clementine-agent 1.18.126 → 1.18.128

package/dist/agent/assistant.js

@@ -2913,6 +2913,22 @@ You have a cost budget per message — not a hard turn limit. Work until the tas
                                 catch {
                                     // Non-fatal — extraction logging should never block memory writes
                                 }
+                                // 1.18.127 — surface a "📝 Noted: <fact>" toast in the
+                                // dashboard chat. Fire-and-forget through the memory-events
+                                // bus; if no listener (no dashboard active), nothing happens.
+                                try {
+                                    const { emitMemoryExtraction, summarizeExtractionInput } = await import('./memory-events.js');
+                                    emitMemoryExtraction({
+                                        sessionKey: sessionKey ?? 'unknown',
+                                        toolName: toolBaseName,
+                                        summary: summarizeExtractionInput((block.input ?? {})),
+                                        agentSlug: profile?.slug ?? null,
+                                        at: new Date().toISOString(),
+                                    });
+                                }
+                                catch {
+                                    // Non-fatal — visibility never blocks the write
+                                }
                             }
                         }
                     }

package/dist/agent/memory-events.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Memory extraction event bus — 1.18.127.
+ *
+ * Lets the dashboard surface "📝 Noted: <fact>" toasts when the
+ * background auto-extraction Haiku writes to MEMORY.md / user_model
+ * after a chat exchange. Today extraction is fully silent: the user
+ * sees nothing happen, even though the agent may have just learned
+ * something important.
+ *
+ * Pattern: a single module-level listener slot. Dashboard registers
+ * one callback at startup; assistant.ts emits when an extraction tool
+ * call lands. Zero ordering guarantees, zero retention — fire-and-
+ * forget, just like the extraction itself.
+ *
+ * Why not EventEmitter: a single listener is enough today and a class
+ * import would be dead weight. Trivially upgrade-able if we ever need
+ * a fan-out.
+ */
+export interface MemoryExtractionEvent {
+    /** Source session that produced the extraction (e.g. "discord:dm:owner",
+     *  "dashboard:web", "cron:morning-briefing"). */
+    sessionKey: string;
+    /** The MCP tool the extractor called — memory_write, note_create,
+     *  task_add, note_take, user_model. */
+    toolName: string;
+    /** A short human-readable summary of what was learned. Built from the
+     *  tool input by the emitter — typically the `content` or `text` field
+     *  truncated to ~120 chars. Empty string when the input shape is unknown. */
+    summary: string;
+    /** Active hired-agent slug, when applicable. null = Clementine herself. */
+    agentSlug: string | null;
+    /** ISO timestamp of when the extraction landed. */
+    at: string;
+}
+type Listener = (event: MemoryExtractionEvent) => void;
+/** Register the dashboard's SSE broadcaster. Calling again replaces the
+ *  previous listener (one-shot slot). Pass `null` to clear. */
+export declare function setMemoryExtractionListener(fn: Listener | null): void;
+/** Emit an extraction event. Errors thrown by the listener are
+ *  swallowed — visibility must never block the actual write. */
+export declare function emitMemoryExtraction(event: MemoryExtractionEvent): void;
+/**
+ * Pull a short, user-facing summary out of an MCP tool input payload.
+ * Each tool stores its content in a different key, so we look at the
+ * usual suspects in priority order and truncate.
+ */
+export declare function summarizeExtractionInput(toolInput: Record<string, unknown>): string;
+export {};
+//# sourceMappingURL=memory-events.d.ts.map

package/dist/agent/memory-events.js

@@ -0,0 +1,52 @@
+/**
+ * Memory extraction event bus — 1.18.127.
+ *
+ * Lets the dashboard surface "📝 Noted: <fact>" toasts when the
+ * background auto-extraction Haiku writes to MEMORY.md / user_model
+ * after a chat exchange. Today extraction is fully silent: the user
+ * sees nothing happen, even though the agent may have just learned
+ * something important.
+ *
+ * Pattern: a single module-level listener slot. Dashboard registers
+ * one callback at startup; assistant.ts emits when an extraction tool
+ * call lands. Zero ordering guarantees, zero retention — fire-and-
+ * forget, just like the extraction itself.
+ *
+ * Why not EventEmitter: a single listener is enough today and a class
+ * import would be dead weight. Trivially upgrade-able if we ever need
+ * a fan-out.
+ */
+let listener = null;
+/** Register the dashboard's SSE broadcaster. Calling again replaces the
+ *  previous listener (one-shot slot). Pass `null` to clear. */
+export function setMemoryExtractionListener(fn) {
+    listener = fn;
+}
+/** Emit an extraction event. Errors thrown by the listener are
+ *  swallowed — visibility must never block the actual write. */
+export function emitMemoryExtraction(event) {
+    if (!listener)
+        return;
+    try {
+        listener(event);
+    }
+    catch {
+        /* never throw out of the extraction path */
+    }
+}
+/**
+ * Pull a short, user-facing summary out of an MCP tool input payload.
+ * Each tool stores its content in a different key, so we look at the
+ * usual suspects in priority order and truncate.
+ */
+export function summarizeExtractionInput(toolInput) {
+    const candidates = ['content', 'text', 'fact', 'value', 'note', 'message', 'task'];
+    for (const key of candidates) {
+        const v = toolInput[key];
+        if (typeof v === 'string' && v.trim()) {
+            return v.trim().length > 120 ? v.trim().slice(0, 120) + '…' : v.trim();
+        }
+    }
+    return '';
+}
+//# sourceMappingURL=memory-events.js.map

package/dist/agent/run-agent-cron.js

@@ -306,9 +306,25 @@ export async function buildSkillContext(jobName, jobPrompt, agentSlug, pinnedSki
         const skillQuery = jobName + ' ' + jobPrompt.slice(0, 200);
         const suppressedNamesRaw = memoryStore
             ?.getSkillsToSuppress?.(agentSlug);
-        const suppressedNames = Array.isArray(suppressedNamesRaw)
+        const autoSuppressed = Array.isArray(suppressedNamesRaw)
             ? new Set(suppressedNamesRaw)
             : (suppressedNamesRaw ?? undefined);
+        // 1.18.127 — merge automatic feedback-driven suppressions (from the
+        // memory store) with manual user toggles (from skill-suppressions.json).
+        // Both sets pass through to loadSkillByName + searchSkills under the
+        // same `suppressedNames` parameter — the runtime doesn't care which
+        // source flagged a skill.
+        let suppressedNames = autoSuppressed;
+        try {
+            const { getManualSuppressions } = await import('./skill-suppressions.js');
+            const manual = getManualSuppressions(agentSlug);
+            if (manual.size > 0) {
+                suppressedNames = new Set([...(autoSuppressed ?? []), ...manual]);
+            }
+        }
+        catch (err) {
+            logger.debug({ err }, 'manual suppression read failed (non-fatal)');
+        }
         const prepared = [];
         const seen = new Set();
         // 1. Load pinned skills first via exact slug lookup. When the cron has

package/dist/agent/skill-suppressions.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Manual skill suppression list — 1.18.127.
+ *
+ * Complements the automatic feedback-driven suppression in
+ * `MemoryStore.getSkillsToSuppress` (which suppresses skills that
+ * accumulate ≥3 negative ratings with >50% negative rate in the last 60
+ * days). This file owns the *manual* list — what the user explicitly
+ * toggles in the dashboard ("don't ever auto-match this skill again").
+ *
+ * Storage: a single JSON file at `~/.clementine/skill-suppressions.json`
+ * with the shape:
+ *
+ *   {
+ *     "global": ["my-buggy-skill", "stale-procedure"],
+ *     "ross-the-sdr": ["sasha-only-skill"]
+ *   }
+ *
+ * Merged with the auto-suppression set inside `buildSkillContext` so
+ * the runtime sees one combined Set<string>. No schema migration; missing
+ * file = empty list.
+ */
+export interface SuppressionFile {
+    /** Global suppressions apply to every agent (Clementine + every hired agent). */
+    global: string[];
+    /** Per-agent suppressions apply only when the named agent is running. */
+    [agentSlug: string]: string[];
+}
+/**
+ * Read the merged set of manually suppressed skill names for a given
+ * agent context. Includes the global list always; adds the agent-specific
+ * list when `agentSlug` is provided.
+ */
+export declare function getManualSuppressions(agentSlug?: string | null): Set<string>;
+/** List the full suppression file as the dashboard sees it. */
+export declare function listAllSuppressions(): SuppressionFile;
+/**
+ * Toggle a skill's suppression state for a given scope. Returns the
+ * resulting per-scope list so the UI can re-render without a refetch.
+ *
+ * - `scope === 'global'` writes to `data.global`
+ * - any other scope value treats it as an agent slug
+ */
+export declare function setSuppression(skillName: string, scope: string, suppressed: boolean): {
+    scope: string;
+    list: string[];
+};
+//# sourceMappingURL=skill-suppressions.d.ts.map

