@skrr-ai/cli 0.1.134 → 0.1.136

package/dist/generated/agent-guides.json

@@ -454,7 +454,7 @@
                         "id": "speaking",
                         "title": "A Commitment finds; its Agent speaks",
                         "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                        "tokens": 301,
+                        "tokens": 320,
                         "aliases": [],
                         "explains": []
                     },
@@ -681,7 +681,7 @@
                         "id": "idempotency-keys",
                         "title": "Idempotency keys",
                         "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                        "tokens": 202,
+                        "tokens": 230,
                         "aliases": [],
                         "explains": [
                             "idempotency_conflict"
@@ -709,7 +709,7 @@
                 ]
             }
         ],
-        "hash": "74f6b87c1bd1f851fbfe0b1ee5da04425d1b6fdafbf55445a39e121af9c4e65b",
+        "hash": "f49e16e088923137a5c6c8bd98891defefe0536246e03b3e5cc92ee4ea4e9eaf",
         "tokens": 545
     },
     "routedIndex": {
@@ -1167,7 +1167,7 @@
                         "id": "speaking",
                         "title": "A Commitment finds; its Agent speaks",
                         "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                        "tokens": 301,
+                        "tokens": 320,
                         "aliases": [],
                         "explains": []
                     },
@@ -1353,7 +1353,7 @@
                 ]
             }
         ],
-        "hash": "6960740319e60127c5a1007fd32e77afada0b14442b5f6fb810a7fee1407cb63",
+        "hash": "4981bf36d26a2768a45f209069e94372c0da86cc8658b706c3c77915fe5b5356",
         "tokens": 494
     },
     "cards": {
@@ -1747,7 +1747,7 @@
             "routed": true,
             "aliases": [],
             "body": "## Concept model\n\n| Noun | Question it answers |\n| --- | --- |\n| **Compass** | What does good look like for this Agent, and what may it never trade away? |\n| **Northstar** | Which Commitments should exist, at what priority and on what budget? |\n| **Commitment** | Which outcome does this Agent keep true, and how does it keep checking? |\n| **Check** | What did one wake of a Commitment see, decide and do? |\n\nA Commitment is not a unit of work. A **Task** is one unit of work and a **Goal** is a dated\noutcome with key results; a Commitment watches both and may create Tasks, and is neither.\n\n## Decide\n\nFive mechanisms make something happen later, and the noun alone does not pick one:\n\n| Mechanism | What it is for | The signal that picks it |\n| --- | --- | --- |\n| **Follow-up** | Coming back to one thing, once or a bounded few times: a reminder, a watch, a check-in, an agreed action | The ask ends: \"look tomorrow\", \"tell me when CI is green\" |\n| **Trigger** | Running the Agent with a set prompt on a schedule, an event, once, or on demand | The person names when, and every run does the same work |\n| **Heartbeat** | Checking in on a conversation, group chat or Space at a frequency that backs off while unread | The person wants regular contact, not an outcome held |\n| **Commitment** | Keeping an outcome true: watched sources, a cadence and a loop that decides when to act | \"Keep X true\", \"watch this metric\": no end, and stale evidence matters |\n| **Workflow** | Running a durable graph of Tasks in order | Repeatable work whose steps depend on each other |\n\nA one-off \"look at it tomorrow\" is a follow-up, never a Commitment. Standing observation is a\nCommitment with a freshness contract, not a recurring trigger or a task board left running.\n\n## Workflow\n\n### Start a Commitment\n\n1. Read the Agent's Commitments first, and change one rather than add a near-duplicate.\n2. Create it and turn it on in one call: the outcome, what it watches, how often it checks, where\n   its work goes. Turning it on runs Preflight; a refusal keeps the draft and reports the code,\n   reason and fix.\n3. Leave it a draft only when the person asked to see it first.\n4. Read it back, and tell the person what it watches, how often, and whether it is on.\n\n## Authority\n\n| Actor | May do | Only a person may do |\n| --- | --- | --- |\n| Agent | Read the Commitments of an Agent it can view; create one, change it and turn it on; request a check; pause one; decide whether a finding is worth telling the owner | Lift a stop a person made; set or clear a concurrency limit; choose the Task review policy; approve an action proposal or a cadence change; configure a Northstar's governance or decide its intents |\n| Person | Everything in both columns | — |\n\nA Commitment grants no permission: its runs work under the Agent's own. A Check never writes an\nowner-facing message, and a Compass never creates, rewrites, pauses or archives a Commitment. The\nserver cannot always tell an Agent from the person whose login it holds, so an accepted call is\nnot permission: the right-hand column stays a person's.