arkitek-relay-skill 1.0.7 → 1.0.9

package/README.md

@@ -25,54 +25,124 @@ The agent initiates all connections. Nothing is exposed on your network.
 ## Quick Start
 
 ```bash
-npm install arkitek-relay-skill
+npm install -g arkitek-relay-skill
 npx arkitek-relay-skill
 ```
 
-That's it. The skill will ask for your API key, save it, auto-detect your OpenClaw gateway, and connect your agent to ArkiTek automatically.
+On first run, the relay will:
+
+1. Auto-detect your OpenClaw installation (`~/.openclaw/openclaw.json`)
+2. Find your gateway URL, port, and auth token automatically
+3. Place the skill definition (`SKILL.md`) into OpenClaw's skills directory
+4. Prompt for your ArkiTek API key (saved for future runs)
+5. Test the gateway connection and check that `/v1/responses` is enabled
+6. Offer to enable it if it's disabled
+7. Save configuration to `~/.arkitek-relay/config.json`
+8. Offer to install as a system service (auto-start on boot)
+9. Connect your agent to ArkiTek
 
 > **First time?** Get your API key at [arkitekai.com](https://arkitekai.com) — go to **Agents** → **Add Agent** → **Create** and copy the `ak_...` key.
 
-## What Happens When You Run It
+On subsequent runs, the saved config is loaded automatically and the agent reconnects.
 
-1. If no API key is saved, the skill prompts you to paste one
-2. The key is validated and saved to a local `.env` file (so you never have to enter it again)
-3. The skill detects your OpenClaw gateway (on `localhost:18789` by default)
-4. The skill connects to ArkiTek over HTTPS
-5. Messages from the ArkiTek UI are forwarded to your OpenClaw agent and responses are sent back automatically
+## Commands
 
-If no OpenClaw gateway is detected, the skill runs in **echo mode** (returns messages back for testing).
+| Command | Description |
+|---------|-------------|
+| `npx arkitek-relay-skill` | Start the relay (guided setup on first run) |
+| `npx arkitek-relay-skill --install` | Re-run guided setup |
+| `npx arkitek-relay-skill --init-skill` | Place SKILL.md into OpenClaw's skills directory |
+| `npx arkitek-relay-skill --doctor` | Run diagnostic checks on your setup |
+| `npx arkitek-relay-skill --status` | Show saved configuration |
+| `npx arkitek-relay-skill --logs` | View relay log output |
+| `npx arkitek-relay-skill --uninstall` | Remove service and saved config |
+| `npx arkitek-relay-skill --help` | Show all options |
 
-On subsequent runs, the saved key is loaded automatically and the agent reconnects.
+### CLI Options
 
-## Changing or Rotating Your API Key
+| Option | Description |
+|--------|-------------|
+| `--api-key <key>` | ArkiTek API key (overrides saved config) |
+| `--gateway-url <url>` | OpenClaw gateway URL (overrides auto-detection) |
+| `--gateway-token <token>` | OpenClaw gateway auth token |
+| `--agent-id <id>` | OpenClaw agent ID (default: `"main"`) |
+| `--skills-dir <path>` | Custom OpenClaw skills directory for SKILL.md placement |
+| `--yes, -y` | Skip confirmation prompts |
+| `--verbose, -v` | Show detailed output |
 
-1. Stop the agent (Ctrl+C)
-2. Delete or edit the `ARKITEK_API_KEY` line in your `.env` file
-3. Run `npx arkitek-relay-skill` again — it will prompt for the new key
+## Skill Definition (SKILL.md)
 
-If you deleted your agent in ArkiTek and want to reconnect, create a new agent in the dashboard, copy the new key, and follow the steps above.
+During setup, the relay places its skill definition file into OpenClaw's skills directory so your agent can automatically discover it:
 
-## Disconnecting Your Agent
+- **Default location**: `~/.openclaw/skills/arkitek-relay/SKILL.md`
+- **Custom directory**: use `--skills-dir <path>` to override
+- **Standalone command**: `npx arkitek-relay-skill --init-skill`
 