package/dist/agent/skill-suppressions.js

@@ -0,0 +1,98 @@
+/**
+ * Manual skill suppression list — 1.18.127.
+ *
+ * Complements the automatic feedback-driven suppression in
+ * `MemoryStore.getSkillsToSuppress` (which suppresses skills that
+ * accumulate ≥3 negative ratings with >50% negative rate in the last 60
+ * days). This file owns the *manual* list — what the user explicitly
+ * toggles in the dashboard ("don't ever auto-match this skill again").
+ *
+ * Storage: a single JSON file at `~/.clementine/skill-suppressions.json`
+ * with the shape:
+ *
+ *   {
+ *     "global": ["my-buggy-skill", "stale-procedure"],
+ *     "ross-the-sdr": ["sasha-only-skill"]
+ *   }
+ *
+ * Merged with the auto-suppression set inside `buildSkillContext` so
+ * the runtime sees one combined Set<string>. No schema migration; missing
+ * file = empty list.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+// Resolve lazily on each call so test environments (which override
+// CLEMENTINE_HOME inside beforeEach) see the fresh value rather than
+// the value snapshot at module-load time.
+function baseDir() {
+    return process.env.CLEMENTINE_HOME || path.join(os.homedir(), '.clementine');
+}
+function suppressionsPath() {
+    return path.join(baseDir(), 'skill-suppressions.json');
+}
+function readFile() {
+    const filePath = suppressionsPath();
+    if (!existsSync(filePath))
+        return { global: [] };
+    try {
+        const raw = JSON.parse(readFileSync(filePath, 'utf-8'));
+        if (!raw || typeof raw !== 'object')
+            return { global: [] };
+        const out = { global: Array.isArray(raw.global) ? raw.global.map(String) : [] };
+        for (const key of Object.keys(raw)) {
+            if (key === 'global')
+                continue;
+            if (Array.isArray(raw[key]))
+                out[key] = raw[key].map(String);
+        }
+        return out;
+    }
+    catch {
+        return { global: [] };
+    }
+}
+function writeFile(data) {
+    const dir = baseDir();
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    writeFileSync(suppressionsPath(), JSON.stringify(data, null, 2));
+}
+/**
+ * Read the merged set of manually suppressed skill names for a given
+ * agent context. Includes the global list always; adds the agent-specific
+ * list when `agentSlug` is provided.
+ */
+export function getManualSuppressions(agentSlug) {
+    const data = readFile();
+    const merged = new Set(data.global ?? []);
+    if (agentSlug && Array.isArray(data[agentSlug])) {
+        for (const name of data[agentSlug])
+            merged.add(name);
+    }
+    return merged;
+}
+/** List the full suppression file as the dashboard sees it. */
+export function listAllSuppressions() {
+    return readFile();
+}
+/**
+ * Toggle a skill's suppression state for a given scope. Returns the
+ * resulting per-scope list so the UI can re-render without a refetch.
+ *
+ * - `scope === 'global'` writes to `data.global`
+ * - any other scope value treats it as an agent slug
+ */
+export function setSuppression(skillName, scope, suppressed) {
+    const data = readFile();
+    const key = scope === 'global' ? 'global' : scope;
+    const list = new Set(Array.isArray(data[key]) ? data[key] : []);
+    if (suppressed)
+        list.add(skillName);
+    else
+        list.delete(skillName);
+    data[key] = [...list].sort();
+    writeFile(data);
+    return { scope: key, list: data[key] };
+}
+//# sourceMappingURL=skill-suppressions.js.map

