clementine-agent 1.18.174 → 1.18.176

package/dist/agent/assistant.d.ts

@@ -260,6 +260,8 @@ export declare class PersonalAssistant {
      */
     injectContext(sessionKey: string, userText: string, assistantText: string, opts?: {
         pending?: boolean;
+        model?: string;
+        countExchange?: boolean;
     }): void;
     getRecentActivity(sinceIso: string, maxEntries?: number): Array<{
         sessionKey: string;

package/dist/agent/assistant.js

@@ -13,7 +13,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { query as rawQuery, listSubagents, getSubagentMessages, SYSTEM_PROMPT_DYNAMIC_BOUNDARY, } from '@anthropic-ai/claude-agent-sdk';
 import pino from 'pino';
-import { BASE_DIR, PKG_DIR, VAULT_DIR, DAILY_NOTES_DIR, SOUL_FILE, AGENTS_FILE, MEMORY_FILE, AGENTS_DIR, ASSISTANT_NAME, OWNER_NAME, MODEL, MODELS, HEARTBEAT_MAX_TURNS, SESSION_EXCHANGE_HISTORY_SIZE, SESSION_EXCHANGE_MAX_CHARS, INJECTED_CONTEXT_MAX_CHARS, PROJECTS_META_FILE, CRON_PROGRESS_DIR, CRON_REFLECTIONS_DIR, BUDGET, TASK_BUDGET_TOKENS, TIMEZONE, CLAUDE_CODE_OAUTH_TOKEN, ANTHROPIC_API_KEY as CONFIG_ANTHROPIC_API_KEY, claudeCodeDisableOneMillionForModel, currentOneMillionContextMode, normalizeClaudeModelForOneMillionContext, normalizeClaudeSdkOptionsForOneMillionContext, looksLikeClaudeOneMillionContextError, envSnapshot, } from '../config.js';
+import { BASE_DIR, PKG_DIR, VAULT_DIR, DAILY_NOTES_DIR, SOUL_FILE, AGENTS_FILE, MEMORY_FILE, AGENTS_DIR, ASSISTANT_NAME, OWNER_NAME, MODEL, MODELS, HEARTBEAT_MAX_TURNS, SESSION_EXCHANGE_HISTORY_SIZE, SESSION_EXCHANGE_MAX_CHARS, INJECTED_CONTEXT_MAX_CHARS, PROJECTS_META_FILE, CRON_PROGRESS_DIR, CRON_REFLECTIONS_DIR, BUDGET, TASK_BUDGET_TOKENS, currentTimeZone, CLAUDE_CODE_OAUTH_TOKEN, ANTHROPIC_API_KEY as CONFIG_ANTHROPIC_API_KEY, claudeCodeDisableOneMillionForModel, currentOneMillionContextMode, normalizeClaudeModelForOneMillionContext, normalizeClaudeSdkOptionsForOneMillionContext, looksLikeClaudeOneMillionContextError, envSnapshot, } from '../config.js';
 import { summarizeIntegrationStatus } from '../config/integrations-registry.js';
 import { loadToolPreferences, computeAvailability, buildPromptInstruction, buildComposioStatusBlock, KNOWN_SERVICES, } from '../integrations/tool-preferences.js';
 import { loadClaudeIntegrations } from './mcp-bridge.js';
@@ -563,17 +563,17 @@ function extractText(blocks) {
 }
 // ── Date Helpers ────────────────────────────────────────────────────
 function formatDate(d) {
-    return formatDateInTimeZone(d, TIMEZONE);
+    return formatDateInTimeZone(d, currentTimeZone());
 }
 function formatTime(d) {
-    return formatTimeInTimeZone(d, TIMEZONE);
+    return formatTimeInTimeZone(d, currentTimeZone());
 }
 /** Local-time YYYY-MM-DD (avoids UTC date mismatch late at night). */
 function todayISO() {
-    return dateKeyInTimeZone(new Date(), TIMEZONE);
+    return dateKeyInTimeZone(new Date(), currentTimeZone());
 }
 function yesterdayISO() {
-    return dateKeyInTimeZone(new Date(Date.now() - 24 * 60 * 60 * 1000), TIMEZONE);
+    return dateKeyInTimeZone(new Date(Date.now() - 24 * 60 * 60 * 1000), currentTimeZone());
 }
 // ── Cron Output Extraction ──────────────────────────────────────────
 /** Autonomous jobs use this sentinel to mean "completed, but do not notify the owner." */
@@ -1139,7 +1139,7 @@ Large tool outputs blow the context window and rotate your session mid-task —
         // Skip yesterday's notes and recent conversation summaries for autonomous runs
         if (!isAutonomous && !skipAmbientContext) {
             if (!retrievalContext) {
-                const hour = hourInTimeZone(new Date(), TIMEZONE);
+                const hour = hourInTimeZone(new Date(), currentTimeZone());
                 const mentionsYesterday = this._lastUserMessage?.toLowerCase().includes('yesterday');
                 if (hour < 12 || mentionsYesterday) {
                     const yPath = path.join(DAILY_NOTES_DIR, `${yesterdayISO()}.md`);
@@ -1630,11 +1630,12 @@ You have a cost budget per message — not a hard turn limit. Work until the tas
         const modelLabel = Object.entries(MODELS).find(([, v]) => v === resolvedModel)?.[0] ?? resolvedModel;
         const caps = !isAutonomous ? getChannelCapabilities(channel) : null;
         const now = new Date();
+        const timeZone = currentTimeZone();
         volatileParts.push(`## Current Context
 
