@senpi/runtime 1.1.0-dev.runtime-phase-2.20260512102629 → 1.1.0-dev.runtime-phase-2.20260513122539

package/dist/skills-manager/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/skills-manager/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAQpD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,uBAAuB,CAAC,CAAC;AAEnF;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAqC;IAErC,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC;IACxB,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;QAClC,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACtE,CAAC,CAAC,GAAG,CAAC,SAAS;YACf,CAAC,CAAC,kBAAkB;QACtB,mBAAmB,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;QAC7E,4DAA4D;QAC5D,sEAAsE;QACtE,uEAAuE;QACvE,6BAA6B;QAC7B,oEAAoE;QACpE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC/B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B;IAC7C,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,OAAO;QACL,IAAI;QACJ,gBAAgB,EAAE,IAAI;QACtB,aAAa,EAAE,IAAI;QACnB,kBAAkB,EAAE,IAAI;QACxB,wBAAwB,EAAE,IAAI;QAC9B,mBAAmB,EAAE,CAAC;QACtB,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,QAAiB;IAC/C,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,QAAgB;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChF,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,GAAW,EAAE,GAAW;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/skills-manager/version-manager.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Version detection for Senpi skills.
+ *
+ * Reads the installed SKILL.md version from disk and the remote version from
+ * raw.githubusercontent.com, then uses the existing semver helpers from
+ * src/runtime/auto-update/policy.ts to classify the delta.
+ */
+import type { LoggerLike, SkillVersionInfo } from "./types.js";
+/**
+ * Normalise a version string before passing it to parseSemver / classifyUpdate.
+ *
+ * Accepts two-part versions used in production skills (e.g. "1.0", "v2.3")
+ * and expands them to the full three-part form ("1.0.0", "v2.3.0") that
+ * parseSemver requires.  All other strings are returned unchanged.
+ */
+export declare function normalizeVersion(v: string): string;
+/**
+ * Extract the `version` value from a SKILL.md YAML frontmatter block.
+ *
+ * Handles both nested form:
+ *   metadata:
+ *     version: 1.2.3
+ * and flat form:
+ *   version: "1.2.3"
+ *
+ * Returns null when the frontmatter block is absent or the field is missing.
+ */
+export declare function parseSkillMdVersion(content: string): string | null;
+/**
+ * Read the installed version for a skill from its local SKILL.md.
+ * Returns null when the file is absent or the version field is missing.
+ * Logs a warning for unexpected errors (anything other than ENOENT).
+ */
+export declare function readLocalVersion(skillsDir: string, skillName: string, logger?: LoggerLike): Promise<string | null>;
+/**
+ * Fetch the remote SKILL.md for a skill and return its version.
+ *
+ * Returns null when the skill does not exist in the remote repo (HTTP 404) —
+ * that's a legitimate state ("skill removed or not yet published"), not an
+ * error, so it should not pollute failure counters.
+ *
+ * Throws on transient/operational failures (network errors, timeouts, 5xx
+ * responses, body-parse failures) so the caller's failure-recording path can
+ * fire.
+ *
+ * @param fetchImpl Injectable for unit testing — defaults to global `fetch`.
+ */
+export declare function fetchRemoteVersion(skillName: string, rawBaseUrl?: string, fetchImpl?: typeof fetch): Promise<string | null>;
+/**
+ * Compare the local and remote versions for a skill and return a classified diff.
+ *
+ * Special cases:
+ * - Local version is null (skill predates versioning) + valid remote → "minor"
+ *   so the update is auto-applied without manual major-version approval.
+ * - Local version exists but is not valid semver (e.g. "latest") → "unknown",
+ *   skip safely.
+ * - Remote version is absent or unparseable → "unknown", caller should log and
+ *   skip.
+ */
+export declare function checkSkillVersion(skillsDir: string, skillName: string, rawBaseUrl?: string, fetchImpl?: typeof fetch, logger?: LoggerLike): Promise<SkillVersionInfo>;
+//# sourceMappingURL=version-manager.d.ts.map