\n\n## Live state\n\n- `skrr commitments list --agent <agent-id>` — an Agent's Commitments, with status and assessment.\n- `skrr commitments show <commitment-id>` — the contract, its next check and the last one.\n- `skrr commitments roster --agent <agent-id>` — each loop: whether it is armed, its next wake, runs today.\n\n## Related guides\n\n- `tasks` — the Tasks a Commitment creates or watches.\n- `spaces` — Goals, and Workflows: durable graphs of Tasks.\n- `agents` — the Agent a Commitment belongs to, and where its runs execute.\n- `communication` — whether, what and how to tell the owner.",
-            "hash": "197d9b84d1a4367ecf4b7a51687604d13814ec9e9265fe662883278a7738d2fa",
+            "hash": "d9bbb541c0b955254d9795d98c26c1e7f075c98c5169c16574c457fde87fcec3",
             "tokens": 1169,
             "sections": [
                 {
@@ -1824,7 +1824,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -2027,7 +2027,7 @@
             "routed": false,
             "aliases": [],
             "body": "## Concept model\n\nAn **Agent Update** is a deliberate owner-facing message. It is conversation, not\nrecord: what durably changed belongs to the work's own records, and the message\npoints at it.\n\n## Agent Updates\n\nProactively message the owner whenever it would improve their ability to steer the work, understand\na meaningful change, or stay confidently involved. Adapt to the task, uncertainty and stakes, the\nuser's engagement, what you have already communicated, and any per-agent style direction. Do not\nfollow a fixed schedule or manufacture status chatter.\n\n- Choose the semantic kind: `milestone` for a meaningful completed stage, `status` for a\n  useful non-blocking checkpoint, `decision` for a concrete choice, `blocker` when user action is needed to\n  continue, and one `result` for the terminal outcome (including failure).\n- Declare the attention intent with `--attention ambient|notify|interrupt`: `ambient` stays in\n  the durable timeline by default, `notify` is worth seeing soon, and `interrupt` is reserved for\n  work that is blocked or genuinely time-sensitive. The system and the user choose delivery channels and native\n  presentation; attention never directly selects an Android channel, iOS interruption level, sound, or critical\n  alert, and never bypasses notification preferences, quiet hours, Focus, or rate limits.\n- Say what is newly true and what it changes for the work. Include the next step, decision, or\n  uncertainty when it would help the user; do not force every message into a fixed template.\n- Write like a capable teammate giving a busy owner a real, in-the-moment briefing — not like a\n  system log, a customer-service script, or a task template. Open on the thing itself, never on a\n  subject line (\"Status on the refactor:\", \"Quick update:\"). In the user's language, lead with the\n  fresh fact, decision, or risk; then make clear why it matters and what happens next. Where the\n  evidence is available, ground the update in one or two useful specifics: the affected thing, the\n  evidence, the timing, or the trade-off.\n  Use plain, varied sentences and only the confidence the evidence earns. Keep them short: where a\n  dash would staple two clauses into one, use two sentences instead. Be warm and direct, but\n  never manufacture familiarity, emotion, certainty, or colour that is not true. Avoid AI-shaped\n  filler such as \"I am pleased to report\", \"completed / in progress / next step\" recaps,\n  \"I will continue to monitor\", \"feel free to let me know\", ceremonial thanks, and vague claims\n  such as \"the optimization is complete\". Say the thing instead: \"The migration is in; the\n  slowest query fell from 2.8s to 420ms. I am running the full regression now and will flag any\n  breakage before merge.\" Treat that as a standard of specificity, not a rigid script. Do not make\n  a message longer merely to sound human.\n- Task context and card presentation are separate. A managed session's task context is derived\n  server-side, but a message shows no Task Card unless you explicitly choose `--attach-task-card`\n  (or `presentation.taskCard: true`). Use a card when it materially helps the user open or follow the\n  live task; omit it for ordinary conversational updates.