clementine-agent 1.18.127 → 1.18.129

package/dist/agent/schedule-registry.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Schedule registry — 1.18.129.
+ *
+ * The Anthropic-pure architectural shift: skills stay vanilla SKILL.md
+ * folders, scheduling lives in a separate tiny registry. Today's "fat
+ * cron" model in CRON.md duplicated ~70% of the skill schema (prompt,
+ * tools, MCP allowlists, work_dir, success criteria); this registry
+ * replaces all that with a thin {skillName → schedule} map.
+ *
+ * Storage: a single JSON file at `~/.clementine/schedules.json` with
+ * the shape:
+ *
+ *   {
+ *     "morning-briefing": {
+ *       "schedule": "0 7 * * 1-5",
+ *       "enabled": true,
+ *       "agentSlug": null,
+ *       "addedAt": "2026-05-08T...",
+ *       "lastModifiedAt": "2026-05-08T..."
+ *     }
+ *   }
+ *
+ * The cron scheduler reads this alongside CRON.md and emits one
+ * CronJobDefinition per scheduled skill. The runtime path is unchanged
+ * — the skill body becomes the prompt via the existing buildSkillContext
+ * pipeline, no special case.
+ *
+ * Coexists with CRON.md indefinitely. Both formats run today; new work
+ * goes through this registry. Phase 3 ships the migrator that converts
+ * legacy crons to scheduled skills.
+ */
+export interface ScheduleEntry {
+    /** Skill slug — must match a skill in the catalog. The runtime auto-pins
+     *  this skill, so its body becomes the prompt at fire-time. */
+    skillName: string;
+    /** Cron expression. Empty / falsy = no auto-fire (still appears on
+     *  Tasks page so the user can edit it). */
+    schedule: string;
+    /** When false the scheduler skips it. Lets users pause without losing
+     *  the schedule definition. */
+    enabled: boolean;
+    /** When set, the skill runs as the named hired agent (Sasha, Ross,
+     *  Nora, etc.). null/undefined = Clementine. Per-agent skills load
+     *  from `agents/<slug>/skills/` first; the runtime resolves precedence. */
+    agentSlug?: string | null;
+    /** ISO timestamp of when the schedule was first created. */
+    addedAt?: string;
+    /** ISO timestamp of the last edit. */
+    lastModifiedAt?: string;
+}
+/** On-disk shape — keyed by skill name for O(1) lookup + simple merge. */
+export type ScheduleFile = Record<string, Omit<ScheduleEntry, 'skillName'>>;
+/**
+ * Read every schedule entry as a flat array. Each entry includes its
+ * skill name so callers don't have to reconstruct it.
+ */
+export declare function listSchedules(): ScheduleEntry[];
+/** Read one entry by skill name. Returns null when not scheduled. */
+export declare function getSchedule(skillName: string): ScheduleEntry | null;
+export interface SetScheduleInput {
+    schedule: string;
+    enabled?: boolean;
+    agentSlug?: string | null;
+}
+/**
+ * Upsert a schedule for a skill. New entries get `addedAt`; existing
+ * entries get `lastModifiedAt` updated. Returns the resulting entry so
+ * the dashboard can re-render without a re-fetch.
+ */
+export declare function setSchedule(skillName: string, input: SetScheduleInput): ScheduleEntry;
+/** Drop the entry for a skill. No-op when nothing is scheduled. */
+export declare function removeSchedule(skillName: string): void;
+/** Toggle the enabled flag. Skill stays in the registry; just won't
+ *  fire while disabled. Caller-side convenience to avoid re-passing
+ *  schedule + agentSlug just to flip the boolean. */
+export declare function enableSchedule(skillName: string, enabled: boolean): ScheduleEntry | null;
+//# sourceMappingURL=schedule-registry.d.ts.map

package/dist/agent/schedule-registry.js

@@ -0,0 +1,147 @@
+/**
+ * Schedule registry — 1.18.129.
+ *
+ * The Anthropic-pure architectural shift: skills stay vanilla SKILL.md
+ * folders, scheduling lives in a separate tiny registry. Today's "fat
+ * cron" model in CRON.md duplicated ~70% of the skill schema (prompt,
+ * tools, MCP allowlists, work_dir, success criteria); this registry
+ * replaces all that with a thin {skillName → schedule} map.
+ *
+ * Storage: a single JSON file at `~/.clementine/schedules.json` with
+ * the shape:
+ *
+ *   {
+ *     "morning-briefing": {
+ *       "schedule": "0 7 * * 1-5",
+ *       "enabled": true,
+ *       "agentSlug": null,
+ *       "addedAt": "2026-05-08T...",
+ *       "lastModifiedAt": "2026-05-08T..."
+ *     }
+ *   }
+ *
+ * The cron scheduler reads this alongside CRON.md and emits one
+ * CronJobDefinition per scheduled skill. The runtime path is unchanged
+ * — the skill body becomes the prompt via the existing buildSkillContext
+ * pipeline, no special case.
+ *
+ * Coexists with CRON.md indefinitely. Both formats run today; new work
+ * goes through this registry. Phase 3 ships the migrator that converts
+ * legacy crons to scheduled skills.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+// Resolve lazily on each call so test environments (which override
+// CLEMENTINE_HOME inside beforeEach) see the fresh value rather than the
+// value snapshot at module-load time. Mirrors skill-suppressions.ts.
+function baseDir() {
+    return process.env.CLEMENTINE_HOME || path.join(os.homedir(), '.clementine');
+}
+function schedulesPath() {
+    return path.join(baseDir(), 'schedules.json');
+}
+function readFile() {
+    const filePath = schedulesPath();
+    if (!existsSync(filePath))
+        return {};
+    try {
+        const raw = JSON.parse(readFileSync(filePath, 'utf-8'));
+        if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+            return {};
+        const out = {};
+        for (const [name, entry] of Object.entries(raw)) {
+            if (!entry || typeof entry !== 'object' || Array.isArray(entry))
+                continue;
+            const e = entry;
+            // Tolerate partially-populated entries (a hand-edited file might
+            // have only `schedule` set). Default everything else.
+            out[name] = {
+                schedule: typeof e.schedule === 'string' ? e.schedule : '',
+                enabled: e.enabled !== false, // default true
+                agentSlug: typeof e.agentSlug === 'string' ? e.agentSlug : null,
+                addedAt: typeof e.addedAt === 'string' ? e.addedAt : undefined,
+                lastModifiedAt: typeof e.lastModifiedAt === 'string' ? e.lastModifiedAt : undefined,
+            };
+        }
+        return out;
+    }
+    catch {
+        // Malformed JSON — never throw out of the registry. Worst case the
+        // user re-creates entries via the UI; their CRON.md jobs keep firing.
+        return {};
+    }
+}
+function writeFile(data) {
+    const dir = baseDir();
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    // Sorted keys → deterministic on disk → friendly to git users who
+    // version-control their ~/.clementine/.
+    const sorted = {};
+    for (const k of Object.keys(data).sort())
+        sorted[k] = data[k];
+    writeFileSync(schedulesPath(), JSON.stringify(sorted, null, 2));
+}
+/**
+ * Read every schedule entry as a flat array. Each entry includes its
+ * skill name so callers don't have to reconstruct it.
+ */
+export function listSchedules() {
+    const file = readFile();
+    return Object.entries(file).map(([skillName, entry]) => ({ skillName, ...entry }));
+}
+/** Read one entry by skill name. Returns null when not scheduled. */
+export function getSchedule(skillName) {
+    const file = readFile();
+    const entry = file[skillName];
+    if (!entry)
+        return null;
+    return { skillName, ...entry };
+}
+/**
+ * Upsert a schedule for a skill. New entries get `addedAt`; existing
+ * entries get `lastModifiedAt` updated. Returns the resulting entry so
+ * the dashboard can re-render without a re-fetch.
+ */
+export function setSchedule(skillName, input) {
+    if (!skillName || typeof skillName !== 'string') {
+        throw new Error('setSchedule: skillName required');
+    }
+    const file = readFile();
+    const existing = file[skillName];
+    const now = new Date().toISOString();
+    const entry = {
+        schedule: input.schedule ?? '',
+        enabled: input.enabled !== false,
+        agentSlug: input.agentSlug ?? null,
+        addedAt: existing?.addedAt ?? now,
+        lastModifiedAt: now,
+    };
+    file[skillName] = entry;
+    writeFile(file);
+    return { skillName, ...entry };
+}
+/** Drop the entry for a skill. No-op when nothing is scheduled. */
+export function removeSchedule(skillName) {
+    const file = readFile();
+    if (!(skillName in file))
+        return;
+    delete file[skillName];
+    writeFile(file);
+}
+/** Toggle the enabled flag. Skill stays in the registry; just won't
+ *  fire while disabled. Caller-side convenience to avoid re-passing
+ *  schedule + agentSlug just to flip the boolean. */
+export function enableSchedule(skillName, enabled) {
+    const file = readFile();
+    const entry = file[skillName];
+    if (!entry)
+        return null;
+    entry.enabled = enabled;
+    entry.lastModifiedAt = new Date().toISOString();
+    file[skillName] = entry;
+    writeFile(file);
+    return { skillName, ...entry };
+}
+//# sourceMappingURL=schedule-registry.js.map