package/dist/skills-manager/version-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-manager.d.ts","sourceRoot":"","sources":["../../src/skills-manager/version-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAmB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGhF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMlE;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,MAA4B,EACxC,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+BxB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,MAA4B,EACxC,SAAS,GAAE,OAAO,KAAa,EAC/B,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAyC3B"}

package/dist/skills-manager/version-manager.js

@@ -0,0 +1,142 @@
+/**
+ * Version detection for Senpi skills.
+ *
+ * Reads the installed SKILL.md version from disk and the remote version from
+ * raw.githubusercontent.com, then uses the existing semver helpers from
+ * src/runtime/auto-update/policy.ts to classify the delta.
+ */
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { classifyUpdate, parseSemver } from "../runtime/auto-update/policy.js";
+import { SKILLS_RAW_BASE_URL } from "./constants.js";
+import { formatErr } from "./utils.js";
+/**
+ * Normalise a version string before passing it to parseSemver / classifyUpdate.
+ *
+ * Accepts two-part versions used in production skills (e.g. "1.0", "v2.3")
+ * and expands them to the full three-part form ("1.0.0", "v2.3.0") that
+ * parseSemver requires.  All other strings are returned unchanged.
+ */
+export function normalizeVersion(v) {
+    return /^v?\d+\.\d+$/.test(v.trim()) ? `${v.trim()}.0` : v;
+}
+/**
+ * Extract the `version` value from a SKILL.md YAML frontmatter block.
+ *
+ * Handles both nested form:
+ *   metadata:
+ *     version: 1.2.3
+ * and flat form:
+ *   version: "1.2.3"
+ *
+ * Returns null when the frontmatter block is absent or the field is missing.
+ */
+export function parseSkillMdVersion(content) {
+    const match = /^---\r?\n([\s\S]*?)\r?\n---/.exec(content.trim());
+    if (!match)
+        return null;
+    const frontmatter = match[1];
+    const versionMatch = /(?:^|\n)[ \t]*version:[ \t]*["']?([^\s"'\r\n]+)["']?/i.exec(frontmatter);
+    return versionMatch ? versionMatch[1].trim() : null;
+}
+/**
+ * Read the installed version for a skill from its local SKILL.md.
+ * Returns null when the file is absent or the version field is missing.
+ * Logs a warning for unexpected errors (anything other than ENOENT).
+ */
+export async function readLocalVersion(skillsDir, skillName, logger) {
+    const filePath = join(skillsDir, skillName, "SKILL.md");
+    try {
+        const content = await readFile(filePath, "utf8");
+        return parseSkillMdVersion(content);
+    }
+    catch (err) {
+        if (err.code !== "ENOENT") {
+            logger?.warn(`[senpi-skills-manager] failed to read SKILL.md for "${skillName}" | path=${filePath} err=${formatErr(err)}`);
+        }
+        return null;
+    }
+}
+/**
+ * Fetch the remote SKILL.md for a skill and return its version.
+ *
+ * Returns null when the skill does not exist in the remote repo (HTTP 404) —
+ * that's a legitimate state ("skill removed or not yet published"), not an
+ * error, so it should not pollute failure counters.
+ *
+ * Throws on transient/operational failures (network errors, timeouts, 5xx
+ * responses, body-parse failures) so the caller's failure-recording path can
+ * fire.
+ *
+ * @param fetchImpl Injectable for unit testing — defaults to global `fetch`.
+ */
+export async function fetchRemoteVersion(skillName, rawBaseUrl = SKILLS_RAW_BASE_URL, fetchImpl = fetch) {
+    const url = `${rawBaseUrl}/${encodeURIComponent(skillName)}/SKILL.md`;
+    let res;
+    try {
+        res = await fetchImpl(url, { signal: AbortSignal.timeout(15_000) });
+    }
+    catch (err) {
+        throw new Error(`Network error fetching remote SKILL.md for "${skillName}": ${formatErr(err)}`);
+    }
+    // 404 = skill is not in the remote repo. Treated as "no remote version"
+    // rather than a failure so the caller can skip cleanly without escalating.
+    if (res.status === 404) {
+        return null;
+    }
+    if (!res.ok) {
+        throw new Error(`Failed to fetch remote SKILL.md for "${skillName}": HTTP ${res.status} ${res.statusText}`);
+    }
+    try {
+        const text = await res.text();
+        return parseSkillMdVersion(text);
+    }
+    catch (err) {
+        throw new Error(`Failed to read response body for "${skillName}": ${formatErr(err)}`);
+    }
+}
+/**
+ * Compare the local and remote versions for a skill and return a classified diff.
+ *
+ * Special cases:
+ * - Local version is null (skill predates versioning) + valid remote → "minor"
+ *   so the update is auto-applied without manual major-version approval.
+ * - Local version exists but is not valid semver (e.g. "latest") → "unknown",
+ *   skip safely.
+ * - Remote version is absent or unparseable → "unknown", caller should log and
+ *   skip.
+ */
+export async function checkSkillVersion(skillsDir, skillName, rawBaseUrl = SKILLS_RAW_BASE_URL, fetchImpl = fetch, logger) {
+    // Log the specific fetch failure for traceability, then re-throw so the
+    // coordinator records it as a check failure (consecutiveFailures,
+    // lastFailureReason). 404 is intentionally returned as null inside
+    // fetchRemoteVersion and never reaches this catch.
+    const remoteVersionPromise = fetchRemoteVersion(skillName, rawBaseUrl, fetchImpl).catch((err) => {
+        logger?.warn(`[senpi-skills-manager] failed to fetch remote version for "${skillName}" | err=${formatErr(err)}`);
+        throw err;
+    });
+    const [localVersion, remoteVersion] = await Promise.all([
+        readLocalVersion(skillsDir, skillName, logger),
+        remoteVersionPromise,
+    ]);
+    const normalizedRemote = normalizeVersion(remoteVersion ?? "");
+    if (!remoteVersion || !parseSemver(normalizedRemote)) {
+        return { localVersion, remoteVersion, updateKind: "unknown" };
+    }
+    // Skill has never had a version in SKILL.md (null) — predates the versioning
+    // system or was installed before the field was added. Treat as a minor update
+    // so it is auto-applied without requiring a manual major-version approval.
+    if (localVersion === null) {
+        return { localVersion, remoteVersion, updateKind: "minor" };
+    }
+    const normalizedLocal = normalizeVersion(localVersion);
+    // Local version string exists but is not valid semver even after normalisation
+    // (e.g. "latest", "nightly"). We cannot safely compare, so skip.
+    if (!parseSemver(normalizedLocal)) {
+        return { localVersion, remoteVersion, updateKind: "unknown" };
+    }
+    // classifyUpdate returns AutoUpdateKind which is a strict subset of SkillUpdateKind
+    const updateKind = classifyUpdate(normalizedLocal, normalizedRemote);
+    return { localVersion, remoteVersion, updateKind };
+}
+//# sourceMappingURL=version-manager.js.map

