic\n  `--idempotency-key`. Do not fragment a single thought merely to send more messages, and never split text\n  mechanically: choose the semantic boundaries yourself. If one part does not reach the user, the remaining parts\n  are deliberately not sent — the user would otherwise read your thoughts out of order.\n- An idempotency key names ONE update for this agent permanently, so make it specific to this run\n  (for example `<task-id>:verify-complete`). Reuse it only to retry that same update: reused with\n  the same text it is dropped as a duplicate, and with different text it is rejected.\n- A non-`delivered` status (`held`, `approval_required`, `duplicate`, `dropped`) is a policy\n  outcome, not an error. It is never a reason to bypass this command with a direct DM or Slack\n  call — this is the only sanctioned agent-to-user path.\n\n## Authority\n\n| Actor | May do | Only a person may do |\n| --- | --- | --- |\n| Agent | Decide to message; declare kind, attention intent, task context and a task card | Choose the delivery channel or native presentation; release a held or approval-gated intent |\n| Person | Everything an Agent may do | — |\n\n## Live state\n\n- `skrr agent message context --agent <id>` — recent updates, read state and owner engagement, as observations for the decision above.\n\n## Related guides\n\n- `tasks` — the records an update points at, and the durable version of what changed.\n- `agents` — which Agent a session speaks as; its `identity` section owns the agent-context refusals.",
-            "hash": "2ca0bfacfd5ac8edcfe5e36ca344d8698f02874e2786646c4f03bea28ca623d9",
+            "hash": "d502e1cf74a97001200c86fb62c4eb43f9720a31ce99014376115db6202d198f",
             "tokens": 1359,
             "sections": [
                 {
@@ -2063,7 +2063,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"
@@ -5850,7 +5850,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -5966,7 +5966,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6084,7 +6084,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6206,7 +6206,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6322,7 +6322,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6438,7 +6438,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6560,7 +6560,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6598,9 +6598,9 @@
             "version": 4,
             "aliases": [],
             "explains": [],
-            "body": "Read this when a Commitment run found something and you must decide whether the owner hears of it.\n\nA Check never writes to the owner. When something it found may matter, the run is handed a brief\nunder \"Owner communication — your call.\": what was found, the evidence, why it may matter and a\nsuggested next step. Those are facts to judge, not a message to forward.\n\n- Decide with everything in view: what you already said, whether the owner replied, what another\n  surface already raised. One message, a different message or nothing are all valid outcomes, and\n  silence is often the right one.\n- To speak from the run, send it with `skrr agent message send` where the run allows it: it is\n  delivered under the owner's limits and counted for this Commitment. Otherwise return a\n  `status_update` or `report` action intent with its `text` for the Commitment's report\n  destinations. A `message` action intent is recorded but never delivered. Write the words yourself.\n- The owner's limits (mute, quiet hours, a daily nudge cap) decide whether a run is asked to speak\n  at all, and whatever you deliver counts against them, whichever way you send it.\n\n`skrr commitments reports <commitment-id>` lists where its reports go and on what condition; the\ndefault sends only on a material change.",
-            "hash": "45fa02a0344903cc355dff0b66eee45b14dab79a8f62fba8620106b29e11e8a9",
-            "tokens": 301,
+            "body": "Read this when a Commitment run found something and you must decide whether the owner hears of it.\n\nA Check never writes to the owner, and it does not hand you a prepared message or brief: whether\nthe owner hears of what a run found is your call, from what you saw and what you already said.\n\n- Decide with everything in view: what you already said, whether the owner replied, what another\n  surface already raised. One message, a different message or nothing are all valid outcomes, and\n  silence is often the right one.\n- To speak from the run, send it with `skrr agent message send` where the run allows it: it is\n  delivered under the owner's limits and counted for this Commitment. Otherwise return a\n  `status_update` or `report` action intent with its `text` for the Commitment's report\n  destinations. A `message` action intent is recorded but never delivered. Write the words yourself.\n- The owner's limits (mute, quiet hours, a daily nudge cap) apply when you deliver, whichever way\n  you send it: whatever is delivered counts against them, and a delivery they do not allow is\n  suppressed: the cycle shows it as a stop at \"reach\" where the platform recorded it, and `skrr agent\n  message send` answers with its status.\n\n`skrr commitments reports <commitment-id>` lists where its reports go and on what condition; the\ndefault sends only on a material change.",
+            "hash": "0e16cd15a9b31d7f5fbd477d623213e8c30d735c028841491691dab809b12c14",
+            "tokens": 320,
             "sections": [
                 {
                     "id": "model",
@@ -6676,7 +6676,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6796,7 +6796,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6914,7 +6914,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -8043,7 +8043,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"
@@ -8120,7 +8120,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"
@@ -8159,9 +8159,9 @@
             "explains": [
                 "idempotency_conflict"
             ],
-            "body": "Read this when a send may be retried, or one answered `duplicate` or `idempotency_conflict`.\n\nOmit `--idempotency-key` and the CLI derives one from the request — fine for a\none-shot send, but a retry that must dedup needs the explicit key the card\ndescribes.\n\n- The key is verbatim text, up to 240 characters.\n- `duplicate` in the result means the key already carried this identical update —\n  the earlier send stands; do not resend.\n- `idempotency_conflict` means the key already carried different content or a\n  different delivery policy — the update needs a new name.\n\n## Refusals\n\n| Code | Cause | Fix |\n| --- | --- | --- |\n| `idempotency_conflict` | The key was already used for a different message or delivery policy | Mint a key that names this run's update and retry |",
-            "hash": "5f09a95c12c779db800350c7e848cb3b87811a6e4fdc13c606d3bba20a36996d",
-            "tokens": 202,
+            "body": "Read this when a send may be retried, or one answered `duplicate` or `idempotency_conflict`.\n\n`--idempotency-key` overrides an `idempotencyKey` (or `idempotency_key` /\n`idempotency-key`) in `--from-json`. When neither supplies a key, the CLI derives\none from the request. For a retry that must deduplicate, use the explicit key\nthe card describes.\n\n- The key is verbatim text, up to 240 characters.\n- `duplicate` in the result means the key already carried this identical update —\n  the earlier send stands; do not resend.\n- `idempotency_conflict` means the key already carried different content or a\n  different delivery policy — the update needs a new name.\n\n## Refusals\n\n| Code | Cause | Fix |\n| --- | --- | --- |\n| `idempotency_conflict` | The key was already used for a different message or delivery policy | Mint a key that names this run's update and retry |",
+            "hash": "5ba623c4d77a8f3e7902ab455abd7e0413ef6351a4cc58a5e01a7b46cac58937",
+            "tokens": 230,
             "sections": [
                 {
                     "id": "writing",
@@ -8196,7 +8196,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"
@@ -8281,7 +8281,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"

