agentradar-cli 0.2.5 → 0.2.6

package/dist/skill-install.js

@@ -1,4 +1,4 @@
-import { chmod, lstat, mkdir, readFile, readdir, realpath, rename, rm, unlink, writeFile } from "node:fs/promises";
+import { chmod, lstat, mkdir, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import { dirname, isAbsolute, join, normalize, sep } from "node:path";
 import { awpRequest, envValue } from "./tool-run.js";
@@ -50,6 +50,21 @@ const isManaged = async (dir) => (await lstat(dir).then((info) => info.isDirecto
  * untrusted input to this box, so names and paths are checked, each skill is staged then renamed into place,
  * a folder without the marker (the vendor's own) is never touched, and a managed skill no longer listed goes.
  */
+const sameSkill = async (dir, files) => {
+    try {
+        const have = [];
+        for (const p of await readdir(dir, { recursive: true }))
+            if (p !== MANAGED_MARK && (await stat(join(dir, p))).isFile())
+                have.push(p);
+        for (const f of files)
+            if (await readFile(join(dir, f.path), "utf8") !== f.content)
+                return false;
+        return have.length === files.length;
+    }
+    catch {
+        return false;
+    }
+};
 export async function writeManagedSkills(skillsDir, skills) {
     await mkdir(skillsDir, { recursive: true });
     const written = new Set();
@@ -64,7 +79,13 @@ export async function writeManagedSkills(skillsDir, skills) {
         if (files.some((f) => typeof f?.path !== "string" || typeof f?.content !== "string" || isAbsolute(f.path)
             || normalize(f.path).split(sep).includes("..") || [".", MANAGED_MARK].includes(normalize(f.path))))
             continue;
+        // An unchanged skill is not rewritten: the agent's CLI may be reading it.
+        if (await sameSkill(target, files)) {
+            written.add(name);
+            continue;
+        }
         const staging = join(skillsDir, `.${name}.sync-${process.pid}`);
+        const old = join(skillsDir, `.${name}.old-${process.pid}`);
         try {
             await rm(staging, { recursive: true, force: true });
             for (const f of files) {
@@ -72,12 +93,18 @@ export async function writeManagedSkills(skillsDir, skills) {
                 await writeFile(join(staging, f.path), f.content);
             }
             await writeFile(join(staging, MANAGED_MARK), "Written by the AgentRadar runner; replaced on every sync.\n");
-            await rm(target, { recursive: true, force: true });
+            // Rename aside, then into place: the skill is missing for two renames, not for a recursive delete.
+            await rm(old, { recursive: true, force: true });
+            await rename(target, old).catch((err) => { if (err?.code !== "ENOENT")
+                throw err; });
             await rename(staging, target);
+            await rm(old, { recursive: true, force: true });
             written.add(name);
         }
         catch {
             await rm(staging, { recursive: true, force: true });
+            if (!(await lstat(target).then(() => true, () => false)))
+                await rename(old, target).catch(() => { });
             if (await isManaged(target))
                 written.add(name);
         }

package/dist/vendor-runner/feeder.mjs

@@ -663,6 +663,14 @@ const isManaged = (dir) => {
   const st = fs.lstatSync(dir, { throwIfNoEntry: false });
   return Boolean(st?.isDirectory() && fs.existsSync(join(dir, MANAGED_MARK)));
 };
+const sameSkill = (dir, files) => {
+  try {
+    const have = fs.readdirSync(dir, { recursive: true }).filter((p) => p !== MANAGED_MARK && fs.statSync(join(dir, p)).isFile());
+    return have.length === files.length && files.every((f) => fs.readFileSync(join(dir, f.path), "utf8") === f.content);
+  } catch {
+    return false;
+  }
+};
 
 export function writeManagedSkills(skillsDir, skills) {
   fs.mkdirSync(skillsDir, { recursive: true });
@@ -679,7 +687,11 @@ export function writeManagedSkills(skillsDir, skills) {
     const bad = files.find((f) => typeof f?.path !== "string" || typeof f?.content !== "string" || isAbsolute(f.path)
       || normalize(f.path).split(sep).includes("..") || [".", MANAGED_MARK].includes(normalize(f.path)));
     if (bad) { console.warn(`[feeder] skill sync: ${name} has an unsafe file path, skipped`); continue; }
+    // An unchanged skill is not rewritten: the agent's CLI may be reading it (Codex skipped a SKILL.md that a
+    // periodic resync had just removed).
+    if (sameSkill(target, files)) { written.add(name); continue; }
     const staging = join(skillsDir, `.${name}.sync-${process.pid}`);
+    const old = join(skillsDir, `.${name}.old-${process.pid}`);
     try {
       fs.rmSync(staging, { recursive: true, force: true });
       for (const f of files) {
@@ -687,12 +699,16 @@ export function writeManagedSkills(skillsDir, skills) {
         fs.writeFileSync(join(staging, f.path), f.content);
       }
       fs.writeFileSync(join(staging, MANAGED_MARK), "Written by the AgentRadar runner; replaced on every sync.\n");
-      fs.rmSync(target, { recursive: true, force: true });
+      // Rename aside, then into place: the skill is missing for two renames, not for a recursive delete.
+      fs.rmSync(old, { recursive: true, force: true });
+      if (fs.existsSync(target)) fs.renameSync(target, old);
       fs.renameSync(staging, target);
+      fs.rmSync(old, { recursive: true, force: true });
       written.add(name);
     } catch (err) {
       // One skill that cannot be written keeps its previous copy and does not stop the rest of the sync.
       fs.rmSync(staging, { recursive: true, force: true });
+      if (!fs.existsSync(target) && fs.existsSync(old)) fs.renameSync(old, target);
       if (isManaged(target)) written.add(name);
       console.warn(`[feeder] skill sync: ${name} not written: ${err instanceof Error ? err.message : String(err)}`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentradar-cli",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "engines": {
     "node": ">=20"
   },