@kensaurus/skills 2.1.0 → 2.1.1

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Playbooks your coding agent runs from a plain-English request.",
-    "version": "2.1.0"
+    "version": "2.1.1"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "kenji",
   "displayName": "kenji skills",
   "description": "You say the job; the playbook runs. 159 agent skills, 63 slash commands, 6 subagents, and MCP templates for Claude Code, Cursor, Codex CLI, and Gemini CLI. Tuned for React / Next.js / Supabase; works on most stacks. Effort-routed for Claude Opus 5.5.",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "author": {
     "name": "kensaurus",
     "email": "kensaurus@gmail.com"

package/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "kenji",
   "displayName": "kenji skills",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "You say the job; the playbook runs. 159 agent skills, 63 slash commands, 6 subagents, and MCP templates for Claude Code, Cursor, Codex CLI, and Gemini CLI. Tuned for React / Next.js / Supabase; works on most stacks.",
   "author": {
     "name": "kensaurus"

package/CHANGELOG.md

@@ -6,6 +6,20 @@ All notable additions and changes to kenji (`kensaurus/skills`, named `cursor-ke
 
 ## [Unreleased]
 
+## [2.1.1] — 2026-10-01
+
+### Fixed
+
+- **Installs on Windows survive a briefly held file.** An open editor
+  watching `~/.cursor` or `~/.claude`, or an antivirus scan, can hold a file
+  for a moment right after it is written. Windows then failed the next copy
+  with `EPERM`, which aborted the install and left the target half-copied:
+  Cursor failed three runs in a row on a different `SKILL.md` each time. The
+  installer now retries a copy, write or delete on `EPERM`, `EBUSY` or
+  `EACCES` for up to about 3 seconds per file. If the lock never clears it
+  still fails, and says which file is held and that closing the editor fixes
+  it. Other platforms are unchanged.
+
 ## [2.1.0] — 2026-10-01
 
 UX laws as a measured fix pass, and the Miller misreading removed from the

package/bin/install.mjs

@@ -37,14 +37,47 @@
  */
 
 import {
-  existsSync, mkdirSync, cpSync, rmSync, symlinkSync, readdirSync, statSync,
-  readFileSync, writeFileSync,
+  existsSync, mkdirSync, cpSync as cpSyncOnce, rmSync as rmSyncOnce, symlinkSync,
+  readdirSync, statSync, readFileSync, writeFileSync as writeFileSyncOnce,
 } from 'node:fs';
 import { createHash } from 'node:crypto';
 import { join, resolve, dirname } from 'node:path';
 import { homedir, platform } from 'node:os';
 import { fileURLToPath } from 'node:url';
 
+// ---- transient Windows file locks -----------------------------------------
+// An open editor watching ~/.cursor or ~/.claude, or an antivirus scan, can
+// hold a file for a moment right after it is written. Windows then fails the
+// next copy over it with EPERM or EBUSY, and one held file used to abort the
+// run with the target half-copied. Retry the same codes graceful-fs retries on
+// Windows, with a bounded backoff (about 2.75 s per file). symlinkSync stays
+// unwrapped: its EPERM means "no symlink privilege" and place() must fall back
+// to a copy at once.
+const LOCK_CODES = new Set(['EPERM', 'EBUSY', 'EACCES']);
+const LOCK_RETRIES = 10;
+const sleepSync = (ms) => Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+function retryLocked(fn) {
+  if (platform() !== 'win32') return fn;
+  return (...args) => {
+    for (let attempt = 1; ; attempt++) {
+      try {
+        return fn(...args);
+      } catch (err) {
+        if (!LOCK_CODES.has(err.code)) throw err;
+        if (attempt > LOCK_RETRIES) {
+          console.error(`\n  ${err.code}: another program is holding ${err.dest ?? err.path ?? 'a destination file'}.`);
+          console.error('  Usually an open editor (Cursor, VS Code) or an antivirus scan. Close it and run the installer again.\n');
+          throw err;
+        }
+        sleepSync(50 * attempt);
+      }
+    }
+  };
+}
+const cpSync = retryLocked(cpSyncOnce);
+const rmSync = retryLocked(rmSyncOnce);
+const writeFileSync = retryLocked(writeFileSyncOnce);
+
 const __dir = fileURLToPath(new URL('..', import.meta.url));
 const argv = process.argv.slice(2);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kensaurus/skills",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "You say the job; the playbook runs. 159 agent skills, 63 slash commands, 6 subagents, and MCP templates for Claude Code, Cursor, Codex CLI, and Gemini CLI. Tuned for React / Next.js / Supabase; works on most stacks.",
   "type": "module",
   "bin": {