@karmaniverous/jeeves 0.5.12 → 0.6.0-1

package/dist/cli/plugin/index.js

@@ -1,1904 +0,0 @@
-#!/usr/bin/env node
-import { execSync } from 'node:child_process';
-import { writeFileSync, renameSync, unlinkSync, existsSync, mkdirSync, readFileSync, readdirSync, copyFileSync, rmSync } from 'node:fs';
-import { dirname, basename, join, resolve } from 'node:path';
-import * as commander from 'commander';
-import { randomUUID } from 'node:crypto';
-import { lock } from 'proper-lockfile';
-import 'semver';
-import { homedir } from 'node:os';
-import { z } from 'zod';
-import { fileURLToPath } from 'node:url';
-import { packageDirectorySync } from 'package-directory';
-
-function getDefaultExportFromCjs (x) {
-	return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, 'default') ? x['default'] : x;
-}
-
-function getAugmentedNamespace(n) {
-  if (Object.prototype.hasOwnProperty.call(n, '__esModule')) return n;
-  var f = n.default;
-	if (typeof f == "function") {
-		var a = function a () {
-			var isInstance = false;
-      try {
-        isInstance = this instanceof a;
-      } catch {}
-			if (isInstance) {
-        return Reflect.construct(f, arguments, this.constructor);
-			}
-			return f.apply(this, arguments);
-		};
-		a.prototype = f.prototype;
-  } else a = {};
-  Object.defineProperty(a, '__esModule', {value: true});
-	Object.keys(n).forEach(function (k) {
-		var d = Object.getOwnPropertyDescriptor(n, k);
-		Object.defineProperty(a, k, d.get ? d : {
-			enumerable: true,
-			get: function () {
-				return n[k];
-			}
-		});
-	});
-	return a;
-}
-
-var extraTypings = {exports: {}};
-
-var require$$0 = /*@__PURE__*/getAugmentedNamespace(commander);
-
-var hasRequiredExtraTypings;
-
-function requireExtraTypings () {
-	if (hasRequiredExtraTypings) return extraTypings.exports;
-	hasRequiredExtraTypings = 1;
-	(function (module, exports) {
-		const commander = require$$0;
-
-		exports = module.exports = {};
-
-		// Return a different global program than commander,
-		// and don't also return it as default export.
-		exports.program = new commander.Command();
-
-		/**
-		 * Expose classes. The FooT versions are just types, so return Commander original implementations!
-		 */
-
-		exports.Argument = commander.Argument;
-		exports.Command = commander.Command;
-		exports.CommanderError = commander.CommanderError;
-		exports.Help = commander.Help;
-		exports.InvalidArgumentError = commander.InvalidArgumentError;
-		exports.InvalidOptionArgumentError = commander.InvalidArgumentError; // Deprecated
-		exports.Option = commander.Option;
-
-		exports.createCommand = (name) => new commander.Command(name);
-		exports.createOption = (flags, description) =>
-		  new commander.Option(flags, description);
-		exports.createArgument = (name, description) =>
-		  new commander.Argument(name, description); 
-	} (extraTypings, extraTypings.exports));
-	return extraTypings.exports;
-}
-
-var extraTypingsExports = requireExtraTypings();
-var extraTypingsCommander = /*@__PURE__*/getDefaultExportFromCjs(extraTypingsExports);
-
-// wrapper to provide named exports for ESM.
-const {
-  program,
-  createCommand,
-  createArgument,
-  createOption,
-  CommanderError,
-  InvalidArgumentError,
-  InvalidOptionArgumentError, // deprecated old name
-  Command,
-  Argument,
-  Option,
-  Help,
-} = extraTypingsCommander;
-
-/**
- * Directory and file path conventions for the Jeeves platform.
- */
-/** Core config directory name within the config root. */
-const CORE_CONFIG_DIR = 'jeeves-core';
-/** Default workspace file names. */
-const WORKSPACE_FILES = {
-    /** TOOLS.md — live platform state and component sections. */
-    tools: 'TOOLS.md',
-    /** SOUL.md — professional discipline and behavioral foundations. */
-    soul: 'SOUL.md',
-    /** AGENTS.md — operational protocols and memory architecture. */
-    agents: 'AGENTS.md',
-    /** HEARTBEAT.md — platform status and health alerts. */
-    heartbeat: 'HEARTBEAT.md',
-    /** MEMORY.md — curated long-term memory. */
-    memory: 'MEMORY.md',
-};
-/** Skill directory name within workspace. */
-const SKILLS_DIR = 'skills';
-/** Component versions state file name. */
-const COMPONENT_VERSIONS_FILE = 'component-versions.json';
-
-/**
- * Core library version, inlined at build time.
- *
- * @remarks
- * The `0.5.11` placeholder is replaced by
- * `@rollup/plugin-replace` during the build with the actual version
- * from `package.json`. This ensures the correct version survives
- * when consumers bundle core into their own dist (where runtime
- * `import.meta.url`-based resolution would find the wrong package.json).
- */
-/** The core library version from package.json (inlined at build time). */
-const CORE_VERSION = '0.5.11';
-
-/**
- * Shared file I/O helpers for managed section operations.
- *
- * @remarks
- * Extracts the atomic write pattern and file-level locking into
- * reusable utilities, eliminating duplication between
- * `updateManagedSection` and `removeManagedSection`.
- */
-/** Stale lock threshold in ms (2 minutes). */
-const STALE_LOCK_MS = 120_000;
-/** Default core version when none provided. */
-const DEFAULT_CORE_VERSION = CORE_VERSION;
-/** Lock retry options. */
-const LOCK_RETRIES = { retries: 0 };
-/** Maximum rename retry attempts on EPERM. */
-const ATOMIC_WRITE_MAX_RETRIES = 3;
-/** Delay between EPERM retries in milliseconds. */
-const ATOMIC_WRITE_RETRY_DELAY_MS = 100;
-/**
- * Write content to a file atomically via a temp file + rename.
- *
- * @remarks
- * Retries the rename up to three times on EPERM (Windows file-handle
- * contention) with a 100 ms synchronous delay between attempts.
- *
- * @param filePath - Absolute path to the target file.
- * @param content - Content to write.
- */
-function atomicWrite(filePath, content) {
-    const dir = dirname(filePath);
-    const base = basename(filePath, '.md');
-    const tempPath = join(dir, `.${base}.${String(Date.now())}.${randomUUID().slice(0, 8)}.tmp`);
-    writeFileSync(tempPath, content, 'utf-8');
-    for (let attempt = 0; attempt < ATOMIC_WRITE_MAX_RETRIES; attempt++) {
-        try {
-            renameSync(tempPath, filePath);
-            return;
-        }
-        catch (err) {
-            const isEperm = err instanceof Error &&
-                'code' in err &&
-                err.code === 'EPERM';
-            if (!isEperm || attempt === ATOMIC_WRITE_MAX_RETRIES - 1) {
-                try {
-                    unlinkSync(tempPath);
-                }
-                catch {
-                    /* best-effort cleanup */
-                }
-                throw err;
-            }
-            // Synchronous sleep before retry (acceptable in atomic write context)
-            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ATOMIC_WRITE_RETRY_DELAY_MS);
-        }
-    }
-}
-async function withLock(targetPath, fn, options, onLockError) {
-    let release;
-    try {
-        release = await lock(targetPath, options);
-        await fn();
-    }
-    catch (error) {
-        throw error;
-    }
-    finally {
-        if (release) {
-            try {
-                await release();
-            }
-            catch {
-                // Lock already released or file deleted — safe to ignore
-            }
-        }
-    }
-}
-/**
- * Execute a callback while holding a file lock.
- *
- * @remarks
- * Acquires a lock on the file, executes the callback, and releases
- * the lock in a finally block. The lock uses a 2-minute stale threshold
- * and retries up to 5 times.
- *
- * @param filePath - Absolute path to the file to lock.
- * @param fn - Async callback to execute while holding the lock.
- */
-async function withFileLock(filePath, fn) {
-    await withLock(filePath, fn, {
-        stale: STALE_LOCK_MS,
-        retries: LOCK_RETRIES,
-    });
-}
-
-/**
- * Shared component version state file management.
- *
- * @remarks
- * Each `ComponentWriter` cycle writes its component's entry to
- * `{coreConfigDir}/component-versions.json`. The Platform Handlebars
- * template reads this file to populate ALL rows in the service health
- * table, not just the calling component's.
- */
-/**
- * Read the component versions state file.
- *
- * @param coreConfigDir - Path to the core config directory.
- * @returns The parsed state, or an empty object if the file doesn't exist.
- */
-function readComponentVersions(coreConfigDir) {
-    const filePath = join(coreConfigDir, COMPONENT_VERSIONS_FILE);
-    if (!existsSync(filePath))
-        return {};
-    try {
-        const raw = readFileSync(filePath, 'utf-8');
-        return JSON.parse(raw);
-    }
-    catch {
-        return {};
-    }
-}
-/**
- * Write a component's version entry to the shared state file.
- *
- * @remarks
- * Reads the existing file, merges the new entry, and writes atomically.
- *
- * @param coreConfigDir - Path to the core config directory.
- * @param options - Component version data to write.
