@sigrun/sigrun 0.4.2 → 0.5.0

package/dist/skills/index.js

@@ -3,16 +3,20 @@
  * package.
  *
  * v1 discovered ONE root: `skills/<dir>/SKILL.md` in the conversation
- * workspace. W5 Task 4 (spec §9.4) grows discovery to THREE roots, with
- * first-wins precedence in this order:
+ * workspace. W5 Task 4 (spec §9.4) grew discovery to THREE roots, and
+ * curator A3 (P2) adds a fourth — the conversation OWNER's learned
+ * skills. First-wins precedence in this order:
  *
  * 1. the WORKSPACE root — `skills/` under the conversation workspace, read
  *    through the conversation `ExecutionEnv` (the section via
  *    `PromptInput.env`, the tool via `ToolExecutionApi.env`), so discovery
  *    follows the resolved workspace;
- * 2. the USER root — `<configDir>/skills/` (a named config-root entry),
+ * 2. the LEARNED root — the owner's `<dataDir>/users/<owner>/skills/`,
+ *    read from the host filesystem; only for OWNED conversations (an
+ *    ownerless conversation has no learned root);
+ * 3. the USER root — `<configDir>/skills/` (a named config-root entry),
  *    read from the host filesystem;
- * 3. PACKAGE roots — skill directories shipped by extension packages
+ * 4. PACKAGE roots — skill directories shipped by extension packages
  *    (manifest `sigrun.skills`/`pi.skills` dirs and factory-result `skills`
  *    dirs, collected by the loader in install order), read from the host
  *    filesystem.
@@ -60,6 +64,21 @@ import { Type } from "@earendil-works/pi-ai";
 import { defineExtension, defineTool, section, } from "@earendil-works/pi-durable";
 import { readdirSync, readFileSync } from "node:fs";
 import { join } from "node:path";
+import { overlayForSkill, resolveUpstream, withOverlay } from "../curation/overlays.js";
+import { buildSkillManageTool } from "../curation/skill-tool.js";
+import { SessionMetaDoc } from "../server/session-meta.js";
+/**
+ * Resolve a conversation's owner through any `DocumentReader` (curator
+ * A3): the section's `PromptInput.read` and the tool's `ToolExecutionApi`
+ * both carry one. `undefined` for an ownerless conversation — and for a
+ * bare test double without the reader surface (no learned root then).
+ */
+async function conversationOwner(read, conversationId, context) {
+    if (typeof read?.snapshot !== "function")
+        return undefined;
+    const meta = await read.snapshot(SessionMetaDoc, conversationId, context);
+    return meta?.owner;
+}
 /** The section key the skills list renders under. */
 export const SKILLS_SECTION_KEY = "skills";
 /** Total rendered-section budget (spec §3.2: 4KB, notice included). */
@@ -68,8 +87,8 @@ const SKILLS_DIRECTORY = "skills";
 const SKILL_FILE = "SKILL.md";
 const FRONTMATTER_DELIMITER = "---";
 const SKILLS_SECTION_HEADER = "Workspace skills. Call the load_skill tool with a skill's name to read its full instructions; each entry shows the skill's path, so you can also read its SKILL.md directly.";
-/** The three discovery roots, in precedence order (§9.4). */
-const ROOT_PRECEDENCE = ["workspace", "user dir", "package"];
+/** The discovery roots, in precedence order (§9.4 + curator P2). */
+const ROOT_PRECEDENCE = ["workspace", "learned", "user dir", "package"];
 const encoder = new TextEncoder();
 /** UTF-8 byte length — the unit the section cap is measured in. */
 function byteLength(text) {
@@ -129,7 +148,7 @@ function parseSkillFile(text) {
  * rules with a log. `displayDir` is the path named in the logs and the
  * section entry; `fileLabel` names the file in skip logs.
  */
-function skillFromFile(text, displayDir, fileLabel) {
+function skillFromFile(text, displayDir, fileLabel, root) {
     const parsed = parseSkillFile(text);
     if (parsed === undefined) {
         console.warn(`skills: skipping ${fileLabel} (the frontmatter block is required)`);
@@ -149,6 +168,7 @@ function skillFromFile(text, displayDir, fileLabel) {
         body: parsed.body,
         dir: displayDir,
         disableModelInvocation: parsed.disableModelInvocation,
+        root,
     };
 }
 /** Directory-name comparison (plain code-point order, locale-independent). */
@@ -179,7 +199,7 @@ async function readSkill(env, dir, context) {
             cause: read.error,
         });
     }
-    return skillFromFile(read.value, `${SKILLS_DIRECTORY}/${dir.name}`, relative);
+    return skillFromFile(read.value, `${SKILLS_DIRECTORY}/${dir.name}`, relative, "workspace");
 }
 /**
  * Scan the workspace's skills through the conversation `ExecutionEnv`.
@@ -236,7 +256,7 @@ export async function scanSkills(env, context, opts) {
  * `disable-model-invocation: true` skills (the `listSkills` path); the
  * default hides them with a log, exactly like the workspace root.
  */
-function scanFsRoot(root, opts) {
+export function scanFsRoot(root, rootLabel, opts) {
     let entries;
     try {
         entries = readdirSync(root, { withFileTypes: true });
@@ -263,7 +283,7 @@ function scanFsRoot(root, opts) {
             }
             throw new Error(`Failed to read ${file}: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
         }
-        const skill = skillFromFile(text, join(root, entry.name), file);
+        const skill = skillFromFile(text, join(root, entry.name), file, rootLabel);
         if (skill === undefined)
             continue;
         if (skill.disableModelInvocation && opts?.includeHidden !== true) {
@@ -320,9 +340,15 @@ export async function discoverSkills(env, context, opts, options) {
     if (env !== undefined) {
         merge(await scanSkills(env, context, options), "workspace");
     }