package/dist/skills-manager/version-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-manager.js","sourceRoot":"","sources":["../../src/skills-manager/version-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,YAAY,GAAG,uDAAuD,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/F,OAAO,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,SAAiB,EACjB,MAAmB;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,EAAE,IAAI,CACV,uDAAuD,SAAS,YAAY,QAAQ,QAAQ,SAAS,CAAC,GAAG,CAAC,EAAE,CAC7G,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,aAAqB,mBAAmB,EACxC,YAA0B,KAAK;IAE/B,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAAC;IAEtE,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,+CAA+C,SAAS,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,wCAAwC,SAAS,WAAW,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAC3F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qCAAqC,SAAS,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,SAAiB,EACjB,aAAqB,mBAAmB,EACxC,YAA0B,KAAK,EAC/B,MAAmB;IAEnB,wEAAwE;IACxE,kEAAkE;IAClE,mEAAmE;IACnE,mDAAmD;IACnD,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,KAAK,CACrF,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,EAAE,IAAI,CACV,8DAA8D,SAAS,WAAW,SAAS,CAAC,GAAG,CAAC,EAAE,CACnG,CAAC;QACF,MAAM,GAAG,CAAC;IACZ,CAAC,CACF,CAAC;IACF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC;QAC9C,oBAAoB;KACrB,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,eAAe,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAEvD,+EAA+E;IAC/E,iEAAiE;IACjE,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,oFAAoF;IACpF,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,EAAE,gBAAgB,CAAoB,CAAC;IACxF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC"}

