oysterun 1.5.4 → 1.5.6

package/dev/client/web/index.html

@@ -8659,6 +8659,13 @@
                               data-session-setup-web-shared="web.enabled"
                             />
                           </label>
+                          <div
+                            id="create-website-authority-hint"
+                            class="field-hint field-warning"
+                          >
+                            Website is available only for agents in the Browser
+                            Root.
+                          </div>
                         </div>
                         <label
                           class="kv-label"
@@ -13325,6 +13332,12 @@ Waiting for Claude login output…</pre
       let lastCreateStartActivationAt = 0;
       let createFormPreferenceVersion = 0;
       let latestCreateFolderConfigRequestId = 0;
+      let createWebsiteAuthorityState = {
+        folderPath: "",
+        projectAgentId: "",
+        eligible: false,
+        reason: "Website is available only for agents in the Browser Root.",
+      };
       let createFormDraftRouteKey = "";
       let createSubmitState = {
         inFlight: false,
@@ -26803,6 +26816,7 @@ Waiting for Claude login output…</pre
       function renderAgentProfileWebsiteAccessRow(liveSession) {
         syncAgentProfileWebsiteAccessSession(liveSession);
         const website = getLiveSessionWebsite(liveSession);
+        const websiteAuthorized = website?.browser_root_authorized === true;
         const enabled = website?.enabled === true;
         const access = normalizeAgentWebAccess(website?.access);
         const websitePassword = getOwnerVisibleWebsitePassword(website);
@@ -26836,16 +26850,27 @@ Waiting for Claude login output…</pre
                 type="checkbox"
                 data-session-profile-web-enabled="web.enabled"
                 ${enabled ? "checked" : ""}
-                ${saving ? "disabled" : ""}
+                ${saving || !websiteAuthorized ? "disabled" : ""}
               />
             </label>
+            ${
+              websiteAuthorized
+                ? ""
+                : `<div
+                    class="field-hint field-warning"
+                    data-session-profile-website-authority="outside_browser_root"
+                  >${esc(
+                    website?.reason_message ||
+                      "Website is available only for agents in the Browser Root."
+                  )}</div>`
+            }
             <label class="field compact-field" for="agent-profile-website-access">
               <span>Access</span>
               <select
                 id="agent-profile-website-access"
                 data-session-profile-web-access="web.access"
                 onchange="window.syncAgentProfileWebsitePasswordMode && window.syncAgentProfileWebsitePasswordMode()"
-                ${saving ? "disabled" : ""}
+                ${saving || !websiteAuthorized ? "disabled" : ""}
               >${renderAgentWebAccessOptions(access)}</select>
             </label>
             <label
@@ -26863,7 +26888,11 @@ Waiting for Claude login output…</pre
                 value="${esc(websitePassword)}"
                 data-session-profile-web-local="web.password"
                 oninput="window.syncAgentProfileWebsitePasswordMode && window.syncAgentProfileWebsitePasswordMode()"
-                ${access === "password" && !saving ? "" : "disabled"}
+                ${
+                  access === "password" && !saving && websiteAuthorized
+                    ? ""
+                    : "disabled"
+                }
               />
               <div
                 id="agent-profile-website-password-status"
@@ -26895,7 +26924,7 @@ Waiting for Claude login output…</pre
                 data-session-profile-save="website"
                 data-session-profile-web-access-save="explicit"
                 onclick="window.saveAgentProfileWebsiteAccess && window.saveAgentProfileWebsiteAccess()"
-                ${saving ? "disabled" : ""}
+                ${saving || !websiteAuthorized ? "disabled" : ""}
               >${saving ? "Saving..." : "Save"}</button>
             </div>
             ${
@@ -26914,6 +26943,9 @@ Waiting for Claude login output…</pre
       }
 