\n- In a hand-started session, use `skrr agent message context --agent <id>` when recent\n  updates, read state, or a user's reply would help your judgment. It supplies observations, not a\n  schedule or a command to send.\n- In a skrr-managed session, do not pass task, run, or session identity: skrr derives it.\n  In a hand-started session, add `--task <task-id>` only when you know the correct task; it is\n  declared context.\n- Prefer one message for one thought. For a conversational owner DM — such as a pitch, invitation,\n  question, or progress update — when a draft exceeds roughly 320 characters or contains two independent thoughts,\n  normally use a 2–4 message human-scale sequence with `--part \"<next thought>\"` and one explicit semantic\n  `--idempotency-key`. Do not fragment a single thought merely to send more messages, and never split text\n  mechanically: choose the semantic boundaries yourself. If one part does not reach the user, the remaining parts\n  are deliberately not sent — the user would otherwise read your thoughts out of order.\n- An idempotency key names ONE update for this agent permanently, so make it specific to this run\n  (for example `<task-id>:verify-complete`). Reuse it only to retry that same update: reused with\n  the same text it is dropped as a duplicate, and with different text it is rejected.\n- A non-`delivered` status (`held`, `approval_required`, `duplicate`, `dropped`) is a policy\n  outcome, not an error. It is never a reason to bypass this command with a direct DM or Slack\n  call — this is the only sanctioned agent-to-user path.\n\n## Authority\n\n| Actor | May do | Only a person may do |\n| --- | --- | --- |\n| Agent | Decide to message; declare kind, attention intent, task context and a task card | Choose the delivery channel or native presentation; release a held or approval-gated intent |\n| Person | Everything an Agent may do | — |\n\n## Live state\n\n- `skrr agent message context --agent <id>` — recent updates, read state and owner engagement, as observations for the decision above.\n\n## Related guides\n\n- `tasks` — the records an update points at, and the durable version of what changed.\n- `agents` — which Agent a session speaks as; its `identity` section owns the agent-context refusals.",
-            "hash": "2ca0bfacfd5ac8edcfe5e36ca344d8698f02874e2786646c4f03bea28ca623d9",
+            "hash": "d502e1cf74a97001200c86fb62c4eb43f9720a31ce99014376115db6202d198f",
             "tokens": 1359,
             "sections": [
                 {
@@ -2063,7 +2063,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"
@@ -5850,7 +5850,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -5966,7 +5966,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6084,7 +6084,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6206,7 +6206,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6322,7 +6322,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6438,7 +6438,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6560,7 +6560,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6598,9 +6598,9 @@
             "version": 4,
             "aliases": [],
             "explains": [],
-            "body": "Read this when a Commitment run found something and you must decide whether the owner hears of it.\n\nA Check never writes to the owner. When something it found may matter, the run is handed a brief\nunder \"Owner communication — your call.\": what was found, the evidence, why it may matter and a\nsuggested next step. Those are facts to judge, not a message to forward.\n\n- Decide with everything in view: what you already said, whether the owner replied, what another\n  surface already raised. One message, a different message or nothing are all valid outcomes, and\n  silence is often the right one.\n- To speak from the run, send it with `skrr agent message send` where the run allows it: it is\n  delivered under the owner's limits and counted for this Commitment. Otherwise return a\n  `status_update` or `report` action intent with its `text` for the Commitment's report\n  destinations. A `message` action intent is recorded but never delivered. Write the words yourself.\n- The owner's limits (mute, quiet hours, a daily nudge cap) decide whether a run is asked to speak\n  at all, and whatever you deliver counts against them, whichever way you send it.\n\n`skrr commitments reports <commitment-id>` lists where its reports go and on what condition; the\ndefault sends only on a material change.",
-            "hash": "45fa02a0344903cc355dff0b66eee45b14dab79a8f62fba8620106b29e11e8a9",
-            "tokens": 301,
