agenticloops 0.1.0 → 0.1.1

package/bin/cli.mjs

@@ -7,7 +7,7 @@ import { listRecords, parseSchedule } from "../src/schedule.mjs";
 import { fetchInstalls } from "../src/telemetry.mjs";
 import { c, sym, fail, info, CliError } from "../src/util.mjs";
 
-const VERSION = "0.1.0";
+const VERSION = "0.1.1";
 
 function parseArgs(argv) {
   const flags = {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agenticloops",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Install and run agentic loops — recurring AI agents defined in a single LOOP.md file. One file defines it; any harness can run it.",
   "type": "module",
   "bin": {

package/src/config.mjs

@@ -15,4 +15,4 @@ export const SKILLS_REGISTRY_URL = "https://skills.sh/index.json";
 export const SPEC_VERSION = "0.1";
 
 // User-Agent so server logs can attribute pings to the CLI (still anonymous).
-export const UA = `agenticloops-cli/0.1.0 (+${SITE})`;
+export const UA = `agenticloops-cli/0.1.1 (+${SITE})`;

package/src/install.mjs

@@ -76,7 +76,8 @@ export async function install(ref, opts = {}) {
     step("Skills");
     for (const s of skillPlan) {
       if (s.action === "host") info(`${s.id} ${c.dim("(provided by harness — skipped)")}`);
-      else if (s.action === "unresolved") warn(`${s.id} — unresolvable, skipped (loop will degrade)`);
+      else if (s.action === "unresolved")
+        warn(`${s.id} — skipped (loop will degrade)${s.reason ? c.dim(" — " + s.reason) : ""}`);
       else {
         const r = installSkill(s, { dryRun });
         if (r.ok) ok(`${s.id} ${c.dim("<- " + s.owner + "/" + s.repo)}`);

package/src/skills.mjs

@@ -20,6 +20,27 @@ export function parseSkillEntry(entry) {
   return { id: parts[0], bare: true };
 }
 
+// Does <owner/repo> actually contain a skill named <id>? A skills.sh skill is a
+// top-level directory with a SKILL.md. Returns "yes" | "no" | "unknown" — we
+// only downgrade to unresolved on a definite "no" (404), so a network blip
+// never turns into a false negative.
+async function existsInRepo(owner, repo, id, timeout = 8000) {
+  const url = `https://raw.githubusercontent.com/${owner}/${repo}/HEAD/${id}/SKILL.md`;
+  const ctrl = new AbortController();
+  const t = setTimeout(() => ctrl.abort(), timeout);
+  try {
+    let r = await fetch(url, { method: "HEAD", signal: ctrl.signal });
+    if (r.status !== 200 && r.status !== 404) r = await fetch(url, { signal: ctrl.signal });
+    if (r.status === 200) return "yes";
+    if (r.status === 404) return "no";
+    return "unknown";
+  } catch {
+    return "unknown";
+  } finally {
+    clearTimeout(t);
+  }
+}
+
 async function resolveBare(id) {
   const r = await fetchJson(SKILLS_REGISTRY_URL);
   if (!r.ok || !r.json) return null;
@@ -47,16 +68,37 @@ export async function planSkills(skills = [], hostSkills = []) {
       continue;
     }
     if (s.owner && s.repo) {
-      plan.push({ id: s.id, action: "fetch", owner: s.owner, repo: s.repo });
+      plan.push(await verifiedEntry(s.id, s.owner, s.repo));
       continue;
     }
     const resolved = await resolveBare(s.id);
-    if (resolved) plan.push({ id: resolved.id, action: "fetch", owner: resolved.owner, repo: resolved.repo });
-    else plan.push({ id: s.id, action: "unresolved" });
+    if (resolved) plan.push(await verifiedEntry(resolved.id, resolved.owner, resolved.repo));
+    else
+      plan.push({
+        id: s.id,
+        action: "unresolved",
+        reason: "no source given and not in the skills registry (may be a harness built-in)",
+      });
   }
   return plan;
 }
 
+// Confirm the skill is actually fetchable before promising to install it — this
+// is what keeps --dry-run honest (it predicts the real outcome instead of
+// claiming a resolve that the real install would skip).
+async function verifiedEntry(id, owner, repo) {
+  const present = await existsInRepo(owner, repo, id);
+  if (present === "no")
+    return {
+      id,
+      action: "unresolved",
+      owner,
+      repo,
+      reason: `not found in ${owner}/${repo} (may be a harness built-in)`,
+    };
+  return { id, action: "fetch", owner, repo };
+}
+
 // Execute one fetch via the skills.sh CLI: `npx skills add <owner/repo> --skill <id>`.
 export function installSkill({ owner, repo, id }, { dryRun = false } = {}) {
   const args = ["--yes", "skills", "add", `${owner}/${repo}`, "--skill", id];