package/dist/cli/dashboard.js

@@ -19,7 +19,7 @@ import { TunnelManager } from './tunnel.js';
 import { AgentManager } from '../agent/agent-manager.js';
 import { discoverMcpServers, getClaudeIntegrations } from '../agent/mcp-bridge.js';
 import { buildBuilderEnrichedMessage, builderSessionKey } from '../dashboard/builder/prompt.js';
-import { AGENTS_DIR, SESSIONS_FILE, applyOneMillionContextRecovery, looksLikeClaudeOneMillionContextError, normalizeClaudeSdkOptionsForOneMillionContext, } from '../config.js';
+import { AGENTS_DIR, MEMORY_FILE, SESSIONS_FILE, applyOneMillionContextRecovery, looksLikeClaudeOneMillionContextError, normalizeClaudeSdkOptionsForOneMillionContext, } from '../config.js';
 import { parseTasks } from '../tools/shared.js';
 import { todayISO, CronRunLog } from '../gateway/cron-scheduler.js';
 import { goalsRouter } from './routes/goals.js';
@@ -3529,6 +3529,70 @@ export async function cmdDashboard(opts) {
     app.get('/api/memory', async (_req, res) => {
         res.json(await getMemory());
     });
+    // ── MEMORY.md inline editor (1.18.127) ────────────────────────────
+    // GET / PUT for the long-term memory file. Per-agent variant via
+    // ?agent=<slug>. mtimeMs round-tripped so the dashboard can detect
+    // an out-of-band edit (Obsidian, agent extraction) and refuse to
+    // clobber it on save.
+    function resolveMemoryPath(agentParam) {
+        if (!agentParam || agentParam === 'global')
+            return MEMORY_FILE;
+        // Agent slug — must match an existing agent directory. Refuse traversal.
+        if (!/^[a-z0-9][a-z0-9-]{0,63}$/.test(agentParam)) {
+            throw new Error('invalid agent slug');
+        }
+        return path.join(AGENTS_DIR, agentParam, 'MEMORY.md');
+    }
+    app.get('/api/memory/md', (req, res) => {
+        try {
+            const agentParam = typeof req.query.agent === 'string' ? req.query.agent : undefined;
+            const filePath = resolveMemoryPath(agentParam);
+            if (!existsSync(filePath)) {
+                return res.json({ content: '', mtimeMs: 0, agentSlug: agentParam ?? 'global', exists: false, filePath });
+            }
+            const content = readFileSync(filePath, 'utf-8');
+            const mtimeMs = statSync(filePath).mtimeMs;
+            res.json({ content, mtimeMs, agentSlug: agentParam ?? 'global', exists: true, filePath });
+        }
+        catch (err) {
+            res.status(400).json({ error: String(err instanceof Error ? err.message : err) });
+        }
+    });
+    app.put('/api/memory/md', (req, res) => {
+        try {
+            const agentParam = typeof req.query.agent === 'string' ? req.query.agent : undefined;
+            const filePath = resolveMemoryPath(agentParam);
+            const body = (req.body ?? {});
+            if (typeof body.content !== 'string') {
+                return res.status(400).json({ error: 'content (string) required' });
+            }
+            // Conflict detection: if the file already exists and its mtime has
+            // moved past what the client last saw, refuse the write so we don't
+            // clobber an Obsidian save or an agent extraction. Client surfaces a
+            // "reload?" toast on 409.
+            if (existsSync(filePath) && typeof body.expectedMtimeMs === 'number' && body.expectedMtimeMs > 0) {
+                const currentMtime = statSync(filePath).mtimeMs;
+                // 2-second tolerance covers same-second saves under filesystem mtime resolution.
+                if (currentMtime - body.expectedMtimeMs > 2000) {
+                    return res.status(409).json({
+                        error: 'File changed on disk since you loaded it. Reload to see the latest version.',
+                        currentMtimeMs: currentMtime,
+                    });
+                }
+            }
+            // Ensure parent dir exists (per-agent MEMORY.md is created lazily).
+            const parentDir = path.dirname(filePath);
+            if (!existsSync(parentDir)) {
+                mkdirSync(parentDir, { recursive: true });
+            }
+            writeFileSync(filePath, body.content);
+            const mtimeMs = statSync(filePath).mtimeMs;
+            res.json({ ok: true, mtimeMs, bytes: Buffer.byteLength(body.content, 'utf-8') });
+        }
+        catch (err) {
+            res.status(500).json({ error: String(err instanceof Error ? err.message : err) });
+        }
+    });
     app.get('/api/logs', (req, res) => {
         const lines = parseInt(String(req.query.lines ?? '200'), 10);
         res.json({ content: getLogs(lines) });
@@ -3696,6 +3760,21 @@ export async function cmdDashboard(opts) {
     }
     // Let the lazy-gateway dispatcher publish deep_result events through SSE.
     dashboardSseBroadcast = broadcastEvent;
+    // 1.18.127 — bridge memory-extraction events from assistant.ts → SSE.
+    // The dashboard chat panel listens on the same SSE stream and renders
+    // a "📝 Noted: <fact>" toast whenever the background extractor writes
+    // something. Silent until then — no traffic when no extraction fires.
+    (async () => {
+        try {
+            const { setMemoryExtractionListener } = await import('../agent/memory-events.js');
+            setMemoryExtractionListener((event) => {
+                broadcastEvent({ type: 'memory_extracted', data: event });
+            });
+        }
+        catch (err) {
+            console.warn('Failed to wire memory-extraction SSE bridge:', err);
+        }
+    })();
     // ── Builder event bridge ──────────────────────────────────────
     // Forward events from src/dashboard/builder/events.ts through SSE so the
     // Builder page can update its canvas live as the agent edits via MCP tools.
@@ -4504,6 +4583,41 @@ export async function cmdDashboard(opts) {
             res.status(500).json({ ok: false, error: String(err) });
         }
     });
+    // ── Skill suppressions (1.18.127) ──────────────────────────────────
+    // Lets the user manually suppress skills from auto-match retrieval —
+    // a complement to the memory store's automatic feedback-driven
+    // suppression. Storage is a single JSON file under ~/.clementine/.
+    app.get('/api/skills/suppressions', async (_req, res) => {
+        try {
+            const { listAllSuppressions } = await import('../agent/skill-suppressions.js');
+            res.json({ ok: true, suppressions: listAllSuppressions() });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err) });
+        }
+    });
+    app.put('/api/skills/suppressions/:name', async (req, res) => {
+        try {
+            const name = req.params.name;
+            if (!name) {
+                res.status(400).json({ ok: false, error: 'name required' });
+                return;
+            }
+            const body = (req.body ?? {});
+            const suppressed = body.suppressed === true;
+            const scope = typeof body.scope === 'string' && body.scope.length > 0 ? body.scope : 'global';
+            // Slug-shape validation when scope is per-agent (anything other than "global").
+            if (scope !== 'global' && !/^[a-z0-9][a-z0-9-]{0,63}$/.test(scope)) {
+                return res.status(400).json({ ok: false, error: 'invalid scope (must be "global" or a valid agent slug)' });
+            }
+            const { setSuppression } = await import('../agent/skill-suppressions.js');
+            const result = setSuppression(name, scope, suppressed);
+            res.json({ ok: true, ...result });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err) });
+        }
+    });
     // ── Skill migration (legacy .md → folder/SKILL.md) ─────────────────
     // Two endpoints: per-skill and bulk. Both wrap migrateLegacySkill /
     // migrateAllLegacySkills from skill-store.ts. The original .md is
@@ -7603,6 +7717,13 @@ If the tool returns nothing or errors, return an empty array \`[]\`.`,
                 mcpServers: mcpInfo,
                 composioConnected: plan.composioConnected,
                 externalConnected: plan.externalConnected,
+                // 1.18.127 — surface the scope-widening from 1.18.125 so the UI can
+                // show "this skill brought in `Bash` + `gmail`" with attribution.
+                // `widenedFromSkills.tools` and `.mcpServers` only contain entries
+                // that were ADDED on top of the cron's own allowlists. Empty arrays
+                // when the cron is unrestricted (skill scope was implicitly allowed)
+                // or when no pinned skill widened anything.
+                widenedFromSkills: plan.widenedFromSkills,
                 tier: plan.tier,
                 effort: plan.effort,
                 maxBudgetUsd: plan.maxBudgetUsd ?? null,
@@ -18652,6 +18773,31 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
               </div>
               <div class="card-body" id="panel-memory"><div class="skel-block"><div class="skel-row med"></div><div class="skel-row"></div><div class="skel-row short"></div></div></div>
             </div>
+            <!-- 1.18.127 — MEMORY.md inline editor. Lets the user seed
+                 long-term memory directly without leaving the dashboard.
+                 Per-agent toggle (global / Sasha / Ross / …) reads + writes
+                 the right MEMORY.md file. mtime conflict-detection blocks
+                 clobbering an Obsidian save mid-edit. -->
+            <div class="card" style="margin-bottom:14px">
+              <div class="card-header" style="display:flex;align-items:center;justify-content:space-between;gap:8px;flex-wrap:wrap">
+                <span>Edit MEMORY.md</span>
+                <div style="display:flex;align-items:center;gap:8px">
+                  <select id="memory-md-scope" onchange="loadMemoryMdEditor()" style="font-size:12px;padding:4px 6px;border:1px solid var(--border);border-radius:4px;background:var(--bg-input);color:var(--text-primary)">
+                    <option value="global">Global (Clementine)</option>
+                  </select>
+                  <button class="btn-sm" onclick="loadMemoryMdEditor()" title="Reload from disk" style="font-size:11px;padding:4px 10px">Reload</button>
+                  <button id="memory-md-save-btn" class="btn-sm btn-primary" onclick="saveMemoryMd()" style="font-size:11px;padding:4px 10px" disabled>Save</button>
+                </div>
+              </div>
+              <div class="card-body" style="padding:14px">
+                <div id="memory-md-status" style="font-size:11px;color:var(--text-muted);margin-bottom:8px">Loading…</div>
+                <textarea id="memory-md-editor" placeholder="Loading…" style="width:100%;min-height:280px;padding:10px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px;line-height:1.5;border:1px solid var(--border);border-radius:6px;background:var(--bg-input);color:var(--text-primary);resize:vertical" oninput="onMemoryMdInput()"></textarea>
+                <div style="display:flex;align-items:center;justify-content:space-between;margin-top:8px;font-size:11px;color:var(--text-muted)">
+                  <span id="memory-md-counter">0 chars</span>
+                  <span id="memory-md-path" style="font-family:ui-monospace,SFMono-Regular,Menlo,monospace"></span>
+                </div>
+              </div>
+            </div>
             <div class="card" style="margin-bottom:14px">
               <div class="card-header" style="display:flex;align-items:center;justify-content:space-between">
                 <span>Recent writes</span>
@@ -20863,6 +21009,21 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
             <button class="btn-sm btn-primary" style="white-space:nowrap;padding:6px 12px;border-radius:6px;cursor:pointer" onclick="restartDaemonFromDashboard()">Restart Clementine</button>
           </div>
           <div id="budget-health-content" style="margin-bottom:16px"><div class="empty-state">Loading budget health...</div></div>
+          <!-- 1.18.127 — Notification preferences. Single toggle for now;
+               room to grow into a full notification settings card. -->
+          <div class="card" style="margin-bottom:16px">
+            <div class="card-header">Notifications</div>
+            <div class="card-body" style="padding:14px 16px;display:flex;align-items:center;justify-content:space-between;gap:14px;flex-wrap:wrap">
+              <div>
+                <div style="font-size:13px;color:var(--text-primary);font-weight:500">Silent learning mode</div>
+                <div style="font-size:11px;color:var(--text-muted);margin-top:4px">When off, I show a small toast every time I save a fact / note / task to memory after a chat.</div>
+              </div>
+              <label style="display:flex;align-items:center;gap:8px;cursor:pointer">
+                <input type="checkbox" id="silent-learning-toggle" onchange="toggleSilentLearning(this.checked)">
+                <span style="font-size:12px;color:var(--text-secondary)">Silence</span>
+              </label>
+            </div>
+          </div>
           <div id="settings-content"><div class="empty-state">Loading settings...</div></div>
         </div>
         <div class="tab-pane" id="tab-settings-remote">
@@ -21093,6 +21254,21 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
           </div>
         </div>
 