- */
-function writeComponentVersion(coreConfigDir, options) {
-    const existing = readComponentVersions(coreConfigDir);
-    existing[options.componentName] = {
-        pluginVersion: options.pluginVersion,
-        servicePackage: options.servicePackage,
-        pluginPackage: options.pluginPackage,
-        updatedAt: new Date().toISOString(),
-    };
-    const filePath = join(coreConfigDir, COMPONENT_VERSIONS_FILE);
-    const dir = dirname(filePath);
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
-    atomicWrite(filePath, JSON.stringify(existing, null, 2) + '\n');
-}
-/**
- * Remove a component's version entry from the shared state file.
- *
- * @remarks
- * Called during plugin uninstall to prevent the HEARTBEAT writer from
- * probing a service that's intentionally gone. If the component isn't
- * in the file, this is a no-op.
- *
- * @param coreConfigDir - Path to the core config directory.
- * @param componentName - The component name to remove.
- */
-function removeComponentVersion(coreConfigDir, componentName) {
-    const existing = readComponentVersions(coreConfigDir);
-    if (!(componentName in existing))
-        return;
-    const updated = Object.fromEntries(Object.entries(existing).filter(([key]) => key !== componentName));
-    const filePath = join(coreConfigDir, COMPONENT_VERSIONS_FILE);
-    atomicWrite(filePath, JSON.stringify(updated, null, 2) + '\n');
-}
-
-/**
- * Comment markers for managed content blocks.
- *
- * @remarks
- * Managed content in TOOLS.md, SOUL.md, and AGENTS.md is enclosed
- * in HTML comment markers. Content between markers is refreshed
- * atomically on each writer cycle. User content outside the markers
- * is never touched.
- */
-/** Default markers for TOOLS.md managed block. */
-const TOOLS_MARKERS = {
-    /** BEGIN comment marker text. */
-    begin: 'BEGIN JEEVES PLATFORM TOOLS — DO NOT EDIT THIS SECTION',
-    /** END comment marker text. */
-    end: 'END JEEVES PLATFORM TOOLS',
-    /** H1 title prepended in section mode. */
-    title: 'Jeeves Platform Tools',
-    /** Managed block at bottom of file. */
-    position: 'bottom',
-};
-/**
- * Regex pattern to extract version stamp from a BEGIN marker comment.
- *
- * @remarks
- * Format: `\<!-- BEGIN MARKER | core:X.Y.Z | ISO-TIMESTAMP --\>`
- * Captures: [1] marker text, [2] version, [3] timestamp
- */
-const VERSION_STAMP_PATTERN = /<!--\s*(.+?)\s*\|\s*core:(\S+)\s*\|\s*(\S+)\s*-->/;
-
-/**
- * Managed section IDs, stable ordering, and platform component registry.
- *
- * @remarks
- * Section ordering is fixed to prevent diff churn regardless of which
- * component writes last. Sections always appear in this order.
- */
-/** Known section IDs for TOOLS.md managed block. */
-const SECTION_IDS = {
-    /** Platform health and guidance section. */
-    Platform: 'Platform',
-    /** Watcher index stats and search configuration. */
-    Watcher: 'Watcher',
-    /** Server export capabilities and connected services. */
-    Server: 'Server',
-    /** Runner job status and active scripts. */
-    Runner: 'Runner',
-    /** Meta synthesis entity summary and tools. */
-    Meta: 'Meta',
-};
-/**
- * Stable ordering of sections within the managed TOOLS.md block.
- * Sections always appear in this order regardless of write order.
- */
-const SECTION_ORDER = [
-    SECTION_IDS.Platform,
-    SECTION_IDS.Watcher,
-    SECTION_IDS.Server,
-    SECTION_IDS.Runner,
-    SECTION_IDS.Meta,
-];
-
-/**
- * Workspace and config root initialization.
- *
- * @remarks
- * `init()` must be called once before any other core library functions.
- * It caches `workspacePath` and `configRoot` at module level.
- * Core derives all namespaced paths from these values:
- * - `{configRoot}/jeeves-core/` for core config
- * - `{configRoot}/jeeves-{name}/` for each component
- */
-let state;
-const WINDOWS_DRIVE_RE = /^[a-zA-Z]:/;
-/**
- * Throw if a path looks like a Windows drive letter on a non-Windows platform.
- *
- * @param label - Human-readable name for the path (used in error messages).
- * @param value - The raw path string to validate.
- */
-function rejectWindowsDrivePath(label, value) {
-    if (process.platform !== 'win32' && WINDOWS_DRIVE_RE.test(value)) {
-        throw new Error(`jeeves-core: ${label} "${value}" looks like a Windows drive-letter path and will not resolve correctly on this platform.`);
-    }
-}
-/**
- * Initialize the core library with workspace and config root paths.
- *
- * @param options - Workspace and config root paths.
- */
-function init(options) {
-    rejectWindowsDrivePath('configRoot', options.configRoot);
-    rejectWindowsDrivePath('workspacePath', options.workspacePath);
-    state = {
-        workspacePath: options.workspacePath,
-        configRoot: options.configRoot,
-        coreConfigDir: join(options.configRoot, CORE_CONFIG_DIR),
-        componentConfigPaths: new Map(),
-    };
-}
-/**
- * Get the core config directory path.
- *
- * @throws Error if `init()` has not been called.
- */
-function getCoreConfigDir() {
-    if (!state)
-        throw new Error('jeeves-core: init() must be called first');
-    return state.coreConfigDir;
-}
-
-/**
- * Heading-based HEARTBEAT section writer.
- *
- * @remarks
- * Manages the `# Jeeves Platform Status` section in HEARTBEAT.md.
- * Unlike TOOLS/SOUL/AGENTS (which use HTML comment markers), HEARTBEAT
- * uses markdown headings as markers — this ensures the file passes
- * OpenClaw's heartbeat emptiness check when only headings remain.
- *
- * The section is always at the bottom of the file (H1 to EOF).
- * User heartbeat items above the section are preserved.
- */
-/** The H1 heading that anchors the platform status section. */
-const HEARTBEAT_HEADING = '# Jeeves Platform Status';
-/**
- * Parse the HEARTBEAT.md file content.
- *
- * @param fileContent - Full file content.
- * @returns Parsed result with user zone and component entries.
- */
-function parseHeartbeat(fileContent) {
-    const headingIndex = fileContent.indexOf(HEARTBEAT_HEADING);
-    if (headingIndex === -1) {
-        return {
-            userContent: fileContent.trim(),
-            found: false,
-            entries: [],
-        };
-    }
-    const userContent = fileContent.slice(0, headingIndex).trim();
-    const sectionContent = fileContent.slice(headingIndex + HEARTBEAT_HEADING.length);
-    const entries = [];
-    const h2Re = /^## (jeeves-\S+?|\S+\.md)(?:: declined)?$/gm;
-    let match;
-    const h2Positions = [];
-    while ((match = h2Re.exec(sectionContent)) !== null) {
-        const fullHeading = match[0];
-        const name = match[1];
-        const declined = fullHeading.endsWith(': declined');
-        h2Positions.push({ name, declined, start: match.index });
-    }
-    for (let i = 0; i < h2Positions.length; i++) {
-        const pos = h2Positions[i];
-        const headingLine = pos.declined
-            ? `## ${pos.name}: declined`
-            : `## ${pos.name}`;
-        const contentStart = pos.start + headingLine.length;
-        const contentEnd = i + 1 < h2Positions.length
-            ? h2Positions[i + 1].start
-            : sectionContent.length;
-        const content = sectionContent.slice(contentStart, contentEnd).trim();
-        entries.push({
-            name: pos.name,
-            declined: pos.declined,
-            content,
-        });
-    }
-    return { userContent, found: true, entries };
-}
-/**
- * Build the HEARTBEAT section content from entries.
- *
- * @param entries - Component entries to write.
- * @returns The full section string (H1 + H2s).
- */
-function buildHeartbeatSection(entries) {
-    const parts = [HEARTBEAT_HEADING];
-    for (const entry of entries) {
-        if (entry.declined) {
-            parts.push(`## ${entry.name}: declined`);
-        }
-        else if (entry.content) {
-            parts.push(`## ${entry.name}`);
-            parts.push(entry.content);
-        }
-        // Healthy components (no content, not declined) get no H2 section
-    }
-    return parts.join('\n');
-}
-
-/**
- * Stable section ordering for managed TOOLS.md blocks.
- *
- * @remarks
- * Sorts sections by the canonical SECTION_ORDER: known sections
- * appear in their defined order, unknown sections are appended after.
- * Used by both parseManaged (for consistent output) and
- * updateManagedSection (for reassembly).
- */
-/**
- * Sort sections in place by stable ordering.
- *
- * @param sections - Array of managed sections to sort.
- * @returns The sorted array (same reference, mutated in place).
- */
-function sortSectionsByOrder(sections) {
-    return sections.sort((a, b) => {
-        const aIdx = SECTION_ORDER.indexOf(a.id);
-        const bIdx = SECTION_ORDER.indexOf(b.id);
-        const aOrder = aIdx === -1 ? SECTION_ORDER.length : aIdx;
-        const bOrder = bIdx === -1 ? SECTION_ORDER.length : bIdx;
-        return aOrder - bOrder;
-    });
-}
-
-/**
- * Parse managed block from file content.
- *
- * @remarks
- * Extracts managed content delimited by comment markers, parses H2
- * sections within the block, and returns the structured result plus
- * user content outside the markers.
- */
-/**
- * Escape a string for safe use as a literal in a RegExp pattern.
- *
- * @param str - The string to escape.
- * @returns The escaped string.
- */
-function escapeForRegex(str) {
-    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-/**
- * Build regex patterns for the given markers.