       function syncAgentProfileWebsitePasswordMode() {
+        const liveSession = getSelectedLiveSession();
+        const websiteAuthorized =
+          getLiveSessionWebsite(liveSession)?.browser_root_authorized === true;
         const access = normalizeAgentWebAccess(
           $("agent-profile-website-access")?.value
         );
@@ -26923,13 +26955,12 @@ Waiting for Claude login output…</pre
         const passwordMode = access === "password";
         if (row) row.classList.remove("hidden");
         if (input) {
-          input.disabled = !passwordMode;
+          input.disabled = !websiteAuthorized || !passwordMode;
         }
         if (status) {
-          status.textContent = formatOwnerWebsitePasswordHint(
-            access,
-            input?.value || ""
-          );
+          status.textContent = websiteAuthorized
+            ? formatOwnerWebsitePasswordHint(access, input?.value || "")
+            : "Website is available only for agents in the Browser Root.";
         }
       }
 
@@ -26938,6 +26969,19 @@ Waiting for Claude login output…</pre
         if (!liveSession?.sessionId) return;
         syncAgentProfileWebsiteAccessSession(liveSession);
         if (agentProfileWebsiteAccessState.saving === true) return;
+        const previousWebsite = getLiveSessionWebsite(liveSession);
+        if (previousWebsite?.browser_root_authorized !== true) {
+          agentProfileWebsiteAccessState = {
+            ...agentProfileWebsiteAccessState,
+            saving: false,
+            error:
+              previousWebsite?.reason_message ||
+              "Website is available only for agents in the Browser Root.",
+            status: "",
+          };
+          renderAgentProfileView();
+          return;
+        }
         const select = $("agent-profile-website-access");
         const updateConfig = true;
         const nextEnabled =
@@ -26947,7 +26991,6 @@ Waiting for Claude login output…</pre
           nextAccess === "password"
             ? String($("agent-profile-website-password")?.value || "").trim()
             : "";
-        const previousWebsite = getLiveSessionWebsite(liveSession);
         if (nextAccess === "password" && !nextWebsitePassword) {
           agentProfileWebsiteAccessState = {
             ...agentProfileWebsiteAccessState,
@@ -37739,6 +37782,59 @@ Waiting for Claude login output…</pre
         syncCreateAllowedPathsShortcutState();
       }
 
+      function isCreateWebsiteEligible() {
+        return (
+          createWebsiteAuthorityState.eligible === true &&
+          createWebsiteAuthorityState.projectAgentId ===
+            String($("create-agent-id")?.value || "").trim()
+        );
+      }
+
+      function syncCreateWebsiteAuthorityState() {
+        const eligible = isCreateWebsiteEligible();
+        const enabledInput = $("create-website-enabled");
+        const accessSelect = $("create-website-access");
+        const hint = $("create-website-authority-hint");
+        if (enabledInput) {
+          enabledInput.disabled = !eligible;
+          if (!eligible) enabledInput.checked = false;
+        }
+        if (accessSelect) {
+          accessSelect.disabled = !eligible;
+          if (!eligible) accessSelect.value = "owner_only";
+        }
+        if (!eligible) setCreateWebsitePasswordValue("");
+        if (hint) {
+          hint.textContent =
+            createWebsiteAuthorityState.reason ||
+            "Website is available only for agents in the Browser Root.";
+          hint.classList.toggle("hidden", eligible);
+        }
+        syncCreateWebsitePasswordMode();
+      }
+
+      function setCreateWebsiteAuthorityState({
+        folderPath = "",
+        projectAgentId = "",
+        eligible = false,
+        reason = "",
+      } = {}) {
+        createWebsiteAuthorityState = {
+          folderPath: String(folderPath || "").trim(),
+          projectAgentId: String(projectAgentId || "").trim(),
+          eligible: eligible === true,
+          reason:
+            String(reason || "").trim() ||
+            "Website is available only for agents in the Browser Root.",
+        };
+        if (eligible !== true) {
+          setCreateWebsiteEnabledValue(false);
+          setCreateWebsiteAccessValue("owner_only");
+          setCreateWebsitePasswordValue("");
+        }
+        syncCreateWebsiteAuthorityState();
+      }
+
       function setCreateWebsiteAccessValue(value) {
         const select = $("create-website-access");
         if (!select) return;
@@ -37774,16 +37870,19 @@ Waiting for Claude login output…</pre
         const row = $("create-website-password-row");
         const input = $("create-website-password");
         const status = $("create-website-password-status");
+        const eligible = isCreateWebsiteEligible();
         const passwordMode = getCreateWebsiteAccessValue() === "password";
         if (row) row.classList.remove("hidden");
         if (input) {
-          input.disabled = !passwordMode;
+          input.disabled = !eligible || !passwordMode;
         }
         if (status) {
-          status.textContent = formatOwnerWebsitePasswordHint(
-            getCreateWebsiteAccessValue(),
-            input?.value || ""
-          );
+          status.textContent = eligible
+            ? formatOwnerWebsitePasswordHint(
+                getCreateWebsiteAccessValue(),
+                input?.value || ""
+              )
+            : "Website settings are unavailable outside the Browser Root.";
         }
       }
 
