@moxxy/plugin-self-update 0.26.0

package/dist/transaction.js

@@ -0,0 +1,188 @@
+import { randomUUID } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import * as path from 'node:path';
+import { writeFileAtomic } from '@moxxy/sdk/server';
+/** Names present in `after` but not in `before`, per kind. Empty keys dropped. */
+export function diffSnapshot(before, after) {
+    const out = {};
+    for (const key of Object.keys(after)) {
+        const had = new Set(before[key] ?? []);
+        const added = (after[key] ?? []).filter((n) => !had.has(n));
+        if (added.length > 0)
+            out[key] = added;
+    }
+    return out;
+}
+/** Max failed verify cycles for one transaction before we force escalation. */
+export const MAX_FAILED_ATTEMPTS = 2;
+const NAME_SEGMENT_RE = /^[A-Za-z0-9._-]+$/;
+/**
+ * Paths excluded from a transaction snapshot. `node_modules` is reproducible
+ * from package.json (verify re-runs `npm install`), `.git` would balloon the
+ * copy, and `dist` is regenerated by the build — copying any of them turns a
+ * source snapshot into a multi-hundred-MB recursive copy of the dependency tree
+ * on every begin and every restore, which is slow and can exhaust disk.
+ */
+const SNAPSHOT_EXCLUDE = new Set(['node_modules', '.git', 'dist']);
+/**
+ * Build an `fs.cp` filter that skips excluded directory basenames so snapshots
+ * stay source-only — but never excludes the copy root itself (a plugin could,
+ * per NAME_SEGMENT_RE, legitimately be named e.g. `dist`).
+ */
+function snapshotFilter(root) {
+    return (src) => src === root || !SNAPSHOT_EXCLUDE.has(path.basename(src));
+}
+export function selfUpdateRoot(moxxyDir) {
+    return path.join(moxxyDir, 'self-update', 'txns');
+}
+export function txnDir(moxxyDir, txnId) {
+    return path.join(selfUpdateRoot(moxxyDir), txnId);
+}
+/**
+ * Resolve the on-disk target for a (kind, name). Throws on unsafe names so a
+ * model-supplied name can never escape the user artifact directories.
+ */
+export function resolveTarget(moxxyDir, kind, name) {
+    if (!NAME_SEGMENT_RE.test(name)) {
+        throw new Error(`invalid ${kind} name "${name}": only letters, digits, dot, dash and underscore are allowed`);
+    }
+    const p = kind === 'plugin'
+        ? path.join(moxxyDir, 'plugins', name)
+        : path.join(moxxyDir, 'skills', `${name}.md`);
+    return { kind, name, path: p };
+}
+export function newTxnId(now = new Date()) {
+    const stamp = now.toISOString().replace(/[:.]/g, '-');
+    // crypto UUID (not Math.random): two begins in the same second must never
+    // collide on the txn dir, which beginTransaction's recursive mkdir would
+    // silently share — clobbering an existing txn's journal + before snapshot.
+    const rand = randomUUID().slice(0, 8);
+    return `${stamp}-${rand}`;
+}
+async function pathExists(p) {
+    try {
+        await fs.access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Open a transaction: snapshot the current target (if any) into the txn dir
+ * and write the initial journal. Safe to call for a not-yet-existing target.