- *
- * @param markers - Begin/end marker strings.
- * @returns Object with begin and end regex patterns.
- */
-function buildMarkerPatterns(markers) {
-    return {
-        beginRe: new RegExp(`^<!--\\s*${escapeForRegex(markers.begin)}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->\\s*$`, 'm'),
-        endRe: new RegExp(`^<!--\\s*${escapeForRegex(markers.end)}\\s*-->\\s*$`, 'm'),
-    };
-}
-/**
- * Parse H2 sections from managed block content.
- *
- * @param content - Raw managed block content.
- * @returns Array of parsed sections in stable order.
- */
-function parseSections(content) {
-    const lines = content.split('\n');
-    const sections = [];
-    let currentId;
-    let currentLines = [];
-    for (const line of lines) {
-        const h2Match = /^## (.+)$/.exec(line);
-        if (h2Match) {
-            if (currentId !== undefined) {
-                sections.push({
-                    id: currentId,
-                    content: currentLines.join('\n').trim(),
-                });
-            }
-            currentId = h2Match[1];
-            currentLines = [];
-        }
-        else if (currentId !== undefined) {
-            currentLines.push(line);
-        }
-    }
-    if (currentId !== undefined) {
-        sections.push({
-            id: currentId,
-            content: currentLines.join('\n').trim(),
-        });
-    }
-    return sortSectionsByOrder(sections);
-}
-/**
- * Parse a managed block from file content.
- *
- * @param fileContent - Full file content.
- * @param markers - Optional custom markers (defaults to TOOLS markers).
- * @returns Parsed result with sections, version stamp, and user content.
- */
-function parseManaged(fileContent, markers = TOOLS_MARKERS) {
-    const { beginRe, endRe } = buildMarkerPatterns(markers);
-    const beginMatch = beginRe.exec(fileContent);
-    if (!beginMatch) {
-        return {
-            found: false,
-            versionStamp: undefined,
-            managedContent: '',
-            sections: [],
-            beforeContent: '',
-            userContent: fileContent,
-        };
-    }
-    const endMatch = endRe.exec(fileContent.slice(beginMatch.index + beginMatch[0].length));
-    if (!endMatch) {
-        // Corrupt: BEGIN without END — treat as fresh file
-        return {
-            found: false,
-            versionStamp: undefined,
-            managedContent: '',
-            sections: [],
-            beforeContent: '',
-            userContent: fileContent,
-        };
-    }
-    const beforeContent = fileContent.slice(0, beginMatch.index).trim();
-    const managedStart = beginMatch.index + beginMatch[0].length;
-    const managedEnd = managedStart + endMatch.index;
-    const managedContent = fileContent.slice(managedStart, managedEnd).trim();
-    const afterEnd = managedStart + endMatch.index + endMatch[0].length;
-    const userContent = fileContent.slice(afterEnd).trim();
-    // Extract version stamp from BEGIN marker line
-    let versionStamp;
-    const stampMatch = VERSION_STAMP_PATTERN.exec(beginMatch[0]);
-    if (stampMatch?.[2] && stampMatch[3]) {
-        versionStamp = {
-            version: stampMatch[2],
-            timestamp: stampMatch[3],
-        };
-    }
-    const sections = parseSections(managedContent);
-    return {
-        found: true,
-        versionStamp,
-        managedContent,
-        sections,
-        beforeContent,
-        userContent,
-    };
-}
-
-/**
- * Version-stamp parsing and convergence logic.
- *
- * @remarks
- * When multiple component plugins bundle different core library versions,
- * they independently maintain shared managed content. The version-stamp
- * mechanism ensures convergence without coordination state.
- */
-/**
- * Format the BEGIN marker comment with a version stamp.
- *
- * @param markerText - The marker text (e.g., 'BEGIN JEEVES PLATFORM TOOLS').
- * @param version - The core library version.
- * @returns Formatted comment line.
- */
-function formatBeginMarker(markerText, version) {
-    const timestamp = new Date().toISOString();
-    return `<!-- ${markerText} | core:${version} | ${timestamp} -->`;
-}
-/**
- * Format the END marker comment.
- *
- * @param markerText - The marker text (e.g., 'END JEEVES PLATFORM TOOLS').
- * @returns Formatted comment line.
- */
-function formatEndMarker(markerText) {
-    return `<!-- ${markerText} -->`;
-}
-
-/**
- * Remove a managed section or entire managed block from a file.
- *
- * @remarks
- * Supports two modes:
- * - No `sectionId`: Remove the entire managed block (markers + content),
- *   leaving user content intact.
- * - With `sectionId`: Remove a specific H2 section from within the
- *   managed block. If it was the last section, remove the entire block.
- *
- * Provides file-level locking and atomic writes (temp file + rename).
- * Missing markers or nonexistent sections are no-ops (no error thrown).
- */
-/**
- * Remove a managed section or entire managed block from a file.
- *
- * @param filePath - Absolute path to the target file.
- * @param options - Optional section ID and custom markers.
- */
-async function removeManagedSection(filePath, options = {}) {
-    const { sectionId, markers = TOOLS_MARKERS } = options;
-    if (!existsSync(filePath))
-        return;
-    await withFileLock(filePath, () => {
-        const fileContent = readFileSync(filePath, 'utf-8');
-        const parsed = parseManaged(fileContent, markers);
-        if (!parsed.found)
-            return;
-        let newContent;
-        if (!sectionId) {
-            // Remove entire managed block
-            newContent = buildWithoutBlock(parsed.beforeContent, parsed.userContent);
-        }
-        else {
-            // Remove specific section
-            const remaining = parsed.sections.filter((s) => s.id !== sectionId);
-            if (remaining.length === parsed.sections.length) {
-                // Section not found — no-op
-                return;
-            }
-            if (remaining.length === 0) {
-                // Last section removed — remove entire block
-                newContent = buildWithoutBlock(parsed.beforeContent, parsed.userContent);
-            }
-            else {
-                // Rebuild managed block without the removed section
-                newContent = buildWithSections(parsed.beforeContent, parsed.userContent, remaining, markers, parsed.versionStamp?.version);
-            }
-        }
-        atomicWrite(filePath, newContent);
-    });
-}
-/** Build file content without the managed block. */
-function buildWithoutBlock(beforeContent, userContent) {
-    const parts = [];
-    if (beforeContent)
-        parts.push(beforeContent);
-    if (userContent) {
-        if (parts.length > 0)
-            parts.push('');
-        parts.push(userContent);
-    }
-    if (parts.length === 0)
-        return '';
-    return parts.join('\n') + '\n';
-}
-/** Rebuild file content with remaining sections. */
-function buildWithSections(beforeContent, userContent, sections, markers, coreVersion) {
-    const sorted = sortSectionsByOrder([...sections]);
-    const sectionText = sorted
-        .map((s) => `## ${s.id}\n\n${s.content}`)
-        .join('\n\n');
-    const managedBody = markers.title
-        ? `# ${markers.title}\n\n${sectionText}`
-        : sectionText;
-    const beginLine = formatBeginMarker(markers.begin, coreVersion ?? DEFAULT_CORE_VERSION);
-    const endLine = formatEndMarker(markers.end);
-    const parts = [];
-    if (beforeContent) {
-        parts.push(beforeContent);
-        parts.push('');
-    }
-    parts.push(beginLine);
-    parts.push('');
-    parts.push(managedBody);
-    parts.push('');
-    parts.push(endLine);
-    if (userContent) {
-        parts.push('');
-        parts.push(userContent);
-    }
-    parts.push('');
-    return parts.join('\n');
-}
-
-var codingContent = `---
-name: coding
-description: Engineering standards for all code work. Use when writing code, reviewing PRs, spawning coding sub-agents, or making architectural decisions in any project (not just Jeeves). Covers design-first development, schema-first patterns, testing, STAN workflow, dependency management, and pre-PR checklist.
----
-
-# Engineering Standards
-
-These standards apply to ALL code work — whether done directly or via sub-agents.
-When spawning sub-agents for coding tasks, include the relevant rules in the task prompt.
-Sub-agents don't inherit your context — if you don't pass the rules, they don't exist.
-
----
-
-## Design-First Development
-
-1. **Iterate on design until convergence** — Summarize requirements, propose approach, raise questions BEFORE writing code.
-2. **Services-first architecture** — Core logic in services behind ports; adapters thin; side effects at boundaries.
-3. **Schema-first** — Runtime schema (Zod) is source of truth; TypeScript types derived via \`z.infer<>\`; validation centralized. Plain TypeScript \`interface\` declarations for config surfaces are not acceptable.
-4. **300 LOC hard limit** — If a file would exceed 300 lines, stop and decompose first. No exceptions.
-5. **Avoid \`any\`** — Prefer \`unknown\` + narrowing; if unavoidable, narrowest scope + rationale.
-6. **Test pairing** — Every non-trivial module gets a \`*.test.ts\`.
-7. **Open-source first** — Prefer established deps over home-grown solutions. Search npm/GitHub before building anything non-trivial.
-
-## Module Design
-
-- **Single Responsibility** applies to modules as well as functions.
-- Prefer many small modules over a few large ones.
-- Keep module boundaries explicit and cohesive; avoid "kitchen-sink" files.
-- Co-locate tests with modules for discoverability.
-
-## Config Surfaces
-
-- Define config with **Zod schemas** — never bare TypeScript interfaces.