@@ -37889,6 +37988,10 @@ Waiting for Claude login output…</pre
         syncSessionSetupInterfaceStyleVisibility();
         setCreateWebsiteEnabledValue(HOST_DEFAULT_SESSION_DEFAULTS.web.enabled);
         setCreateWebsiteAccessValue(HOST_DEFAULT_SESSION_DEFAULTS.web.access);
+        setCreateWebsiteAuthorityState({
+          folderPath: startFolder,
+          eligible: false,
+        });
         setCreateNotificationsEnabledValue(
           HOST_DEFAULT_SESSION_DEFAULTS.notifications.enabled
         );
@@ -37981,6 +38084,10 @@ Waiting for Claude login output…</pre
         syncSessionSetupInterfaceStyleVisibility();
         setCreateWebsiteEnabledValue(HOST_DEFAULT_SESSION_DEFAULTS.web.enabled);
         setCreateWebsiteAccessValue(HOST_DEFAULT_SESSION_DEFAULTS.web.access);
+        setCreateWebsiteAuthorityState({
+          folderPath: record.agent_folder || "",
+          eligible: false,
+        });
         setCreateNotificationsEnabledValue(
           HOST_DEFAULT_SESSION_DEFAULTS.notifications.enabled
         );
@@ -38389,14 +38496,15 @@ Waiting for Claude login output…</pre
         if (liveSession?.website && typeof liveSession.website === "object") {
           return liveSession.website;
         }
-        if (
-          selectedAgent?.agent_id &&
-          selectedAgent.agent_id === liveSession?.agentId &&
-          selectedAgent.website
-        ) {
-          return selectedAgent.website;
-        }
-        return null;
+        return {
+          enabled: false,
+          available: false,
+          access: "owner_only",
+          browser_root_authorized: false,
+          reason: "session_folder_outside_browser_root",
+          reason_message:
+            "Website is available only for agents in the Browser Root.",
+        };
       }
 
       function getOwnerVisibleWebsitePassword(website = {}) {
@@ -40377,7 +40485,6 @@ Waiting for Claude login output…</pre
           "approval_policy",
           "allow_dangerously_skip_permissions",
           "dangerous_mode",
-          "web_access",
           "notifications_enabled",
           "allowed_paths",
           "runtime_capabilities",
@@ -40529,8 +40636,10 @@ Waiting for Claude login output…</pre
           payload.interface_type || getCreateDefaultInterfaceType()
         );
         syncSessionSetupInterfaceStyleVisibility();
-        setCreateWebsiteEnabledValue(payload.web_enabled === true);
-        setCreateWebsiteAccessValue(payload.web_access || "owner_only");
+        setCreateWebsiteAuthorityState({
+          folderPath: draft.agentFolder || "",
+          eligible: false,
+        });
         setCreateTelegramSettingsValue({});
         $("create-allowed-paths").value = normalizeAllowedPathsForForm(
           payload.allowed_paths
@@ -40603,6 +40712,13 @@ Waiting for Claude login output…</pre
         syncCreateAllowedPathsShortcutState();
         refreshCreateStartButtonEnabled();
         refreshUpdateSessionNameButton();
+        if (draft.agentFolder) {
+          void loadFolderConfigIntoCreateForm(draft.agentFolder, {
+            fillAgentIdIfEmpty: false,
+            applyFormValues: false,
+            showError: false,
+          });
+        }
       }
 