 - **Date:** ${formatDate(now)}
 - **Time:** ${formatTime(now)}
-- **Timezone:** ${TIMEZONE}
+- **Timezone:** ${timeZone}
 - **Channel:** ${channel}${caps ? ` (${formatCapabilities(caps)})` : ''}
 - **Model:** ${modelLabel} (${resolvedModel})
 - **Vault:** ${vault}
@@ -3190,13 +3191,16 @@ You have a cost budget per message — not a hard turn limit. Work until the tas
                 pending.shift();
             this.pendingContext.set(sessionKey, pending);
         }
+        if (opts.countExchange) {
+            this.exchangeCounts.set(sessionKey, (this.exchangeCounts.get(sessionKey) ?? 0) + 1);
+        }
         this.sessionTimestamps.set(sessionKey, new Date());
         this.saveSessions();
         // Persist to transcript store
         if (this.memoryStore) {
             try {
                 this.memoryStore.saveTurn(sessionKey, 'user', userText);
-                this.memoryStore.saveTurn(sessionKey, 'assistant', assistantText, 'cron');
+                this.memoryStore.saveTurn(sessionKey, 'assistant', assistantText, opts.model ?? 'cron');
             }
             catch {
                 // Non-fatal

package/dist/agent/background-tasks.d.ts

@@ -13,9 +13,9 @@
  * cron-scheduler tick picks up pending tasks within ~3 seconds.
  *
  * Restart safety: on daemon startup, any task left in 'running' is
- * aborted (its process is gone). P6b can add resumability; for now,
- * fail-fast is clearer than silently re-running a task that may have
- * already partially completed.
+ * marked interrupted (its process is gone). The user can resume it
+ * explicitly, which requeues the same prompt without pretending the
+ * prior run finished.
  */
 import type { BackgroundTask } from '../types.js';
 export declare const BACKGROUND_TASK_DIR: string;
@@ -41,17 +41,29 @@ export declare function listBackgroundTasks(filter?: {
     fromAgent?: string;
 }, opts?: BackgroundTaskOptions): BackgroundTask[];
 /** Transition a task to 'running' — daemon picked it up. */
-export declare function markRunning(id: string, opts?: BackgroundTaskOptions): BackgroundTask | null;
+export declare function markRunning(id: string, opts?: BackgroundTaskOptions, meta?: {
+    jobName?: string;
+    runId?: string;
+    sdkSessionId?: string;
+}): BackgroundTask | null;
+/** Patch non-status metadata on a task. Used for notification bookkeeping. */
+export declare function updateBackgroundTask(id: string, patch: Partial<Omit<BackgroundTask, 'id'>>, opts?: BackgroundTaskOptions): BackgroundTask | null;
 /** Transition to 'done' with final result. */
 export declare function markDone(id: string, result: string, deliverableNote?: string, opts?: BackgroundTaskOptions): BackgroundTask | null;
 /** Transition to 'failed' or 'aborted' with error message. */
-export declare function markFailed(id: string, error: string, reason?: 'failed' | 'aborted', opts?: BackgroundTaskOptions): BackgroundTask | null;
+export declare function markFailed(id: string, error: string, reason?: 'failed' | 'aborted' | 'interrupted', opts?: BackgroundTaskOptions): BackgroundTask | null;
+/**
+ * Requeue a task that was interrupted by a daemon restart.
+ */
+export declare function resumeBackgroundTask(id: string, opts?: BackgroundTaskOptions): BackgroundTask | null;
 /**
  * Daemon-restart hygiene: any task still in 'running' must be from a
- * prior daemon process. Mark them aborted so the lifecycle is honest.
- * Returns the count of tasks aborted.
+ * prior daemon process. Mark it interrupted so it can be resumed
+ * explicitly. Returns the count of tasks interrupted.
  */
-export declare function abortStaleRunningTasks(opts?: BackgroundTaskOptions): number;
+export declare function interruptStaleRunningTasks(opts?: BackgroundTaskOptions): number;
+/** Backward-compatible export for callers/tests using the old name. */
+export declare const abortStaleRunningTasks: typeof interruptStaleRunningTasks;
 /** Delete a task file. Callers should avoid deleting active tasks. */
 export declare function deleteBackgroundTask(id: string, opts?: BackgroundTaskOptions): void;
 /** Backward-compatible test helper alias. */