-- Derive types: \`type MyConfig = z.infer<typeof myConfigSchema>\`
-- Generate **JSON Schema** from Zod for IDE DX (\`\$schema\` pointer in config files).
-- Validate at load time — fail fast with clear error messages.
-- \`init\` commands generate config with \`\$schema\` pointer already in place.
-
-## Testing
-
-- **Unit tests** for pure services (no fs/process/network).
-- **Integration tests** for adapters/seams (minimal end-to-end slices).
-- Exercise happy paths AND representative error paths.
-- Table-driven cases encouraged for exhaustive coverage.
-- Keep coverage meaningful — prefer covering branches/decisions over chasing 100% lines.
-
-## STAN-Enabled Repos
-
-When working in a repo with \`.stan/\`:
-- Run \`stan run --sequential --no-archive\` **before** each commit. Scripts must pass before you commit. Sequential runs are preferred to limit side effects. Archives are not needed (you won't use them).
-- **Push after every commit.** Don't accumulate unpushed local commits. Jason needs to be able to see your work at any time.
-- All scripts must pass before claiming work is complete.
-- Read \`.stan/output/<script>.txt\` for evidence on failures.
-- When creating stan scripts, eliminate colorized output where possible (e.g. \`--no-color\`, \`NO_COLOR=1\`) to reduce noise in script output files.
-
-## Cross-Package Verification
-
-When changes affect exports consumed by another repo:
-- Standalone scripts passing ≠ "ready for review."
-- Use \`npm link\` or equivalent to verify the consumer builds against your changes.
-- Only claim completion when BOTH repos pass.
-
-## Dependencies: Latest Versions Required (HARD GATE)
-
-**NEVER use a superseded version of ANY dependency without direct human authorization.** When adding a new dependency — or creating a new project — ALWAYS check the latest stable version and use it. This applies to runtime deps, dev deps, and peer deps alike.
-
-- Before \`npm install <package>\`: run \`npm view <package> version\` (or check npmjs.com) to confirm you're installing the current major.
-- Before spawning sub-agents that install packages: include the latest version in the task prompt, or instruct the sub-agent to verify latest before installing.
-- If the latest major has known breaking issues that block adoption, flag it to the human — don't silently pin an old major.
-
-LLMs are trained on stale data. Your training cutoff means you will default to old versions of everything. **Assume your version knowledge is wrong** and verify before every install.
-
-*Earned: 2026-05-12, created the jeeves-tools repo with Zod 3 despite Zod 4 being available since mid-2025. Shipped 84 commits on the old major before catching it.*
-
-## Dependencies: Local Over Global
-
-- **Dev dependencies belong in the project, not the global environment.** Install with \`npm install --save-dev\`, not \`npm install -g\`.
-- This guarantees reproducibility across machines and CI. Global installs mask environment differences that cause "works on my machine" failures.
-- **Rare exceptions:** Tools that are genuinely machine-level utilities (e.g. \`stan-cli\`). If in doubt, install locally.
-## Dependency Failures
-
-When a third-party dependency is broken:
-1. Summarize the failure concisely.
-2. Enumerate options: switch dependency → fix upstream → temporary pin → shim (last resort).
-3. Recommend with rationale.
-4. Do NOT immediately code around the problem.
-
-## CHANGELOG
-
-- **Do not manually update CHANGELOG.md** — it is generated as part of the release process (e.g. via \`standard-version\`, \`changesets\`, or equivalent). Conventional commit messages are the input; the tooling produces the output.
-
-## Pre-PR Checklist (HARD GATE)
-
-**Before creating ANY PR, run the full verification sequence. No exceptions.**
-
-1. \`stan run --sequential --no-archive\` if \`.stan/\` exists — this is the canonical check suite
-2. In monorepos: run checks **from each package directory**, not just the root. Root-level runs may mask package-level failures due to config resolution differences.
-3. Exercise the release path: check \`release-it\` hooks (or equivalent) in each releasable package — run the same commands (\`lint\`, \`typecheck\`, \`test\`, \`build\`) from the same cwd the release process uses.
-
-If any step fails, fix it before committing. Do NOT create the PR and "note" the failures. Do NOT claim pre-existing failures without having actually run the commands first. Skipping this sequence is how we ship broken code and fabricate diagnoses.
-
-- **Compare against canonical template** (\`karmaniverous/npm-package-template-ts\`) before any npm package PR. If the project is behind the template, update it to conform. If the template is behind the project, raise the issue with Jason for template upkeep.
-- **Run \`ncu --peer\`** before any PR. Review the output. Update safe patches/minors. **Flag major version bumps for discussion** — never auto-apply \`ncu -u\` without reading what changed. Peer dep conflicts must be resolved, not ignored.
-- When spawning sub-agents, include \`ncu --peer\` in the quality gate commands: \`ncu --peer && npm run lint && npm run typecheck && npm run build && npm test\`. The sub-agent should report \`ncu\` output and only apply updates that don't involve major bumps or peer conflicts.
-- **Resolve ALL script warnings.** It is NOT acceptable to release code with outstanding warnings. They exist for a reason — fix them.
-- **Typecheck/lint rules apply to ALL authored code**, including configs at project root (\`eslint.config.ts\`, \`rollup.config.ts\`, \`vitest.config.ts\`, etc.). Only generated code (e.g. typedoc output) should be excepted from code quality checks.
-- **Never disable lint/typecheck rules** without surfacing it for discussion first. Disabled rules are a major code smell. If a rule must be disabled, document the rationale inline at the point of suppression.
-- **Multiple tsconfigs are a code smell.** Sometimes needed, but often they paper over poor configuration choices. Fix root causes rather than adding tsconfig variants.
-- **In a TS repo, all scripts should be authored in TS** (not JS). Prefer execution with \`tsx\`.
-- **Clean-room verify before claiming "all green."** Run \`rimraf node_modules && npm install && npm run build\` (or equivalent) to catch issues masked by cached state. If someone reports an error you can't reproduce, assume your cache is lying — not that they're wrong.
-- Verify build, test, and lint pass after updates.
-
-## Dev Workspace
-
-- **Clone location:** \`D:\\repos\\{org-or-userid}\\{repo}\` (e.g. \`D:\\repos\\karmaniverous\\jeeves-watcher\`)
-- D drive is the dev workspace. Do not clone repos elsewhere.
-- Fresh clones are preferred over copying existing checkouts — \`npm install\` from registry is faster than disk-copying \`node_modules\`.
-- D drive is NOT indexed by jeeves-watcher. Dev work stays off the archive.
-
-## GitHub Auth (HARD GATE)
-
-- **ALL GitHub operations use \`jgs-jeeves\` auth.** Set \`GH_TOKEN\` before any \`gh\` CLI command:
-  \`\`\`powershell
-  \$env:GH_TOKEN = (Get-Content "J:\\config\\credentials\\github\\jgs-jeeves.token" -Raw).Trim()
-  \`\`\`
-- Never write to GitHub as \`karmaniverous\` — that's Jason's account.
-- If \`jgs-jeeves\` lacks permissions, **escalate to Jason** rather than falling back to \`karmaniverous\`.
-
-## Issue Hygiene
-
-- **Always comment rationale when closing an issue without resolution** (duplicate, won't-fix, obsolete). The close action alone doesn't explain why.
-- Reference the replacement issue/PR when closing as duplicate.
-
-## Code Style
-
-- Prettier is source of truth for formatting.
-- Keep imports sorted per repo tooling.
-- Avoid dead code.
-- TSDoc \`@module\` or \`@packageDocumentation\` on every non-test module.
-- First 160 chars of module doc should be high-signal: what it does, IO/side effects, traversal hints.
-
-## eslint-disable is a HARD GATE
-
-Never disable lint/typecheck rules without surfacing it for discussion first. Fix the code, don't suppress the warning. For test mocks, use properly typed partial objects (\`Partial<RealType>\`, typed \`MockReply\` interfaces) instead of \`any\`. Tests are code.
-
-## Git Merge Policy
-
-- **No squash merges.** Preserve commit history.
-- **PR reviewer:** When creating a PR under \`jgs-jeeves\` auth, always add \`karmaniverous\` (Jason) as a reviewer.
-`;
-
-var jeevesContent = `---
-name: jeeves
-description: Jeeves platform architecture, data flow, component interaction, scripts repo, and coordination knowledge. Use when making architectural decisions, coordinating across components, checking platform health, managing service lifecycle, or working with the scripts repo.
----
-
-# Jeeves Platform Skill
-
-## Platform Architecture
-
-Jeeves is a four-component platform coordinated by a shared library (\`@karmaniverous/jeeves\`):
-
-| Component | Role | Port |
-|-----------|------|------|
-| **jeeves-runner** | Execute: scheduled jobs, SQLite state, HTTP API | 1937 |
-| **jeeves-watcher** | Index: file→Qdrant semantic indexing, inference rules | 1936 |
-| **jeeves-server** | Present: web UI, file browser, doc render, export | 1934 |
-| **jeeves-meta** | Distill: LLM synthesis, .meta/ directories, scheduling | 1938 |
-
-Core (\`@karmaniverous/jeeves\`) is a **library + CLI**, not a service. No port.
-
-## Data Flow
-
-\`\`\`
-Files → Watcher (index) → Qdrant → Meta (synthesize) → .meta/ → Watcher (re-index)
-                                                                      ↓
-Runner (schedule) → Scripts → Services ← Server (present) ← Browser
-\`\`\`
-
-## Component Interaction
-
-- **Watcher** indexes files into Qdrant with inference rules and enrichments.