package/dist/cli/cron.js

@@ -62,6 +62,36 @@ export async function cmdCronRun(jobName) {
     process.env.CLEMENTINE_HOME = BASE_DIR;
     const jobs = parseCronJobs();
     let job = jobs.find((j) => j.name === jobName);
+    // 1.18.129 — Run-now fallback for skills that aren't on a schedule.
+    // The dashboard's "Run now" button on a skill detail pane calls this
+    // endpoint with the skill name. If the skill has no registry entry,
+    // synthesize a transient CronJobDefinition so the runtime can fire
+    // it once. The skill body becomes the prompt via buildSkillContext,
+    // same as scheduled-skill jobs.
+    if (!job) {
+        try {
+            const { getSkill } = await import('../agent/skill-store.js');
+            const skill = getSkill(jobName);
+            if (skill) {
+                const ext = (skill.frontmatter.clementine ?? {});
+                job = {
+                    name: skill.frontmatter.name,
+                    schedule: '0 0 1 1 *', // dummy — never auto-fires; run-now bypasses scheduling
+                    prompt: '', // buildSkillContext injects the skill body
+                    tier: 1,
+                    enabled: true,
+                    skills: [skill.frontmatter.name],
+                    agentSlug: ext.agentSlug ?? undefined,
+                    predictable: true,
+                    source: 'scheduled-skill',
+                };
+                console.log(`(running skill "${jobName}" on demand — not yet scheduled)`);
+            }
+        }
+        catch {
+            // Fall through to error
+        }
+    }
     if (!job) {
         console.error(`Job not found: ${jobName}`);
         console.error(`Available jobs: ${jobs.map((j) => j.name).join(', ') || '(none)'}`);

package/dist/cli/dashboard.js

@@ -4618,6 +4618,101 @@ export async function cmdDashboard(opts) {
             res.status(500).json({ ok: false, error: String(err) });
         }
     });
+    // ── Schedule registry (1.18.129) ───────────────────────────────────
+    // Anthropic-pure scheduling: skills stay vanilla, schedules live in
+    // ~/.clementine/schedules.json. The cron scheduler reads this in
+    // parseCronJobs alongside CRON.md, so any entry written here fires
+    // through the same runtime as legacy crons.
+    app.get('/api/schedules', async (_req, res) => {
+        try {
+            const { listSchedules } = await import('../agent/schedule-registry.js');
+            res.json({ ok: true, schedules: listSchedules() });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err) });
+        }
+    });
+    app.get('/api/schedules/:skillName', async (req, res) => {
+        try {
+            const { getSchedule } = await import('../agent/schedule-registry.js');
+            const entry = getSchedule(req.params.skillName);
+            if (!entry)
+                return res.status(404).json({ ok: false, error: 'not scheduled' });
+            res.json({ ok: true, schedule: entry });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err) });
+        }
+    });
+    app.put('/api/schedules/:skillName', async (req, res) => {
+        try {
+            const skillName = req.params.skillName;
+            if (!/^[a-z0-9][a-z0-9-]{0,63}$/.test(skillName)) {
+                return res.status(400).json({ ok: false, error: 'invalid skill name slug' });
+            }
+            const body = (req.body ?? {});
+            if (typeof body.schedule !== 'string' || !body.schedule.trim()) {
+                return res.status(400).json({ ok: false, error: 'schedule (cron expression) required' });
+            }
+            // Optional: validate agentSlug shape when provided.
+            if (body.agentSlug && body.agentSlug !== null && !/^[a-z0-9][a-z0-9-]{0,63}$/.test(body.agentSlug)) {
+                return res.status(400).json({ ok: false, error: 'invalid agentSlug' });
+            }
+            // Quick sanity check on cron expression — node-cron validates at
+            // schedule-time anyway, but a 400 here is friendlier than a server
+            // log buried in the daemon output.
+            try {
+                if (!cron.validate(body.schedule)) {
+                    return res.status(400).json({ ok: false, error: 'cron expression does not parse' });
+                }
+            }
+            catch {
+                return res.status(400).json({ ok: false, error: 'cron expression does not parse' });
+            }
+            const { setSchedule } = await import('../agent/schedule-registry.js');
+            const entry = setSchedule(skillName, {
+                schedule: body.schedule,
+                enabled: body.enabled !== false,
+                agentSlug: body.agentSlug ?? null,
+            });
+            // Hot-reload: nudge the cron scheduler so the new entry fires on
+            // its first tick instead of waiting for the next daemon restart.
+            try {
+                const gw = await getGateway();
+                const sched = gw.cronScheduler;
+                if (sched && typeof sched.reloadJobs === 'function')
+                    sched.reloadJobs();
+            }
+            catch { /* best-effort */ }
+            res.json({ ok: true, schedule: entry });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err) });
+        }
+    });
+    app.delete('/api/schedules/:skillName', async (req, res) => {
+        try {
+            const { removeSchedule } = await import('../agent/schedule-registry.js');
+            removeSchedule(req.params.skillName);
+            try {
+                const gw = await getGateway();
+                const sched = gw.cronScheduler;
+                if (sched && typeof sched.reloadJobs === 'function')
+                    sched.reloadJobs();
+            }
+            catch { /* best-effort */ }
+            // Broadcast so any open Tasks tabs drop the row immediately
+            // instead of waiting for the next refresh.
+            try {
+                broadcastEvent({ type: 'cron_deleted', data: { job: req.params.skillName, source: 'scheduled-skill' } });
+            }
+            catch { /* non-fatal */ }
+            res.json({ ok: true });
+        }
+        catch (err) {
+            res.status(500).json({ ok: false, error: String(err) });
+        }
+    });
     // ── Skill migration (legacy .md → folder/SKILL.md) ─────────────────
     // Two endpoints: per-skill and bulk. Both wrap migrateLegacySkill /
     // migrateAllLegacySkills from skill-store.ts. The original .md is
@@ -21254,6 +21349,21 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
           </div>
         </div>
 
