@smilintux/skcapstone 0.1.0 → 0.2.3

package/src/skcapstone/skills/__init__.py

@@ -1 +1 @@
-"""SKCapstone skills - OpenClaw-compatible agent skills."""
+"""SKCapstone skills - SKSkills-native agent skills."""

package/src/skcapstone/skills/syncthing_setup.py

@@ -1,9 +1,10 @@
 """
-Syncthing auto-setup skill for skcapstone / OpenClaw agents.
+Syncthing auto-setup skill for skcapstone sovereign agents.
 
-Detects, installs, and configures Syncthing for sovereign P2P
-memory synchronization. Generates device IDs, shared folder config,
-and optional QR codes for easy pairing.
+Detects, installs, and configures Syncthing for Sovereign Singularity —
+real-time P2P sync of the entire agent home directory. Identity, memory,
+trust, security, coordination, and sync seeds all propagate across every
+node in the mesh automatically.
 """
 
 import json
@@ -17,11 +18,38 @@ from pathlib import Path
 from typing import Optional
 
 
-SYNC_DIR = Path.home() / ".skcapstone" / "sync"
-SYNCTHING_CONFIG_DIR = Path.home() / ".config" / "syncthing"
-SYNCTHING_CONFIG_FILE = SYNCTHING_CONFIG_DIR / "config.xml"
+AGENT_HOME = Path.home() / ".skcapstone"
+SYNC_DIR = AGENT_HOME / "sync"
 SHARED_FOLDER_ID = "skcapstone-sync"
 
+# Reason: .stignore protects private keys from leaving this node
+STIGNORE_CONTENTS = """\
+// SKCapstone Sovereign Singularity — Syncthing ignore rules
+// Private key material must never leave this node
+*.key
+*.pem
+**/private.*
+
+// Python cache
+__pycache__
+*.pyc
+*.pyo
+
+// OS metadata
+.DS_Store
+Thumbs.db
+desktop.ini
+"""
+
+# Reason: Syncthing stores its config in different locations per platform
+if platform.system() == "Windows":
+    _local_app = os.environ.get("LOCALAPPDATA", str(Path.home() / "AppData" / "Local"))
+    SYNCTHING_CONFIG_DIR = Path(_local_app) / "Syncthing"
+else:
+    SYNCTHING_CONFIG_DIR = Path.home() / ".config" / "syncthing"
+
+SYNCTHING_CONFIG_FILE = SYNCTHING_CONFIG_DIR / "config.xml"
+
 
 def detect_syncthing() -> Optional[str]:
     """Check if Syncthing is installed and return its path.
@@ -76,18 +104,25 @@ def _detect_linux_distro() -> str:
     Returns:
         str: Distribution identifier (e.g., 'ubuntu', 'arch').
     """
+    if platform.system() != "Linux":
+        return "unknown"
+
+    os_release = Path("/etc/os-release")
+    if not os_release.exists():
+        return "unknown"
+
     try:
-        with open("/etc/os-release") as f:
-            for line in f:
-                if line.startswith("ID="):
-                    return line.strip().split("=")[1].strip('"').lower()
-                if line.startswith("ID_LIKE="):
-                    like = line.strip().split("=")[1].strip('"').lower()
-                    if "arch" in like:
-                        return "arch"
-                    if "debian" in like:
-                        return "debian"
-    except FileNotFoundError:
+        text = os_release.read_text(encoding="utf-8")
+        for line in text.splitlines():
+            if line.startswith("ID="):
+                return line.strip().split("=")[1].strip('"').lower()
+            if line.startswith("ID_LIKE="):
+                like = line.strip().split("=")[1].strip('"').lower()
+                if "arch" in like:
+                    return "arch"
+                if "debian" in like:
+                    return "debian"
+    except OSError:
         pass
     return "unknown"
 
@@ -127,18 +162,62 @@ def get_device_id() -> Optional[str]:
 
 
 def ensure_shared_folder() -> Path:
-    """Create the skcapstone sync shared folder if it doesn't exist.
+    """Create the full skcapstone agent home directory structure.
+
+    Ensures every pillar data directory exists so Syncthing has a
+    complete tree to replicate across nodes. Also writes the .stignore
+    to prevent private key material from leaving the node.
+
+    Returns:
+        Path: The agent home path (the Syncthing share root).
+    """
+    AGENT_HOME.mkdir(parents=True, exist_ok=True)
+
+    pillar_dirs = [
+        AGENT_HOME / "identity",
+        AGENT_HOME / "memory" / "short-term",
+        AGENT_HOME / "memory" / "mid-term",
+        AGENT_HOME / "memory" / "long-term",
+        AGENT_HOME / "trust" / "febs",
+        AGENT_HOME / "security",
+        AGENT_HOME / "coordination" / "tasks",
+        AGENT_HOME / "coordination" / "agents",
+        AGENT_HOME / "config",
+        AGENT_HOME / "skills",
+        SYNC_DIR / "outbox",
+        SYNC_DIR / "inbox",
+        SYNC_DIR / "archive",
+    ]
+    for d in pillar_dirs:
+        d.mkdir(parents=True, exist_ok=True)
+
+    _write_stignore()
+    return AGENT_HOME
+
+
+def _write_stignore() -> Path:
+    """Write the .stignore file to the agent home directory.
+
+    Syncthing reads this to know which files should never propagate
+    to other nodes (private keys, cache files, etc.).
 