+            "body": "Read this when a Commitment run found something and you must decide whether the owner hears of it.\n\nA Check never writes to the owner, and it does not hand you a prepared message or brief: whether\nthe owner hears of what a run found is your call, from what you saw and what you already said.\n\n- Decide with everything in view: what you already said, whether the owner replied, what another\n  surface already raised. One message, a different message or nothing are all valid outcomes, and\n  silence is often the right one.\n- To speak from the run, send it with `skrr agent message send` where the run allows it: it is\n  delivered under the owner's limits and counted for this Commitment. Otherwise return a\n  `status_update` or `report` action intent with its `text` for the Commitment's report\n  destinations. A `message` action intent is recorded but never delivered. Write the words yourself.\n- The owner's limits (mute, quiet hours, a daily nudge cap) apply when you deliver, whichever way\n  you send it: whatever is delivered counts against them, and a delivery they do not allow is\n  suppressed: the cycle shows it as a stop at \"reach\" where the platform recorded it, and `skrr agent\n  message send` answers with its status.\n\n`skrr commitments reports <commitment-id>` lists where its reports go and on what condition; the\ndefault sends only on a material change.",
+            "hash": "0e16cd15a9b31d7f5fbd477d623213e8c30d735c028841491691dab809b12c14",
+            "tokens": 320,
             "sections": [
                 {
                     "id": "model",
@@ -6676,7 +6676,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6796,7 +6796,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -6914,7 +6914,7 @@
                     "id": "speaking",
                     "title": "A Commitment finds; its Agent speaks",
                     "readWhen": "a Commitment run found something and you must decide whether the owner hears of it",
-                    "tokens": 301,
+                    "tokens": 320,
                     "aliases": [],
                     "explains": []
                 },
@@ -8043,7 +8043,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"
@@ -8120,7 +8120,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"
@@ -8159,9 +8159,9 @@
             "explains": [
                 "idempotency_conflict"
             ],
-            "body": "Read this when a send may be retried, or one answered `duplicate` or `idempotency_conflict`.\n\nOmit `--idempotency-key` and the CLI derives one from the request — fine for a\none-shot send, but a retry that must dedup needs the explicit key the card\ndescribes.\n\n- The key is verbatim text, up to 240 characters.\n- `duplicate` in the result means the key already carried this identical update —\n  the earlier send stands; do not resend.\n- `idempotency_conflict` means the key already carried different content or a\n  different delivery policy — the update needs a new name.\n\n## Refusals\n\n| Code | Cause | Fix |\n| --- | --- | --- |\n| `idempotency_conflict` | The key was already used for a different message or delivery policy | Mint a key that names this run's update and retry |",
-            "hash": "5f09a95c12c779db800350c7e848cb3b87811a6e4fdc13c606d3bba20a36996d",
-            "tokens": 202,
+            "body": "Read this when a send may be retried, or one answered `duplicate` or `idempotency_conflict`.\n\n`--idempotency-key` overrides an `idempotencyKey` (or `idempotency_key` /\n`idempotency-key`) in `--from-json`. When neither supplies a key, the CLI derives\none from the request. For a retry that must deduplicate, use the explicit key\nthe card describes.\n\n- The key is verbatim text, up to 240 characters.\n- `duplicate` in the result means the key already carried this identical update —\n  the earlier send stands; do not resend.\n- `idempotency_conflict` means the key already carried different content or a\n  different delivery policy — the update needs a new name.\n\n## Refusals\n\n| Code | Cause | Fix |\n| --- | --- | --- |\n| `idempotency_conflict` | The key was already used for a different message or delivery policy | Mint a key that names this run's update and retry |",
+            "hash": "5ba623c4d77a8f3e7902ab455abd7e0413ef6351a4cc58a5e01a7b46cac58937",
+            "tokens": 230,
             "sections": [
                 {
                     "id": "writing",
@@ -8196,7 +8196,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"
@@ -8281,7 +8281,7 @@
                     "id": "idempotency-keys",
                     "title": "Idempotency keys",
                     "readWhen": "a send may be retried, or one answered `duplicate` or `idempotency_conflict`",
-                    "tokens": 202,
+                    "tokens": 230,
                     "aliases": [],
                     "explains": [
                         "idempotency_conflict"