-    merge(scanFsRoot(opts.userDir, options), "user dir");
+    // The learned root (curator P2): the owner's own skills, between the
+    // workspace and the deployment's user dir. Ownerless → none.
+    const learnedRoot = opts.learnedRoot?.(options?.owner);
+    if (learnedRoot !== undefined) {
+        merge(scanFsRoot(learnedRoot, "learned", options), "learned");
+    }
+    merge(scanFsRoot(opts.userDir, "user dir", options), "user dir");
     for (const root of opts.packageRoots()) {
-        merge(scanFsRoot(root.dir, options), "package", root.extension);
+        merge(scanFsRoot(root.dir, "package", options), "package", root.extension);
     }
     return [...byName.values()].map((entry) => entry.skill).sort(bySkillName);
 }
@@ -333,8 +359,11 @@ export async function discoverSkills(env, context, opts, options) {
  * them while the section and `load_skill` keep them hidden. Read LIVE
  * per call (the same posture as the section's per-render scan).
  */
-export async function listSkills(env, context, opts) {
-    return discoverSkills(env, context, opts, { includeHidden: true });
+export async function listSkills(env, context, opts, options) {
+    return discoverSkills(env, context, opts, {
+        includeHidden: true,
+        ...(options?.owner === undefined ? {} : { owner: options.owner }),
+    });
 }
 /**
  * Assemble the section text: the header plus one `- name: description
@@ -373,9 +402,10 @@ export function renderSkillList(skills, limitBytes) {
     // rendering — it says skills exist and how many were cut).
     return `(skill list truncated: ${lines.length} more not shown — call load_skill by name)`;
 }
-/** Section render: discover all three roots, list the winning skills. */
+/** Section render: discover all roots, list the winning skills. */
 async function renderSkills(input, context, opts) {
-    const skills = await discoverSkills(input.env, context, opts);
+    const owner = await conversationOwner(input.read, input.conversationId, context);
+    const skills = await discoverSkills(input.env, context, opts, { owner });
     return renderSkillList(skills, opts.sectionMaxBytes());
 }
 /** An explicit tool error: text content the model can read and recover from. */
@@ -393,7 +423,8 @@ function buildLoadSkillTool(opts) {
             }),
         }),
         async execute(args, api, context) {
-            const skills = await discoverSkills(api.env, context, opts);
+            const owner = await conversationOwner(api, api.conversationId, context);
+            const skills = await discoverSkills(api.env, context, opts, { owner });
             const skill = skills.find((candidate) => candidate.name === args.name);
             if (skill === undefined) {
                 if (skills.length === 0) {
@@ -402,7 +433,19 @@ function buildLoadSkillTool(opts) {
                 const available = skills.map((candidate) => candidate.name).join(", ");
                 return skillError(`load_skill: unknown skill "${args.name}"; available skills: ${available}`);
             }
-            api.output(skill.body);
+            // Curator A5 (P2): an overlay for this owner rides on the upstream
+            // body — upstream, then the heading, then the overlay text. The
+            // section is unchanged (the skill lists once, plain).
+            const overlay = await overlayForSkill(opts, owner, skill, api.env);
+            api.output(overlay === undefined ? skill.body : withOverlay(skill.body, overlay));
+            // Curator A6 (P4): a learned-root skill load counts as usage.
+            if (skill.root === "learned" && owner !== undefined) {
+                const usage = opts.usage?.(owner);
+                if (usage !== undefined) {
+                    usage.bump(skill.name, "load");
+                    void usage.flush();
+                }
+            }
             return {};
         },
     });
@@ -419,6 +462,32 @@ export function createSkillsExtension(opts) {
         sections: [
             section(SKILLS_SECTION_KEY, (input, context) => renderSkills(input, context, opts)),
         ],
-        tools: [buildLoadSkillTool(opts)],
+        tools: [
+            buildLoadSkillTool(opts),
+            // Curator A6 (P3): the skill_manage tool installs once the options
+            // carry the curation wiring (a skill-store seam) — the read actions
+            // for every owned conversation, the mutating actions for curator
+            // runs. The overlay actions resolve the CURRENT upstream through
+            // A5's machinery over the same discovery roots (the final review
+            // fix wave: hashing the learned root stored `""` for every overlay).
+            ...(opts.skillStore === undefined
+                ? []
+                : [
+                    buildSkillManageTool({
+                        storesOf: (user) => {
+                            const store = opts.skillStore?.(user);
+                            const overlays = opts.overlays?.(user);
+                            return store === undefined || overlays === undefined
+                                ? undefined
+                                : { store, overlays };
+                        },
+                        upstreamOf: (key, env, ctx) => resolveUpstream(key, env, ctx, {
+                            userDir: opts.userDir,
+                            packageRoots: opts.packageRoots,
+                        }),
+                        workspaceOf: (env) => opts.workspaceRoot?.() ?? env?.cwd,
+                    }),
+                ]),
+        ],
     });
 }