package/dist/agent/background-tasks.js

@@ -13,9 +13,9 @@
  * cron-scheduler tick picks up pending tasks within ~3 seconds.
  *
  * Restart safety: on daemon startup, any task left in 'running' is
- * aborted (its process is gone). P6b can add resumability; for now,
- * fail-fast is clearer than silently re-running a task that may have
- * already partially completed.
+ * marked interrupted (its process is gone). The user can resume it
+ * explicitly, which requeues the same prompt without pretending the
+ * prior run finished.
  */
 import { randomBytes } from 'node:crypto';
 import { existsSync, mkdirSync, readdirSync, readFileSync, unlinkSync, writeFileSync, } from 'node:fs';
@@ -102,7 +102,7 @@ export function listBackgroundTasks(filter = {}, opts) {
     return out;
 }
 /** Transition a task to 'running' — daemon picked it up. */
-export function markRunning(id, opts) {
+export function markRunning(id, opts, meta = {}) {
     const task = loadBackgroundTask(id, opts);
     if (!task)
         return null;
@@ -110,9 +110,26 @@ export function markRunning(id, opts) {
         return null;
     task.status = 'running';
     task.startedAt = new Date().toISOString();
+    delete task.completedAt;
+    delete task.error;
+    if (meta.jobName)
+        task.jobName = meta.jobName;
+    if (meta.runId)
+        task.runId = meta.runId;
+    if (meta.sdkSessionId)
+        task.sdkSessionId = meta.sdkSessionId;
     safeWrite(pathFor(id, opts), task);
     return task;
 }
+/** Patch non-status metadata on a task. Used for notification bookkeeping. */
+export function updateBackgroundTask(id, patch, opts) {
+    const task = loadBackgroundTask(id, opts);
+    if (!task)
+        return null;
+    const updated = Object.assign(task, patch, { id: task.id });
+    safeWrite(pathFor(id, opts), updated);
+    return updated;
+}
 function writeFullResultFile(id, result, opts) {
     if (result.length <= RESULT_TRUNCATE_BYTES)
         return undefined;
@@ -146,28 +163,48 @@ export function markFailed(id, error, reason = 'failed', opts) {
     const task = loadBackgroundTask(id, opts);
     if (!task)
         return null;
-    if (task.status === 'done' || task.status === 'failed' || task.status === 'aborted')
+    if (task.status === 'done' || task.status === 'failed' || task.status === 'aborted' || task.status === 'interrupted')
         return task;
     task.status = reason;
     task.completedAt = new Date().toISOString();
+    if (reason === 'interrupted')
+        task.interruptedAt = task.completedAt;
     task.error = error.slice(0, 1000);
     safeWrite(pathFor(id, opts), task);
     return task;
 }
+/**
+ * Requeue a task that was interrupted by a daemon restart.
+ */
+export function resumeBackgroundTask(id, opts) {
+    const task = loadBackgroundTask(id, opts);
+    if (!task || task.status !== 'interrupted')
+        return null;
+    task.status = 'pending';
+    task.resumedAt = new Date().toISOString();
+    task.resumeCount = (task.resumeCount ?? 0) + 1;
+    delete task.startedAt;
+    delete task.completedAt;
+    delete task.error;
+    safeWrite(pathFor(id, opts), task);
+    return task;
+}
 /**
  * Daemon-restart hygiene: any task still in 'running' must be from a
- * prior daemon process. Mark them aborted so the lifecycle is honest.
- * Returns the count of tasks aborted.
+ * prior daemon process. Mark it interrupted so it can be resumed
+ * explicitly. Returns the count of tasks interrupted.
  */
-export function abortStaleRunningTasks(opts) {
+export function interruptStaleRunningTasks(opts) {
     const stuck = listBackgroundTasks({ status: 'running' }, opts);
-    let aborted = 0;
+    let interrupted = 0;
     for (const t of stuck) {
-        markFailed(t.id, 'daemon restarted while task was in flight', 'aborted', opts);
-        aborted++;
+        markFailed(t.id, 'daemon restarted while task was in flight', 'interrupted', opts);
+        interrupted++;
     }
-    return aborted;
+    return interrupted;
 }
+/** Backward-compatible export for callers/tests using the old name. */
+export const abortStaleRunningTasks = interruptStaleRunningTasks;
 /** Delete a task file. Callers should avoid deleting active tasks. */
 export function deleteBackgroundTask(id, opts) {
     try {