+        <!-- 1.18.128 — Project Context promoted to Basics. Was buried in
+             the Scope tab where users were missing it. Selecting a project
+             gives the task that project's CLAUDE.md, MCP config, and cwd —
+             usually the single most impactful field after Prompt. -->
+        <div class="cron-section-card" data-config-tab="basics">
+          <h4>Project Context <span style="color:var(--text-muted);font-weight:normal;font-size:13px">(optional)</span></h4>
+          <p class="cron-section-desc">Run this task inside a project directory. The agent picks up that project's <code>CLAUDE.md</code>, MCP config, and any context files alongside the cwd.</p>
+          <div class="form-group">
+            <select id="cron-workdir">
+              <option value="">None — runs in default context</option>
+            </select>
+            <div class="form-hint">No projects yet? <a href="#" onclick="navigateTo(\\x27settings\\x27, { tab: \\x27projects\\x27 }); closeCronModal(); return false" style="color:var(--accent)">Add one →</a></div>
+          </div>
+        </div>
+
         <!-- Schedule -->
         <div class="cron-section-card" data-config-tab="basics">
           <h4>Schedule</h4>
@@ -21288,25 +21464,18 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
           </div>
         </div>
 
-        <!-- ── Scope: where the task can read/write ── -->
+        <!-- ── Scope: extra read directories beyond the project cwd ── -->
+        <!-- 1.18.128 — Project Context picker moved up to Basics. This
+             section now only owns Additional read directories, which is
+             a power-user feature anyway. -->
         <div class="cron-section-card" data-config-tab="scope">
           <h4>Scope</h4>
-          <p class="cron-section-desc">Where the agent runs and what files it can read.</p>
-          <div class="form-row">
-            <div class="form-group">
-              <label class="form-label">Project Context <span style="color:var(--text-muted);font-weight:normal">(optional)</span></label>
-              <select id="cron-workdir">
-                <option value="">None — runs in default context</option>
-              </select>
-              <div class="form-hint">Run inside a project directory. Agent gets that project's CLAUDE.md.</div>
-            </div>
-          </div>
-          <!-- PRD Phase 1: read scope beyond cwd. One absolute path per line. -->
+          <p class="cron-section-desc">Extra directories the agent gets read access to beyond the project cwd. Most tasks won't need this.</p>
           <div class="form-row">
             <div class="form-group" style="flex:1">
               <label class="form-label">Additional read directories <span style="color:var(--text-muted);font-weight:normal">(optional)</span></label>
               <textarea id="cron-add-dirs" rows="2" placeholder="/Users/me/notes&#10;/Users/me/clients/acme" style="font-family:'JetBrains Mono',monospace;font-size:11px"></textarea>
-              <div class="form-hint">One absolute path per line. The agent gets read access to these in addition to the Project Context cwd.</div>
+              <div class="form-hint">One absolute path per line. The Project Context above already gives the agent its cwd; use this for extra read scope only.</div>
             </div>
           </div>
         </div>
@@ -22820,6 +22989,7 @@ function switchTab(group, tab) {
     if (tab === 'search') {
       // Consolidated Memory tab: search results + stats + MEMORY.md + recent writes + supersedes + coverage strip.
       refreshMemory();
+      if (typeof loadMemoryMdEditor === 'function') loadMemoryMdEditor();
       if (typeof refreshRecentWrites === 'function') refreshRecentWrites();
       if (typeof refreshRecentEpisodes === 'function') refreshRecentEpisodes();
       if (typeof refreshCommitments === 'function') refreshCommitments();
@@ -22848,6 +23018,7 @@ function switchTab(group, tab) {
   }
   if (group === 'settings') {
     if (tab === 'general' && typeof refreshSettings === 'function') refreshSettings();
+    if (tab === 'general' && typeof initSilentLearningToggle === 'function') initSilentLearningToggle();
     if (tab === 'integrations') { refreshSalesforce(); refreshComposioConnections(); refreshToolPreferences(); refreshMcpServers(); refreshClaudeIntegrations(); }
     if (tab === 'remote') refreshRemoteAccess();
     if (tab === 'security') refreshAuthSessions();
@@ -23885,6 +24056,28 @@ function dismissRestartRequiredBanner() {
   if (existing) existing.remove();
 }
 