     Returns:
-        Path: The shared folder path.
+        Path: The .stignore file path.
     """
-    for subdir in ("outbox", "inbox", "archive"):
-        (SYNC_DIR / subdir).mkdir(parents=True, exist_ok=True)
-    return SYNC_DIR
+    stignore_path = AGENT_HOME / ".stignore"
+    stignore_path.write_text(STIGNORE_CONTENTS, encoding="utf-8")
+    return stignore_path
 
 
 def configure_syncthing_folder() -> bool:
-    """Add the skcapstone sync folder to Syncthing config.
+    """Add or update the skcapstone shared folder in Syncthing config.
+
+    Points Syncthing at the entire agent home (~/.skcapstone/) so all
+    pillar data — identity, memory, trust, security, coordination, and
+    sync seeds — replicates automatically across every node.
+
+    If an older config pointed at the sync/ subfolder, it gets upgraded
+    to share the full agent home instead.
 
     Returns:
         bool: True if configuration was added/updated.
@@ -152,14 +231,24 @@ def configure_syncthing_folder() -> bool:
     except ET.ParseError:
         return False
 
+    agent_home_str = str(AGENT_HOME)
+    old_sync_str = str(SYNC_DIR)
+
     for folder in root.iter("folder"):
         if folder.get("id") == SHARED_FOLDER_ID:
+            current_path = folder.get("path", "")
+            if current_path == agent_home_str:
+                return True
+            # Reason: upgrade old sync/-only share to full agent home
+            folder.set("path", agent_home_str)
+            folder.set("label", "SKCapstone Sovereign")
+            tree.write(str(SYNCTHING_CONFIG_FILE), xml_declaration=True)
             return True
 
     folder_elem = ET.SubElement(root, "folder")
     folder_elem.set("id", SHARED_FOLDER_ID)
-    folder_elem.set("label", "SKCapstone Sync")
-    folder_elem.set("path", str(SYNC_DIR))
+    folder_elem.set("label", "SKCapstone Sovereign")
+    folder_elem.set("path", agent_home_str)
     folder_elem.set("type", "sendreceive")
     folder_elem.set("rescanIntervalS", "60")
     folder_elem.set("fsWatcherEnabled", "true")
@@ -172,27 +261,37 @@ def configure_syncthing_folder() -> bool:
 def start_syncthing() -> bool:
     """Start Syncthing as a background process or systemd service.
 
+    On Linux: tries systemd first, then falls back to direct launch.
+    On Windows/macOS: launches directly as a detached background process.
+
     Returns:
         bool: True if started successfully.
     """
-    # Reason: try systemd user service first, then fall back to direct launch
-    result = subprocess.run(
-        ["systemctl", "--user", "start", "syncthing.service"],
-        capture_output=True,
-        check=False,
-    )
-    if result.returncode == 0:
-        return True
+    # Reason: systemctl is Linux-only; skip on other platforms
+    if platform.system() == "Linux":
+        result = subprocess.run(
+            ["systemctl", "--user", "start", "syncthing.service"],
+            capture_output=True,
+            check=False,
+        )
+        if result.returncode == 0:
+            return True
 
     st = detect_syncthing()
     if not st:
         return False
 
-    subprocess.Popen(
-        [st, "--no-browser", "--no-restart"],
-        stdout=subprocess.DEVNULL,
-        stderr=subprocess.DEVNULL,
-    )
+    popen_kwargs: dict = {
+        "stdout": subprocess.DEVNULL,
+        "stderr": subprocess.DEVNULL,
+    }
+    # Reason: on Windows, CREATE_NO_WINDOW prevents a console flash
+    if platform.system() == "Windows":
+        popen_kwargs["creationflags"] = (
+            subprocess.CREATE_NO_WINDOW | subprocess.DETACHED_PROCESS
+        )
+
+    subprocess.Popen([st, "--no-browser", "--no-restart"], **popen_kwargs)
     return True
 
 
@@ -261,7 +360,10 @@ def add_remote_device(device_id: str, name: str = "peer") -> bool:
 
 
 def full_setup() -> dict:
-    """Run the complete Syncthing setup flow.
+    """Run the complete Syncthing setup flow for Sovereign Singularity.
+
+    Creates the full agent home directory structure, configures Syncthing
+    to share the entire ~/.skcapstone/ tree, and starts the daemon.
 
     Returns:
         dict: Setup result with device_id, folder_path, status.
@@ -269,7 +371,7 @@ def full_setup() -> dict:
     result = {
         "syncthing_installed": False,
         "device_id": None,
-        "folder_path": str(SYNC_DIR),
+        "folder_path": str(AGENT_HOME),
         "folder_configured": False,
         "started": False,
         "qr_code": None,