+        <!-- 1.18.128 — Project Context promoted to Basics. Was buried in
+             the Scope tab where users were missing it. Selecting a project
+             gives the task that project's CLAUDE.md, MCP config, and cwd —
+             usually the single most impactful field after Prompt. -->
+        <div class="cron-section-card" data-config-tab="basics">
+          <h4>Project Context <span style="color:var(--text-muted);font-weight:normal;font-size:13px">(optional)</span></h4>
+          <p class="cron-section-desc">Run this task inside a project directory. The agent picks up that project's <code>CLAUDE.md</code>, MCP config, and any context files alongside the cwd.</p>
+          <div class="form-group">
+            <select id="cron-workdir">
+              <option value="">None — runs in default context</option>
+            </select>
+            <div class="form-hint">No projects yet? <a href="#" onclick="navigateTo(\\x27settings\\x27, { tab: \\x27projects\\x27 }); closeCronModal(); return false" style="color:var(--accent)">Add one →</a></div>
+          </div>
+        </div>
+
         <!-- Schedule -->
         <div class="cron-section-card" data-config-tab="basics">
           <h4>Schedule</h4>
@@ -21449,25 +21559,18 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
           </div>
         </div>
 
-        <!-- ── Scope: where the task can read/write ── -->
+        <!-- ── Scope: extra read directories beyond the project cwd ── -->
+        <!-- 1.18.128 — Project Context picker moved up to Basics. This
+             section now only owns Additional read directories, which is
+             a power-user feature anyway. -->
         <div class="cron-section-card" data-config-tab="scope">
           <h4>Scope</h4>
-          <p class="cron-section-desc">Where the agent runs and what files it can read.</p>
-          <div class="form-row">
-            <div class="form-group">
-              <label class="form-label">Project Context <span style="color:var(--text-muted);font-weight:normal">(optional)</span></label>
-              <select id="cron-workdir">
-                <option value="">None — runs in default context</option>
-              </select>
-              <div class="form-hint">Run inside a project directory. Agent gets that project's CLAUDE.md.</div>
-            </div>
-          </div>
-          <!-- PRD Phase 1: read scope beyond cwd. One absolute path per line. -->
+          <p class="cron-section-desc">Extra directories the agent gets read access to beyond the project cwd. Most tasks won't need this.</p>
           <div class="form-row">
             <div class="form-group" style="flex:1">
               <label class="form-label">Additional read directories <span style="color:var(--text-muted);font-weight:normal">(optional)</span></label>
               <textarea id="cron-add-dirs" rows="2" placeholder="/Users/me/notes&#10;/Users/me/clients/acme" style="font-family:'JetBrains Mono',monospace;font-size:11px"></textarea>
-              <div class="form-hint">One absolute path per line. The agent gets read access to these in addition to the Project Context cwd.</div>
+              <div class="form-hint">One absolute path per line. The Project Context above already gives the agent its cwd; use this for extra read scope only.</div>
             </div>
           </div>
         </div>
@@ -24836,6 +24939,17 @@ function renderScheduledTaskCard(task) {
   var badges = '';
   if (task.owner) badges += '<span class="badge badge-orange">' + esc(task.owner) + '</span>';
   if (task.category) badges += '<span class="badge badge-gray" title="Category">' + esc(task.category) + '</span>';
+  // 1.18.129 — source format badge. Scheduled skills are the new
+  // canonical format (Anthropic-pure: skill folder + thin schedule
+  // entry). Legacy CRON.md jobs carry their own prompt/tools/MCP and
+  // duplicate ~70% of skill schema; they keep working but new tasks
+  // should be skills.
+  var defObj = task.definition || {};
+  if (defObj.source === 'scheduled-skill') {
+    badges += '<span class="badge" style="background:rgba(124,58,237,0.18);color:var(--purple);font-weight:600" title="Scheduled skill — fires the named SKILL.md folder on this cadence. Click to open the skill.">SKILL</span>';
+  } else {
+    badges += '<span class="badge badge-gray" title="Legacy CRON.md job. Carries its own prompt/tools/MCP. Convert to a scheduled skill when you can.">LEGACY CRON</span>';
+  }
   if (task.predictable === true) badges += '<span class="badge badge-green" title="Contract mode — runs with only the prompt + pinned skills/tools. No MEMORY.md, no auto-matched skills, no team comms injection at fire-time.">🔒 predictable</span>';
   else if (task.predictable === false) badges += '<span class="badge badge-yellow" title="Dynamic mode — fire-time injects MEMORY.md, recent team activity, and auto-matched skills. Can drift from chat-time intent.">🔄 reads memory</span>';
   if (task.mode === 'unleashed') badges += '<span class="badge badge-purple">long-running</span>';
@@ -24889,14 +25003,109 @@ function renderScheduledTaskCard(task) {
     + renderTrickTagChips(task)
     + '<div class="task-card-badges">' + badges + '</div>'
     + '<div class="task-card-actions">'
-    + '<button class="btn-sm primary" onclick="openEditCronModal(\\x27' + safeName + '\\x27)" title="Edit task" style="background:var(--bg-tertiary);border:1px solid var(--border);color:var(--text-primary)">Edit</button>'
+    // 1.18.129 — SKILL-source tasks edit on the Skills page (the skill
+    // folder IS the source of truth); legacy CRON.md tasks keep the
+    // existing in-place editor.
+    + (defObj.source === 'scheduled-skill'
+        ? '<button class="btn-sm primary" onclick="navigateTo(\\x27skills\\x27, { skill: \\x27' + safeName + '\\x27 })" title="Edit this skill on the Skills page" style="background:var(--bg-tertiary);border:1px solid var(--border);color:var(--text-primary)">Edit skill</button>'
+        : '<button class="btn-sm primary" onclick="openEditCronModal(\\x27' + safeName + '\\x27)" title="Edit task" style="background:var(--bg-tertiary);border:1px solid var(--border);color:var(--text-primary)">Edit</button>')
     + runOrCancelBtn
     + '<button class="btn-sm secondary" onclick="openCronPreview(\\x27' + safeName + '\\x27)" title="See exactly what will run">Preview</button>'
     + '<button class="btn-sm secondary" data-trace-job="' + esc(task.name) + '" title="View execution trace">Trace</button>'
-    + '<button class="btn-sm secondary btn-danger" onclick="confirmDeleteCron(\\x27' + safeName + '\\x27)" title="Delete task">Del</button>'
+    + (defObj.source === 'scheduled-skill'
+        ? '<button class="btn-sm secondary btn-danger" onclick="unscheduleSkillFromCard(\\x27' + safeName + '\\x27)" title="Remove the schedule (skill stays)">Unschedule</button>'
+        : '<button class="btn-sm secondary btn-danger" onclick="confirmDeleteCron(\\x27' + safeName + '\\x27)" title="Delete task">Del</button>')
     + '</div></div>';
 }
 