package/dist/agent/hooks.js

@@ -12,7 +12,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { AsyncLocalStorage } from 'node:async_hooks';
 import { randomUUID } from 'node:crypto';
-import { OWNER_NAME, BASE_DIR, TIMEZONE } from '../config.js';
+import { OWNER_NAME, BASE_DIR, currentTimeZone } from '../config.js';
 import { formatTime24InTimeZone } from '../lib/time.js';
 // ── Shared state ───────────────────────────────────────────────────────
 let heartbeatActive = false;
@@ -190,7 +190,7 @@ export function clearActiveQueryContext() {
     // not by us. setInteractionSource resets it in the relevant transitions.
 }
 export function logToolUse(toolName, toolInput) {
-    const timestamp = formatTime24InTimeZone(new Date(), TIMEZONE);
+    const timestamp = formatTime24InTimeZone(new Date(), currentTimeZone());
     const summary = summarizeToolCall(toolName, toolInput);
     const entry = `- \`${timestamp}\` **${toolName}** — ${summary}`;
     auditLog.push(entry);
@@ -310,13 +310,14 @@ function evaluateSendPolicy(policy, agentSlug, recipientEmail) {
     // 3. Business hours check
     if (policy.businessHoursOnly) {
         const now = new Date();
-        // Use system timezone (from config) for business hours check
+        const timeZone = currentTimeZone();
+        // Use the configured user timezone for business hours checks.
         const formatter = new Intl.DateTimeFormat('en-US', {
-            hour: 'numeric', hour12: false, timeZone: TIMEZONE || undefined,
+            hour: 'numeric', hour12: false, timeZone,
         });
         const hour = parseInt(formatter.format(now), 10);
         if (hour < 8 || hour >= 18) {
-            return { allowed: false, reason: `Outside business hours (8am–6pm ${TIMEZONE || 'local'}).`, policyRef: 'business_hours' };
+            return { allowed: false, reason: `Outside business hours (8am–6pm ${timeZone}).`, policyRef: 'business_hours' };
         }
     }
     // 4. Approval mode check

package/dist/agent/insight-engine.js

@@ -11,7 +11,7 @@
 import { existsSync, readFileSync, readdirSync } from 'node:fs';
 import path from 'node:path';
 import pino from 'pino';
-import { GOALS_DIR, BASE_DIR, MEMORY_DB_PATH, VAULT_DIR, TIMEZONE } from '../config.js';
+import { GOALS_DIR, BASE_DIR, MEMORY_DB_PATH, VAULT_DIR, currentTimeZone } from '../config.js';
 import { listAllGoals } from '../tools/shared.js';
 import { computeBrokenJobs } from '../gateway/failure-monitor.js';
 import { MemoryStore } from '../memory/store.js';
@@ -24,7 +24,7 @@ const UNACKED_THRESHOLD = 3; // double cooldown after this many ignored
  * Check if it's too soon to send another proactive message.
  */
 export function canSendInsight(state) {
-    const today = dateKeyInTimeZone(new Date(), TIMEZONE);
+    const today = dateKeyInTimeZone(new Date(), currentTimeZone());
     // Reset daily count on new day
     if (state.currentDate !== today) {
         state.sentToday = [];

package/dist/agent/run-agent-heartbeat.js

@@ -14,14 +14,14 @@
  * through the canonical runAgent() instead of buildOptions+query.
  */
 import pino from 'pino';
-import { OWNER_NAME, MODELS, BUDGET, TIMEZONE, } from '../config.js';
+import { OWNER_NAME, MODELS, BUDGET, currentTimeZone, } from '../config.js';
 import { formatDateInTimeZone, formatTimeInTimeZone } from '../lib/time.js';
 const OWNER = OWNER_NAME || 'the user';
 function formatDate(d) {
-    return formatDateInTimeZone(d, TIMEZONE);
+    return formatDateInTimeZone(d, currentTimeZone());
 }
 function formatTime(d) {
-    return formatTimeInTimeZone(d, TIMEZONE);
+    return formatTimeInTimeZone(d, currentTimeZone());
 }
 import { runAgent } from './run-agent.js';
 const logger = pino({ name: 'clementine.run-agent-heartbeat' });
@@ -35,7 +35,7 @@ export async function runAgentHeartbeat(opts) {
     const now = new Date();
     const localTime = formatTime(now);
     const localDate = formatDate(now);
-    const tz = TIMEZONE;
+    const tz = currentTimeZone();
     const owner = OWNER;
     const agentName = opts.profile?.name ?? 'personal assistant';
     const promptParts = [