-- **Meta** reads from Qdrant, synthesizes \`.meta/\` directories, which watcher re-indexes.
-- **Runner** executes scheduled scripts that may call any service's HTTP API.
-- **Server** presents files, renders documents, and provides the event gateway.
-- **Core** provides shared content management (TOOLS.md, SOUL.md, AGENTS.md), service discovery, config resolution, and the component SDK.
-
-## Service Discovery
-
-Services find each other via config resolution:
-1. Component's own config file (\`{configRoot}/jeeves-{name}/config.json\`)
-2. Core config file (\`{configRoot}/jeeves-core/config.json\`)
-3. Default port constants
-
-## Scripts Repo
-
-Location: \`{configRoot}/jeeves-core/scripts/\`
-Template: \`@karmaniverous/jeeves-scripts-template\`
-
-Scripts use utilities from \`@karmaniverous/jeeves\` (general) and \`@karmaniverous/jeeves-runner\` (runner-specific). Any script that could be useful outside runner scheduling belongs in core.
-
-## Managed Content System
-
-Core maintains managed sections in workspace files using comment markers:
-- **TOOLS.md** — Component sections (section mode) + Platform section
-- **SOUL.md** — Professional discipline and behavioral foundations (block mode)
-- **AGENTS.md** — Operational protocols and memory architecture (block mode)
-- **HEARTBEAT.md** — Platform health status (heading-based)
-
-Managed blocks are stationary after initial insertion. Cleanup detection uses Jaccard similarity on 3-word shingles. Cleanup escalation spawns a gateway session when orphaned content is detected.
-
-## Workspace Configuration
-
-\`jeeves.config.json\` at workspace root provides shared defaults:
-- Precedence: CLI flags → env vars → file → defaults
-- Namespaced: \`core.*\` (workspace, configRoot, gatewayUrl, devRepos) and \`memory.*\` (budget, warningThreshold)
-- Inspect with \`jeeves config [jsonpath]\`
-
-## HEARTBEAT Protocol
-
-The HEARTBEAT system uses a state machine per component:
-\`not_installed → deps_missing → config_missing → service_not_installed → service_stopped → healthy\`
-
-Dependency-aware: hard deps block alerts, soft deps add informational notes. Declined components are tracked via heading suffix.
-
-## Plugin Lifecycle
-
-\`\`\`bash
-# Core install (seed workspace content)
-npx @karmaniverous/jeeves install
-
-# Component plugin install
-npx @karmaniverous/jeeves-{component}-openclaw install
-
-# Component plugin uninstall
-npx @karmaniverous/jeeves-{component}-openclaw uninstall
-
-# Core uninstall (remove managed sections)
-npx @karmaniverous/jeeves uninstall
-\`\`\`
-
-## Memory Hygiene
-
-MEMORY.md has a character budget (default 20,000). Core tracks:
-- Character count and usage percentage
-- Warning at 80% of budget
-- Stale section candidates (H2 sections whose most recent ISO date exceeds the staleness threshold)
-- Evergreen sections (no dates) are never flagged
-
-Review is human/agent-mediated — core does not auto-delete.
-
-### HEARTBEAT Integration
-
-Memory hygiene is checked on every \`ComponentWriter\` cycle alongside component health. When budget or staleness thresholds are breached, a \`## MEMORY.md\` alert appears in HEARTBEAT.md under \`# Jeeves Platform Status\`. The alert includes character count, budget usage percentage, and any stale section names. When memory is healthy, the heading is absent — no alert content, no LLM cost on heartbeat polls.
-
-The \`## MEMORY.md\` heading follows the same declined/active lifecycle as component headings (\`## jeeves-{name}\`). Users can decline memory alerts by changing the heading to \`## MEMORY.md: declined\`.
-
-## Workspace File Size Monitoring
-
-OpenClaw applies a ~20,000-char injection limit to all workspace bootstrap files (AGENTS.md, SOUL.md, TOOLS.md, USER.md, MEMORY.md). Files exceeding the limit are silently truncated.
-
-Core monitors all five files on every \`ComponentWriter\` cycle:
-- Warning at 80% of budget (fixed threshold; not configurable via \`jeeves.config.json\`)
-- Over-budget alert when charCount exceeds the budget
-- Missing files are silently skipped
-
-### HEARTBEAT Integration
-
-When a workspace file exceeds the warning threshold, a \`## {filename}\` alert appears in HEARTBEAT.md (e.g., \`## AGENTS.md\`). The alert includes:
-- Character count, budget, and usage percentage
-- Trimming guidance in priority order: (1) move domain-specific content to a local skill, (2) extract reference material to companion files with a pointer, (3) summarize verbose instructions, (4) remove stale content
-
-Each file heading follows the same declined/active lifecycle as component headings. Users can decline alerts by changing the heading to \`## {filename}: declined\` (e.g., \`## AGENTS.md: declined\`).
-`;
-
-var operationsContent = `---
-name: operations
-description: Operational knowledge for a Jeeves installation. Covers date formatting utilities, email pipeline architecture, curation signal protocol, label taxonomy, and data flow patterns. Use when working with date formatting, email scripts, debugging email pipeline issues, or understanding how human email actions are interpreted.
----
-
-# Operations
-
-Operational knowledge for the Jeeves platform. Covers email pipeline architecture, curation protocols, and operational conventions.
-
-## Date Formatting
-
-A \`date-fns\` wrapper lives at \`{configRoot}/jeeves-core/scripts/src/lib/dates.ts\`. It provides:
-
-| Export | Purpose |
-|--------|---------|
-| \`dayOfWeek(dateStr)\` | Full weekday name for an ISO date string (e.g. \`'Monday'\`) |
-| \`formatDate(dateStr, fmt)\` | Format with any date-fns pattern |
-| \`relativeDays(dateStr, refStr?)\` | Human-friendly relative description (\`'today'\`, \`'tomorrow'\`, \`'3 days ago'\`) |
-| \`parseISO\` / \`format\` | Re-exported from date-fns for direct use |
-
-### Gateway session usage
-
-From a gateway session, call via \`exec\`:
-
-\`\`\`
-node -e "import { dayOfWeek } from './src/lib/dates.js'; console.log(dayOfWeek('2026-05-11'));"
-\`\`\`
-
-with \`workdir: {configRoot}/jeeves-core/scripts\`.
-
-Or use the simpler inline form when the full wrapper isn't needed:
-
-\`\`\`
-node -e "import { format, parseISO } from 'date-fns'; console.log(format(parseISO('2026-05-11'), 'EEEE'));"
-\`\`\`
-
-with \`workdir: {configRoot}/jeeves-core/scripts\` (so date-fns resolves from \`node_modules\`).
-
-### Hard gate
-
-NEVER state a day of the week without computing it first. LLMs cannot do day-of-week arithmetic reliably.
-
-## Email Curation Signal Protocol
-
-Defines how human email actions in Gmail are interpreted by Jeeves email processes.
-
-### Human Signals
-
-| Signal | Meaning | Action |
-|--------|---------|--------|
-| Label added | Human is adjusting Jeeves classification | Update domain process inputs to reflect new classification |
-| Label removed | Human is adjusting Jeeves classification (removal) | Update domain process inputs to reflect removed classification |
-| Archived → Inbox | Human wants to keep this email in sight | Add \`watch\` label via update queue |
-| Starred / Flagged | Elevated attention — email is important in context | Domain processes should weight higher |
-| Moved to Spam | Confirmed spam — human classified as junk | Learn from classification for future triage |
-| Removed from Spam | False positive — human rescued from spam | Process as normal email, learn from false positive |
-
-### Watch Label
-
-The \`watch\` label has special semantics:
-- When present, never auto-archive the email
-- When a watched email lands in archive (by anyone), remove the watch label
-- Added automatically when a human moves an archived email back to inbox
-
-### Label Taxonomy
-
-Labels applied by Jeeves processes fall into two categories:
-
-**Mechanical labels** (applied by domain extractors with high confidence):
-- \`meeting\` — meeting-related email (invite, notes, transcript)
-- \`finance\` — financial email (receipt, invoice, billing, statement)
-
-**Reasoning labels** (applied by Update Email Meta, requiring cross-domain context):
-- \`project/<name>\` — associated with a known project
-- \`todo\` — requires action or work from the user
-- \`reply\` — someone is waiting on a response
-- \`alert\` — automated notification from a service
-- \`readme\` — newsletter or subscribed informational content
-
-### Labeling Principles
-
-1. Label at the earliest point where confidence is high enough
-2. Domain extractors label what they know with certainty
-3. Update Email Meta labels what requires cross-domain context
-4. A thread can have multiple labels
-5. Do not re-label threads that already have the label
-6. **Prefer false negatives over false positives**
-
-### Poll Scope
-
-Query: \`newer_than:1d in:anywhere\`
-
-Must include spam and trash to detect human curation signals (e.g., moving to/from spam).