package/dist/lib/agent-proactive-baseline.js

@@ -30,6 +30,11 @@ function proactiveBaselineLines(b) {
             ? `${quiet.start ?? '?'}-${quiet.end ?? '?'} ${quiet.timezone ?? '(no zone recorded)'}`
             : 'disabled'}`);
     }
+    const working = b.policy.workingHours;
+    if (working) {
+        const window = `${working.start ?? '?'}-${working.end ?? '?'} ${working.timezone ?? '(no zone recorded)'}`;
+        lines.push(`Working hours:    ${working.enabled ? window : `disabled (${window})`}`);
+    }
     lines.push(`System loops:     ${loops}`);
     lines.push(`Watchers:         ${watchers}`);
     lines.push(`Model-run ceiling: ${b.dailyModelRunCeiling}/day (declared by the system loops)`);

package/dist/lib/node-adapter.js

@@ -181,7 +181,15 @@ function createNodeAdapter(opts = {}) {
         // (and per retry: proofs are single-use). No-op for every other token.
         Object.assign(headers, await (0, dpop_auth_1.dpopHeadersFor)(currentCredential().token, method, finalUrl));
         // E6: bounded retry on 429 for a GET or an idempotency-keyed write.
-        const { response, retryAfterMs } = await (0, rate_limit_retry_1.fetchWithRateLimitRetry)(() => fetch(finalUrl, { method, headers, body: finalBody, ...(0, task_runtime_headers_1.taskRuntimeRedirectOptions)(headers) }), { method, headers });
+        // Callers that explicitly set a timeout need a real fetch deadline. The
+        // Node adapter otherwise silently drops the data-provider request option.
+        const timeoutMs = Number(options?.timeout);
+        const timeoutSignal = Number.isFinite(timeoutMs) && timeoutMs > 0 ? AbortSignal.timeout(timeoutMs) : undefined;
+        const callerSignal = options?.signal;
+        const signal = timeoutSignal && callerSignal
+            ? AbortSignal.any([timeoutSignal, callerSignal])
+            : timeoutSignal || callerSignal;
+        const { response, retryAfterMs } = await (0, rate_limit_retry_1.fetchWithRateLimitRetry)(() => fetch(finalUrl, { method, headers, body: finalBody, ...(signal ? { signal } : {}), ...(0, task_runtime_headers_1.taskRuntimeRedirectOptions)(headers) }), { method, headers });
         lastRetryAfterMs = retryAfterMs;
         return response;
     }