+ */
+export async function beginTransaction(opts) {
+    const now = opts.now ?? new Date();
+    const target = resolveTarget(opts.moxxyDir, opts.kind, opts.name);
+    const txnId = newTxnId(now);
+    const dir = txnDir(opts.moxxyDir, txnId);
+    await fs.mkdir(dir, { recursive: true });
+    const existedBefore = await pathExists(target.path);
+    if (existedBefore) {
+        const before = path.join(dir, 'before');
+        await fs.cp(target.path, before, { recursive: true, filter: snapshotFilter(target.path) });
+    }
+    const journal = {
+        txnId,
+        createdAt: now.toISOString(),
+        updatedAt: now.toISOString(),
+        target,
+        existedBefore,
+        state: 'open',
+        attempts: [],
+    };
+    await writeJournal(opts.moxxyDir, journal);
+    return journal;
+}
+export async function writeJournal(moxxyDir, journal) {
+    journal.updatedAt = new Date().toISOString();
+    const file = path.join(txnDir(moxxyDir, journal.txnId), 'journal.json');
+    await writeFileAtomic(file, JSON.stringify(journal, null, 2) + '\n');
+}
+export async function readJournal(moxxyDir, txnId) {
+    const file = path.join(txnDir(moxxyDir, txnId), 'journal.json');
+    const raw = await fs.readFile(file, 'utf8');
+    return JSON.parse(raw);
+}
+export async function listTransactions(moxxyDir) {
+    const root = selfUpdateRoot(moxxyDir);
+    let ids;
+    try {
+        ids = (await fs.readdir(root, { withFileTypes: true }))
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const id of ids) {
+        try {
+            out.push(await readJournal(moxxyDir, id));
+        }
+        catch {
+            // ignore half-written / corrupt txn dirs
+        }
+    }
+    return out.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+}
+export function recordAttempt(journal, attempt) {
+    journal.attempts.push({ at: new Date().toISOString(), ...attempt });
+}
+export function failedAttemptCount(journal) {
+    return journal.attempts.filter((a) => !a.ok).length;
+}
+/**
+ * Restore the target to its pre-transaction state: copy the snapshot back, or
+ * delete the artifact if it was newly created. Idempotent.
+ *
+ * The snapshot is source-only (SNAPSHOT_EXCLUDE drops node_modules/.git/dist),
+ * so a blanket `rm -rf` of the target before copying would wipe the installed
+ * runtime deps — and nothing re-installs them, leaving a plugin that fails to
+ * load on the very next deps.reload(). To keep the working `node_modules` (and
+ * the other reproducible-but-uncaptured dirs) across a MODIFICATION rollback, we
+ * remove only the captured source entries and overlay the snapshot back on top,
+ * never touching the excluded dirs. A newly-created target (no snapshot) is still
+ * deleted wholesale.
+ */
+export async function restoreSnapshot(moxxyDir, journal) {
+    const { target, existedBefore } = journal;
+    if (!existedBefore) {
+        await fs.rm(target.path, { recursive: true, force: true });
+        return;
+    }
+    const before = path.join(txnDir(moxxyDir, journal.txnId), 'before');
+    // A skill target is a single file, not a directory — replace it outright.
+    if (target.kind !== 'plugin') {
+        await fs.rm(target.path, { recursive: true, force: true });
+        await fs.cp(before, target.path, { recursive: true, filter: snapshotFilter(before) });
+        return;
+    }
+    // Plugin directory: clear only the non-excluded entries (the source the
+    // snapshot captured) so the live node_modules/.git/dist survive intact, then
+    // copy the source snapshot back over them.
+    let entries = [];
+    try {
+        entries = (await fs.readdir(target.path, { withFileTypes: true })).map((e) => e.name);
+    }
+    catch {
+        // Target dir vanished — recreate it from the snapshot below.