+// 1.18.129 — replace the "+ New Task" tile with a small dropdown that
+// nudges users toward the new "schedule a skill" path. Legacy cron
+// option stays for backward compat / power users with hand-rolled
+// CRON.md jobs they want to keep editing.
+function renderNewTaskMenu() {
+  return ''
+    + '<div class="task-card-add" style="padding:14px;display:flex;flex-direction:column;align-items:stretch;gap:6px;cursor:default">'
+    +   '<button class="btn-primary" onclick="openSchedulePickerForNew()" style="font-size:12px;padding:9px 12px;border:none;border-radius:6px;background:var(--accent);color:#fff;font-weight:500;cursor:pointer;display:flex;align-items:center;justify-content:center;gap:6px">'
+    +     '+ Schedule a skill'
+    +   '</button>'
+    +   '<button onclick="openCreateCronModal(getBuildCreateOwner())" style="font-size:11px;padding:5px 10px;border:none;border-radius:4px;background:transparent;color:var(--text-muted);cursor:pointer;text-align:center" title="Legacy CRON.md format — duplicates skill schema. Prefer Schedule a skill above unless you need fat-cron features.">use legacy cron format</button>'
+    + '</div>';
+}
+
+// 1.18.129 — entry from the Tasks page: pick a skill, then open the
+// schedule overlay pre-wired for that skill. Two-step: skill picker
+// first (small modal), then the existing schedule-overlay flow.
+async function openSchedulePickerForNew() {
+  // Fetch the skill catalog so users can scan + pick.
+  var skills = [];
+  try {
+    var r = await apiFetch('/api/skills');
+    var d = await r.json();
+    if (r.ok && Array.isArray(d.skills)) skills = d.skills;
+  } catch (_) { /* fall through to empty state */ }
+
+  var modal = document.getElementById('skill-picker-for-schedule-modal');
+  if (!modal) {
+    modal = document.createElement('div');
+    modal.id = 'skill-picker-for-schedule-modal';
+    modal.className = 'modal-overlay';
+    modal.style.cssText = 'position:fixed;inset:0;background:rgba(0,0,0,0.45);display:none;align-items:center;justify-content:center;z-index:1000;padding:20px';
+    document.body.appendChild(modal);
+  }
+  var rows = '';
+  if (skills.length === 0) {
+    rows = '<div class="empty-state" style="padding:18px">No skills yet. Create one on the Skills page first, then come back to schedule it.</div>';
+  } else {
+    rows = skills.map(function(s) {
+      var fm = s.frontmatter || {};
+      var ext = fm.clementine || {};
+      var bodyLines = (s.body || '').split('\\n').length;
+      var useCount = typeof ext.useCount === 'number' ? ext.useCount : 0;
+      return ''
+        + '<div class="cap-picker-row" style="cursor:pointer" onclick="closeSkillPickerForSchedule(); openScheduleOverlayForSkill(\\x27' + jsStr(fm.name) + '\\x27, \\x27' + jsStr(ext.agentSlug || '') + '\\x27)">'
+        +   '<div class="cap-picker-row-body">'
+        +     '<div class="cap-picker-row-title">' + esc(fm.title || fm.name)
+        +       ' <span style="color:var(--text-muted);font-weight:normal;font-size:10px">' + esc(fm.name) + '</span>'
+        +     '</div>'
+        +     (fm.description ? '<div class="cap-picker-row-desc">' + esc(fm.description) + '</div>' : '')
+        +     '<div class="cap-picker-row-meta" style="display:flex;gap:10px;font-size:11px;color:var(--text-muted);margin-top:4px">'
+        +       '<span>' + bodyLines + ' lines</span>'
+        +       '<span>' + useCount + ' uses</span>'
+        +     '</div>'
+        +   '</div>'
+        + '</div>';
+    }).join('');
+  }
+  modal.innerHTML =
+    '<div style="background:var(--bg-primary);border:1px solid var(--border);border-radius:10px;width:min(640px,95vw);max-height:80vh;display:flex;flex-direction:column;box-shadow:0 16px 48px rgba(0,0,0,0.35)">'
+    +   '<div style="display:flex;align-items:center;justify-content:space-between;padding:14px 20px;border-bottom:1px solid var(--border)">'
+    +     '<h3 style="margin:0;font-size:15px;font-weight:600">Pick a skill to schedule</h3>'
+    +     '<button onclick="closeSkillPickerForSchedule()" style="background:none;border:none;font-size:18px;color:var(--text-muted);cursor:pointer">✕</button>'
+    +   '</div>'
+    +   '<div style="flex:1;overflow-y:auto;padding:6px 0">' + rows + '</div>'
+    + '</div>';
+  modal.style.display = 'flex';
+}
+
+function closeSkillPickerForSchedule() {
+  var m = document.getElementById('skill-picker-for-schedule-modal');
+  if (m) m.style.display = 'none';
+}
+
+// 1.18.129 — convenience: unschedule a skill directly from the Tasks
+// card without going through the schedule overlay.
+async function unscheduleSkillFromCard(skillName) {
+  if (!confirm('Unschedule "' + skillName + '"? The skill stays in the catalog — only the schedule is removed.')) return;
+  try {
+    var r = await apiFetch('/api/schedules/' + encodeURIComponent(skillName), { method: 'DELETE' });
+    if (!r.ok) { var d = await r.json(); toast(d.error || 'Failed', 'error'); return; }
+    toast('Unscheduled "' + skillName + '"', 'success');
+    if (typeof refreshCron === 'function') refreshCron();
+  } catch (err) {
+    toast('Failed: ' + err, 'error');
+  }
+}
+
 function renderScheduledWorkflowCard(wf) {
   var enabled = wf.enabled !== false;
   var wfId = jsStr(wf.id);
@@ -26384,11 +26593,11 @@ async function refreshCron() {
       } else {
         emptyLabel = ownerFilter === BUILD_OWNER_ALL ? 'No tasks across any agent.' : (ownerFilter ? 'No tasks for ' + ownerFilter + '.' : 'No tasks yet.');
       }
-      html += '<div class="task-card-add" onclick="openCreateCronModal(getBuildCreateOwner())">+ New Task</div>'
+      html += renderNewTaskMenu()
         + '<div class="empty-state" style="padding:18px;color:var(--text-muted);font-size:13px">' + esc(emptyLabel) + '</div>';
     } else {
       html += filteredTasks.map(renderScheduledTaskCard).join('');
-      html += '<div class="task-card-add" onclick="openCreateCronModal(getBuildCreateOwner())">+ New Task</div>';
+      html += renderNewTaskMenu();
     }
     html += '</div>';
 
@@ -27096,9 +27305,14 @@ async function refreshProjects(preloaded) {
         ? '<div style="color:var(--accent);margin-bottom:4px;font-size:12px">' + esc(p.userDescription) + '</div>'
         : '';
       const idx = projectsData.indexOf(p);
+      // 1.18.128 — "+ New task in this project" CTA: opens the cron creation
+      // modal with the project pre-selected as Project Context. Closes the
+      // mental gap between "I have a project with built-up context" and
+      // "I need to schedule a task that uses it."
+      const newTaskBtn = '<button class="btn btn-sm" style="font-size:11px" onclick="openCronModalForProject(' + idx + ')" title="Create a scheduled task that runs inside this project">+ New task</button>';
       const linkBtn = p.linked
-        ? '<button class="btn btn-sm" style="font-size:11px" onclick="openProjectEditorByIdx(' + idx + ')">Edit</button> <button class="btn btn-sm btn-danger" style="font-size:11px" onclick="unlinkProjectByIdx(' + idx + ')">Unlink</button>'
-        : '<button class="btn btn-sm btn-primary" style="font-size:11px" onclick="openProjectEditorByIdx(' + idx + ')">Link</button>';
+        ? newTaskBtn + ' <button class="btn btn-sm" style="font-size:11px" onclick="openProjectEditorByIdx(' + idx + ')">Edit</button> <button class="btn btn-sm btn-danger" style="font-size:11px" onclick="unlinkProjectByIdx(' + idx + ')">Unlink</button>'
+        : newTaskBtn + ' <button class="btn btn-sm btn-primary" style="font-size:11px" onclick="openProjectEditorByIdx(' + idx + ')">Link</button>';
       html += '<div class="card" style="cursor:default">'
         + '<div class="card-header" style="display:flex;align-items:center;justify-content:space-between">'
         + '<strong>' + esc(p.name) + '</strong>'
@@ -27839,6 +28053,7 @@ async function showSkillDetail(name) {
     }
     detailEl.innerHTML = renderSkillDetail(d.skill);
     if (typeof loadSkillSuppressionState === 'function') loadSkillSuppressionState(name);
+    if (typeof loadSkillScheduleState === 'function') loadSkillScheduleState(name);
   } catch (e) {
     detailEl.innerHTML = '<div style="padding:24px;color:var(--red);font-size:12px">Error: ' + esc(String(e)) + '</div>';
   }
@@ -27886,6 +28101,253 @@ async function toggleSkillSuppression(skillName, scope, suppressed) {
   }
 }
 