+// 1.18.127 — silent learning mode toggle. Persisted to localStorage so
+// the preference survives page reloads. The dashboard SSE handler at
+// line ~39660 reads this flag to decide whether to render extraction
+// toasts when the background memory extractor writes facts.
+function toggleSilentLearning(silent) {
+  try {
+    if (silent) localStorage.setItem('clem-silent-learning', '1');
+    else localStorage.removeItem('clem-silent-learning');
+    toast(silent ? 'Silent learning ON — extraction toasts hidden.' : 'Silent learning OFF — you\\'ll see a toast when I save facts.', 'info');
+  } catch (_) { /* localStorage may be disabled */ }
+}
+
+// Restore the toggle state on page load so the checkbox reflects the
+// user's last preference. Defaults to OFF (visible toasts) for new users.
+function initSilentLearningToggle() {
+  try {
+    var box = document.getElementById('silent-learning-toggle');
+    if (!box) return;
+    box.checked = localStorage.getItem('clem-silent-learning') === '1';
+  } catch (_) { /* non-fatal */ }
+}
+
 async function restartDaemonFromDashboard(skipConfirm) {
   if (!skipConfirm && !confirm('Restart Clementine now? Active work may pause briefly while the daemon reloads.')) return;
   toast('Restarting Clementine...', 'info');
@@ -26911,9 +27104,14 @@ async function refreshProjects(preloaded) {
         ? '<div style="color:var(--accent);margin-bottom:4px;font-size:12px">' + esc(p.userDescription) + '</div>'
         : '';
       const idx = projectsData.indexOf(p);
+      // 1.18.128 — "+ New task in this project" CTA: opens the cron creation
+      // modal with the project pre-selected as Project Context. Closes the
+      // mental gap between "I have a project with built-up context" and
+      // "I need to schedule a task that uses it."
+      const newTaskBtn = '<button class="btn btn-sm" style="font-size:11px" onclick="openCronModalForProject(' + idx + ')" title="Create a scheduled task that runs inside this project">+ New task</button>';
       const linkBtn = p.linked
-        ? '<button class="btn btn-sm" style="font-size:11px" onclick="openProjectEditorByIdx(' + idx + ')">Edit</button> <button class="btn btn-sm btn-danger" style="font-size:11px" onclick="unlinkProjectByIdx(' + idx + ')">Unlink</button>'
-        : '<button class="btn btn-sm btn-primary" style="font-size:11px" onclick="openProjectEditorByIdx(' + idx + ')">Link</button>';
+        ? newTaskBtn + ' <button class="btn btn-sm" style="font-size:11px" onclick="openProjectEditorByIdx(' + idx + ')">Edit</button> <button class="btn btn-sm btn-danger" style="font-size:11px" onclick="unlinkProjectByIdx(' + idx + ')">Unlink</button>'
+        : newTaskBtn + ' <button class="btn btn-sm btn-primary" style="font-size:11px" onclick="openProjectEditorByIdx(' + idx + ')">Link</button>';
       html += '<div class="card" style="cursor:default">'
         + '<div class="card-header" style="display:flex;align-items:center;justify-content:space-between">'
         + '<strong>' + esc(p.name) + '</strong>'
@@ -27275,12 +27473,18 @@ async function _openSkillModal(opts) {
       +     '<input id="skill-modal-name" type="text" placeholder="e.g. morning-briefing" style="width:100%;padding:8px 10px;font-size:13px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);margin-bottom:12px;font-family:\\x27JetBrains Mono\\x27,monospace">'
       +     '<label style="display:block;font-size:12px;color:var(--text-secondary);margin-bottom:4px;font-weight:500">Display title <span style="color:var(--text-muted)">(optional, friendlier name)</span></label>'
       +     '<input id="skill-modal-title" type="text" placeholder="e.g. Morning Briefing" style="width:100%;padding:8px 10px;font-size:13px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);margin-bottom:12px">'
-      +     '<label style="display:block;font-size:12px;color:var(--text-secondary);margin-bottom:4px;font-weight:500">Description <span style="color:var(--text-muted)">(what this skill does — used by Claude to know when to apply it)</span></label>'
-      +     '<textarea id="skill-modal-desc" rows="2" placeholder="One paragraph: what does this skill do, when should Claude run it?" style="width:100%;padding:8px 10px;font-size:13px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);margin-bottom:12px;font-family:inherit;resize:vertical"></textarea>'
+      +     '<div style="display:flex;align-items:baseline;justify-content:space-between;margin-bottom:4px">'
+      +       '<label style="font-size:12px;color:var(--text-secondary);font-weight:500">Description <span style="color:var(--text-muted)">(what this skill does — used by Claude to know when to apply it)</span></label>'
+      +       '<span id="skill-modal-desc-counter" style="font-size:10px;color:var(--text-muted);font-variant-numeric:tabular-nums">0 / 1024 chars</span>'
+      +     '</div>'
+      +     '<textarea id="skill-modal-desc" rows="2" oninput="updateSkillModalCounters()" placeholder="One paragraph: what does this skill do, when should Claude run it?" style="width:100%;padding:8px 10px;font-size:13px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);margin-bottom:12px;font-family:inherit;resize:vertical"></textarea>'
       +     '<label style="display:block;font-size:12px;color:var(--text-secondary);margin-bottom:4px;font-weight:500">Allowed tools <span style="color:var(--text-muted)">(comma-separated, leave blank for default)</span></label>'
       +     '<input id="skill-modal-tools" type="text" placeholder="e.g. Read, Bash, mcp__supabase__list_tables" style="width:100%;padding:8px 10px;font-size:13px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);margin-bottom:12px">'
-      +     '<label style="display:block;font-size:12px;color:var(--text-secondary);margin-bottom:4px;font-weight:500">Procedure <span style="color:var(--text-muted)">(Markdown — the actual steps Claude follows)</span></label>'
-      +     '<textarea id="skill-modal-body" rows="14" placeholder="# Morning Briefing\\n\\nSteps Claude follows when this skill is invoked.\\n\\n1. Check the inbox.\\n2. Summarize.\\n3. Send to Discord." style="width:100%;padding:10px 12px;font-size:12px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);font-family:\\x27JetBrains Mono\\x27,monospace;line-height:1.55;resize:vertical"></textarea>'
+      +     '<div style="display:flex;align-items:baseline;justify-content:space-between;margin-bottom:4px">'
+      +       '<label style="font-size:12px;color:var(--text-secondary);font-weight:500">Procedure <span style="color:var(--text-muted)">(Markdown — the actual steps Claude follows)</span></label>'
+      +       '<span id="skill-modal-body-counter" style="font-size:10px;color:var(--text-muted);font-variant-numeric:tabular-nums">0 lines</span>'
+      +     '</div>'
+      +     '<textarea id="skill-modal-body" rows="14" oninput="updateSkillModalCounters()" placeholder="# Morning Briefing\\n\\nSteps Claude follows when this skill is invoked.\\n\\n1. Check the inbox.\\n2. Summarize.\\n3. Send to Discord." style="width:100%;padding:10px 12px;font-size:12px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);font-family:\\x27JetBrains Mono\\x27,monospace;line-height:1.55;resize:vertical"></textarea>'
       +     '<div id="skill-modal-error" style="display:none;color:var(--red);font-size:12px;margin-top:10px;padding:8px 10px;background:rgba(239,68,68,0.08);border:1px solid var(--red);border-radius:6px"></div>'
       +   '</div>'
       +   '<div style="display:flex;justify-content:flex-end;gap:8px;padding:14px 20px;border-top:1px solid var(--border);background:var(--bg-secondary)">'
@@ -27303,6 +27507,31 @@ async function _openSkillModal(opts) {
   if (errEl) { errEl.style.display = 'none'; errEl.textContent = ''; }
   modal.style.display = 'flex';
   document.getElementById('skill-modal-name').focus();
+  if (typeof updateSkillModalCounters === 'function') updateSkillModalCounters();
+}
+
+// 1.18.127 — live char/line counters under description + body. Color
+// shifts at 80% (amber) and 100% (red) of the Anthropic-spec ceilings
+// so the user knows before submission rather than after.
+function updateSkillModalCounters() {
+  var descEl = document.getElementById('skill-modal-desc');
+  var descCounter = document.getElementById('skill-modal-desc-counter');
+  var bodyEl = document.getElementById('skill-modal-body');
+  var bodyCounter = document.getElementById('skill-modal-body-counter');
+  if (descEl && descCounter) {
+    var n = (descEl.value || '').length;
+    var pct = n / 1024;
+    var color = pct >= 1 ? 'var(--red)' : pct >= 0.8 ? 'var(--yellow)' : 'var(--text-muted)';
+    descCounter.textContent = n + ' / 1024 chars';
+    descCounter.style.color = color;
+  }
+  if (bodyEl && bodyCounter) {
+    var lines = (bodyEl.value || '').split('\\n').length;
+    var bpct = lines / 500;
+    var bcolor = bpct >= 1 ? 'var(--red)' : bpct >= 0.8 ? 'var(--yellow)' : 'var(--text-muted)';
+    bodyCounter.textContent = lines + ' / 500 lines (recommended)';
+    bodyCounter.style.color = bcolor;
+  }
 }
 
 function closeSkillModal() {
@@ -27622,11 +27851,54 @@ async function showSkillDetail(name) {
       return;
     }
     detailEl.innerHTML = renderSkillDetail(d.skill);
+    if (typeof loadSkillSuppressionState === 'function') loadSkillSuppressionState(name);
   } catch (e) {
     detailEl.innerHTML = '<div style="padding:24px;color:var(--red);font-size:12px">Error: ' + esc(String(e)) + '</div>';
   }
 }
 