+    }
+    for (const name of entries) {
+        if (SNAPSHOT_EXCLUDE.has(name))
+            continue;
+        await fs.rm(path.join(target.path, name), { recursive: true, force: true });
+    }
+    await fs.mkdir(target.path, { recursive: true });
+    await fs.cp(before, target.path, { recursive: true, filter: snapshotFilter(before) });
+}
+/** Keep the most recent `keep` terminal transactions; delete older ones. */
+export async function gcTransactions(moxxyDir, keep) {
+    const all = await listTransactions(moxxyDir);
+    const terminal = all.filter((j) => j.state === 'committed' || j.state === 'rolled_back' || j.state === 'escalated');
+    for (const j of terminal.slice(keep)) {
+        await fs.rm(txnDir(moxxyDir, j.txnId), { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=transaction.js.map

package/dist/transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../src/transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA6CpD,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,MAAwB,EAAE,KAAuB;IAC5E,MAAM,GAAG,GAA0C,EAAE,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEnE;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,QAAgB,EAAE,KAAa;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAgB,EAAE,IAAY;IAC5E,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,UAAU,IAAI,+DAA+D,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GACL,IAAI,KAAK,QAAQ;QACf,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;IAClD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAY,IAAI,IAAI,EAAE;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtD,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAKtC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,OAAO,GAAY;QACvB,KAAK;QACL,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,MAAM;QACN,aAAa;QACb,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,EAAE;KACb,CAAC;IACF,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAgB;IACnE,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;IACxE,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,KAAa;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;aACpD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,OAA+B;IAC7E,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAgB;IACtE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,0EAA0E;IAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IACD,wEAAwE;IACxE,6EAA6E;IAC7E,2CAA2C;IAC3C,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACzC,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAY;IACjE,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CACvF,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,23 @@
+import type { TxnTarget } from './transaction.js';
+/**
+ * Build/test verification for a transaction target, run as child processes so a
+ * failing build can never crash the host. Pure I/O — no moxxy core imports.
+ */
+export interface StageResult {
+    readonly stage: string;
+    readonly ok: boolean;
+    readonly message: string;
+}
+export interface RunCmdResult {
+    readonly exitCode: number;
+    readonly output: string;
+}
+/**
+ * Run a plugin's own `build` and `test` npm scripts when present. A plugin
+ * scaffolded as a zero-build `.mjs` (no scripts) passes straight through —
+ * jiti / dynamic-import handles it at reload time, which is the real load test.
+ */
+export declare function verifyPluginBuild(target: TxnTarget): Promise<ReadonlyArray<StageResult>>;
+/** Minimal structural check that a skill file has the required frontmatter. */
+export declare function verifySkillFile(target: TxnTarget): Promise<StageResult>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;GAGG;AAEH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAgGD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CA4C9F;AAUD,+EAA+E;AAC/E,wBAAsB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAwB7E"}

package/dist/verify.js

@@ -0,0 +1,164 @@
+import { spawn } from 'node:child_process';
+import { promises as fs } from 'node:fs';
+import * as path from 'node:path';
+const CMD_TIMEOUT_MS = 5 * 60_000;
+/**
+ * Cap on retained child output. A model-triggered `npm run build/test` can emit
+ * unbounded output; holding it all in the live process risks OOM. Callers only
+ * read the trailing ~1.2KB, so a sliding tail is lossless for them.
+ */
+const MAX_CMD_OUTPUT_BYTES = 512 * 1024;
+function runCmd(cmd, args, cwd) {
+    return new Promise((resolve) => {
+        // `detached` lets a timeout SIGKILL the whole process group (npm fans out to
+        // node/esbuild/vitest workers that an immediate-child kill would orphan).