package/dist/agent/run-agent.d.ts

@@ -75,6 +75,10 @@ export interface RunAgentOptions {
     /** Optional explicit allowedTools list. When unset, falls back to a sensible default
      *  including Agent (so subagents can be spawned) + core SDK tools + Clementine MCP. */
     allowedTools?: string[];
+    /** Extra tools to pre-approve without making their built-in tools visible to
+     *  the main agent. Useful when the main agent may only call Agent, but the
+     *  forced subagent still needs pre-approved MCP/Clementine tools. */
+    permissionTools?: string[];
     /** SDK permission mode. Defaults to dontAsk so allowedTools is enforceable.
      *  Only explicit operator/full-surface paths should request bypassPermissions. */
     permissionMode?: ExecutionPermissionMode;

package/dist/agent/run-agent.js

@@ -254,6 +254,27 @@ export async function runAgent(prompt, opts) {
         clementineServerName: TOOLS_SERVER,
         permissionMode: opts.permissionMode,
     });
+    const permissionToolPolicy = opts.permissionTools
+        ? buildExecutionToolPolicy({
+            requestedTools: opts.permissionTools,
+            defaultBuiltins: CORE_TOOLS_FOR_AGENT_PARENT,
+            mcpServerNames: policyMcpServerNames,
+            clementineServerName: TOOLS_SERVER,
+            permissionMode: opts.permissionMode,
+        })
+        : null;
+    const sdkAllowedTools = permissionToolPolicy
+        ? Array.from(new Set([...toolPolicy.allowedTools, ...permissionToolPolicy.allowedTools])).sort()
+        : toolPolicy.allowedTools;
+    const clementineToolAllowlist = (() => {
+        if (!permissionToolPolicy)
+            return toolPolicy.clementineToolAllowlist;
+        const parts = [toolPolicy.clementineToolAllowlist, permissionToolPolicy.clementineToolAllowlist]
+            .flatMap(v => v.split(',').map(s => s.trim()).filter(Boolean));
+        if (parts.includes('*'))
+            return '*';
+        return Array.from(new Set(parts)).sort().join(',');
+    })();
     // SDK accepts a Record<string, McpServerConfig> here. We cast on
     // assignment because we mix the always-on Clementine stdio server
     // with caller-supplied servers of various types.
@@ -267,7 +288,7 @@ export async function runAgent(prompt, opts) {
                 CLEMENTINE_HOME: BASE_DIR,
                 ...(opts.profile?.slug ? { CLEMENTINE_TEAM_AGENT: opts.profile.slug } : {}),
                 CLEMENTINE_INTERACTION_SOURCE: interactionSourceForSession(opts.sessionKey, source),
-                CLEMENTINE_TOOL_ALLOWLIST: toolPolicy.clementineToolAllowlist,
+                CLEMENTINE_TOOL_ALLOWLIST: clementineToolAllowlist,
             },
         },
         ...baseMcpServers,
@@ -302,6 +323,20 @@ export async function runAgent(prompt, opts) {
         }
         catch { /* never block */ }
     };
+    // Durable SDK session store: mirror parent + subagent SDK transcripts into
+    // Clementine's SQLite memory store. The chat gateway already persists the
+    // SDK session id; this store makes restart resume independent of local JSONL
+    // files and keeps session inspection/querying in the same memory backend.
+    let sessionStore;
+    if (opts.memoryStore) {
+        try {
+            const { createMemorySessionStore } = await import('./session-store-adapter.js');
+            sessionStore = createMemorySessionStore(opts.memoryStore);
+        }
+        catch (err) {
+            logger.debug({ err }, 'runAgent: SessionStore adapter unavailable (non-fatal)');
+        }
+    }
     // ── Tool-output guard hooks (1.18.169) ─────────────────────────────
     // Bounds the per-tool-call output that reaches the model so SDK
     // auto-compaction never thrashes on a runaway MCP result. The hook
@@ -393,8 +428,9 @@ export async function runAgent(prompt, opts) {
         // callers can mix stdio + http + sse server shapes.
         mcpServers: mcpServers,
         tools: toolPolicy.builtinTools,
-        allowedTools: toolPolicy.allowedTools,
+        allowedTools: sdkAllowedTools,
         permissionMode: toolPolicy.permissionMode,
+        ...(sessionStore ? { sessionStore } : {}),
         ...(toolPolicy.allowDangerouslySkipPermissions
             ? { allowDangerouslySkipPermissions: toolPolicy.allowDangerouslySkipPermissions }
             : {}),
@@ -432,10 +468,11 @@ export async function runAgent(prompt, opts) {
         maxBudgetUsd: maxBudgetUsd ?? 'uncapped',
         agentCount: Object.keys(agents).length,
         allowedToolCount: allowedTools.length,
-        sdkAllowedToolCount: toolPolicy.allowedTools.length,
+        sdkAllowedToolCount: sdkAllowedTools.length,
         builtinToolCount: toolPolicy.builtinTools.length,
         permissionMode: toolPolicy.permissionMode,
         mcpServerCount: Object.keys(mcpServers).length,
+        sessionStore: !!sessionStore,
     }, 'runAgent: starting query');
     // PRD §6 / 1.18.85: path A in-process tap. runId / eventLog / writeEvent
     // are declared earlier (above sdkOptionsRaw) because the tool-output
@@ -723,7 +760,7 @@ export async function runAgent(prompt, opts) {
         ...(usage ? { usage } : {}),
         runId,
         permissionMode: toolPolicy.permissionMode,
-        allowedToolsApplied: toolPolicy.allowedTools,
+        allowedToolsApplied: sdkAllowedTools,
         builtinToolsApplied: toolPolicy.builtinTools,
         mcpServersApplied: Object.keys(mcpServers),
     };