+// 1.18.127 — fetch the current suppression state and wire the checkbox.
+// Cached per call; the file is small enough that re-fetching on every
+// detail open is fine (and ensures consistency if the user just toggled
+// from another browser tab).
+async function loadSkillSuppressionState(skillName) {
+  var checkbox = document.getElementById('skill-suppress-global');
+  var status = document.getElementById('skill-suppress-status');
+  if (!checkbox) return;
+  try {
+    var r = await apiFetch('/api/skills/suppressions');
+    var d = await r.json();
+    if (!r.ok || !d || !d.suppressions) return;
+    var globalList = Array.isArray(d.suppressions.global) ? d.suppressions.global : [];
+    checkbox.checked = globalList.indexOf(skillName) !== -1;
+    if (status) {
+      status.textContent = checkbox.checked ? 'Suppressed globally — runtime auto-match will skip this skill.' : '';
+    }
+  } catch (_) { /* non-fatal */ }
+}
+
+async function toggleSkillSuppression(skillName, scope, suppressed) {
+  var status = document.getElementById('skill-suppress-status');
+  try {
+    var r = await apiFetch('/api/skills/suppressions/' + encodeURIComponent(skillName), {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ suppressed: !!suppressed, scope: scope }),
+    });
+    var d = await r.json();
+    if (!r.ok) {
+      toast(d.error || 'Failed to update suppression', 'error');
+      return;
+    }
+    if (status) {
+      status.textContent = suppressed ? 'Suppressed globally — runtime auto-match will skip this skill.' : '';
+    }
+    toast(suppressed ? 'Suppressed "' + skillName + '"' : 'Un-suppressed "' + skillName + '"', 'success');
+  } catch (err) {
+    toast('Failed: ' + err, 'error');
+  }
+}
+
 // ── Skill detail pane ────────────────────────────────────────────────
 // Renders a single skill in the right pane. Sections, in order:
 //   1. Header (name + 3 badges + description + file path)
@@ -27668,6 +27940,17 @@ function renderSkillDetail(s) {
     html += '<p style="font-size:12px;color:var(--text-muted);font-style:italic;margin:0">No description. Anthropic spec recommends adding one so the skill can be discovered by Claude.</p>';
   }
   html += '<div style="margin-top:10px;font-size:11px;color:var(--text-muted);font-family:\\x27JetBrains Mono\\x27,monospace">' + esc(s.filePath) + '</div>';
+  // 1.18.127 — suppression toggle. Lets the user manually hide a skill
+  // from auto-match retrieval without deleting it. Per-scope (global vs
+  // per-agent). Lazy-loaded; rendered as a placeholder, populated by
+  // loadSkillSuppressionState() right after the detail pane mounts.
+  html += '<div id="skill-suppress-row" data-skill="' + esc(fm.name) + '" style="margin-top:14px;padding:10px 12px;background:var(--bg-secondary);border:1px solid var(--border);border-radius:6px;display:flex;align-items:center;gap:10px;flex-wrap:wrap">';
+  html += '<span style="font-size:12px;color:var(--text-secondary);font-weight:500">Suppress from auto-match:</span>';
+  html += '<label style="display:flex;align-items:center;gap:6px;font-size:12px;color:var(--text-secondary);cursor:pointer">';
+  html += '<input type="checkbox" id="skill-suppress-global" onchange="toggleSkillSuppression(\\x27' + jsStr(fm.name) + '\\x27, \\x27global\\x27, this.checked)"> globally';
+  html += '</label>';
+  html += '<span id="skill-suppress-status" style="font-size:11px;color:var(--text-muted);margin-left:auto"></span>';
+  html += '</div>';
   html += '</div>';
 
   // ── 2. Validation warnings (if any)
@@ -28322,13 +28605,50 @@ async function loadSkillsCatalog() {
 
 async function loadMcpCatalog() {
   if (_mcpCatalog) return _mcpCatalog;
+  // 1.18.128 — merge Composio toolkits into the picker. discoverMcpServers()
+  // only sees Claude Desktop / Claude Code / Extensions / user-managed
+  // config, but the runtime ALSO injects every connected Composio toolkit
+  // via buildExtraMcpForRunAgent. The picker was blind to all that — users
+  // would scroll and not see Gmail, Slack, Salesforce, etc., even though
+  // those servers fire correctly when the cron runs. This fixes the picker
+  // to match runtime reality.
+  var servers = [];
   try {
     var r = await apiFetch('/api/mcp-servers');
     var d = await r.json();
-    _mcpCatalog = { servers: d.servers || [] };
-  } catch {
-    _mcpCatalog = { servers: [] };
-  }
+    servers = (d.servers || []).map(function(s) {
+      return Object.assign({}, s, { _origin: s.source || 'config' });
+    });
+  } catch (_) { servers = []; }
+  try {
+    var rc = await apiFetch('/api/composio/toolkits');
+    var dc = await rc.json();
+    if (dc && dc.enabled !== false && Array.isArray(dc.toolkits)) {
+      // Only show toolkits with at least one ACTIVE connection — those are
+      // the ones the runtime can actually call. Auth-config-only toolkits
+      // would fail tool calls, so showing them here would mislead.
+      var connected = dc.toolkits.filter(function(t) {
+        return Array.isArray(t.connections) && t.connections.some(function(c) { return c && c.status === 'ACTIVE'; });
+      });
+      var existingNames = new Set(servers.map(function(s) { return s.name; }));
+      for (var i = 0; i < connected.length; i++) {
+        var t = connected[i];
+        if (existingNames.has(t.slug)) continue; // dedup — local config wins
+        servers.push({
+          name: t.slug,
+          type: 'composio',
+          description: t.description || (t.displayName + ' (via Composio)'),
+          enabled: true,
+          source: 'composio',
+          _origin: 'composio',
+          _displayName: t.displayName,
+          _toolCount: t.toolCount,
+          _connectionCount: (t.connections || []).filter(function(c) { return c && c.status === 'ACTIVE'; }).length,
+        });
+      }
+    }
+  } catch (_) { /* Composio not enabled / API down — picker still works */ }
+  _mcpCatalog = { servers: servers };
   return _mcpCatalog;
 }
 