package/node_modules/@sigrun/shared/CHANGELOG.md

@@ -5,8 +5,9 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.5.0] - 2026-11-02
 
+Version-companion release for sigrun 0.5.0 (no shared changes).
 ## [0.4.2] - 2026-10-31
 
 ### Fixed
@@ -60,3 +61,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   conversation/turn shaping, the channel wire types, session-meta,
   commands, interactions, ambient records, access, settings, views,
   view-delta, and jobs — the surfaces the webui, TUI, and server share.
+

package/node_modules/@sigrun/shared/dist/access.d.ts

@@ -9,6 +9,8 @@
  *
  * The rules, in order (first match wins):
  *
+ * 0. internal resource → none (curator P5: a conversation created for
+ *    curator work is invisible to EVERY caller — the superuser included);
  * 1. superuser → write;
  * 2. ownerless resource → household write (everyone);
  * 3. user === owner → write;
@@ -48,6 +50,7 @@ export interface AccessPrincipal {
 export declare function accessOf(p: AccessPrincipal, r: {
     readonly owner?: string;
     readonly sharing?: Sharing;
+    readonly internal?: true;
 }): Access;
 /**
  * Type guard for the wire value: every scope shape checked strictly

package/node_modules/@sigrun/shared/dist/access.js

@@ -9,6 +9,8 @@
  *
  * The rules, in order (first match wins):
  *
+ * 0. internal resource → none (curator P5: a conversation created for
+ *    curator work is invisible to EVERY caller — the superuser included);
  * 1. superuser → write;
  * 2. ownerless resource → household write (everyone);
  * 3. user === owner → write;
@@ -26,6 +28,12 @@
  * module doc; the first matching rule wins.
  */
 export function accessOf(p, r) {
+    // 0. Internal (curator P5): invisible to everyone, the superuser
+    // included — BEFORE any other rule can widen access. The marker is
+    // server-owned (written once in the creating commit), so no caller,
+    // share, or role can ever open an internal resource.
+    if (r.internal === true)
+        return "none";
     // 1. The superuser always writes.
     if (p.superuser === true)
         return "write";