package/dist/lib/agent-proactive-baseline.js

@@ -30,6 +30,11 @@ function proactiveBaselineLines(b) {
             ? `${quiet.start ?? '?'}-${quiet.end ?? '?'} ${quiet.timezone ?? '(no zone recorded)'}`
             : 'disabled'}`);
     }
+    const working = b.policy.workingHours;
+    if (working) {
+        const window = `${working.start ?? '?'}-${working.end ?? '?'} ${working.timezone ?? '(no zone recorded)'}`;
+        lines.push(`Working hours:    ${working.enabled ? window : `disabled (${window})`}`);
+    }
     lines.push(`System loops:     ${loops}`);
     lines.push(`Watchers:         ${watchers}`);
     lines.push(`Model-run ceiling: ${b.dailyModelRunCeiling}/day (declared by the system loops)`);

package/dist/lib/proactiveApi.d.ts

@@ -7,6 +7,10 @@ export interface ProactiveWorkingHours {
     end: string;
     timezone?: string;
 }
+/** Worker policy windows have an explicit enable switch; orchestrator hours do not. */
+export interface ProactiveWorkerPolicyHours extends ProactiveWorkingHours {
+    enabled?: boolean;
+}
 export interface SpecWatcher {
     source: WatcherSource;
     intervalMinutes?: number;
@@ -34,8 +38,8 @@ export interface ProactiveAgentSpec {
             maxAutoRunsPerDay?: number;
             cooldownMinutes?: number;
             requireApprovalRiskLevels?: string[];
-            workingHours?: ProactiveWorkingHours;
-            quietHours?: ProactiveWorkingHours;
+            workingHours?: ProactiveWorkerPolicyHours;
+            quietHours?: ProactiveWorkerPolicyHours;
         };
     };
     orchestrator?: {

package/dist/lib/schedule.d.ts

@@ -228,6 +228,10 @@ export declare function isSmartScheduleProposal(value: unknown): value is SmartS
  * HTML error page, and dumping it into the user's terminal helps nobody.
  */
 export declare function describeNonProposal(value: unknown): string;
+/** Explain terminal policy outcomes without changing the machine-readable status. */
+export declare function todoPolicyBlockMessage(reason?: string): string | undefined;
+/** Print explanations alongside the trace rows that recorded policy blocks. */
+export declare function renderTodoPolicyTraceDetails(events: ScheduleTraceEvent[], log: (line: string) => void): void;
 /** Render a To-Do list as a table. */
 export declare function renderTodoList(todos: Todo[], log: (line: string) => void): void;
 /**