-
-## Email Pipeline Architecture
-
-### Directory Layout
-
-\`\`\`
-{configRoot}/jeeves-core/email-config.json  — pipeline configuration (accounts, buckets)
-{workspace}/../email/threads/{account}/     — canonical email archive (thread.json + per-message JSONs)
-\`\`\`
-
-### Data Flow
-
-1. **Poll** (\`email/poll.ts\`) — searches Gmail for recent threads, classifies, enqueues important ones for metadata fetch
-2. **Fetch** (\`email/email-fetch.ts\`) — fetches full thread metadata from Gmail, creates/updates \`thread.json\` cache, enqueues for body download
-3. **Download** (\`email/download.ts\`) — downloads full message bodies, writes per-message JSONs to \`threads/{account}/{threadId}/\`
-4. **Drain Updates** (\`email/drain-updates.ts\`) — applies label changes and other queued updates back to Gmail
-5. **Meta synthesis** — jeeves-meta synthesizes email archives into searchable summaries
-
-### thread.json (Cache Format)
-
-Each \`threads/{account}/{threadId}/thread.json\` contains:
-- \`threadId\`, \`account\`, \`subject\`, \`participants\`
-- \`messages\` — record of \`{ messageId → { from, to, cc, date, internalDateMs, labels, snippet, attachments } }\`
-- \`provenance\` — label change history
-- \`cachedAt\`, \`updatedAt\`
-
-### Per-Message JSONs
-
-Each \`threads/{account}/{threadId}/{messageId}.json\` contains full message data:
-- \`messageId\`, \`threadId\`, \`account\`, \`subject\`, \`from\`, \`to\`, \`cc\`
-- \`date\` (RFC 2822), \`internalDateMs\` (epoch ms)
-- \`labels\`, \`body\`, \`attachments\`, \`downloadedAt\`
-`;
-
-var playbooksContent = `---
-name: playbooks
-description: >
-  Reusable operational workflow patterns for the Jeeves platform. Use when asked to
-  set up a daily briefing for a person or team, create standing meeting ops (notes +
-  agenda generation), replicate an existing workflow pattern for a new context, or
-  understand how recurring intelligence/ops workflows are structured. Covers the
-  full stack: content directory, TASK files, standing orders, runner jobs, dispatcher
-  scripts, Slack channel integration, and meta synthesis.
----
-
-# Playbooks
-
-Proven, replicable operational patterns. Each playbook describes what it does, what
-infrastructure it needs, and how to instantiate a new instance.
-
-## Common Infrastructure
-
-All playbooks share these building blocks:
-
-| Component | Purpose |
-|-----------|---------|
-| **Content directory** | \`{workspace}/../<silo>/<domain>/\` — stores output files, \`.meta/\`, standing orders |
-| **TASK file** | Markdown prompt that defines the LLM session's entire job |
-| **Standing orders** | \`standing-orders.md\` — append-only file for persistent stakeholder preferences |
-| **Dispatcher script** | TypeScript in \`{configRoot}/jeeves-core/scripts/src/\` — reads TASK, spawns worker |
-| **Runner job** | jeeves-runner job with cron schedule, timezone, and rrstack |
-| **Slack channel** | Delivery surface — summary posts, quick-link pins, feedback loop |
-| **Meta entity** | \`.meta/\` directory seeded so jeeves-meta synthesizes context over time |
-
-### Dispatcher Pattern
-
-All dispatchers use \`taskFileDispatcher\` from \`dispatchers/lib/task-file-dispatcher.ts\`:
-
-\`\`\`typescript
-import { taskFileDispatcher } from '../dispatchers/lib/task-file-dispatcher.js';
-
-taskFileDispatcher({
-  scriptName: '<silo>/<job-name>',
-  jobId: '<runner-job-id>',
-  taskFile: '<path-to-TASK.md>',
-  timeout: 600,
-  injectDateContext: true,
-  dateTimezone: '<IANA timezone>',
-});
-\`\`\`
-
-\`injectDateContext: true\` prepends an authoritative date line so the LLM knows today's date.
-
-### Standing Orders Convention
-
-- Append-only — never modify existing entries
-- TASK files instruct the LLM to read standing orders at Step 0
-- TASK files instruct the LLM to append new persistent preferences from channel feedback
-- Include initial configuration section with participants, timezones, channel rules
-
-## Available Playbook Patterns
-
-| Pattern | Description |
-|---------|-------------|
-| **Daily Briefing** | Recurring intelligence or action-item report for a stakeholder |
-| **Standing Meeting Ops** | Post-meeting notes + next-day agenda generation for a recurring meeting |
-
-## Instantiation Checklist
-
-When creating a new playbook instance:
-
-1. Choose the appropriate pattern from the table above
-2. Create the content directory with \`.meta/\` and \`standing-orders.md\`
-3. Write the TASK file(s) — adapt from an existing instance. Ensure Step 0 reads feedback from the *delivery channel* (where output is posted), not only a DM
-4. Write the dispatcher script(s) in \`{configRoot}/jeeves-core/scripts/src/<silo>/\`
-5. Register the runner job(s) with appropriate cron, timezone, rrstack
-6. Set up the Slack channel — pin a quick-links message if the pattern calls for it
-7. Seed \`.meta/\` so meta synthesis begins
-8. Test with \`--dry-run\` before going live
-`;
-
-var slackBotProvisionerContent = `---
-name: slack-bot-provisioner
-description: Provision a new Slack bot identity for Clawdbot on a fresh server. Guides through Slack App creation steps, collects tokens, writes local config/env, and verifies connectivity.
----
-
-# Slack bot provisioner (per-bot server)
-
-Use this when you are setting up **a new Clawdbot instance** that should have **its own Slack bot identity** (one Slack App per bot), and you want a repeatable guided setup.
-
-This skill assumes:
-- The user is a Slack workspace admin.
-- Each bot runs on its own server with its own Gateway config.
-
-## What can be automated vs not
-
-**Automated (this skill):**
-- Create local folders.
-- Write a \`slack.env\` (bot token, signing secret).
-- Patch the Clawdbot gateway config to enable Slack for this instance (user approves).
-- Run a connectivity test (send a message to a channel).
-
-**Not fully automatable (Slack-side):**
-- Creating/installing the Slack App and granting scopes (UI/OAuth).
-- Verifying event subscription URLs (requires public HTTPS endpoint).
-
-## Recommended mode
-Start with **outbound-only** (post messages) and expand to event subscriptions later.
-
-## Quick start
-
-1) Have the user do the Slack UI steps in \`references/slack-app-checklist.md\`.
-2) Run the provisioning script:
-
-- PowerShell:
-  - \`powershell -NoProfile -ExecutionPolicy Bypass -File scripts/provision.ps1\`
-
-The script will prompt for:
-- bot name
-- Slack bot token (\`xoxb-...\`)
-- Slack signing secret
-- (optional) test channel id
-
-## Files
-- Script: \`scripts/provision.ps1\`
-- Reference checklist: \`references/slack-app-checklist.md\`
-- Reference scopes: \`references/scopes.md\`
-
-## Secrets (best practices)
-- **Do not** store secrets inside the skill folder (skills are meant to be shareable/publishable).
-- Store secrets **per-instance** in the Clawdbot runtime directory (recommended):
-  - \`C:\\Users\\Administrator\\.clawdbot\\credentials\\...\`
-- Prefer environment variables / local credential files loaded by the Gateway/service manager.
-- Never paste Slack secrets into public chats.
-
-## Safety notes
-- Store secrets per-instance. Do not reuse tokens across bot identities.
-- Avoid bot-to-bot loops: bots should ignore messages from other bots by default.
-`;
-
-/**
- * Skill seeding: write all bundled platform skills to the workspace.
- *
- * @remarks
- * Skill files are entirely generated — no user-authored content (Decision 48).
- * Every installer (core CLI and component plugins) writes them unconditionally.
- * Content is inlined at build time via `rollup-plugin-md.ts`.
- *
- * @module
- */
-/** Map of skill directory name to inlined content. */
-const BUNDLED_SKILLS = {
-    jeeves: jeevesContent,
-    coding: codingContent,
-    'slack-bot-provisioner': slackBotProvisionerContent,
-    operations: operationsContent,
-    playbooks: playbooksContent,
-};
-/**
- * Seed all bundled platform skills into the workspace.
- *
- * @remarks
- * Writes each skill to `{workspace}/skills/{name}/SKILL.md`, creating
- * directories as needed. Overwrites existing content unconditionally.
- *
- * @param workspacePath - Workspace root directory.
- */
-function seedSkills(workspacePath) {
-    for (const [name, content] of Object.entries(BUNDLED_SKILLS)) {
-        const skillDir = join(workspacePath, SKILLS_DIR, name);
-        if (!existsSync(skillDir)) {
-            mkdirSync(skillDir, { recursive: true });
-        }
-        writeFileSync(join(skillDir, 'SKILL.md'), content, 'utf-8');
-    }
-}
-
-/**
- * Zod schema for the Jeeves component descriptor.
- *
- * @remarks
- * The descriptor replaces the v0.4.0 `JeevesComponent` interface with a
- * Zod-first approach. The TypeScript type is inferred via `z.infer<>`.
- * Validates at parse time: prime interval, callable functions.
- */
-/**
- * Check whether a number is prime.
- *
- * @param n - Number to check.
- * @returns `true` if n is prime.
- */
-function isPrime(n) {
-    if (n < 2)
-        return false;
-    if (n === 2)
-        return true;
-    if (n % 2 === 0)
-        return false;
-    for (let i = 3; i * i <= n; i += 2) {
-        if (n % i === 0)
-            return false;
-    }
-    return true;
-}
-/**
- * Zod schema for the Jeeves component descriptor.
- *
- * @remarks
- * Single source of truth for what a component must provide.
- * Factories consume this descriptor to produce CLI commands,
- * plugin tools, and HTTP handlers.