+// ── Skill schedule + Run now (1.18.129) ─────────────────────────────
+// The Anthropic-pure scheduling path: skills stay vanilla, schedules
+// live in ~/.clementine/schedules.json. This is the user's primary
+// surface for "this skill should fire on a cadence" — no cron modal.
+async function loadSkillScheduleState(skillName) {
+  var statusEl = document.getElementById('skill-schedule-status');
+  var btn = document.getElementById('skill-schedule-btn');
+  if (!statusEl) return;
+  try {
+    var r = await apiFetch('/api/schedules/' + encodeURIComponent(skillName));
+    if (r.status === 404) {
+      statusEl.textContent = 'Not scheduled — runs on demand.';
+      if (btn) btn.textContent = '⏰ Schedule';
+      return;
+    }
+    var d = await r.json();
+    if (!r.ok || !d.schedule) {
+      statusEl.textContent = 'Not scheduled — runs on demand.';
+      return;
+    }
+    var pretty = formatCronExpression ? formatCronExpression(d.schedule.schedule) : d.schedule.schedule;
+    statusEl.textContent = (d.schedule.enabled ? '✅ Scheduled — ' : '⏸ Paused — ') + pretty;
+    if (btn) btn.textContent = '⏰ Edit schedule';
+  } catch (err) {
+    statusEl.textContent = 'Schedule status unavailable.';
+  }
+}
+
+async function runSkillNow(skillName) {
+  // The /api/cron/run/:job endpoint also runs unscheduled skills — the
+  // CLI's cmdCronRun was extended in 1.18.129 to fall back to the skill
+  // catalog when the name doesn't match a registered cron job. So one
+  // endpoint handles both paths.
+  var btn = document.getElementById('skill-run-now-btn');
+  if (btn) { btn.disabled = true; btn.textContent = '⏳ Running…'; }
+  try {
+    var r = await apiFetch('/api/cron/run/' + encodeURIComponent(skillName), { method: 'POST' });
+    if (r.status === 409) {
+      toast('Already running. Wait for it to finish before firing again.', 'warn');
+      return;
+    }
+    var d = await r.json();
+    if (!r.ok) { toast(d.error || 'Run failed', 'error'); return; }
+    toast('Started "' + skillName + '" — output streams to chat.', 'success');
+  } catch (err) {
+    toast('Failed: ' + err, 'error');
+  } finally {
+    if (btn) { btn.disabled = false; btn.textContent = '▶ Run now'; }
+  }
+}
+
+// Open the schedule overlay for a specific skill. The overlay is
+// pre-filled from the registry when a schedule already exists.
+async function openScheduleOverlayForSkill(skillName, agentSlug) {
+  var modal = document.getElementById('schedule-skill-modal');
+  if (!modal) {
+    modal = document.createElement('div');
+    modal.id = 'schedule-skill-modal';
+    modal.className = 'modal-overlay';
+    modal.style.cssText = 'position:fixed;inset:0;background:rgba(0,0,0,0.45);display:none;align-items:center;justify-content:center;z-index:1000;padding:20px';
+    modal.innerHTML =
+      '<div style="background:var(--bg-primary);border:1px solid var(--border);border-radius:10px;width:min(540px,95vw);max-height:90vh;display:flex;flex-direction:column;box-shadow:0 16px 48px rgba(0,0,0,0.35)">'
+      +   '<div style="display:flex;align-items:center;justify-content:space-between;padding:14px 20px;border-bottom:1px solid var(--border)">'
+      +     '<h3 id="ssm-title" style="margin:0;font-size:15px;font-weight:600">Schedule a skill</h3>'
+      +     '<button onclick="closeScheduleSkillModal()" style="background:none;border:none;font-size:18px;color:var(--text-muted);cursor:pointer">✕</button>'
+      +   '</div>'
+      +   '<div style="flex:1;overflow-y:auto;padding:18px 22px">'
+      +     '<input type="hidden" id="ssm-skill-name">'
+      +     '<input type="hidden" id="ssm-agent-slug">'
+      +     '<div style="font-size:12px;color:var(--text-muted);margin-bottom:14px">Skill: <code id="ssm-skill-display" style="background:var(--bg-tertiary);padding:2px 6px;border-radius:3px;font-size:11px"></code></div>'
+      +     '<label style="display:block;font-size:12px;font-weight:500;color:var(--text-secondary);margin-bottom:6px">Schedule</label>'
+      +     '<div style="display:flex;gap:8px;align-items:center;margin-bottom:8px">'
+      +       '<select id="ssm-freq" onchange="ssmUpdateFromBuilder()" style="padding:7px 8px;font-size:12px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary)">'
+      +         '<option value="daily">Every day</option>'
+      +         '<option value="weekdays">Weekdays (Mon–Fri)</option>'
+      +         '<option value="weekly">Weekly</option>'
+      +         '<option value="hourly">Every N hours</option>'
+      +         '<option value="minutes">Every N minutes</option>'
+      +       '</select>'
+      +       '<input type="number" id="ssm-interval" value="1" min="1" max="59" style="width:60px;padding:7px 8px;font-size:12px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);display:none" onchange="ssmUpdateFromBuilder()">'
+      +       '<select id="ssm-day" style="padding:7px 8px;font-size:12px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary);display:none" onchange="ssmUpdateFromBuilder()">'
+      +         '<option value="1">Monday</option><option value="2">Tuesday</option><option value="3">Wednesday</option><option value="4">Thursday</option><option value="5">Friday</option><option value="6">Saturday</option><option value="0">Sunday</option>'
+      +       '</select>'
+      +       '<select id="ssm-hour" style="padding:7px 8px;font-size:12px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary)" onchange="ssmUpdateFromBuilder()"></select>'
+      +       '<select id="ssm-minute" style="padding:7px 8px;font-size:12px;border:1px solid var(--border);border-radius:6px;background:var(--bg-secondary);color:var(--text-primary)" onchange="ssmUpdateFromBuilder()"></select>'
+      +     '</div>'
+      +     '<div style="font-size:11px;color:var(--text-muted);margin-bottom:14px">Cron: <code id="ssm-cron-preview" style="background:var(--bg-tertiary);padding:1px 5px;border-radius:3px"></code></div>'
+      +     '<label style="display:flex;align-items:center;gap:8px;font-size:12px;color:var(--text-secondary);cursor:pointer;margin-bottom:8px">'
+      +       '<input type="checkbox" id="ssm-enabled" checked> Enabled (uncheck to pause without losing the schedule)'
+      +     '</label>'
+      +     '<div id="ssm-error" style="display:none;color:var(--red);font-size:12px;margin-top:10px;padding:8px 10px;background:rgba(239,68,68,0.08);border:1px solid var(--red);border-radius:6px"></div>'
+      +   '</div>'
+      +   '<div style="display:flex;justify-content:space-between;gap:8px;padding:14px 20px;border-top:1px solid var(--border);background:var(--bg-secondary)">'
+      +     '<button id="ssm-unschedule" onclick="unscheduleSkillFromOverlay()" style="padding:7px 14px;font-size:12px;border:1px solid var(--red);border-radius:6px;background:transparent;color:var(--red);cursor:pointer;display:none">Unschedule</button>'
+      +     '<div style="flex:1"></div>'
+      +     '<button onclick="closeScheduleSkillModal()" style="padding:7px 14px;font-size:13px;border:1px solid var(--border);border-radius:6px;background:transparent;color:var(--text-primary);cursor:pointer">Cancel</button>'
+      +     '<button id="ssm-save" onclick="saveScheduleFromOverlay()" class="btn-primary" style="padding:7px 16px;font-size:13px;border:none;border-radius:6px;background:var(--accent);color:#fff;font-weight:500;cursor:pointer">Save</button>'
+      +   '</div>'
+      + '</div>';
+    document.body.appendChild(modal);
+    // Populate hour + minute dropdowns once.
+    var hourSel = document.getElementById('ssm-hour');
+    for (var h = 0; h < 24; h++) {
+      var opt = document.createElement('option');
+      opt.value = String(h);
+      var hh = h === 0 ? 12 : h > 12 ? h - 12 : h;
+      var ampm = h < 12 ? 'AM' : 'PM';
+      opt.textContent = hh + ':00 ' + ampm;
+      if (h === 9) opt.selected = true;
+      hourSel.appendChild(opt);
+    }
+    var minSel = document.getElementById('ssm-minute');
+    [0, 15, 30, 45].forEach(function(m) {
+      var opt = document.createElement('option');
+      opt.value = String(m);
+      opt.textContent = ':' + (m < 10 ? '0' + m : m);
+      minSel.appendChild(opt);
+    });
+  }
+  document.getElementById('ssm-skill-name').value = skillName;