package/dist/lib/schedule.js

@@ -5,6 +5,8 @@ exports.scheduleTraceToday = scheduleTraceToday;
 exports.scheduleTracePath = scheduleTracePath;
 exports.isSmartScheduleProposal = isSmartScheduleProposal;
 exports.describeNonProposal = describeNonProposal;
+exports.todoPolicyBlockMessage = todoPolicyBlockMessage;
+exports.renderTodoPolicyTraceDetails = renderTodoPolicyTraceDetails;
 exports.renderTodoList = renderTodoList;
 exports.renderCapacityWarning = renderCapacityWarning;
 exports.renderProposal = renderProposal;
@@ -106,6 +108,27 @@ function describeNonProposal(value) {
     const keys = Object.keys(value);
     return keys.length === 0 ? 'empty object' : `object with keys: ${keys.slice(0, 8).join(', ')}`;
 }
+/** Explain terminal policy outcomes without changing the machine-readable status. */
+function todoPolicyBlockMessage(reason) {
+    switch (reason) {
+        case 'inside_quiet_hours':
+            return 'Not run: this time was inside the trigger’s quiet hours. Create a new To-Do to try again.';
+        case 'outside_working_hours':
+            return 'Not run: this time was outside the trigger’s working hours. Create a new To-Do to try again.';
+        default:
+            return undefined;
+    }
+}
+/** Print explanations alongside the trace rows that recorded policy blocks. */
+function renderTodoPolicyTraceDetails(events, log) {
+    for (const event of events) {
+        const message = event.type === 'todo_execution_failed'
+            ? todoPolicyBlockMessage(event.reason)
+            : undefined;
+        if (message)
+            log(`  ${event.id ?? event.summary ?? 'To-Do'}: ${message}`);
+    }
+}
 /** Render a To-Do list as a table. */
 function renderTodoList(todos, log) {
     if (todos.length === 0) {
@@ -127,6 +150,11 @@ function renderTodoList(todos, log) {
         { key: 'source', header: 'SOURCE' },
         { key: 'id', header: 'ID', verbatim: true },
     ], log);
+    for (const todo of todos) {
+        const message = todo.status === 'failed' ? todoPolicyBlockMessage(todo.result?.errorMessage) : undefined;
+        if (message)
+            log(`  ${todo.id}: ${message}`);
+    }
 }
 /**
  * Warn at REVIEW time when approving this plan is likely to hit the wall.

package/dist/lib/triggers.d.ts

@@ -170,6 +170,8 @@ export interface TriggerFireRecord {
     durationMs?: number;
     finalizedAt?: string;
     metadata?: {
+        recordKind?: string;
+        afterOccurrenceId?: string;
         replayable?: boolean;
         replayBlockedReason?: string;
         replayRequirements?: string[];
@@ -581,6 +583,15 @@ export declare function renderTriggerSummary(trigger: TriggerDefinition, log: (l
     baseURL?: string;
 }): void;
 export declare function renderLegacyRuns(runs: LegacyTriggerRun[], log: (line: string) => void): void;
+/** Human explanation for quiet-hour audit rows; a one-shot may have been re-armed. */
+export declare function quietHoursAuditExplanation(fire: {
+    source?: unknown;
+    reason?: unknown;
+    outcome?: unknown;
+}): {
+    summary: string;
+    detail: string;
+} | null;
 export declare function renderFireAudit(fires: TriggerFireRecord[], log: (line: string) => void): void;
 /**
  * Trigger budget for one scope. `active` counts only ENABLED rows — a disabled
@@ -612,6 +623,10 @@ export declare const triggerApi: {
     get: (id: string) => Promise<TriggerDefinition>;
     update: (id: string, body: Record<string, unknown>) => Promise<TriggerDefinition>;
     setEnabled: (id: string, enabled: boolean) => Promise<TriggerDefinition>;
+    setAuthorizationRevoked: (id: string, revoked: boolean) => Promise<{
+        ok: boolean;
+        authorization?: Record<string, unknown>;
+    }>;
     delete: (id: string) => Promise<string>;
     fire: (id: string, body: Record<string, unknown>) => Promise<Record<string, unknown>>;
     /**
@@ -651,6 +666,17 @@ export declare const triggerApi: {
         agentId?: string;
         spaceId?: string;
     }) => Promise<TriggerQuotaStatus>;
+    prunePreview: (params: {
+        scope?: string;
+        agentId?: string;
+        spaceId?: string;
+        limit?: number;
+    }) => Promise<{
+        dryRun: true;
+        ownerWide: boolean;
+        wouldDelete: number;
+        ids: string[];
+    }>;
     /** Soft-delete the DISABLED triggers in a scope. Requires `confirm: true`. */
     prune: (body: {
         scope?: string;