+        const child = spawn(cmd, [...args], { cwd, stdio: ['ignore', 'pipe', 'pipe'], detached: true });
+        let buf = '';
+        const onData = (d) => {
+            buf += d.toString('utf8');
+            if (buf.length > MAX_CMD_OUTPUT_BYTES)
+                buf = buf.slice(buf.length - MAX_CMD_OUTPUT_BYTES);
+        };
+        child.stdout.on('data', onData);
+        child.stderr.on('data', onData);
+        const timer = setTimeout(() => killTree(child), CMD_TIMEOUT_MS);
+        let settled = false;
+        const finish = (r) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.stdout.off('data', onData);
+            child.stderr.off('data', onData);
+            resolve(r);
+        };
+        child.on('error', (err) => finish({ exitCode: -1, output: `${cmd} failed to start: ${err.message}` }));
+        child.on('close', (code) => finish({ exitCode: code ?? -1, output: buf }));
+    });
+}
+/** SIGKILL a detached child's whole process group, tolerating an already-dead group. */
+function killTree(child) {
+    try {
+        if (child.pid != null)
+            process.kill(-child.pid, 'SIGKILL');
+        else
+            child.kill('SIGKILL');
+    }
+    catch {
+        try {
+            child.kill('SIGKILL');
+        }
+        catch {
+            /* already gone */
+        }
+    }
+}
+function truncate(s, n = 1200) {
+    return s.length <= n ? s : `…${s.slice(s.length - n)}`;
+}
+async function readPkg(dir) {
+    try {
+        return JSON.parse(await fs.readFile(path.join(dir, 'package.json'), 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+const PM_COMMANDS = {
+    npm: { bin: 'npm', install: ['install', '--no-fund', '--no-audit'], run: (s) => ['run', s], test: ['test'] },
+    pnpm: { bin: 'pnpm', install: ['install'], run: (s) => ['run', s], test: ['test'] },
+    yarn: { bin: 'yarn', install: ['install'], run: (s) => ['run', s], test: ['test'] },
+    bun: { bin: 'bun', install: ['install'], run: (s) => ['run', s], test: ['test'] },
+};
+/**
+ * Pick the package manager from the npm-standard `packageManager` field
+ * ("pnpm@9", "yarn@4", …) so a non-npm plugin can declare its toolchain. The
+ * default is npm, preserving prior behavior for plugins that omit the field or
+ * name an unknown manager.
+ */
+function pmFor(pkg) {
+    const name = (pkg.packageManager ?? '').split('@')[0]?.trim().toLowerCase();
+    return (name && PM_COMMANDS[name]) || PM_COMMANDS.npm;
+}
+/**
+ * Run a plugin's own `build` and `test` npm scripts when present. A plugin
+ * scaffolded as a zero-build `.mjs` (no scripts) passes straight through —
+ * jiti / dynamic-import handles it at reload time, which is the real load test.
+ */
+export async function verifyPluginBuild(target) {
+    const results = [];
+    const pkg = await readPkg(target.path);
+    if (!pkg)
+        return results; // no package.json (e.g. bare .mjs) → nothing to build
+    const pm = pmFor(pkg);
+    // Install deps only if the plugin declares any and they aren't present yet.
+    if (pkg.dependencies && Object.keys(pkg.dependencies).length > 0) {
+        const hasModules = await fs
+            .access(path.join(target.path, 'node_modules'))
+            .then(() => true)
+            .catch(() => false);
+        if (!hasModules) {
+            const r = await runCmd(pm.bin, pm.install, target.path);
+            results.push({
+                stage: 'install',
+                ok: r.exitCode === 0,
+                message: r.exitCode === 0 ? 'deps installed' : truncate(r.output),
+            });
+            if (r.exitCode !== 0)
+                return results;
+        }
+    }
+    if (pkg.scripts?.build) {
+        const r = await runCmd(pm.bin, pm.run('build'), target.path);
+        results.push({
+            stage: 'build',
+            ok: r.exitCode === 0,
+            message: r.exitCode === 0 ? 'build ok' : truncate(r.output),
+        });
+        if (r.exitCode !== 0)
+            return results;
+    }
+    if (pkg.scripts?.test) {
+        const r = await runCmd(pm.bin, pm.test, target.path);
+        results.push({
+            stage: 'test',
+            ok: r.exitCode === 0,
+            message: r.exitCode === 0 ? 'tests ok' : truncate(r.output),
+        });
+    }
+    return results;
+}
+/**
+ * Require a real (non-empty, non-blank-quoted) value after a frontmatter key.
+ * Rejects `name:`, `name: ""`, `name: '   '` — a quote alone satisfied the old
+ * `\S+`, accepting a structurally-present-but-empty field.