       function readSessionSetupSchedulerDraftForEditor(
@@ -48648,14 +48764,6 @@ Waiting for Claude login output…</pre
         const allowedPaths = isAllowedPathDebugUiVisible()
           ? parseAllowedPathsInput($("create-allowed-paths").value)
           : null;
-        const webAccess = getCreateWebsiteAccessValue();
-        const webPassword =
-          webAccess === "password" ? getCreateWebsitePasswordValue() : "";
-        if (webAccess === "password" && !webPassword) {
-          throw new Error(
-            "Website Password is required when Website Access is Password. Switch Website Access away from Password before clearing it."
-          );
-        }
 
         const payload = {
           provider: createRuntime,
@@ -48672,8 +48780,6 @@ Waiting for Claude login output…</pre
             createRuntime === "codex" ? codexApproval : undefined,
           allow_dangerously_skip_permissions: allowDanger,
           dangerous_mode: allowDanger,
-          web_enabled: getCreateWebsiteEnabledValue(),
-          web_access: webAccess,
           notifications_enabled: getCreateNotificationsEnabledValue(),
           install_oysterun_skills: getCreateInstallOysterunSkillsValue(),
           ...readTelegramFieldsPayload("create"),
@@ -48692,9 +48798,6 @@ Waiting for Claude login output…</pre
         ) {
           payload.confirm_beta_provider_permission_mode = true;
         }
-        if (webPassword) {
-          payload.web_password = webPassword;
-        }
         validateTelegramEnabledPayloadOrThrow(
           payload,
           getCreateTelegramConfiguredState()
@@ -48702,6 +48805,23 @@ Waiting for Claude login output…</pre
         return payload;
       }
 
+      function buildCreateWebsitePayload() {
+        if (!isCreateWebsiteEligible()) return null;
+        const webAccess = getCreateWebsiteAccessValue();
+        const webPassword =
+          webAccess === "password" ? getCreateWebsitePasswordValue() : "";
+        if (webAccess === "password" && !webPassword) {
+          throw new Error(
+            "Website Password is required when Website Access is Password. Switch Website Access away from Password before clearing it."
+          );
+        }
+        return {
+          web_enabled: getCreateWebsiteEnabledValue(),
+          web_access: webAccess,
+          ...(webPassword ? { web_password: webPassword } : {}),
+        };
+      }
+
       function readCreateFormRequest() {
         const agent_id = $("create-agent-id").value.trim();
         const agent_folder = $("create-agent-folder").value.trim();
@@ -48724,6 +48844,7 @@ Waiting for Claude login output…</pre
             configToggleChecked
           ),
           sessionPayload: buildCreateSessionPayload(),
+          websitePayload: buildCreateWebsitePayload(),
         };
       }
 
@@ -48754,6 +48875,7 @@ Waiting for Claude login output…</pre
           persistConfig,
           preventConfigCreate,
           sessionPayload,
+          websitePayload,
         } = request;
         const sessionSetupProof = applyCreateSessionSetupProofAttributes(
           buildCreateSessionSetupProviderModelPermissionProof(sessionPayload)
@@ -48791,28 +48913,37 @@ Waiting for Claude login output…</pre
 