package/dist/agent/run-skill.js

@@ -260,7 +260,7 @@ function resolveAutonomousModel(explicitModel, skillModel) {
  * Since the parent is `forceSubagent`'d to this worker, the description
  * mostly serves as transcript context.
  */
-function buildSkillWorkerAgent(skill, effectiveTools, model, workerMaxTurns) {
+function buildSkillWorkerAgent(skill, renderedProcedure, effectiveTools, model, workerMaxTurns) {
     const def = {
         description: `Executes the "${skill.frontmatter.name}" scheduled skill end-to-end in an isolated context window. ` +
             `Reads any data the skill needs, processes it, performs the skill's described delivery action ` +
@@ -272,7 +272,7 @@ function buildSkillWorkerAgent(skill, effectiveTools, model, workerMaxTurns) {
             `Return a single concise final response describing what happened (e.g., "Sent Discord DM about ` +
             `2 actionable items, ignored 8 spam"). Do not return raw tool output; do not narrate every step. ` +
             `If nothing actionable was found and the procedure says exit silently, return "No action needed."\n\n` +
-            `## Procedure\n\n${skill.body}`,
+            `## Procedure\n\n${renderedProcedure}`,
         tools: effectiveTools,
         // SDK accepts 'sonnet' / 'opus' / 'haiku' tier aliases OR full model
         // IDs. We pass the full ID with [1m] when present; the SDK strips
@@ -291,7 +291,7 @@ function buildSkillWorkerAgent(skill, effectiveTools, model, workerMaxTurns) {
  * return text (typically <2KB). Total parent context per run: ~3KB.
  * Well below any compaction threshold even on a 200K-window model.
  */
-function buildOrchestratorPrompt(skill, callerContext) {
+function buildOrchestratorPrompt(skill) {
     const parts = [
         `## Scheduled Skill Execution`,
         ``,
@@ -306,9 +306,6 @@ function buildOrchestratorPrompt(skill, callerContext) {
         ``,
         `Do NOT call any other tools directly. The worker handles all data access and delivery.`,
     ];
-    if (callerContext && callerContext.trim()) {
-        parts.push('', '## Caller context (forward this to the worker if relevant)', '', callerContext.trim());
-    }
     return parts.join('\n');
 }
 // ── The primitive ─────────────────────────────────────────────────────
@@ -355,9 +352,10 @@ export async function runSkill(name, options = {}) {
     // skill reads, so post-compaction refetch loops are structurally
     // impossible. See shouldAutoDelegate / buildSkillWorkerAgent above.
     const autoDelegate = shouldAutoDelegate(skill, source);
+    const renderedSkillPrompt = buildSkillPrompt(skill, options.inputs, options.context);
     const prompt = autoDelegate
-        ? buildOrchestratorPrompt(skill, options.context)
-        : buildSkillPrompt(skill, options.inputs, options.context);
+        ? buildOrchestratorPrompt(skill)
+        : renderedSkillPrompt;
     const limits = skill.frontmatter?.clementine?.limits;
     const maxTurns = options.maxTurns ?? limits?.maxTurns;
     const maxBudgetUsd = options.maxBudgetUsd ?? limits?.maxBudgetUsd;
@@ -411,7 +409,7 @@ export async function runSkill(name, options = {}) {
             // Worker gets enough turns to complete bulk work (skill author's
             // maxTurns cap, or 30 as a safe default for triage-class work).
             const workerMaxTurns = (typeof maxTurns === 'number' && maxTurns > 0) ? maxTurns : 30;
-            const workerDef = buildSkillWorkerAgent(skill, effectiveTools, effectiveModel, workerMaxTurns);
+            const workerDef = buildSkillWorkerAgent(skill, renderedSkillPrompt, effectiveTools, effectiveModel, workerMaxTurns);
             sdkOpts = {
                 sessionKey,
                 source,
@@ -419,6 +417,9 @@ export async function runSkill(name, options = {}) {
                 // the parent's context shape predictable and prevents it from
                 // doing data-heavy work itself even if the LLM disagrees.
                 allowedTools: ['Agent'],
+                // SDK permissions are session-level, so the worker's tools still
+                // need to be pre-approved even though the parent only sees Agent.
+                permissionTools: ['Agent', ...effectiveTools],
                 // Force-routing: SDK wraps the prompt with "Use the skill-worker
                 // agent to handle this request" so dispatch is the natural
                 // first action.