@@ -28373,14 +28693,50 @@ function renderSkillsPickerList() {
   listEl.innerHTML = createRow + skills.slice(0, 50).map(function(s) {
     var sel = _cronSelectedSkills.indexOf(s.name) !== -1;
     var triggers = (s.triggers || []).slice(0, 4).join(', ');
+    // 1.18.127 — pull preview metadata from the rich Skill record so the
+    // picker shows what the user is about to pin: body line count, tool
+    // count, useCount, lastUsed, and a stub warning if the body is < 5
+    // lines (placeholder skill that shouldn't go to a critical task).
+    var fm = s.frontmatter || {};
+    var ext = (fm.clementine || {});
+    var toolsAllow = (ext.tools && Array.isArray(ext.tools.allow)) ? ext.tools.allow : [];
+    var bodyText = String(s.body || '');
+    var bodyLines = bodyText ? bodyText.split('\\n').length : 0;
+    var useCount = typeof ext.useCount === 'number' ? ext.useCount : 0;
+    var lastUsedStr = ext.lastUsed || '';
+    var lastUsedAgo = '';
+    var ageDays = 999;
+    if (lastUsedStr) {
+      var lu = Date.parse(lastUsedStr);
+      if (!isNaN(lu)) {
+        ageDays = Math.floor((Date.now() - lu) / 86400000);
+        lastUsedAgo = ageDays === 0 ? 'today' : ageDays === 1 ? 'yesterday' : ageDays + 'd ago';
+      }
+    }
+    // Health pill: green (>=5 uses, fresh), yellow (untested), red (stale).
+    var health, healthColor, healthLabel;
+    if (useCount === 0) { health = 'untested'; healthColor = 'var(--yellow)'; healthLabel = 'never run'; }
+    else if (useCount < 5) { health = 'untested'; healthColor = 'var(--yellow)'; healthLabel = useCount + 'x · light usage'; }
+    else if (ageDays > 90) { health = 'stale'; healthColor = 'var(--red)'; healthLabel = useCount + 'x · stale (' + lastUsedAgo + ')'; }
+    else { health = 'healthy'; healthColor = 'var(--green)'; healthLabel = useCount + 'x' + (lastUsedAgo ? ' · ' + lastUsedAgo : ''); }
+    var stubWarn = bodyLines > 0 && bodyLines < 5
+      ? '<span style="color:var(--red);font-size:10px;margin-left:6px" title="Body is < 5 lines — likely a placeholder">⚠ stub</span>'
+      : '';
+    var metaPills = '<div class="cap-picker-row-meta" style="display:flex;align-items:center;gap:10px;flex-wrap:wrap;margin-top:4px">'
+      + '<span style="color:var(--text-muted);font-size:11px">' + bodyLines + ' line' + (bodyLines === 1 ? '' : 's') + '</span>'
+      + (toolsAllow.length > 0 ? '<span style="color:var(--text-muted);font-size:11px" title="Tools the skill declares it needs">' + toolsAllow.length + ' tool' + (toolsAllow.length === 1 ? '' : 's') + '</span>' : '')
+      + '<span style="color:' + healthColor + ';font-size:10px;font-weight:600;text-transform:uppercase;letter-spacing:0.04em" title="Skill health based on useCount + lastUsed">● ' + healthLabel + '</span>'
+      + '</div>';
     return '<div class="cap-picker-row' + (sel ? ' selected' : '') + '" onclick="addSkillToTrick(\\x27' + jsStr(s.name) + '\\x27)">'
       + '<div class="cap-picker-row-body">'
       + '<div class="cap-picker-row-title">' + esc(s.title || s.name) + ' '
       + '<span style="color:var(--text-muted);font-weight:normal;font-size:10px">' + esc(s.name) + '</span>'
       + (sel ? ' <span style="color:var(--accent);font-size:11px">✓ pinned</span>' : '')
+      + stubWarn
       + '</div>'
       + (s.description ? '<div class="cap-picker-row-desc">' + esc(s.description) + '</div>' : '')
-      + (triggers ? '<div class="cap-picker-row-meta">triggers: ' + esc(triggers) + (s.triggers && s.triggers.length > 4 ? ' …' : '') + '</div>' : '')
+      + metaPills
+      + (triggers ? '<div class="cap-picker-row-meta" style="margin-top:2px">triggers: ' + esc(triggers) + (s.triggers && s.triggers.length > 4 ? ' …' : '') + '</div>' : '')
       + '</div></div>';
   }).join('');
 }
@@ -28433,13 +28789,26 @@ function renderMcpPickerList() {
   listEl.innerHTML = servers.slice(0, 50).map(function(s) {
     var sel = _cronSelectedMcp.indexOf(s.name) !== -1;
     var enabledTag = s.enabled === false ? ' <span style="color:var(--text-muted);font-size:10px">(disabled)</span>' : '';
+    // 1.18.128 — distinct badge for Composio-sourced toolkits so users can
+    // see at a glance which servers come from local config vs the
+    // Composio account, plus a connection count for managed accounts.
+    var sourceBadge = '';
+    if (s._origin === 'composio') {
+      var connTxt = s._connectionCount ? s._connectionCount + ' conn' : 'connected';
+      sourceBadge = ' <span style="background:rgba(124,58,237,0.12);color:var(--purple);font-size:9px;padding:1px 6px;border-radius:4px;font-weight:600;text-transform:uppercase;letter-spacing:0.04em" title="Sourced from Composio account">composio</span>'
+        + ' <span style="color:var(--text-muted);font-size:10px">' + esc(connTxt) + '</span>';
+    } else if (s.source && s.source !== 'auto-detected') {
+      sourceBadge = ' <span style="background:var(--bg-tertiary);color:var(--text-muted);font-size:9px;padding:1px 6px;border-radius:4px;font-weight:600;text-transform:uppercase;letter-spacing:0.04em">' + esc(s.source) + '</span>';
+    }
+    var displayName = s._displayName || s.name;
     return '<div class="cap-picker-row mcp' + (sel ? ' selected' : '') + '" onclick="addMcpToTrick(\\x27' + jsStr(s.name) + '\\x27)">'
       + '<div class="cap-picker-row-body">'
-      + '<div class="cap-picker-row-title">' + esc(s.name) + enabledTag
+      + '<div class="cap-picker-row-title">' + esc(displayName)
+      + (displayName !== s.name ? ' <span style="color:var(--text-muted);font-weight:normal;font-size:10px">' + esc(s.name) + '</span>' : '')
+      + enabledTag + sourceBadge
       + (sel ? ' <span style="color:var(--purple);font-size:11px">✓ allowed</span>' : '')
       + '</div>'
       + (s.description ? '<div class="cap-picker-row-desc">' + esc(s.description) + '</div>' : '')
-      + (s.source ? '<div class="cap-picker-row-meta">source: ' + esc(s.source) + '</div>' : '')
       + '</div></div>';
   }).join('');
 }
@@ -29100,6 +29469,31 @@ async function enablePredictableFromBanner() {
   }
 }
 
+// 1.18.128 — open the cron modal pre-wired to a project. Called from the
+// "+ New task" button on each project card. Pre-fills cron-workdir and
+// suggests a name based on the project so the user only has to fill in
+// the prompt + schedule. The dropdown is populated by refreshProjects()
+// at page load, so the pre-filled value resolves cleanly to one of the
+// existing options.
+function openCronModalForProject(projectIdx) {
+  var p = (typeof projectsData !== 'undefined' && Array.isArray(projectsData)) ? projectsData[projectIdx] : null;
+  if (!p) { toast('Project not found.', 'error'); return; }
+  openCreateCronModal();
+  // Pre-set the project context. dropdown options were populated by
+  // refreshProjects on page load, so the value matches one of them.
+  var sel = document.getElementById('cron-workdir');
+  if (sel) sel.value = p.path;
+  // Suggest a task name based on the project — replaces non-slug chars
+  // and truncates so the slug rule passes. User can override.
+  var slugBase = (p.name || 'project').toLowerCase()
+    .replace(/[^a-z0-9-]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .slice(0, 40);
+  var nameInput = document.getElementById('cron-name');
+  if (nameInput && !nameInput.value) nameInput.value = slugBase + '-task';
+  toast('Project Context set to "' + (p.name || p.path) + '" — fill in the prompt and schedule.', 'info');
+}
+
 function openCreateCronModal(agentSlug) {
   _cronAgentContext = agentSlug || '';
   editingCronJob = null;
@@ -29381,12 +29775,46 @@ function renderCronPreview(d) {
   if (!d.effectiveAllowedTools) {
     html += '<div style="color:var(--text-muted);font-size:12px;font-style:italic">Inheriting from agent profile / SDK default — no per-trick tool restriction.</div>';
   } else {
-    html += '<div style="font-family:monospace;font-size:11px;color:var(--text-secondary);line-height:1.6">';
-    html += d.effectiveAllowedTools.map(esc).join(', ');
+    // 1.18.127 — attribute each tool to the cron's own allowlist vs a
+    // pinned-skill widening. The widenedFromSkills.tools list contains
+    // entries that were ADDED by a skill on top of the cron's base list.
+    var widenedTools = (d.widenedFromSkills && Array.isArray(d.widenedFromSkills.tools))
+      ? new Set(d.widenedFromSkills.tools) : new Set();
+    html += '<div style="font-family:monospace;font-size:11px;line-height:1.7">';
+    html += d.effectiveAllowedTools.map(function(t) {
+      if (widenedTools.has(t)) {
+        return '<span style="color:var(--purple)" title="Added by a pinned skill">' + esc(t) + ' <span style="font-style:italic;font-size:10px">(from skill)</span></span>';
+      }
+      return '<span style="color:var(--text-secondary)">' + esc(t) + '</span>';
+    }).join(', ');
     html += '</div>';
+    if (widenedTools.size > 0) {
+      html += '<div style="margin-top:8px;padding:8px 10px;border-radius:6px;background:var(--bg-tertiary);font-size:11px;color:var(--text-muted);line-height:1.5">'
+        + '<strong>Pinned-skill widening (1.18.125):</strong> a pinned skill\\'s <code>clementine.tools.allow</code> declaration added '
+        + widenedTools.size + ' tool' + (widenedTools.size === 1 ? '' : 's') + ' on top of this task\\'s base allowlist.'
+        + '</div>';
+    }
   }
   html += '</div>';
 
+  // Widened MCP servers from pinned-skill bodies (1.18.127)
+  // Skills that reference mcp__server__tool tokens in their body implicitly
+  // need that server live; surface those widenings here so the user sees
+  // exactly which MCP servers got pulled in by the skills.
+  if (d.widenedFromSkills && Array.isArray(d.widenedFromSkills.mcpServers) && d.widenedFromSkills.mcpServers.length > 0) {
+    html += '<div class="preview-section">';
+    html += '<h4>MCP servers widened by skill bodies</h4>';
+    html += '<div style="font-size:12px;color:var(--text-secondary);line-height:1.6;margin-bottom:6px">';
+    html += 'These MCP servers got attached because a pinned skill\\'s body references <code>mcp__server__tool</code> tokens.';
+    html += '</div>';
+    html += '<div>';
+    for (var wj = 0; wj < d.widenedFromSkills.mcpServers.length; wj++) {
+      html += '<span class="preview-chip pinned" style="color:var(--purple)" title="Pulled in by skill body MCP reference">' + esc(d.widenedFromSkills.mcpServers[wj]) + '</span>';
+    }
+    html += '</div>';
+    html += '</div>';
+  }
+
   // Built prompt (what the agent literally receives)
   html += '<div class="preview-section">';
   html += '<h4>Built prompt <span style="font-weight:normal;color:var(--text-muted)">(' + d.builtPrompt.length + ' chars — what the agent receives verbatim)</span></h4>';
@@ -34567,6 +34995,119 @@ function openStartUnleashedTask() {
   toast('Open a scheduled task, set Mode to Unleashed, then run it.', 'info');
 }
 