+  document.getElementById('ssm-agent-slug').value = agentSlug || '';
+  document.getElementById('ssm-skill-display').textContent = skillName;
+  // Try to load existing schedule.
+  var existing = null;
+  try {
+    var r = await apiFetch('/api/schedules/' + encodeURIComponent(skillName));
+    if (r.ok) { var d = await r.json(); existing = d.schedule; }
+  } catch (_) { /* not scheduled */ }
+  document.getElementById('ssm-title').textContent = existing ? 'Edit schedule: ' + skillName : 'Schedule: ' + skillName;
+  document.getElementById('ssm-unschedule').style.display = existing ? '' : 'none';
+  document.getElementById('ssm-enabled').checked = existing ? existing.enabled !== false : true;
+  // Default to daily 9am for new entries; round-trip the cron expr if editing.
+  if (existing && existing.schedule) {
+    ssmInferBuilderFromCron(existing.schedule);
+  } else {
+    document.getElementById('ssm-freq').value = 'daily';
+    document.getElementById('ssm-hour').value = '9';
+    document.getElementById('ssm-minute').value = '0';
+    ssmUpdateFromBuilder();
+  }
+  document.getElementById('ssm-error').style.display = 'none';
+  modal.style.display = 'flex';
+}
+
+function closeScheduleSkillModal() {
+  var m = document.getElementById('schedule-skill-modal');
+  if (m) m.style.display = 'none';
+}
+
+// Build a cron expression from the picker fields. Mirrors the existing
+// schedule-builder in the cron modal but kept self-contained here so
+// the overlay doesn't depend on the cron-modal DOM existing.
+function ssmUpdateFromBuilder() {
+  var freq = document.getElementById('ssm-freq').value;
+  var hour = document.getElementById('ssm-hour').value || '9';
+  var minute = document.getElementById('ssm-minute').value || '0';
+  var day = document.getElementById('ssm-day').value || '1';
+  var interval = document.getElementById('ssm-interval').value || '1';
+  document.getElementById('ssm-day').style.display = freq === 'weekly' ? '' : 'none';
+  document.getElementById('ssm-interval').style.display = (freq === 'hourly' || freq === 'minutes') ? '' : 'none';
+  document.getElementById('ssm-hour').style.display = (freq === 'minutes' || freq === 'hourly') ? 'none' : '';
+  document.getElementById('ssm-minute').style.display = freq === 'minutes' ? 'none' : '';
+  var cron = '';
+  switch (freq) {
+    case 'daily':    cron = minute + ' ' + hour + ' * * *'; break;
+    case 'weekdays': cron = minute + ' ' + hour + ' * * 1-5'; break;
+    case 'weekly':   cron = minute + ' ' + hour + ' * * ' + day; break;
+    case 'hourly':   cron = '0 */' + interval + ' * * *'; break;
+    case 'minutes':  cron = '*/' + interval + ' * * * *'; break;
+  }
+  document.getElementById('ssm-cron-preview').textContent = cron;
+}
+
+// Best-effort reverse: given a cron expr, set the picker fields to a
+// sensible default. Falls back to "daily 9am" if we can't infer.
+function ssmInferBuilderFromCron(cron) {
+  var parts = (cron || '').trim().split(/\\s+/);
+  if (parts.length !== 5) { document.getElementById('ssm-freq').value = 'daily'; ssmUpdateFromBuilder(); return; }
+  var minute = parts[0], hour = parts[1], dow = parts[4];
+  if (minute.indexOf('*/') === 0) {
+    document.getElementById('ssm-freq').value = 'minutes';
+    document.getElementById('ssm-interval').value = minute.slice(2);
+  } else if (hour.indexOf('*/') === 0) {
+    document.getElementById('ssm-freq').value = 'hourly';
+    document.getElementById('ssm-interval').value = hour.slice(2);
+  } else if (dow === '1-5') {
+    document.getElementById('ssm-freq').value = 'weekdays';
+    document.getElementById('ssm-hour').value = hour;
+    document.getElementById('ssm-minute').value = minute;
+  } else if (dow !== '*' && /^[0-6]$/.test(dow)) {
+    document.getElementById('ssm-freq').value = 'weekly';
+    document.getElementById('ssm-day').value = dow;
+    document.getElementById('ssm-hour').value = hour;
+    document.getElementById('ssm-minute').value = minute;
+  } else {
+    document.getElementById('ssm-freq').value = 'daily';
+    document.getElementById('ssm-hour').value = hour;
+    document.getElementById('ssm-minute').value = minute;
+  }
+  ssmUpdateFromBuilder();
+}
+
+async function saveScheduleFromOverlay() {
+  var skillName = document.getElementById('ssm-skill-name').value;
+  var agentSlug = document.getElementById('ssm-agent-slug').value;
+  var schedule = document.getElementById('ssm-cron-preview').textContent;
+  var enabled = document.getElementById('ssm-enabled').checked;
+  var errEl = document.getElementById('ssm-error');
+  var saveBtn = document.getElementById('ssm-save');
+  if (saveBtn) { saveBtn.disabled = true; saveBtn.textContent = 'Saving…'; }
+  try {
+    var r = await apiFetch('/api/schedules/' + encodeURIComponent(skillName), {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ schedule: schedule, enabled: enabled, agentSlug: agentSlug || null }),
+    });
+    var d = await r.json();
+    if (!r.ok) {
+      if (errEl) { errEl.textContent = d.error || ('HTTP ' + r.status); errEl.style.display = ''; }
+      return;
+    }
+    closeScheduleSkillModal();
+    toast('Saved schedule for "' + skillName + '"', 'success');
+    if (typeof loadSkillScheduleState === 'function') loadSkillScheduleState(skillName);
+    if (currentPage === 'build' && typeof refreshCron === 'function') refreshCron();
+  } catch (err) {
+    if (errEl) { errEl.textContent = String(err); errEl.style.display = ''; }
+  } finally {
+    if (saveBtn) { saveBtn.disabled = false; saveBtn.textContent = 'Save'; }
+  }
+}
+
+async function unscheduleSkillFromOverlay() {
+  var skillName = document.getElementById('ssm-skill-name').value;
+  if (!confirm('Unschedule "' + skillName + '"? The skill stays — only the schedule is removed.')) return;
+  try {
+    var r = await apiFetch('/api/schedules/' + encodeURIComponent(skillName), { method: 'DELETE' });
+    if (!r.ok) { var d = await r.json(); toast(d.error || 'Failed', 'error'); return; }
+    closeScheduleSkillModal();
+    toast('Unscheduled "' + skillName + '"', 'success');
+    if (typeof loadSkillScheduleState === 'function') loadSkillScheduleState(skillName);
+    if (currentPage === 'build' && typeof refreshCron === 'function') refreshCron();
+  } catch (err) {
+    toast('Failed: ' + err, 'error');
+  }
+}
+
 // ── Skill detail pane ────────────────────────────────────────────────
 // Renders a single skill in the right pane. Sections, in order:
 //   1. Header (name + 3 badges + description + file path)
@@ -27938,6 +28400,20 @@ function renderSkillDetail(s) {
   html += '</label>';
   html += '<span id="skill-suppress-status" style="font-size:11px;color:var(--text-muted);margin-left:auto"></span>';
   html += '</div>';
+
+  // 1.18.129 — Schedule + Run-now action row. Architectural shift:
+  // skills can be invoked on demand (Run now) OR fired on a schedule
+  // (the registry maps {skill → cron expr}). Replaces the "create a
+  // cron task and pin this skill" indirection. The exact schedule
+  // state (scheduled? when?) is loaded async after the pane mounts.
+  html += '<div id="skill-schedule-row" data-skill="' + esc(fm.name) + '" style="margin-top:10px;padding:12px 14px;background:var(--bg-secondary);border:1px solid var(--border);border-radius:6px;display:flex;align-items:center;gap:10px;flex-wrap:wrap">';
+  html += '<div style="flex:1;min-width:200px">';
+  html += '<div style="font-size:12px;font-weight:500;color:var(--text-primary);margin-bottom:2px">Run this skill</div>';
+  html += '<div id="skill-schedule-status" style="font-size:11px;color:var(--text-muted)">Loading schedule…</div>';
+  html += '</div>';
+  html += '<button class="btn-sm btn-primary" id="skill-run-now-btn" onclick="runSkillNow(\\x27' + jsStr(fm.name) + '\\x27)" style="font-size:11px;padding:6px 12px;display:inline-flex;align-items:center;gap:6px" title="Fire this skill once, right now">▶ Run now</button>';
+  html += '<button class="btn-sm" id="skill-schedule-btn" onclick="openScheduleOverlayForSkill(\\x27' + jsStr(fm.name) + '\\x27, \\x27' + jsStr(s.frontmatter.clementine?.agentSlug ?? '') + '\\x27)" style="font-size:11px;padding:6px 12px" title="Schedule this skill to run automatically">⏰ Schedule</button>';
+  html += '</div>';
   html += '</div>';
 