package/dist/agent/team-bus.js

@@ -9,7 +9,7 @@ import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } fr
 import path from 'node:path';
 import pino from 'pino';
 import { listAllGoals } from '../tools/shared.js';
-import { TIMEZONE } from '../config.js';
+import { currentTimeZone } from '../config.js';
 import { dateKeyInTimeZone } from '../lib/time.js';
 const logger = pino({ name: 'clementine.team-bus' });
 /** Max inter-agent message depth before rejection (anti-loop). */
@@ -512,7 +512,7 @@ export class TeamBus {
      * Used for proactive context sharing, not task delegation.
      */
     async shareContext(fromSlug, toSlug, content) {
-        const today = dateKeyInTimeZone(new Date(), TIMEZONE);
+        const today = dateKeyInTimeZone(new Date(), currentTimeZone());
         // Daily cap: max 2 context shares per sender per day
         const tracker = this.contextShareCounts.get(fromSlug);
         if (tracker && tracker.date === today && tracker.count >= 2) {

package/dist/agent/workflow-variables.js

@@ -3,7 +3,7 @@
  *
  * Pure functions for resolving {{...}} placeholders in workflow step prompts.
  */
-import { OWNER_NAME, ASSISTANT_NAME, TIMEZONE } from '../config.js';
+import { OWNER_NAME, ASSISTANT_NAME, currentTimeZone } from '../config.js';
 import { dateKeyInTimeZone, formatTime24InTimeZone } from '../lib/time.js';
 /**
  * Resolve static variables (available before any step executes).
@@ -11,8 +11,9 @@ import { dateKeyInTimeZone, formatTime24InTimeZone } from '../lib/time.js';
  */
 export function resolveStaticVariables(template, inputs, workflowName) {
     const now = new Date();
-    const dateStr = dateKeyInTimeZone(now, TIMEZONE);
-    const timeStr = formatTime24InTimeZone(now, TIMEZONE);
+    const timezone = currentTimeZone();
+    const dateStr = dateKeyInTimeZone(now, timezone);
+    const timeStr = formatTime24InTimeZone(now, timezone);
     return template.replace(/\{\{([^}]+)\}\}/g, (match, key) => {
         const trimmed = key.trim();
         // {{input.topic}} → inputs['topic']

package/dist/cli/cron.js

@@ -13,7 +13,7 @@ import cron from 'node-cron';
 import matter from 'gray-matter';
 import { HeartbeatScheduler } from '../gateway/heartbeat-scheduler.js';
 import { parseCronJobs, CronRunLog, classifyError } from '../gateway/cron-scheduler.js';
-import { TIMEZONE } from '../config.js';
+import { currentTimeZone } from '../config.js';
 import { hourInTimeZone } from '../lib/time.js';
 const BASE_DIR = process.env.CLEMENTINE_HOME || path.join(os.homedir(), '.clementine');
 const LAST_RUN_FILE = path.join(BASE_DIR, '.cron_last_run.json');
@@ -533,7 +533,7 @@ export async function cmdHeartbeat() {
         const parsed = matter(raw);
         standingInstructions = parsed.content;
     }
-    const hour = hourInTimeZone(new Date(), TIMEZONE);
+    const hour = hourInTimeZone(new Date(), currentTimeZone());
     const timeContext = HeartbeatScheduler.getTimeContext(hour);
     console.log('Running one-shot heartbeat...');
     const response = await gateway.handleHeartbeat(standingInstructions, '', timeContext);