+ */
+const FRONTMATTER_FIELD = (key) => new RegExp(`^${key}:[ \\t]*(?:"[ \\t]*[^"\\s][^"]*"|'[ \\t]*[^'\\s][^']*'|[^"'\\s].*)$`, 'm');
+/** Minimal structural check that a skill file has the required frontmatter. */
+export async function verifySkillFile(target) {
+    let raw;
+    try {
+        raw = await fs.readFile(target.path, 'utf8');
+    }
+    catch {
+        return { stage: 'parse', ok: false, message: `skill file not found: ${target.path}` };
+    }
+    // Normalize CRLF so a Windows-authored skill isn't rejected by the \n anchors.
+    const normalized = raw.replace(/\r\n/g, '\n');
+    const fm = normalized.match(/^---\n([\s\S]*?)\n---/);
+    if (!fm) {
+        return { stage: 'parse', ok: false, message: 'missing YAML frontmatter block (--- … ---)' };
+    }
+    const body = fm[1] ?? '';
+    const hasName = FRONTMATTER_FIELD('name').test(body);
+    const hasDesc = FRONTMATTER_FIELD('description').test(body);
+    if (!hasName || !hasDesc) {
+        return {
+            stage: 'parse',
+            ok: false,
+            message: 'frontmatter must declare both a non-empty `name:` and `description:`',
+        };
+    }
+    return { stage: 'parse', ok: true, message: 'frontmatter ok' };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAmBlC,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC;AAClC;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,CAAC;AAExC,SAAS,MAAM,CAAC,GAAW,EAAE,IAA2B,EAAE,GAAW;IACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,CAAC,CAAS,EAAQ,EAAE;YACjC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,GAAG,CAAC,MAAM,GAAG,oBAAoB;gBAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,oBAAoB,CAAC,CAAC;QAC5F,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;QAChE,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAAe,EAAQ,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,qBAAqB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACvG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,SAAS,QAAQ,CAAC,KAA6D;IAC7E,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;YACtD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAC,GAAG,IAAI;IACnC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AASD,KAAK,UAAU,OAAO,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAY,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD,MAAM,WAAW,GAA+B;IAC9C,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;IAC5G,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;IACnF,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;IACnF,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;CAClF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,KAAK,CAAC,GAAY;IACzB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5E,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,GAAI,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAiB;IACvD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC,CAAC,sDAAsD;IAEhF,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAEtB,4EAA4E;IAC5E,IAAI,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;aAC9C,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,SAAS;gBAChB,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;gBACpB,OAAO,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;aAClE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,OAAO;YACd,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;SAC5D,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;IACvC,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,MAAM;YACb,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAU,EAAE,CAChD,IAAI,MAAM,CAAC,IAAI,GAAG,qEAAqE,EAAE,GAAG,CAAC,CAAC;AAEhG,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAiB;IACrD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACxF,CAAC;IACD,+EAA+E;IAC/E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,OAAO;YACd,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,sEAAsE;SAChF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AACjE,CAAC"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@moxxy/plugin-self-update",
+  "version": "0.26.0",
+  "description": "Model-callable self-update: guardrailed, transactional editing of moxxy's own plugins/skills (Tier 1, hot-reloaded) and core packages (Tier 2, build+overlay+restart). Every change is approval-gated, verified, and auto-rolled-back on failure. Disable to lock the code base.",
+  "keywords": [
+    "moxxy",
+    "agent",
+    "self-update",
+    "tools"
+  ],
+  "homepage": "https://moxxy.ai",
+  "bugs": {
+    "url": "https://github.com/moxxy-ai/moxxy/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/moxxy-ai/moxxy.git",
+    "directory": "packages/plugin-self-update"
+  },
+  "author": "Michal Makowski <michal.makowski97@gmail.com>",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "moxxy": {
+    "plugin": {
+      "entry": "./dist/index.js",
+      "kind": "tools"
+    }
+  },
+  "dependencies": {
+    "zod": "^3.24.0",
+    "@moxxy/sdk": "0.26.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.3",
+    "vitest": "^2.1.8",
+    "@moxxy/tsconfig": "0.0.0",
+    "@moxxy/vitest-preset": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist .turbo"
+  }
+}

package/src/classify.test.ts

@@ -0,0 +1,176 @@
+import type {
+  EventLogReader,
+  MoxxyEvent,
+  MoxxyEventOfType,
+  MoxxyEventType,
+  TurnId,
+} from '@moxxy/sdk';
+import { describe, expect, it } from 'vitest';
+import { classify, gatherSignals, suggestName, type ClassifySignals } from './classify.js';
+
+const empty: ClassifySignals = { failedTools: [], errorMessages: [], registeredTools: [] };
+
+// Minimal EventLogReader backed by a plain array — gatherSignals only uses
+// `length`, `slice` and `ofType`, so we stub just those faithfully.