package/dist/skills-manager/writer.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Installs a skill from a cloned repo directory into the target skills
+ * directory using a crash-safe swap flow.
+ */
+import type { LoggerLike } from "./types.js";
+/**
+ * Copy a skill's subdirectory from `cloneDir` into `skillsDir/<skillName>/`,
+ * replacing the existing copy via a crash-safe swap.
+ *
+ * Strategy:
+ *  1. Validate source directory exists in the clone.
+ *  2. Write to a `.tmp-<skillName>` staging path inside `skillsDir`.
+ *  3. Move existing target to a hidden backup path (if present).
+ *  4. Move staging → target (atomic on same fs).
+ *  5. Delete the backup only after the new target is in place.
+ *
+ * This avoids destroying the previous skill copy before the new one is ready.
+ * There is still a brief window where `targetPath` may be absent, but the old
+ * content remains recoverable from the backup path until install succeeds.
+ *
+ * The `.tmp-` prefix hides the staging directory from skill discovery, which
+ * only reads immediate subdirectories of `skillsDir`.
+ *
+ * @throws When the skill subdirectory is absent in the clone.
+ * @throws When the staging copy fails.
+ */
+export declare function installSkill(cloneDir: string, skillName: string, skillsDir: string, logger?: LoggerLike): Promise<void>;
+//# sourceMappingURL=writer.d.ts.map

package/dist/skills-manager/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../src/skills-manager/writer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CA6Ff"}