   // ── 2. Validation warnings (if any)
@@ -28592,13 +29068,50 @@ async function loadSkillsCatalog() {
 
 async function loadMcpCatalog() {
   if (_mcpCatalog) return _mcpCatalog;
+  // 1.18.128 — merge Composio toolkits into the picker. discoverMcpServers()
+  // only sees Claude Desktop / Claude Code / Extensions / user-managed
+  // config, but the runtime ALSO injects every connected Composio toolkit
+  // via buildExtraMcpForRunAgent. The picker was blind to all that — users
+  // would scroll and not see Gmail, Slack, Salesforce, etc., even though
+  // those servers fire correctly when the cron runs. This fixes the picker
+  // to match runtime reality.
+  var servers = [];
   try {
     var r = await apiFetch('/api/mcp-servers');
     var d = await r.json();
-    _mcpCatalog = { servers: d.servers || [] };
-  } catch {
-    _mcpCatalog = { servers: [] };
-  }
+    servers = (d.servers || []).map(function(s) {
+      return Object.assign({}, s, { _origin: s.source || 'config' });
+    });
+  } catch (_) { servers = []; }
+  try {
+    var rc = await apiFetch('/api/composio/toolkits');
+    var dc = await rc.json();
+    if (dc && dc.enabled !== false && Array.isArray(dc.toolkits)) {
+      // Only show toolkits with at least one ACTIVE connection — those are
+      // the ones the runtime can actually call. Auth-config-only toolkits
+      // would fail tool calls, so showing them here would mislead.
+      var connected = dc.toolkits.filter(function(t) {
+        return Array.isArray(t.connections) && t.connections.some(function(c) { return c && c.status === 'ACTIVE'; });
+      });
+      var existingNames = new Set(servers.map(function(s) { return s.name; }));
+      for (var i = 0; i < connected.length; i++) {
+        var t = connected[i];
+        if (existingNames.has(t.slug)) continue; // dedup — local config wins
+        servers.push({
+          name: t.slug,
+          type: 'composio',
+          description: t.description || (t.displayName + ' (via Composio)'),
+          enabled: true,
+          source: 'composio',
+          _origin: 'composio',
+          _displayName: t.displayName,
+          _toolCount: t.toolCount,
+          _connectionCount: (t.connections || []).filter(function(c) { return c && c.status === 'ACTIVE'; }).length,
+        });
+      }
+    }
+  } catch (_) { /* Composio not enabled / API down — picker still works */ }
+  _mcpCatalog = { servers: servers };
   return _mcpCatalog;
 }
 
@@ -28739,13 +29252,26 @@ function renderMcpPickerList() {
   listEl.innerHTML = servers.slice(0, 50).map(function(s) {
     var sel = _cronSelectedMcp.indexOf(s.name) !== -1;
     var enabledTag = s.enabled === false ? ' <span style="color:var(--text-muted);font-size:10px">(disabled)</span>' : '';
+    // 1.18.128 — distinct badge for Composio-sourced toolkits so users can
+    // see at a glance which servers come from local config vs the
+    // Composio account, plus a connection count for managed accounts.
+    var sourceBadge = '';
+    if (s._origin === 'composio') {
+      var connTxt = s._connectionCount ? s._connectionCount + ' conn' : 'connected';
+      sourceBadge = ' <span style="background:rgba(124,58,237,0.12);color:var(--purple);font-size:9px;padding:1px 6px;border-radius:4px;font-weight:600;text-transform:uppercase;letter-spacing:0.04em" title="Sourced from Composio account">composio</span>'
+        + ' <span style="color:var(--text-muted);font-size:10px">' + esc(connTxt) + '</span>';
+    } else if (s.source && s.source !== 'auto-detected') {
+      sourceBadge = ' <span style="background:var(--bg-tertiary);color:var(--text-muted);font-size:9px;padding:1px 6px;border-radius:4px;font-weight:600;text-transform:uppercase;letter-spacing:0.04em">' + esc(s.source) + '</span>';
+    }
+    var displayName = s._displayName || s.name;
     return '<div class="cap-picker-row mcp' + (sel ? ' selected' : '') + '" onclick="addMcpToTrick(\\x27' + jsStr(s.name) + '\\x27)">'
       + '<div class="cap-picker-row-body">'
-      + '<div class="cap-picker-row-title">' + esc(s.name) + enabledTag
+      + '<div class="cap-picker-row-title">' + esc(displayName)
+      + (displayName !== s.name ? ' <span style="color:var(--text-muted);font-weight:normal;font-size:10px">' + esc(s.name) + '</span>' : '')
+      + enabledTag + sourceBadge
       + (sel ? ' <span style="color:var(--purple);font-size:11px">✓ allowed</span>' : '')
       + '</div>'
       + (s.description ? '<div class="cap-picker-row-desc">' + esc(s.description) + '</div>' : '')
-      + (s.source ? '<div class="cap-picker-row-meta">source: ' + esc(s.source) + '</div>' : '')
       + '</div></div>';
   }).join('');
 }
@@ -29406,6 +29932,31 @@ async function enablePredictableFromBanner() {
   }
 }
 
+// 1.18.128 — open the cron modal pre-wired to a project. Called from the
+// "+ New task" button on each project card. Pre-fills cron-workdir and
+// suggests a name based on the project so the user only has to fill in
+// the prompt + schedule. The dropdown is populated by refreshProjects()
+// at page load, so the pre-filled value resolves cleanly to one of the
+// existing options.
+function openCronModalForProject(projectIdx) {
+  var p = (typeof projectsData !== 'undefined' && Array.isArray(projectsData)) ? projectsData[projectIdx] : null;
+  if (!p) { toast('Project not found.', 'error'); return; }
+  openCreateCronModal();
+  // Pre-set the project context. dropdown options were populated by
+  // refreshProjects on page load, so the value matches one of them.
+  var sel = document.getElementById('cron-workdir');
+  if (sel) sel.value = p.path;
+  // Suggest a task name based on the project — replaces non-slug chars
+  // and truncates so the slug rule passes. User can override.
+  var slugBase = (p.name || 'project').toLowerCase()
+    .replace(/[^a-z0-9-]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .slice(0, 40);
+  var nameInput = document.getElementById('cron-name');
+  if (nameInput && !nameInput.value) nameInput.value = slugBase + '-task';
+  toast('Project Context set to "' + (p.name || p.path) + '" — fill in the prompt and schedule.', 'info');
+}
+
 function openCreateCronModal(agentSlug) {
   _cronAgentContext = agentSlug || '';
   editingCronJob = null;

