skillscript-runtime 0.34.0 → 0.36.0

package/examples/skillscripts/morning-brief.skill.provenance.json

@@ -2,7 +2,7 @@
   "provenance_version": "1.0",
   "language_version": "1.0",
   "compiler_version": "0.1.0-dev",
-  "compiled_at": "2026-07-16T23:02:43.732Z",
+  "compiled_at": "2026-07-18T22:19:17.823Z",
   "source_skill": {
     "name": "morning-brief"
   },

package/examples/skillscripts/queue-length-monitor.skill.provenance.json

@@ -2,7 +2,7 @@
   "provenance_version": "1.0",
   "language_version": "1.0",
   "compiler_version": "0.1.0-dev",
-  "compiled_at": "2026-07-16T23:02:43.927Z",
+  "compiled_at": "2026-07-18T22:19:17.965Z",
   "source_skill": {
     "name": "queue-length-monitor"
   },

package/examples/skillscripts/service-health-watch.skill.provenance.json

@@ -2,7 +2,7 @@
   "provenance_version": "1.0",
   "language_version": "1.0",
   "compiler_version": "0.1.0-dev",
-  "compiled_at": "2026-07-16T23:02:44.128Z",
+  "compiled_at": "2026-07-18T22:19:18.095Z",
   "source_skill": {
     "name": "service-health-watch"
   },

package/examples/skillscripts/skill-store-roundtrip.skill.provenance.json

@@ -2,7 +2,7 @@
   "provenance_version": "1.0",
   "language_version": "1.0",
   "compiler_version": "0.1.0-dev",
-  "compiled_at": "2026-07-16T23:02:44.357Z",
+  "compiled_at": "2026-07-18T22:19:18.214Z",
   "source_skill": {
     "name": "skill-store-roundtrip"
   },

package/examples/skillscripts/supervisor-notify.skill.md

@@ -0,0 +1,20 @@
+# Skill: supervisor-notify
+# Status: Draft
+# Description: Example failure-supervisor handler. When SKILLSCRIPT_SUPERVISOR_SKILL points at a skill like this one, the scheduler's trace-sweeper routes every NON-CLEAN autonomous fire (errored / deadline-exceeded / uncertain-effects) to it, with the failure details as vars. Copy it, adapt the DELIVERY to your channel, and APPROVE it — it lands Draft, a human approves it (that IS the governed-skill story). This version delivers to ${SUPERVISOR_AGENT} via `# Output: agent:`; for email / Slack / a webhook, replace the `# Output:` line with a `run:` block that dispatches a `$ connector.tool` or `shell(command="curl ...")`. NOTE: if THIS handler itself fails, the runtime does NOT re-route it (loop guard) — it logs to stderr only. Keep it simple and its delivery reliable.
+# Autonomous: true
+# Tags: supervisor, observability, ops
+# Vars: FAILED_SKILL=unknown, OUTCOME=unknown, TRACE_ID=none, TRIGGER=none, ERROR_SUMMARY=, UNCERTAIN_EFFECTS=, DEADLINE_EXCEEDED=false, FIRED_AT_MS=0, SUPERVISOR_AGENT=ops-oncall
+# Output: agent: ${SUPERVISOR_AGENT}
+
+⚠ An autonomous fire needs attention.
+
+Skill:    ${FAILED_SKILL}
+Outcome:  ${OUTCOME}
+Trigger:  ${TRIGGER}
+Trace:    ${TRACE_ID}   (full detail: fires({trace_id: "${TRACE_ID}"}))
+
+Errors:            ${ERROR_SUMMARY}
+Uncertain effects: ${UNCERTAIN_EFFECTS}
+
+If "Uncertain effects" is non-empty, an external mutation was issued but its outcome is
+UNKNOWN — it may have partially landed. Reconcile it by hand; the runtime never retried it.

package/examples/skillscripts/supervisor-notify.skill.provenance.json

@@ -0,0 +1,10 @@
+{
+  "provenance_version": "1.0",
+  "language_version": "1.0",
+  "compiler_version": "0.1.0-dev",
+  "compiled_at": "2026-07-18T22:19:18.326Z",
+  "source_skill": {
+    "name": "supervisor-notify"
+  },
+  "data_skills_inlined": []
+}

package/examples/skillscripts/youtrack-morning-sweep.skill.provenance.json

@@ -2,7 +2,7 @@
   "provenance_version": "1.0",
   "language_version": "1.0",
   "compiler_version": "0.1.0-dev",
-  "compiled_at": "2026-07-16T23:02:44.568Z",
+  "compiled_at": "2026-07-18T22:19:18.483Z",
   "source_skill": {
     "name": "youtrack-morning-sweep"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillscript-runtime",
-  "version": "0.34.0",
+  "version": "0.36.0",
   "description": "Runtime, compiler, lint, CLI, and dashboard for Skillscript — a small declarative language for authoring agent workflows.",
   "license": "MIT",
   "author": "Scott Shwarts <scotts@pobox.com>",

package/scaffold/.env.example

@@ -101,11 +101,41 @@
 # default applies. Default 300000 (5 min).
 # SKILLSCRIPT_ABSOLUTE_TIMEOUT_MS=300000
 
+# Operator run-deadline CEILING, seconds — a hard maximum on EVERY run
+# (execute_skill + trigger-fired), enforced even when a skill declares no
+# `# Deadline:`. A skill's own `# Deadline:` can only make its bound tighter,
+# never exceed this. The guard against an untrusted (agent) skill author evading
+# the time bound. Unset = no ceiling (a skill without `# Deadline:` is unbounded).
+# Set it to your deployment's tolerance — e.g. a latency-sensitive / robotic host
+# wants a small value so no run (or motion) can hang.
+# SKILLSCRIPT_MAX_DEADLINE_SECONDS=120
+
 # Max composition depth before the runtime throws. Default 10. Raise for
 # deeply-composing skill suites.
 # SKILLSCRIPT_MAX_RECURSION_DEPTH=10
 
 
+# ─── Autonomous-fire failure supervision ──────────────────────────────
+#
+# A cron/event-fired skill has no caller watching it — a 3am fire that errored,
+# or a run cut mid-effect leaving a mutation "outcome uncertain," is invisible
+# unless you go query the trace. Configure a supervisor and the scheduler's
+# trace-sweeper PUSHES those failures to an approved handler skill (which you
+# write — mechanism is a script) so you actually get notified.
+#
+# SKILLSCRIPT_SUPERVISOR_SKILL alone turns the feature ON. When set, autonomous-
+# fire tracing MUST be on (the sweeper reads the durable trace) — the runtime
+# hard-refuses at boot otherwise. Copy the example handler from examples/ and
+# approve it. The handler decides HOW to notify (email, Slack, agent, a webhook)
+# — that's your script, not the runtime's concern.
+# SKILLSCRIPT_SUPERVISOR_SKILL=supervisor-notify
+#
+# OPTIONAL. An agent id passed to the handler as ${SUPERVISOR_AGENT}, for a
+# handler that routes to an agent. Leave unset for an email-/webhook-only handler
+# — no agent is required.
+# SKILLSCRIPT_SUPERVISOR_AGENT=ops-oncall
+
+
 # ─── Identity propagation (multi-agent hosts only) ─────────────────────
 
 # HTTP header carrying host-attested caller identity; captured as a skill's