package/dist/skills-manager/writer.js

@@ -0,0 +1,101 @@
+/**
+ * Installs a skill from a cloned repo directory into the target skills
+ * directory using a crash-safe swap flow.
+ */
+import * as fs from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+import { join } from "node:path";
+import { ALLOWED_SKILLS } from "./constants.js";
+import { formatErr } from "./utils.js";
+/**
+ * Copy a skill's subdirectory from `cloneDir` into `skillsDir/<skillName>/`,
+ * replacing the existing copy via a crash-safe swap.
+ *
+ * Strategy:
+ *  1. Validate source directory exists in the clone.
+ *  2. Write to a `.tmp-<skillName>` staging path inside `skillsDir`.
+ *  3. Move existing target to a hidden backup path (if present).
+ *  4. Move staging → target (atomic on same fs).
+ *  5. Delete the backup only after the new target is in place.
+ *
+ * This avoids destroying the previous skill copy before the new one is ready.
+ * There is still a brief window where `targetPath` may be absent, but the old
+ * content remains recoverable from the backup path until install succeeds.
+ *
+ * The `.tmp-` prefix hides the staging directory from skill discovery, which
+ * only reads immediate subdirectories of `skillsDir`.
+ *
+ * @throws When the skill subdirectory is absent in the clone.
+ * @throws When the staging copy fails.
+ */
+export async function installSkill(cloneDir, skillName, skillsDir, logger) {
+    if (!ALLOWED_SKILLS.includes(skillName)) {
+        throw new Error(`Skill "${skillName}" is not in the allowed skills list: ${ALLOWED_SKILLS.join(", ")}`);
+    }
+    const sourcePath = join(cloneDir, skillName);
+    const targetPath = join(skillsDir, skillName);
+    const stagingPath = join(skillsDir, `.tmp-${skillName}`);
+    const backupPath = join(skillsDir, `.bak-${skillName}-${randomUUID()}`);
+    logger?.info(`[senpi-skills-manager] installing skill | skill=${skillName} from=${sourcePath} to=${targetPath}`);
+    // Validate source exists and is a directory
+    try {
+        const info = await fs.stat(sourcePath);
+        if (!info.isDirectory()) {
+            throw new Error(`Expected a directory at "${sourcePath}" for skill "${skillName}" but found a file`);
+        }
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            throw new Error(`Skill "${skillName}" not found in cloned repo at "${sourcePath}"`);
+        }
+        throw err;
+    }
+    // Ensure skillsDir exists
+    await fs.mkdir(skillsDir, { recursive: true });
+    // Remove any leftover staging dir from a previous failed install
+    await fs.rm(stagingPath, { recursive: true, force: true });
+    logger?.info(`[senpi-skills-manager] cleared leftover staging dir | path=${stagingPath}`);
+    // Copy source → staging
+    logger?.info(`[senpi-skills-manager] copying skill to staging | from=${sourcePath} to=${stagingPath}`);
+    await fs.cp(sourcePath, stagingPath, { recursive: true });
+    // Move current target out of the way first so old data is recoverable on failure.
+    let movedTargetToBackup = false;
+    try {
+        await fs.rename(targetPath, backupPath);
+        movedTargetToBackup = true;
+        logger?.info(`[senpi-skills-manager] backed up existing install | from=${targetPath} to=${backupPath}`);
+    }
+    catch (err) {
+        if (err.code !== "ENOENT") {
+            throw err;
+        }
+        logger?.info(`[senpi-skills-manager] no existing install to back up | skill=${skillName}`);
+    }
+    try {
+        logger?.info(`[senpi-skills-manager] swapping staging to target | from=${stagingPath} to=${targetPath}`);
+        await fs.rename(stagingPath, targetPath);
+    }
+    catch (err) {
+        logger?.warn(`[senpi-skills-manager] swap failed, rolling back | skill=${skillName} err=${formatErr(err)}`);
+        // Remove any partial target before restoring old contents.
+        await fs.rm(targetPath, { recursive: true, force: true });
+        if (movedTargetToBackup) {
+            await fs.rename(backupPath, targetPath).catch((restoreErr) => {
+                logger?.warn(`[senpi-skills-manager] failed to restore backup after swap failure | skill=${skillName} backup=${backupPath} err=${formatErr(restoreErr)}`);
+            });
+        }
+        throw err;
+    }
+    finally {
+        // On successful rename this path no longer exists; rm is still safe with force=true.
+        await fs.rm(stagingPath, { recursive: true, force: true });
+    }
+    // Backup cleanup is best-effort once the new target is in place.
+    if (movedTargetToBackup) {
+        await fs.rm(backupPath, { recursive: true, force: true }).catch((err) => {
+            logger?.warn(`[senpi-skills-manager] failed to remove backup dir | path=${backupPath} err=${formatErr(err)}`);
+        });
+    }
+    logger?.info(`[senpi-skills-manager] skill installed successfully | skill=${skillName} path=${targetPath}`);
+}
+//# sourceMappingURL=writer.js.map