package/dist/lib/triggers.js

@@ -53,6 +53,7 @@ exports.toolsRefusedHintLines = toolsRefusedHintLines;
 exports.fireRefusalLines = fireRefusalLines;
 exports.renderTriggerSummary = renderTriggerSummary;
 exports.renderLegacyRuns = renderLegacyRuns;
+exports.quietHoursAuditExplanation = quietHoursAuditExplanation;
 exports.renderFireAudit = renderFireAudit;
 const data_provider_1 = require("@skrr-ai/data-provider");
 const node_fs_1 = require("node:fs");
@@ -1524,6 +1525,22 @@ function renderLegacyRuns(runs, log) {
         { key: 'conversation', header: 'CONVO', maxWidth: 24 },
     ], log);
 }
+/** Human explanation for quiet-hour audit rows; a one-shot may have been re-armed. */
+function quietHoursAuditExplanation(fire) {
+    const reason = fire.reason || fire.outcome;
+    if (reason !== 'inside_quiet_hours' && reason !== 'initiative_policy_quiet_hours')
+        return null;
+    if (fire.source === 'once') {
+        return {
+            summary: 'One-shot skipped: quiet hours',
+            detail: 'This skipped occurrence will not retry automatically. Check the trigger state; if the one-shot is spent, schedule a new one outside quiet hours.',
+        };
+    }
+    return {
+        summary: 'Skipped: quiet hours',
+        detail: 'Review the trigger and Agent quiet-hours settings before retrying.',
+    };
+}
 function renderFireAudit(fires, log) {
     if (fires.length === 0) {
         log('No fire audit records.');
@@ -1534,7 +1551,9 @@ function renderFireAudit(fires, log) {
         firedAt: fire.firedAt ?? '-',
         outcome: fire.outcome ?? '-',
         source: fire.source ?? '-',
-        reason: fire.reason ?? fire.errorMessage ?? '',
+        reason: fire.metadata?.recordKind === 'schedule_end_marker'
+            ? 'Schedule ended after prior fire'
+            : quietHoursAuditExplanation(fire)?.summary ?? fire.reason ?? fire.errorMessage ?? '',
         duration: fire.durationMs === undefined ? '-' : `${fire.durationMs}ms`,
         replay: fire.metadata?.replayable === true || fire.metadata?.replayContext
             ? 'yes'
@@ -1561,6 +1580,7 @@ exports.triggerApi = {
     setEnabled: (id, enabled) => data_provider_1.request.patch(`/api/triggers/${encodeURIComponent(id)}/enabled`, {
         enabled,
     }),
+    setAuthorizationRevoked: (id, revoked) => data_provider_1.request.patch(`/api/triggers/${encodeURIComponent(id)}/authorization`, { revoked }),
     delete: (id) => data_provider_1.request.delete(`/api/triggers/${encodeURIComponent(id)}`),
     fire: (id, body) => data_provider_1.request.post(`/api/triggers/${encodeURIComponent(id)}/fire-now`, body),
     /**
@@ -1597,6 +1617,7 @@ exports.triggerApi = {
      * companion to `prune` — see `TriggerQuotaStatus`.
      */
     quota: (params) => data_provider_1.request.get(withQuery('/api/triggers/quota', params)),
+    prunePreview: (params) => data_provider_1.request.get(withQuery('/api/triggers/prune/preview', params)),
     /** Soft-delete the DISABLED triggers in a scope. Requires `confirm: true`. */
     prune: (body) => data_provider_1.request.post('/api/triggers/prune', { ...body, confirm: true }),
     capabilities: (scope) => data_provider_1.request.get(`/api/triggers/scope-capabilities?scope=${encodeURIComponent(scope)}`),