+// ── MEMORY.md inline editor (1.18.127) ──────────────────────────────
+// Three globals and four handlers. Globals are intentionally on window
+// (not module-scoped) so the inline onclick / onchange handlers in the
+// markup can reach them — this dashboard is one big inline-script SPA.
+window._memoryMdLoadedMtime = 0;
+window._memoryMdDirty = false;
+window._memoryMdSaving = false;
+
+async function loadMemoryMdEditor() {
+  var scopeEl = document.getElementById('memory-md-scope');
+  var ed = document.getElementById('memory-md-editor');
+  var statusEl = document.getElementById('memory-md-status');
+  var saveBtn = document.getElementById('memory-md-save-btn');
+  var pathEl = document.getElementById('memory-md-path');
+  if (!ed || !statusEl || !saveBtn) return;
+
+  // Populate the scope dropdown once (global + every hired agent).
+  if (scopeEl && scopeEl.options.length <= 1) {
+    try {
+      var ar = await apiFetch('/api/agents');
+      var ad = await ar.json();
+      var agents = (ad && Array.isArray(ad.agents)) ? ad.agents : [];
+      for (var i = 0; i < agents.length; i++) {
+        var slug = agents[i].slug || agents[i].name;
+        if (!slug) continue;
+        var opt = document.createElement('option');
+        opt.value = slug;
+        opt.textContent = (agents[i].name || slug) + ' (' + slug + ')';
+        scopeEl.appendChild(opt);
+      }
+    } catch (_) { /* fallback: global only */ }
+  }
+
+  var scope = scopeEl ? scopeEl.value : 'global';
+  statusEl.textContent = 'Loading…';
+  saveBtn.disabled = true;
+  try {
+    var url = '/api/memory/md' + (scope && scope !== 'global' ? '?agent=' + encodeURIComponent(scope) : '');
+    var r = await apiFetch(url);
+    var d = await r.json();
+    if (!r.ok) {
+      statusEl.textContent = 'Failed to load: ' + (d.error || r.status);
+      return;
+    }
+    ed.value = d.content || '';
+    window._memoryMdLoadedMtime = d.mtimeMs || 0;
+    window._memoryMdDirty = false;
+    if (pathEl) pathEl.textContent = d.filePath || '';
+    var existsMsg = d.exists ? '' : ' (file not yet on disk — will be created on save)';
+    statusEl.textContent = scope === 'global' ? 'Global MEMORY.md loaded' + existsMsg : 'MEMORY.md for ' + scope + ' loaded' + existsMsg;
+    updateMemoryMdCounter();
+  } catch (err) {
+    statusEl.textContent = 'Failed to load: ' + (err && err.message || err);
+  }
+}
+
+function updateMemoryMdCounter() {
+  var ed = document.getElementById('memory-md-editor');
+  var counter = document.getElementById('memory-md-counter');
+  if (!ed || !counter) return;
+  var n = (ed.value || '').length;
+  counter.textContent = n.toLocaleString() + ' chars' + (window._memoryMdDirty ? ' · unsaved' : '');
+}
+
+function onMemoryMdInput() {
+  window._memoryMdDirty = true;
+  var saveBtn = document.getElementById('memory-md-save-btn');
+  if (saveBtn) saveBtn.disabled = false;
+  updateMemoryMdCounter();
+}
+
+async function saveMemoryMd() {
+  if (window._memoryMdSaving) return;
+  var ed = document.getElementById('memory-md-editor');
+  var scopeEl = document.getElementById('memory-md-scope');
+  var statusEl = document.getElementById('memory-md-status');
+  var saveBtn = document.getElementById('memory-md-save-btn');
+  if (!ed || !statusEl || !saveBtn) return;
+  var scope = scopeEl ? scopeEl.value : 'global';
+  window._memoryMdSaving = true;
+  saveBtn.disabled = true;
+  statusEl.textContent = 'Saving…';
+  try {
+    var url = '/api/memory/md' + (scope && scope !== 'global' ? '?agent=' + encodeURIComponent(scope) : '');
+    var r = await apiFetch(url, {
+      method: 'PUT',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ content: ed.value, expectedMtimeMs: window._memoryMdLoadedMtime }),
+    });
+    var d = await r.json();
+    if (r.status === 409) {
+      statusEl.textContent = 'Conflict: ' + (d.error || 'file changed on disk');
+      toast('MEMORY.md was modified outside the dashboard. Click Reload to see the latest version.', 'warn');
+      return;
+    }
+    if (!r.ok) {
+      statusEl.textContent = 'Save failed: ' + (d.error || r.status);
+      toast('Save failed: ' + (d.error || r.status), 'error');
+      return;
+    }
+    window._memoryMdLoadedMtime = d.mtimeMs || 0;
+    window._memoryMdDirty = false;
+    statusEl.textContent = 'Saved · ' + new Date().toLocaleTimeString();
+    updateMemoryMdCounter();
+    toast('MEMORY.md saved', 'success');
+  } catch (err) {
+    statusEl.textContent = 'Save failed: ' + (err && err.message || err);
+    toast('Save failed: ' + (err && err.message || err), 'error');
+  } finally {
+    window._memoryMdSaving = false;
+  }
+}
+
 async function refreshMemoryHealth() {
   var el = document.getElementById('memory-health-content');
   if (!el) return;
@@ -39491,6 +40032,27 @@ try {
         toast('Daemon restarted \u2014 refreshing data...', 'info');
         setTimeout(function() { refreshAll(); }, 1500);
       }
+      // 1.18.127 \u2014 auto-extraction visibility. Surface a small toast when
+      // the background memory extractor writes a fact / note / task /
+      // user_model slot. Respects a localStorage "silent learning" toggle.
+      if (evt.type === 'memory_extracted') {
+        try {
+          if (localStorage.getItem('clem-silent-learning') === '1') return;
+          var d = evt.data || {};
+          var summary = d.summary || '';
+          var label = '';
+          switch (d.toolName) {
+            case 'memory_write': label = '\ud83d\udcdd Noted'; break;
+            case 'note_create':  label = '\ud83d\udcc4 Note created'; break;
+            case 'note_take':    label = '\ud83d\udcdd Note saved'; break;
+            case 'task_add':     label = '\u2705 Task added'; break;
+            case 'user_model':   label = '\ud83e\udde0 Updated user model'; break;
+            default:             label = '\ud83d\udcdd Memory updated';
+          }
+          var msg = summary ? label + ': ' + summary : label;
+          toast(msg, 'info');
+        } catch (e) { /* non-fatal */ }
+      }
       if (evt.type === 'builder') {
         try { _handleBuilderEvent(evt.data); } catch(e) { /* non-fatal */ }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clementine-agent",
-  "version": "1.18.126",
+  "version": "1.18.128",
   "description": "Clementine — Personal AI Assistant (TypeScript)",
   "type": "module",
   "main": "dist/index.js",
@@ -28,7 +28,7 @@
     "postinstall": "node scripts/postinstall.js 2>/dev/null || true"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.2.126",
+    "@anthropic-ai/claude-agent-sdk": "^0.2.137",
     "@anthropic-ai/sdk": "^0.91.0",
     "@composio/claude-agent-sdk": "^0.8.1",
     "@composio/core": "^0.8.1",