package/dist/skills-manager/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../src/skills-manager/writer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGvC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,SAAiB,EACjB,SAAiB,EACjB,MAAmB;IAEnB,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,UAAU,SAAS,wCAAwC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,SAAS,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;IAExE,MAAM,EAAE,IAAI,CACV,mDAAmD,SAAS,SAAS,UAAU,OAAO,UAAU,EAAE,CACnG,CAAC;IAEF,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,4BAA4B,UAAU,gBAAgB,SAAS,oBAAoB,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,UAAU,SAAS,kCAAkC,UAAU,GAAG,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,0BAA0B;IAC1B,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,iEAAiE;IACjE,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,EAAE,IAAI,CAAC,8DAA8D,WAAW,EAAE,CAAC,CAAC;IAE1F,wBAAwB;IACxB,MAAM,EAAE,IAAI,CAAC,0DAA0D,UAAU,OAAO,WAAW,EAAE,CAAC,CAAC;IACvG,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1D,kFAAkF;IAClF,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACxC,mBAAmB,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,IAAI,CACV,4DAA4D,UAAU,OAAO,UAAU,EAAE,CAC1F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,IAAI,CAAC,iEAAiE,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,CACV,4DAA4D,WAAW,OAAO,UAAU,EAAE,CAC3F,CAAC;QACF,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,IAAI,CACV,4DAA4D,SAAS,QAAQ,SAAS,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;QACF,2DAA2D;QAC3D,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;gBAC3D,MAAM,EAAE,IAAI,CACV,8EAA8E,SAAS,WAAW,UAAU,QAAQ,SAAS,CAAC,UAAU,CAAC,EAAE,CAC5I,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,qFAAqF;QACrF,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,iEAAiE;IACjE,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACtE,MAAM,EAAE,IAAI,CACV,6DAA6D,UAAU,QAAQ,SAAS,CAAC,GAAG,CAAC,EAAE,CAChG,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,IAAI,CAAC,+DAA+D,SAAS,SAAS,UAAU,EAAE,CAAC,CAAC;AAC9G,CAAC"}

package/openclaw.plugin.json

@@ -71,6 +71,35 @@
           }
         }
       },
+      "skillsManager": {
+        "type": "object",
+        "additionalProperties": false,
+        "description": "Skills manager configuration. Polls the senpi-skills repo for updates to declared skills and applies patch/minor updates automatically (major updates are notify-only). Omit this block to use defaults.",
+        "default": {
+          "enabled": true,
+          "skills": ["senpi-trading-runtime"],
+          "pollIntervalMinutes": 60
+        },
+        "properties": {
+          "enabled": {
+            "type": "boolean",
+            "description": "Enable or disable the skills manager (default: true)"
+          },
+          "skillsDir": {
+            "type": "string",
+            "description": "Directory where managed skills are installed (default: /data/.openclaw/skills, override via SENPI_SKILLS_DIR env)"
+          },
+          "pollIntervalMinutes": {
+            "type": "number",
+            "description": "Minutes between version checks (default: 60, range: 1-1440)"
+          },
+          "skills": {
+            "type": "array",
+            "items": { "type": "string" },
+            "description": "Explicit skill names to manage. Omitting the field falls back to the canonical default [\"senpi-trading-runtime\"]; passing an explicit empty array [] switches to discovery mode (scan subdirs under skillsDir)."
+          }
+        }
+      },
       "api": {
         "type": "object",
         "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@senpi/runtime",
-  "version": "1.1.0-dev.runtime-phase-2.20260512102629",
+  "version": "1.1.0-dev.runtime-phase-2.20260513122539",
   "description": "Senpi runtime plugin for OpenClaw",
   "type": "module",
   "main": "dist/index.js",
@@ -33,6 +33,7 @@
     "@anthropic-ai/sdk": "^0.39.0",
     "@modelcontextprotocol/sdk": "^1.0.0",
     "@sinclair/typebox": "^0.34.0",
+    "async-retry": "^1.3.3",
     "dd-trace": "^5.99.1",
     "dotenv": "^16.4.5",
     "fastify": "^5.8.5",
@@ -44,6 +45,7 @@
     "openclaw": ">=2026.2.0"
   },
   "devDependencies": {
+    "@types/async-retry": "^1.4.9",
     "@types/node": "^22.0.0",
     "tsx": "^4.21.0",
     "typescript": "^5.7.0",