- */
-z.object({
-    /** Component name (e.g., 'watcher', 'runner', 'server', 'meta'). */
-    name: z.string().min(1, 'name must be a non-empty string'),
-    /** Component version (from package.json). */
-    version: z.string().min(1, 'version must be a non-empty string'),
-    /** npm package name for the service. */
-    servicePackage: z.string().min(1),
-    /** npm package name for the plugin. */
-    pluginPackage: z.string().min(1),
-    /** System service name. Defaults to `jeeves-${name}` when not provided. */
-    serviceName: z.string().min(1).optional(),
-    /** Default port for the service's HTTP API. */
-    defaultPort: z.number().int().positive(),
-    /** Zod schema for validating config files. */
-    configSchema: z.custom((val) => val !== null &&
-        typeof val === 'object' &&
-        typeof val.parse === 'function', { message: 'configSchema must be a Zod schema' }),
-    /** Config file name (e.g., 'jeeves-watcher.config.json'). */
-    configFileName: z.string().min(1),
-    /** Returns a default config object for `init`. */
-    initTemplate: z.function({
-        input: [],
-        output: z.record(z.string(), z.unknown()),
-    }),
-    /**
-     * Service-side callback after config apply. Receives the merged,
-     * validated config (not the raw patch). Optional — if omitted,
-     * write-only (service picks up changes on restart).
-     */
-    onConfigApply: z
-        .function({
-        input: [z.record(z.string(), z.unknown())],
-        output: z.promise(z.void()),
-    })
-        .optional(),
-    /**
-     * Custom merge function for config apply. Receives the existing config
-     * and the patch, returns the merged result. Optional — if omitted,
-     * the default deep-merge (object-recursive, array-replacing) is used.
-     *
-     * Use this to implement domain-specific merge strategies such as
-     * name-based array merging for inference rules.
-     */
-    customMerge: z
-        .function({
-        input: [
-            z.record(z.string(), z.unknown()),
-            z.record(z.string(), z.unknown()),
-        ],
-        output: z.record(z.string(), z.unknown()),
-    })
-        .optional(),
-    /**
-     * Returns command + args for launching the service process.
-     * Consumed by `service install`.
-     */
-    startCommand: z.function({
-        input: [z.string()],
-        output: z.array(z.string()),
-    }),
-    /** In-process service entry point for the CLI `start` command. */
-    run: z.function({
-        input: [z.string()],
-        output: z.promise(z.void()),
-    }),
-    /** TOOLS.md section name (e.g., 'Watcher'). */
-    sectionId: z.string().min(1, 'sectionId must be a non-empty string'),
-    /** Refresh interval in seconds (must be a prime number). */
-    refreshIntervalSeconds: z.number().int().positive().refine(isPrime, {
-        message: 'refreshIntervalSeconds must be a prime number',
-    }),
-    /** Produce the component's TOOLS.md section content. */
-    generateToolsContent: z.function({ input: [], output: z.string() }),
-    /** Component dependencies for HEARTBEAT alert suppression. */
-    dependencies: z
-        .object({
-        /** Components that must be healthy for this component to function. */
-        hard: z.array(z.string()),
-        /** Components that improve behavior but are not strictly required. */
-        soft: z.array(z.string()),
-    })
-        .optional(),
-    /** Extension point: add custom CLI commands to the service CLI. */
-    customCliCommands: z
-        .function({ input: [z.custom()], output: z.void() })
-        .optional(),
-    /** Extension point: return additional plugin tool descriptors. */
-    customPluginTools: z
-        .function({ input: [z.custom()], output: z.array(z.unknown()) })
-        .optional(),
-});
-
-/**
- * Resolve the package root directory from a module's `import.meta.url`.
- *
- * @module
- */
-/**
- * Get the nearest package root directory relative to the calling module URL.
- *
- * @param importMetaUrl - The `import.meta.url` of the calling module.
- * @returns The absolute package root path, or `undefined` on any error.
- */
-function getPackageRoot(importMetaUrl) {
-    try {
-        return packageDirectorySync({ cwd: fileURLToPath(importMetaUrl) });
-    }
-    catch {
-        return undefined;
-    }
-}
-
-/**
- * OpenClaw configuration helpers for plugin CLI installers.
- *
- * @remarks
- * Provides resolution of OpenClaw home directory and config file path,
- * plus idempotent config patching for plugin install/uninstall.
- */
-/**
- * Resolve the OpenClaw home directory.
- *
- * @remarks
- * Resolution order:
- * 1. `OPENCLAW_CONFIG` env var → dirname of the config file path
- * 2. `OPENCLAW_HOME` env var → resolved path
- * 3. Default: `~/.openclaw`
- *
- * @returns Absolute path to the OpenClaw home directory.
- */
-function resolveOpenClawHome() {
-    if (process.env.OPENCLAW_CONFIG) {
-        return dirname(resolve(process.env.OPENCLAW_CONFIG));
-    }
-    if (process.env.OPENCLAW_HOME) {
-        return resolve(process.env.OPENCLAW_HOME);
-    }
-    return join(homedir(), '.openclaw');
-}
-/**
- * Resolve the OpenClaw config file path.
- *
- * @remarks
- * If `OPENCLAW_CONFIG` is set, uses that directly.
- * Otherwise defaults to `{home}/openclaw.json`.
- *
- * @param home - The OpenClaw home directory.
- * @returns Absolute path to the config file.
- */
-function resolveConfigPath(home) {
-    if (process.env.OPENCLAW_CONFIG) {
-        return resolve(process.env.OPENCLAW_CONFIG);
-    }
-    return join(home, 'openclaw.json');
-}
-/**
- * Patch an allowlist array: add or remove the plugin ID.
- *
- * @returns A log message if a change was made, or undefined.
- */
-function patchAllowList(parent, key, label, pluginId, mode) {
-    if (mode === 'add') {
-        if (!Array.isArray(parent[key])) {
-            parent[key] = [pluginId];
-            return `Created ${label} with "${pluginId}"`;
-        }
-        const list = parent[key];
-        if (!list.includes(pluginId)) {
-            list.push(pluginId);
-            return `Added "${pluginId}" to ${label}`;
-        }
-    }
-    else {
-        if (!Array.isArray(parent[key]))
-            return undefined;
-        const list = parent[key];
-        const filtered = list.filter((id) => id !== pluginId);
-        if (filtered.length !== list.length) {
-            parent[key] = filtered;
-            return `Removed "${pluginId}" from ${label}`;
-        }
-    }
-    return undefined;
-}
-/**
- * Patch an OpenClaw config for plugin install or uninstall.
- *
- * @remarks
- * Manages `plugins.entries.{pluginId}`, `plugins.installs.{pluginId}`,
- * and `tools.alsoAllow`.
- * Idempotent: adding twice produces no duplicates; removing when absent
- * produces no errors.
- *
- * @param config - The parsed OpenClaw config object (mutated in place).
- * @param pluginId - The plugin identifier.
- * @param mode - Whether to add or remove the plugin.
- * @param installRecord - Install provenance record (required when mode is 'add').
- * @returns Array of log messages describing changes made.
- */
-function patchConfig(config, pluginId, mode, installRecord) {
-    const messages = [];
-    // Ensure plugins section
-    if (!config.plugins || typeof config.plugins !== 'object') {
-        config.plugins = {};
-    }
-    const plugins = config.plugins;
-    // plugins.entries
-    if (!plugins.entries || typeof plugins.entries !== 'object') {
-        plugins.entries = {};
-    }
-    const entries = plugins.entries;
-    if (mode === 'add') {
-        if (!entries[pluginId]) {
-            entries[pluginId] = { enabled: true };
-            messages.push(`Added "${pluginId}" to plugins.entries`);
-        }
-    }
-    else if (pluginId in entries) {
-        Reflect.deleteProperty(entries, pluginId);
-        messages.push(`Removed "${pluginId}" from plugins.entries`);
-    }
-    // plugins.installs
-    if (!plugins.installs || typeof plugins.installs !== 'object') {
-        plugins.installs = {};
-    }
-    const installs = plugins.installs;
-    if (mode === 'add' && installRecord) {
-        installs[pluginId] = {
-            source: 'path',
-            installPath: installRecord.installPath,
-            version: installRecord.version,
-            installedAt: installRecord.installedAt ?? new Date().toISOString(),
-        };
-        messages.push(`Wrote install record for "${pluginId}" to plugins.installs`);
-    }
-    else if (mode === 'remove' && pluginId in installs) {
-        Reflect.deleteProperty(installs, pluginId);
-        messages.push(`Removed install record for "${pluginId}" from plugins.installs`);
-    }
-    // tools.alsoAllow
-    if (!config.tools || typeof config.tools !== 'object') {
-        config.tools = {};
-    }
-    const tools = config.tools;
-    const toolAlsoAllow = patchAllowList(tools, 'alsoAllow', 'tools.alsoAllow', pluginId, mode);
-    if (toolAlsoAllow)
-        messages.push(toolAlsoAllow);
-    return messages;
-}
-
-/**
- * Internal helpers for the plugin installer CLI.
- *
- * @module
- */
-/**
- * Derive a component name from a plugin ID.
- *
- * @remarks
- * Strips `jeeves-` prefix and `-openclaw` suffix.
- *
- * @param pluginId - The plugin identifier.
- * @returns Component short name.
- */
-function deriveComponentName(pluginId) {
-    return pluginId.replace(/^jeeves-/, '').replace(/-openclaw$/, '');
-}
-/**
- * Copy all files from source directory to destination, recursively.