-1. Stop the agent process — this closes the connection to ArkiTek
-2. Optionally delete the agent in ArkiTek's dashboard (**Agents** → select your agent → **Delete**)
+If OpenClaw has custom skill directories configured via `skills.load.extraDirs` in `openclaw.json`, the relay checks those locations too. You can verify with `openclaw skills list`.
+
+## Config Resolution
+
+The relay resolves configuration from multiple sources (highest priority first):
 
-The skill files remain installed locally. To fully remove: `npm uninstall arkitek-relay-skill`
+1. **CLI flags** (`--api-key`, `--gateway-url`, `--gateway-token`)
+2. **Environment variables** (`ARKITEK_API_KEY`, `OPENCLAW_GATEWAY_URL`, etc.)
+3. **Saved config** (`~/.arkitek-relay/config.json`, created by `--install`)
+4. **Auto-detected from OpenClaw** (`~/.openclaw/openclaw.json`)
+5. **Defaults**
 
-## Configuration Options
+The gateway token is **never saved to disk** — it's always read live from the CLI, environment, or OpenClaw's own config file so key rotations are picked up automatically.
 
-The skill reads these from your `.env` file or environment variables:
+### Environment Variables
 
 | Variable | Required | Default | Description |
 |----------|----------|---------|-------------|
 | `ARKITEK_API_KEY` | Yes | — | Your agent's private API key from ArkiTek |
-| `ARKITEK_RELAY_URL` | No | `https://api.arkitekai.com/api/v1/agents/relay` | Relay server URL (shown in Connect Agent modal) |
+| `ARKITEK_RELAY_URL` | No | `https://api.arkitekai.com/api/v1/agents/relay` | Relay server URL |
 | `ARKITEK_AUTO_RECONNECT` | No | `true` | Auto-reconnect on network errors |
-| `OPENCLAW_GATEWAY_URL` | No | `http://localhost:18789` | OpenClaw gateway URL (auto-detected if running) |
-| `OPENCLAW_GATEWAY_TOKEN` | No | — | Bearer token for OpenClaw gateway auth |
+| `OPENCLAW_GATEWAY_URL` | No | Auto-detected | OpenClaw gateway URL |
+| `OPENCLAW_GATEWAY_TOKEN` | No | Auto-detected | Bearer token for OpenClaw gateway auth |
+| `OPENCLAW_AGENT_ID` | No | `main` | OpenClaw agent ID |
+
+> **Security**: Your API key is a secret. Never commit it to version control or share it publicly.
+
+## Changing or Rotating Your API Key
+
+1. Run `npx arkitek-relay-skill --install` — it will detect the existing key and let you replace it
+2. Or set the `ARKITEK_API_KEY` environment variable directly
+3. Or use `--api-key <new_key>` on the command line
+
+## System Service (Auto-Start)
+
+During setup, the relay offers to install as a system service that starts automatically on boot and restarts on crashes. No terminal needed.
+
+| Platform | Service type | Location |
+|----------|-------------|----------|
+| macOS | LaunchAgent | `~/Library/LaunchAgents/com.arkitekai.relay.plist` |
+| Linux | systemd user unit | `~/.config/systemd/user/arkitek-relay.service` |
+| Windows | Scheduled task | `ArkiTekRelay` (runs at logon) |
+
+The service is **user-scoped** — no root, sudo, or admin privileges are required. It runs as your user account with the same permissions as running the relay manually in a terminal.
+
+To check the service:
+```bash
+npx arkitek-relay-skill --status    # shows if installed and running
+npx arkitek-relay-skill --logs      # view service log output
+npx arkitek-relay-skill --doctor    # full diagnostic including service
+```
+
+To remove the service:
+```bash
+npx arkitek-relay-skill --uninstall
+```
+
+> **Note**: For the service to persist across reboots, install the package globally: `npm install -g arkitek-relay-skill`. If you run via `npx` without a global install, the cached package may be cleaned up.
+
+## Disconnecting Your Agent
 