package/dist/cli/dashboard.js

@@ -19,7 +19,7 @@ import { TunnelManager } from './tunnel.js';
 import { AgentManager } from '../agent/agent-manager.js';
 import { discoverMcpServers, getClaudeIntegrations, KNOWN_MCP_DESCRIPTIONS } from '../agent/mcp-bridge.js';
 import { buildBuilderEnrichedMessage, builderSessionKey } from '../dashboard/builder/prompt.js';
-import { AGENTS_DIR, MEMORY_FILE, SESSIONS_FILE, TIMEZONE, applyOneMillionContextRecovery, looksLikeClaudeOneMillionContextError, normalizeClaudeSdkOptionsForOneMillionContext, } from '../config.js';
+import { AGENTS_DIR, MEMORY_FILE, SESSIONS_FILE, TIMEZONE, applyOneMillionContextRecovery, currentTimeZone, looksLikeClaudeOneMillionContextError, normalizeClaudeSdkOptionsForOneMillionContext, } from '../config.js';
 import { parseTasks } from '../tools/shared.js';
 // 1.18.160 — also pull parseCronJobs + parseAgentCronJobs so getCronJobs()
 // returns the same merged set the runtime fires (CRON.md + agent CRON +
@@ -1092,7 +1092,7 @@ function dashboardTimeZone() {
     catch {
         jsonTz = '';
     }
-    return resolveTimeZone(process.env.TIMEZONE, readDashboardEnvValue('TIMEZONE'), jsonTz, TIMEZONE);
+    return resolveTimeZone(process.env.TIMEZONE, readDashboardEnvValue('TIMEZONE'), jsonTz, currentTimeZone(), TIMEZONE);
 }
 function dashboardTimeSnapshot(date = new Date()) {
     const timeZone = dashboardTimeZone();
@@ -9229,7 +9229,16 @@ If the tool returns nothing or errors, return an empty array \`[]\`.`,
             }
             if (key === 'TIMEZONE') {
                 process.env.TIMEZONE = value;
-                process.env.TZ = value;
+                process.env.TZ = currentTimeZone();
+                try {
+                    const gw = await getGateway();
+                    const sched = gw.cronScheduler;
+                    sched?.reloadJobs?.();
+                    sched?.reloadWorkflows?.();
+                }
+                catch {
+                    // Best-effort: persisted setting still applies on next scheduler start.
+                }
             }
             res.json({ ok: true, message: `Updated ${key}` });
         }
@@ -9257,7 +9266,16 @@ If the tool returns nothing or errors, return an empty array \`[]\`.`,
             }
             if (key === 'TIMEZONE') {
                 delete process.env.TIMEZONE;
-                process.env.TZ = dashboardTimeZone();
+                process.env.TZ = currentTimeZone();
+                try {
+                    const gw = await getGateway();
+                    const sched = gw.cronScheduler;
+                    sched?.reloadJobs?.();
+                    sched?.reloadWorkflows?.();
+                }
+                catch {
+                    // Best-effort: persisted setting still applies on next scheduler start.
+                }
             }
             res.json({ ok: true, message: `Removed ${key}` });
         }
@@ -25086,6 +25104,7 @@ function settingRequiresDaemonRestart(key) {
   if (!key) return true;
   if (key === 'COMPOSIO_API_KEY' || key === 'COMPOSIO_USER_ID') return false;
   if (key.indexOf('ASSISTANT_') === 0) return false;
+  if (key === 'TIMEZONE') return false;
   return true;
 }
 
@@ -25188,8 +25207,7 @@ async function saveTimezoneSetting() {
     dashboardTimeState.serverIso = new Date().toISOString();
     dashboardTimeState.syncedAt = Date.now();
     renderDashboardTimeWidgets();
-    markRestartRequired('Timezone changed. Restart Clementine so Discord, Slack, and background workers use the new local time.');
-    if (status) { status.textContent = 'Saved'; status.style.color = 'var(--green)'; setTimeout(function(){ status.textContent = ''; }, 2000); }
+    if (status) { status.textContent = 'Saved; schedules reloaded'; status.style.color = 'var(--green)'; setTimeout(function(){ status.textContent = ''; }, 2500); }
     refreshHomeDigest();
   } else if (status) {
     status.textContent = 'Error';

package/dist/cli/routes/digest.js

@@ -8,7 +8,7 @@ import { randomBytes } from 'node:crypto';
 import path from 'node:path';
 import matter from 'gray-matter';
 import { listAllGoals } from '../../tools/shared.js';
-import { TIMEZONE } from '../../config.js';
+import { currentTimeZone } from '../../config.js';
 import { dateKeyInTimeZone, formatDateInTimeZone } from '../../lib/time.js';
 export function getDigestPrefs(prefsFile) {
     const defaults = {
@@ -78,8 +78,9 @@ export function digestRouter(deps) {
         const prefs = getDigestPrefs(prefsFile);
         const secs = (prefs.sections || {});
         const now = new Date();
-        const dateStr = formatDateInTimeZone(now, TIMEZONE);
-        const todayKey = dateKeyInTimeZone(now, TIMEZONE);
+        const timezone = currentTimeZone();
+        const dateStr = formatDateInTimeZone(now, timezone);
+        const todayKey = dateKeyInTimeZone(now, timezone);
         const sections = {};
         let officeSummary = '';
         try {