- *
- * @param srcDir - Source directory.
- * @param destDir - Destination directory.
- */
-function copyDistFiles(srcDir, destDir) {
-    mkdirSync(destDir, { recursive: true });
-    const entries = readdirSync(srcDir, { withFileTypes: true });
-    for (const entry of entries) {
-        const srcPath = join(srcDir, entry.name);
-        const destPath = join(destDir, entry.name);
-        if (entry.isDirectory()) {
-            copyDistFiles(srcPath, destPath);
-        }
-        else {
-            copyFileSync(srcPath, destPath);
-        }
-    }
-}
-/**
- * Read and parse a JSON file, returning an empty object if not found.
- *
- * @param filePath - Path to the JSON file.
- * @returns Parsed object.
- */
-function readJsonFile(filePath) {
-    try {
-        const raw = readFileSync(filePath, 'utf-8');
-        return JSON.parse(raw);
-    }
-    catch {
-        return {};
-    }
-}
-
-/**
- * Factory for the standard `-openclaw` plugin installer CLI.
- *
- * @module
- */
-/**
- * Create a standard plugin installer CLI program.
- *
- * @param options - Plugin CLI configuration.
- * @returns A Commander program ready for `.parse()`.
- */
-function createPluginCli(options) {
-    const { pluginId, importMetaUrl, pluginPackage, configRoot = 'j:/config', } = options;
-    const componentName = options.componentName ?? deriveComponentName(pluginId);
-    const pkgRoot = getPackageRoot(importMetaUrl);
-    if (!pkgRoot) {
-        throw new Error(`Unable to resolve package root for plugin CLI: ${pluginPackage}`);
-    }
-    const distDir = join(pkgRoot, 'dist');
-    const program = new Command()
-        .name(pluginPackage)
-        .description(`Jeeves ${componentName} plugin installer`);
-    program
-        .command('install')
-        .description(`Install the ${componentName} plugin`)
-        .option('--memory', 'Claim a memory slot for this plugin')
-        .option('-w, --workspace <path>', 'Workspace root path')
-        .option('-c, --config-root <path>', 'Platform config root path', configRoot)
-        .action((opts) => {
-        const openClawHome = resolveOpenClawHome();
-        const configPath = resolveConfigPath(openClawHome);
-        // 1. Copy dist to extensions
-        const extensionsDir = join(openClawHome, 'extensions', pluginId);
-        if (!existsSync(distDir))
-            throw new Error(`Plugin dist directory not found: ${distDir}`);
-        console.log(`Copying dist to ${extensionsDir}...`);
-        copyDistFiles(distDir, join(extensionsDir, 'dist'));
-        // Copy package.json and openclaw.plugin.json from package root
-        for (const file of ['package.json', 'openclaw.plugin.json']) {
-            const src = join(pkgRoot, file);
-            if (existsSync(src)) {
-                copyFileSync(src, join(extensionsDir, file));
-            }
-        }
-        console.log('  ✓ Dist files copied');
-        // 1b. Install production dependencies
-        console.log('Installing dependencies...');
-        try {
-            execSync('npm install --omit=dev', {
-                cwd: extensionsDir,
-                stdio: 'pipe',
-            });
-        }
-        catch (err) {
-            throw new Error(`npm install failed in ${extensionsDir}`, {
-                cause: err,
-            });
-        }
-        console.log('  ✓ Dependencies installed');
-        // 2. Patch openclaw.json
-        console.log('Patching OpenClaw config...');
-        const config = readJsonFile(configPath);
-        const pkgJsonPathForVersion = join(extensionsDir, 'package.json');
-        let pluginVersionForRecord;
-        try {
-            const pkgJsonForRecord = readJsonFile(pkgJsonPathForVersion);
-            pluginVersionForRecord =
-                typeof pkgJsonForRecord.version === 'string'
-                    ? pkgJsonForRecord.version
-                    : undefined;
-        }
-        catch {
-            // best-effort: version may not be available yet
-        }
-        const messages = patchConfig(config, pluginId, 'add', {
-            installPath: extensionsDir,
-            version: pluginVersionForRecord,
-        });
-        // 3. Memory slot claim
-        if (opts.memory) {
-            if (!config.agents || typeof config.agents !== 'object') {
-                config.agents = {};
-            }
-            const agents = config.agents;
-            if (!agents.defaults || typeof agents.defaults !== 'object') {
-                agents.defaults = {};
-            }
-            const defaults = agents.defaults;
-            if (!defaults.memory || typeof defaults.memory !== 'object') {
-                defaults.memory = {};
-            }
-            const memory = defaults.memory;
-            if (!memory[componentName]) {
-                memory[componentName] = {};
-                messages.push(`Claimed memory slot for "${componentName}"`);
-            }
-        }
-        writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
-        for (const msg of messages) {
-            console.log(`  ✓ ${msg}`);
-        }
-        // 4. Write initial HEARTBEAT entry and seed jeeves skill
-        try {
-            const cfgRoot = opts.configRoot;
-            const ag = config.agents;
-            const defs = ag?.defaults;
-            const ws = opts.workspace ?? defs?.workspace;
-            if (ws) {
-                init({ workspacePath: ws, configRoot: cfgRoot });
-                const heartbeatPath = join(ws, WORKSPACE_FILES.heartbeat);
-                try {
-                    const existing = existsSync(heartbeatPath)
-                        ? readFileSync(heartbeatPath, 'utf-8')
-                        : '';
-                    const parsed = parseHeartbeat(existing);
-                    const fullName = `jeeves-${componentName}`;
-                    const hasEntry = parsed.entries.some((e) => e.name === fullName);
-                    if (!hasEntry) {
-                        parsed.entries.push({
-                            name: fullName,
-                            declined: false,
-                            content: `- Plugin installed. Awaiting service configuration.`,
-                        });
-                        const section = buildHeartbeatSection(parsed.entries);
-                        atomicWrite(heartbeatPath, section);
-                        console.log('  ✓ HEARTBEAT entry written');
-                    }
-                }
-                catch {
-                    console.log('  ⚠ Could not write HEARTBEAT entry');
-                }
-                try {
-                    seedSkills(ws);
-                    console.log('  ✓ Platform skills seeded');
-                }
-                catch {
-                    console.log('  ⚠ Could not seed platform skills');
-                }
-            }
-        }
-        catch {
-            // HEARTBEAT + skill seeding are best-effort during install
-        }
-        // 5. Write component version
-        try {
-            init({
-                workspacePath: opts.workspace ?? '.',
-                configRoot: opts.configRoot,
-            });
-            const pkgJsonPath = join(extensionsDir, 'package.json');
-            const pkgJson = readJsonFile(pkgJsonPath);
-            const pluginVersion = typeof pkgJson.version === 'string' ? pkgJson.version : undefined;
-            writeComponentVersion(getCoreConfigDir(), {
-                componentName,
-                pluginPackage,
-                pluginVersion,
-            });
-            console.log('  ✓ Component version written');
-        }
-        catch {
-            console.log('  ⚠ Could not write component version');
-        }
-        console.log();
-        console.log(`✅ ${pluginPackage} installed.`);
-    });
-    program
-        .command('uninstall')
-        .description(`Uninstall the ${componentName} plugin`)
-        .option('-w, --workspace <path>', 'Workspace root path')
-        .option('-c, --config-root <path>', 'Platform config root path', configRoot)
-        .action(async (opts) => {
-        const openClawHome = resolveOpenClawHome();
-        const cfgPath = resolveConfigPath(openClawHome);
-        // 1. Remove from extensions
-        const extensionsDir = join(openClawHome, 'extensions', pluginId);
-        if (existsSync(extensionsDir)) {
-            rmSync(extensionsDir, { recursive: true, force: true });
-            console.log('  ✓ Extension files removed');
-        }
-        // 2. Unpatch openclaw.json
-        if (existsSync(cfgPath)) {
-            const config = readJsonFile(cfgPath);
-            const messages = patchConfig(config, pluginId, 'remove');
-            writeFileSync(cfgPath, JSON.stringify(config, null, 2) + '\n');
-            for (const msg of messages) {
-                console.log(`  ✓ ${msg}`);
-            }
-        }
-        // 3. Remove TOOLS.md section
-        try {
-            const ws = opts.workspace;
-            if (ws) {
-                init({ workspacePath: ws, configRoot: opts.configRoot });
-                const sectionId = componentName.charAt(0).toUpperCase() + componentName.slice(1);
-                const toolsPath = join(ws, WORKSPACE_FILES.tools);
-                if (existsSync(toolsPath)) {
-                    await removeManagedSection(toolsPath, {
-                        sectionId,
-                        markers: TOOLS_MARKERS,
-                    });
-                    console.log('  ✓ TOOLS.md section removed');
-                }
-            }
-        }
-        catch {
-            console.log('  ⚠ Could not remove TOOLS.md section');
-        }
-        // 4. Remove component-versions.json entry
-        try {
-            init({
-                workspacePath: opts.workspace ?? '.',
-                configRoot: opts.configRoot,
-            });
-            removeComponentVersion(getCoreConfigDir(), componentName);
-            console.log('  ✓ Component version entry removed');
-        }
-        catch {
-            console.log('  ⚠ Could not remove component version entry');
-        }
-        console.log();
-        console.log(`✅ ${pluginPackage} uninstalled.`);
-    });
-    return program;
-}
-
-export { createPluginCli };