         const configPersistenceAction =
           getCreateConfigPersistenceAction(configToggleMode);
-        let failureStep = shouldPersistConfig
-          ? `Could not ${configPersistenceAction.toLowerCase()} .oysterun/config.json`
-          : resumeSessionId
-          ? "Could not resume session"
-          : "Could not start session";
+        const shouldPersistWebsite = Boolean(websitePayload);
+        let failureStep =
+          shouldPersistConfig || shouldPersistWebsite
+            ? `Could not ${configPersistenceAction.toLowerCase()} .oysterun/config.json`
+            : resumeSessionId
+            ? "Could not resume session"
+            : "Could not start session";
         try {
-          if (shouldPersistConfig) {
+          if (shouldPersistConfig || shouldPersistWebsite) {
             await apiWithAuthRetry(
               "PUT",
               "/agent/config",
               {
                 agent_id,
                 agent_folder,
-                ...sessionPayload,
-                session_setup_provider_model_permission_proof:
-                  sessionSetupProof,
+                ...(shouldPersistConfig
+                  ? {
+                      ...sessionPayload,
+                      session_setup_provider_model_permission_proof:
+                        sessionSetupProof,
+                    }
+                  : {}),
+                ...(websitePayload || {}),
               },
               {
                 onRetry: () => {
                   if (!isCurrentCreateAttempt(attemptId)) return;
                   setCreateStatus(
-                    `${configPersistenceAction} .oysterun/config.json...`,
+                    shouldPersistConfig
+                      ? `${configPersistenceAction} .oysterun/config.json...`
+                      : "Updating Website settings...",
                     "Retrying config save after a brief auth settle."
                   );
                 },
@@ -50190,6 +50321,7 @@ Waiting for Claude login output…</pre
         const folderPath = String(path || "").trim();
         if (!folderPath) {
           hideCreateConfigToggle("");
+          setCreateWebsiteAuthorityState();
           refreshCreateStartButtonEnabled();
           return;
         }
@@ -50207,20 +50339,38 @@ Waiting for Claude login output…</pre
             )}${providerQuery}`
           );
           const resolvedFolderPath = data.agent_folder || folderPath;
+          const currentFolderPath = String(
+            $("create-agent-folder").value || ""
+          ).trim();
+          if (
+            requestId !== latestCreateFolderConfigRequestId ||
+            currentFolderPath !== folderPath
+          ) {
+            return;
+          }
+          setCreateWebsiteAuthorityState({
+            folderPath: resolvedFolderPath,
+            projectAgentId: data.websiteAgentId || "",
+            eligible:
+              data.websiteEligible === true ||
+              data.website?.browser_root_authorized === true,
+            reason:
+              data.website?.reason_message ||
+              "Website is available only for agents in the Browser Root.",
+          });
+          if (opts.applyFormValues === false && isCreateWebsiteEligible()) {
+            setCreateWebsiteEnabledValue(
+              HOST_DEFAULT_SESSION_DEFAULTS.web.enabled
+            );
+            setCreateWebsiteAccessValue(
+              HOST_DEFAULT_SESSION_DEFAULTS.web.access
+            );
+          }
           applyCreateConfigToggleMode(
             resolvedFolderPath,
             data.hasConfig === true
           );
           if (opts.applyFormValues !== false) {
-            const currentFolderPath = String(
-              $("create-agent-folder").value || ""
-            ).trim();
-            if (
-              requestId !== latestCreateFolderConfigRequestId ||
-              currentFolderPath !== folderPath
-            ) {
-              return;
-            }
             const preferencesUntouched =
               createFormPreferenceVersion === requestPreferenceVersion;
             $("create-agent-folder").value = resolvedFolderPath;
@@ -50307,6 +50457,10 @@ Waiting for Claude login output…</pre
           refreshCreateStartButtonEnabled();
         } catch (err) {
           hideCreateConfigToggle(folderPath);
+          setCreateWebsiteAuthorityState({
+            folderPath,
+            eligible: false,
+          });
           setCreateProviderSkillStatus(null);
           setCreateProviderTrustStatus(null);
           refreshCreateStartButtonEnabled();
@@ -50827,6 +50981,10 @@ Waiting for Claude login output…</pre
         markCreatePreferencesEdited();
         syncCreateAllowedPathsShortcutState();
         hideCreateConfigToggle($("create-agent-folder").value);
+        setCreateWebsiteAuthorityState({
+          folderPath: $("create-agent-folder").value,
+          eligible: false,
+        });
         refreshUpdateSessionNameButton();
         void refreshCreateProviderTrustStatus();
         refreshCreateStartButtonEnabled();
@@ -50834,6 +50992,7 @@ Waiting for Claude login output…</pre
       $("create-agent-id").addEventListener("input", () => {
         markCreatePreferencesEdited();
         syncCreateSessionNameDefault();
+        syncCreateWebsiteAuthorityState();
         void refreshCreateProviderSkillStatus();
         void refreshCreateProviderTrustStatus();
         refreshCreateStartButtonEnabled();

package/docs/routec/skill_installation.md

@@ -35,6 +35,41 @@ skills/
 Those development roots remain mirror/source parity inputs for source-static and
 package verification. They are not an installed runtime precondition.
 