+function reader(events: ReadonlyArray<MoxxyEvent>): EventLogReader {
+  return {
+    length: events.length,
+    at: (seq) => events[seq],
+    slice: (from = 0, to = events.length) => events.slice(from, to),
+    ofType: <T extends MoxxyEventType>(type: T): ReadonlyArray<MoxxyEventOfType<T>> =>
+      events.filter((e): e is MoxxyEventOfType<T> => e.type === type),
+    byTurn: (turnId: TurnId) => events.filter((e) => e.turnId === turnId),
+    toJSON: () => events,
+  };
+}
+
+function ev(seq: number, partial: Record<string, unknown>): MoxxyEvent {
+  return {
+    id: `e${seq}`,
+    seq,
+    ts: seq,
+    sessionId: 'sess',
+    turnId: 'turn',
+    source: 'system',
+    ...partial,
+  } as unknown as MoxxyEvent;
+}
+
+describe('classify', () => {
+  it('escalates to core when the error mentions core internals', () => {
+    const r = classify(
+      { trigger: 'error' },
+      { ...empty, errorMessages: ['TypeError in packages/core/src/run-turn.ts'] },
+    );
+    expect(r.tier).toBe('core');
+  });
+
+  it('recommends a plugin when a called tool is not registered', () => {
+    const r = classify(
+      { trigger: 'error' },
+      { failedTools: ['fetch_weather'], errorMessages: ['no tool'], registeredTools: ['Read', 'Bash'] },
+    );
+    expect(r.tier).toBe('plugin');
+    expect(r.candidateName).toBeDefined();
+  });
+
+  it('recommends a skill when an existing tool was misused', () => {
+    const r = classify(
+      { trigger: 'error', text: 'it keeps using the wrong path' },
+      { failedTools: ['Read'], errorMessages: ['ENOENT'], registeredTools: ['Read'] },
+    );
+    expect(r.tier).toBe('skill');
+  });
+
+  it('recommends a plugin to wrap an existing misbehaving tool when override is implied', () => {
+    const r = classify(
+      { trigger: 'request', text: 'wrap the Read tool to truncate huge files' },
+      { failedTools: ['Read'], errorMessages: [], registeredTools: ['Read'] },
+    );
+    expect(r.tier).toBe('plugin');
+  });
+
+  it('treats a procedure request as a skill', () => {
+    const r = classify(
+      { trigger: 'request', text: 'always run the linter before committing' },
+      empty,
+    );
+    expect(r.tier).toBe('skill');
+  });
+
+  it('treats a new-capability request as a plugin', () => {
+    const r = classify(
+      { trigger: 'request', text: 'add a tool that calls the GitHub API' },
+      empty,
+    );
+    expect(r.tier).toBe('plugin');
+  });
+
+  it('defaults ambiguous requests to the plugin tier', () => {
+    const r = classify({ trigger: 'request', text: 'do the thing' }, empty);
+    expect(r.tier).toBe('plugin');
+  });
+});
+
+describe('suggestName', () => {
+  it('builds a kebab slug, dropping stop words', () => {
+    expect(suggestName('add a tool that calls the GitHub API')).toBe('tool-calls-github-api');
+  });
+  it('returns undefined for empty input', () => {
+    expect(suggestName(undefined)).toBeUndefined();
+  });
+});
+
+describe('gatherSignals', () => {
+  it('correlates failed tool_result events back to their call name', () => {
+    const events = [
+      ev(0, { type: 'tool_call_requested', callId: 'c1', name: 'fetch_weather', input: {} }),