package/node_modules/@sigrun/shared/dist/session-meta.d.ts

@@ -25,10 +25,10 @@ export type { Sharing } from "./access.js";
  * `invalid_field`.
  *
  * Server-owned fields (`autoName`, `autoNameAttempts`,
- * `lastActivityAt`, `jobId`, `deliver`) are written by host code only
- * (activity.ts, the A2 auto-namer, fire.ts's job stamp); they are NOT
- * patch surface — the strict validator keeps rejecting them as
- * `invalid_field`.
+ * `lastActivityAt`, `jobId`, `deliver`, `internal`) are written by host
+ * code only (activity.ts, the A2 auto-namer, fire.ts's job stamp, the
+ * curator's creating commit); they are NOT patch surface — the strict
+ * validator keeps rejecting them as `invalid_field`.
  */
 /** The per-conversation session metadata (spec §5). */
 export type SessionMeta = {
@@ -85,6 +85,17 @@ export type SessionMeta = {
      * strict validator rejects the key as `invalid_field`.
      */
     deliver?: string[];
+    /**
+     * Server-owned internal-run marker (curator P5, spec §6.1): true on a
+     * conversation created for curator work — hidden from every list and
+     * view, 404 on every `:id` route for every caller (superuser
+     * included), never named, never notified, never idle-clocked, and
+     * absent from every event surface. Written ONCE by the curator's
+     * creating commit (`markInternal`); the flag never changes after
+     * creation. Never patchable — the strict validator rejects the key
+     * as `invalid_field`.
+     */
+    internal?: true;
     /**
      * The §5.9 per-resource sharing state; absent = private (owner and
      * superuser only). Patchable by the OWNER or a superuser (403

package/node_modules/@sigrun/shared/dist/settings.d.ts

@@ -303,11 +303,11 @@ export interface NotificationsSettings {
     readonly runSettled?: "unwatched" | "cron" | "always" | "never";
 }
 /**
- * The built-in extensions toggles: codemode, MCP, tool search and OAuth
- * ship WITH core. Each key defaults to `true`; `false`
- * removes the built-in entirely (absent from `/v1/extensions`, its config
- * ignored with one log line). RESTART-REQUIRED: the built-in set resolves
- * at boot, like `extensions`.
+ * The built-in extensions toggles: codemode, MCP, tool search, the
+ * gateway, OAuth and the curator ship WITH core. Each key defaults to
+ * `true`; `false` removes the built-in entirely (absent from
+ * `/v1/extensions`, its config ignored with one log line).
+ * RESTART-REQUIRED: the built-in set resolves at boot, like `extensions`.
  */
 export interface BuiltinExtensionsSettings {
     readonly codemode?: boolean;
@@ -317,6 +317,8 @@ export interface BuiltinExtensionsSettings {
     readonly gateway?: boolean;
     /** OAuth login providers (multi-user M3b), default true. */
     readonly oauth?: boolean;
+    /** Curator (Task B1): the per-user curation loops, default true. */
+    readonly curator?: boolean;
 }
 /**
  * The persisted shape: HarnessSettings pass-throughs + sigrun fields.

package/node_modules/@sigrun/shared/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sigrun/shared",
-	"version": "0.4.2",
+	"version": "0.5.0",
 	"description": "sigrun shared leaf package \u2014 theme tokens, turn/conversation shaping, and the channel wire types (pure leaf, zero dependencies)",
 	"type": "module",
 	"exports": {

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@sigrun/sigrun",
-	"version": "0.4.2",
-	"description": "Durable personal assistant on pi-durable",
+	"version": "0.5.0",
+	"description": "Self-hosted, multi-user personal-assistant server",
 	"type": "module",
 	"exports": {
 		".": "./dist/index.js",
@@ -45,11 +45,12 @@
 		"@earendil-works/pi-tui": "^1.3.0",
 		"@fastify/static": "^10.1.7",
 		"@sigrun/ext-codemode": "0.1.2",
-		"@sigrun/ext-gateway": "0.1.7",
+		"@sigrun/ext-curator": "0.1.0",
+		"@sigrun/ext-gateway": "0.1.9",
 		"@sigrun/ext-mcp": "0.2.2",
 		"@sigrun/ext-tool-search": "0.1.2",
 		"@sigrun/oauth": "0.1.1",
-		"@sigrun/shared": "0.4.2",
+		"@sigrun/shared": "0.5.0",
 		"croner": "^10.0.1",
 		"fastify": "^5.12.7",
 		"semver": "^7.8.5",
@@ -60,11 +61,12 @@
 		"@sigrun/shared"
 	],
 	"optionalDependencies": {
-		"@sigrun/sandbox-linux-arm64": "0.4.2",
-		"@sigrun/sandbox-linux-x64": "0.4.2",
-		"@sigrun/tui": "0.4.2"
+		"@sigrun/sandbox-linux-arm64": "0.5.0",
+		"@sigrun/sandbox-linux-x64": "0.5.0",
+		"@sigrun/tui": "0.5.0"
 	},
 	"devDependencies": {
+		"@sigrun/memory-markdown": "file:../sigrun-memory-markdown",
 		"@types/node": "^26.6.4",
 		"@types/semver": "^7.8.0",
 		"fast-check": "^4.10.2",