package/dist/gateway/cron-scheduler.d.ts

@@ -17,7 +17,19 @@ export declare function todayISO(): string;
  */
 export declare function logToDailyNote(line: string): void;
 /**
- * Parse cron job definitions from vault/00-System/CRON.md frontmatter.
+ * Parse cron job definitions from two sources, merged:
+ *   1. The legacy `vault/00-System/CRON.md` frontmatter (fat cron format
+ *      — its own prompt, allowedTools, allowedMcpServers, etc.).
+ *   2. The 1.18.129 schedule registry at `~/.clementine/schedules.json`,
+ *      which holds thin {skill → schedule} bindings. Each entry is
+ *      synthesized into a CronJobDefinition where the runtime auto-pins
+ *      the named skill — the skill body becomes the prompt at fire-time
+ *      via the existing buildSkillContext pipeline. Anthropic-pure.
+ *
+ * On a name collision (CRON.md has a job whose name matches a scheduled
+ * skill) the **scheduled-skill wins**, because that's the new canonical
+ * format and the user has explicitly opted into it for that name.
+ *
  * Used by both the in-process CronScheduler and the standalone CLI runner.
  */
 export declare function parseCronJobs(): CronJobDefinition[];

package/dist/gateway/cron-scheduler.js

@@ -14,6 +14,7 @@ import matter from 'gray-matter';
 import pino from 'pino';
 import { CRON_FILE, WORKFLOWS_DIR, AGENTS_DIR, DAILY_NOTES_DIR, BASE_DIR, DISCORD_OWNER_ID, GOALS_DIR, CRON_REFLECTIONS_DIR, ADVISOR_LOG_PATH, TIMEZONE, } from '../config.js';
 import { listAllGoals, findGoalPath, readGoalById } from '../tools/shared.js';
+import { listSchedules } from '../agent/schedule-registry.js';
 import { scanner } from '../security/scanner.js';
 import { parseAllWorkflows as parseAllWorkflowsSync } from '../agent/workflow-runner.js';
 import { SelfImproveLoop } from '../agent/self-improve.js';
@@ -161,30 +162,93 @@ function parseJobYaml(job) {
     };
 }
 /**
- * Parse cron job definitions from vault/00-System/CRON.md frontmatter.
+ * Parse cron job definitions from two sources, merged:
+ *   1. The legacy `vault/00-System/CRON.md` frontmatter (fat cron format
+ *      — its own prompt, allowedTools, allowedMcpServers, etc.).
+ *   2. The 1.18.129 schedule registry at `~/.clementine/schedules.json`,
+ *      which holds thin {skill → schedule} bindings. Each entry is
+ *      synthesized into a CronJobDefinition where the runtime auto-pins
+ *      the named skill — the skill body becomes the prompt at fire-time
+ *      via the existing buildSkillContext pipeline. Anthropic-pure.
+ *
+ * On a name collision (CRON.md has a job whose name matches a scheduled
+ * skill) the **scheduled-skill wins**, because that's the new canonical
+ * format and the user has explicitly opted into it for that name.
+ *
  * Used by both the in-process CronScheduler and the standalone CLI runner.
  */
 export function parseCronJobs() {
-    if (!existsSync(CRON_FILE))
-        return [];
-    let parsed;
+    const fromCronMd = [];
+    if (existsSync(CRON_FILE)) {
+        try {
+            const parsed = matter(readFileSync(CRON_FILE, 'utf-8'));
+            const jobDefs = (parsed.data.jobs ?? []);
+            for (const job of jobDefs) {
+                const def = parseJobYaml(job);
+                if (def)
+                    fromCronMd.push(def);
+                else
+                    logger.warn({ job }, 'Skipping malformed cron job');
+            }
+        }
+        catch (err) {
+            logger.error({ err }, 'CRON.md YAML parse error — keeping schedule-registry jobs only.');
+        }
+    }
+    // 1.18.129 — schedule registry → CronJobDefinition[]. The scheduler
+    // doesn't care about the source format; each entry surfaces as a
+    // self-pinning cron whose only "prompt" is "[skill body]" — the
+    // runtime's buildSkillContext loads the actual procedure.
+    const fromRegistry = [];
     try {
-        parsed = matter(readFileSync(CRON_FILE, 'utf-8'));
+        const registry = parseScheduledSkillJobs();
+        fromRegistry.push(...registry);
     }
     catch (err) {
-        logger.error({ err }, 'CRON.md YAML parse error — keeping previous jobs. Fix the file manually.');
-        return [];
-    }
-    const jobDefs = (parsed.data.jobs ?? []);
-    const jobs = [];
-    for (const job of jobDefs) {
-        const def = parseJobYaml(job);
-        if (def)
-            jobs.push(def);
-        else
-            logger.warn({ job }, 'Skipping malformed cron job');
+        logger.error({ err }, 'schedules.json parse error — falling back to CRON.md only');
+    }
+    // Dedup by name with scheduled-skill winning. Build a Map keyed on
+    // job name; insert CRON.md first, then registry to overwrite collisions.
+    const byName = new Map();
+    for (const j of fromCronMd)
+        byName.set(j.name, j);
+    for (const j of fromRegistry)
+        byName.set(j.name, j);
+    return [...byName.values()];
+}
+/**
+ * Read the schedule registry and project each entry into a
+ * CronJobDefinition that runs the named skill on the given schedule.
+ * Skill body / tools / MCP servers all flow through buildSkillContext
+ * at fire-time — this function only concerns itself with the binding.
+ */
+function parseScheduledSkillJobs() {
+    const entries = listSchedules();
+    const out = [];
+    for (const e of entries) {
+        if (!e.skillName || !e.schedule)
+            continue;
+        out.push({
+            name: e.skillName,
+            schedule: e.schedule,
+            // Empty prompt — buildSkillContext injects the skill body. The
+            // runtime treats an empty prompt + a single pinned skill as
+            // "this skill IS the task." How-to-respond directive still applies.
+            prompt: '',
+            tier: 1,
+            enabled: e.enabled !== false,
+            skills: [e.skillName],
+            agentSlug: e.agentSlug ?? undefined,
+            // Predictable mode is the right default for scheduled skills:
+            // skip MEMORY.md auto-injection / team comms / runtime auto-match.
+            // The skill is the contract; nothing else fires.
+            predictable: true,
+            // Source marker so the dashboard can render a SKILL badge vs the
+            // legacy CRON.md badge. Not used by the runtime.
+            source: 'scheduled-skill',
+        });
     }
-    return jobs;
+    return out;
 }
 /**
  * Parse cron jobs from agent-scoped CRON.md files.

package/dist/types.d.ts

@@ -550,6 +550,14 @@ export interface CronJobDefinition {
      * Existing tricks (no field set) keep current behavior — backward compat.
      */
     predictable?: boolean;
+    /** 1.18.129 — where this cron job came from. 'cron-md' is the legacy
+     *  fat-cron format in vault/00-System/CRON.md (or per-agent CRON.md).
+     *  'scheduled-skill' is the Anthropic-pure registry — a thin entry in
+     *  ~/.clementine/schedules.json that auto-pins one named skill. The
+     *  runtime treats both identically; the field exists so the dashboard
+     *  can render a SKILL vs LEGACY CRON badge per row. Undefined =
+     *  legacy CRON.md (older parsers don't stamp this). */
+    source?: 'cron-md' | 'scheduled-skill';
 }
 export type LongTaskRisk = 'normal' | 'long' | 'huge' | 'unsafe';
 export type LongTaskRoute = 'standard' | 'checkpointed' | 'opus_1m' | 'sonnet_1m' | 'split_required';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clementine-agent",
-  "version": "1.18.127",
+  "version": "1.18.129",
   "description": "Clementine — Personal AI Assistant (TypeScript)",
   "type": "module",
   "main": "dist/index.js",