+## Canonical Aggregate And Schema
+
+The hand-maintained aggregate source is:
+
+```text
+skills/Oysterun/SKILL.md
+```
+
+The mirror command copies that file to:
+
+```text
+.codex/skills/Oysterun/SKILL.md
+host-service/assets/product-skills/Oysterun/SKILL.md
+```
+
+The eight module sources remain `skills/oysterun-*/`. Their provider-facing
+module trees, including `skills/Oysterun/modules/`, are generated mirrors.
+
+Oysterun-owned aggregate and module `SKILL.md` files require YAML frontmatter
+with a non-empty lowercase hyphen-case `name` and a non-empty `description`.
+The aggregate metadata name is `oysterun`; its uppercase `Oysterun` installation
+folder remains the P88 path contract.
+
+Run:
+
+```bash
+node tool_scripts/sync_product_skills_to_codex.mjs
+node tool_scripts/check_product_skill_mirrors.mjs
+```
+
+Sync validates every canonical input before modifying a generated mirror.
+Mirror checks and npm packaging fail when canonical/generated Oysterun skills
+are invalid or stale. This validation is a source/release guard only; Host
+startup and P88 install/update do not reject arbitrary user-owned skills.
+
 ## Ownership And Copy Rules
 
 The aggregate `Oysterun/SKILL.md` must contain:

package/host-service/assets/product-skills/Oysterun/SKILL.md

@@ -1,3 +1,8 @@
+---
+name: oysterun
+description: Use as the aggregate index for Oysterun product skills installed by Host. Route operations to the specific sessions, session-chat, context, scheduler, mail, notifications, website, or Telegram module skill.
+---
+
 # Oysterun
 
 <!-- oysterun-skill-set: true -->
@@ -28,3 +33,7 @@ can insert stable relative paths such as:
 
 Do not remove the ownership marker above. The Host refuses to overwrite an
 existing `Oysterun` provider skill folder unless this marker is present.
+
+After selecting a module, read and follow that module's `SKILL.md`. The
+aggregate is only a discovery and routing index; it does not replace any
+module-specific safety, authorization, confirmation, or command contract.

package/host-service/assets/product-skills/Oysterun/modules/oysterun-scheduler/SKILL.md

@@ -12,24 +12,26 @@ Canonical product skill source lives at `skills/oysterun-scheduler/`. The repo-l
 Use this module skill for normal product scheduler operations. It wraps the P86 product CLI contract:
 
 ```text
-oysterun scheduler <action> [options]
+$OYSTERUN_CLI_BIN scheduler <action> [options]
 ```
 
-The helper delegates to the same CLI surface:
+An external repo operator may use the generated helper, which delegates to the
+same CLI surface:
 
 ```bash
 node .codex/skills/Oysterun/modules/oysterun-scheduler/scripts/oysterun_scheduler.mjs list --host http://localhost:2322
 ```
 
-When Host injects this skill into a live session, the helper path is:
+When Host injects this skill into a live Claude or Codex session, always use:
 
 ```bash
-node .claude/skills/Oysterun/modules/oysterun-scheduler/scripts/oysterun_scheduler.mjs list
+$OYSTERUN_CLI_BIN scheduler list
 ```
 
 ## Commands
 
 - `list`
+- `create --prompt <text> --frequency daily --time HH:mm`
 - `create --session-ref <display-name> --prompt <text> --frequency daily --time HH:mm`
 - `get`
 - `update`
@@ -42,19 +44,40 @@ node .claude/skills/Oysterun/modules/oysterun-scheduler/scripts/oysterun_schedul
 