+      ev(1, {
+        type: 'tool_result',
+        callId: 'c1',
+        ok: false,
+        error: { message: 'boom', kind: 'threw' },
+      }),
+    ];
+    const sig = gatherSignals(reader(events), ['Read']);
+    expect(sig.failedTools).toEqual(['fetch_weather']);
+    expect(sig.errorMessages).toEqual(['boom']);
+    expect(sig.registeredTools).toEqual(['Read']);
+  });
+
+  it('ignores successful results and collects standalone error events', () => {
+    const events = [
+      ev(0, { type: 'tool_call_requested', callId: 'c1', name: 'Read', input: {} }),
+      ev(1, { type: 'tool_result', callId: 'c1', ok: true, output: 'fine' }),
+      ev(2, { type: 'error', message: 'session-level failure' }),
+    ];
+    const sig = gatherSignals(reader(events), []);
+    expect(sig.failedTools).toEqual([]);
+    expect(sig.errorMessages).toEqual(['session-level failure']);
+  });
+
+  it('records the error message for a failed-but-unregistered call name', () => {
+    // A tool_result whose callId has no matching tool_call_requested still
+    // contributes its error message, but cannot name a failed tool.
+    const events = [
+      ev(0, {
+        type: 'tool_result',
+        callId: 'orphan',
+        ok: false,
+        error: { message: 'no request seen', kind: 'threw' },
+      }),
+    ];
+    const sig = gatherSignals(reader(events), []);
+    expect(sig.failedTools).toEqual([]);
+    expect(sig.errorMessages).toEqual(['no request seen']);
+  });
+
+  it('only inspects events within the lookback window', () => {
+    // The request is far in the past; with a tiny lookback only the recent
+    // failing result is scanned. The callName map is still built from the
+    // whole log, so the correlation resolves even though the request itself
+    // is outside the window.
+    const events = [
+      ev(0, { type: 'tool_call_requested', callId: 'c1', name: 'old_tool', input: {} }),
+      ev(1, { type: 'tool_result', callId: 'c1', ok: false, error: { message: 'stale', kind: 'threw' } }),
+      ev(2, { type: 'tool_call_requested', callId: 'c2', name: 'new_tool', input: {} }),
+      ev(3, { type: 'tool_result', callId: 'c2', ok: false, error: { message: 'fresh', kind: 'threw' } }),
+    ];
+    const sig = gatherSignals(reader(events), [], 2);
+    // Only seq 2..3 are in the window, so only new_tool's failure is recorded.
+    expect(sig.failedTools).toEqual(['new_tool']);
+    expect(sig.errorMessages).toEqual(['fresh']);
+  });
+
+  it('dedupes a tool that fails repeatedly', () => {
+    const events = [
+      ev(0, { type: 'tool_call_requested', callId: 'c1', name: 'flaky', input: {} }),
+      ev(1, { type: 'tool_result', callId: 'c1', ok: false, error: { message: 'e1', kind: 'threw' } }),
+      ev(2, { type: 'tool_call_requested', callId: 'c2', name: 'flaky', input: {} }),
+      ev(3, { type: 'tool_result', callId: 'c2', ok: false, error: { message: 'e2', kind: 'threw' } }),
+    ];
+    const sig = gatherSignals(reader(events), []);
+    expect(sig.failedTools).toEqual(['flaky']);
+    expect(sig.errorMessages).toEqual(['e1', 'e2']);
+  });
+});