 For Host scheduler rows, `create` targets a portable outside-scheduler setup
 snapshot. In a live Host session, omit the target to use the current session's
-saved setup, or pass `--session-ref <display-name>` for another session. Use
+saved setup, or pass `--session-ref <display-name>` for another session. The
+resolved session agent folder must be a valid, non-conflicting project under
+the Host Default Browse Root. Use
 rule fields such as `--frequency daily --time HH:mm`, `--frequency weekly
 --weekdays monday,wednesday --time HH:mm`, or `--frequency once --run-at
 <ISO time>`. Do not use `--interval` for Host scheduler rows; use `chat loop
 create --interval ...` for in-session loops.
 
+## First Scheduler Initialization
+
+The Host owns first-file initialization. For a valid Browser Root project with
+no `.oysterun/schedulers.json`, run the normal create command:
+
+```bash
+$OYSTERUN_CLI_BIN scheduler create --prompt "..." --frequency daily --time 09:00
+```
+
+The Host validates Browser Root authority, copies the current session setup,
+and atomically creates the first portable Scheduler file. Do not manually
+create an empty Scheduler JSON file, write Host SQLite rows, or call a
+`/scheduler/*` endpoint to bootstrap the project.
+
+If create reports that the folder is not a Browser Root project, select or move
+the project under Default Browse Root and retry. If it reports a project
+collision or invalid portable file, resolve the stated conflict or repair the
+existing file; do not overwrite it with an empty schema.
+
 ## Scheduler Setup Snapshot Contract
 
 When creating or updating a Host scheduler, prefer an existing session config:
 
 ```bash
-node .claude/skills/Oysterun/modules/oysterun-scheduler/scripts/oysterun_scheduler.mjs create --prompt "..." --frequency daily --time 09:00
-node .claude/skills/Oysterun/modules/oysterun-scheduler/scripts/oysterun_scheduler.mjs create --session-ref "My Agent Session" --prompt "..." --frequency daily --time 09:00
+$OYSTERUN_CLI_BIN scheduler create --prompt "..." --frequency daily --time 09:00
+$OYSTERUN_CLI_BIN scheduler create --session-ref "My Agent Session" --prompt "..." --frequency daily --time 09:00
 ```
 
 Do not import Host scheduler internals, call `/scheduler/*` endpoints directly,
@@ -70,9 +93,10 @@ the injected binary:
 $OYSTERUN_CLI_BIN mail send --title "Report ready" --html-file data/latest_report.html
 ```
 
-Do not send markdown, auto-format, stdin, `--text`, `--body`, or raw HTML held
-only in an environment variable. Do not call Host `/mail/*` endpoints directly.
-The `.html` file extension is the Mail deliverable contract.
+For a durable report, do not send markdown, auto-format, stdin, `--text`,
+`--body`, or raw HTML held only in an environment variable. Do not call Host
+`/mail/*` endpoints directly. The `.html` file extension is the durable Mail
+report contract.
 
 If a route explicitly requires an explicit setup snapshot instead of a current
 or saved session, the snapshot must include the full provider runtime proof:
@@ -99,12 +123,15 @@ the persisted scheduler target is valid.
 
 Scheduler jobs that need to send Oysterun Mail should use the normal product
 Mail CLI, not a separate scheduler-only Mail stack. Inside a Host-injected
-scheduler/runtime environment, prefer:
+scheduler/runtime environment, a short non-report status may use:
 
 ```bash
 $OYSTERUN_CLI_BIN mail send --title "Digest ready" --text "Daily tracker finished"
 ```
 
+If the job produced a report, use the durable `.html` plus `--html-file`
+contract above instead of `--text`.
+
 The Host injects a scheduler-run scoped `mail:create` capability for Mail send
 only. The CLI preserves `OYSTERUN_SCHEDULE_ID`,
 `OYSTERUN_SCHEDULE_RUN_ID`, and `OYSTERUN_AGENT_ID` as Mail attribution. Do