-> **Security**: Your API key is a secret. The `.env` file is local only — never commit it to version control or share it publicly.
+1. Stop the agent process — if running as a service, use `npx arkitek-relay-skill --uninstall`; if running manually, press Ctrl+C
+2. Optionally delete the agent in ArkiTek's dashboard (**Agents** → select your agent → **Delete**)
+3. To remove all local config and service: `npx arkitek-relay-skill --uninstall`
+4. To fully remove the package: `npm uninstall -g arkitek-relay-skill`
 
 ## Advanced: Using as a Library
 
@@ -100,6 +170,17 @@ const relay = createArkitekRelay(
 await relay.connect();
 ```
 
+You can also use the config resolver programmatically:
+
+```typescript
+import { resolveConfig, detectOpenClaw } from "arkitek-relay-skill";
+
+// Auto-detect OpenClaw and resolve all config sources
+const config = resolveConfig({ command: "start" });
+// config.gatewayUrl, config.gatewayToken, etc. are resolved from
+// CLI → env → saved config → OpenClaw → defaults
+```
+
 ## Council of LLMs (Optional)
 
 ArkiTek's Council feature lets you query multiple LLMs simultaneously and get aggregated responses. This requires an active ArkiTek subscription.
@@ -149,20 +230,38 @@ This skill is designed with security as a top priority:
 - **No tunnels** — no ngrok, no Cloudflare tunnels, no port forwarding
 - **Auth on every request** — both SSE and POST endpoints require the Bearer token
 - **Message integrity** — responses must include the matching `messageId` or they are rejected
+- **Secure config reading** — OpenClaw config is read with file ownership and permission checks
+- **Token hygiene** — gateway tokens are never persisted to disk; always read live from source
+- **User-scoped service** — system service runs as your user, no root/admin required
 
 ## Troubleshooting
 
+### Run the doctor
+
+The fastest way to diagnose any issue:
+
+```bash
+npx arkitek-relay-skill --doctor
+```
+
+This checks Node.js version, saved config, API key, OpenClaw detection, gateway reachability, `/v1/responses` endpoint status, ArkiTek cloud connectivity, system service status, and SKILL.md placement.
+
+### "Mode: Echo" — relay not forwarding to OpenClaw
+
+- Run `--doctor` to see what's wrong
+- Ensure OpenClaw is running: `openclaw gateway start`
+- Verify `/v1/responses` is enabled: `openclaw gateway config.patch --set gateway.http.endpoints.responses.enabled=true`
+- Restart the relay
+
 ### "API key invalid or revoked"
 
-- Double-check your `ARKITEK_API_KEY` value
+- Run `npx arkitek-relay-skill --install` to enter a new key
 - Verify the key in ArkiTek's dashboard — it may have been revoked
 - Keys start with `ak_` and are exactly 67 characters
-- If you rotated your key, the old key has a 1-hour grace period
 
 ### "NODE_TLS_REJECT_UNAUTHORIZED=0 detected"
 
 - Remove `NODE_TLS_REJECT_UNAUTHORIZED=0` from your environment
-- This setting disables TLS certificate verification, which would allow man-in-the-middle attacks
 - If you're behind a corporate proxy, configure `NODE_EXTRA_CA_CERTS` instead
 
 ### Connection keeps dropping
@@ -170,34 +269,14 @@ This skill is designed with security as a top priority:
 - Check your network connection and firewall rules
 - Ensure outbound HTTPS (port 443) to `arkitekai.com` is allowed
 - The skill auto-reconnects with exponential backoff (1s → 30s max)
-- Messages are queued server-side for up to 5 minutes during disconnections
-
-### "Response not delivered"
-
-- Ensure you're returning from your handler within 1 hour (server timeout)
-- The `messageId` in your response must exactly match the incoming message
-- Response content must be under 500KB
-
-### No messages arriving
-
-- Confirm your agent shows as "Connected" in the ArkiTek dashboard
-- Try sending a test message from the ArkiTek web UI
-- Check that your handler isn't throwing errors (they're caught and logged)
 
 ## Development
 
 ```bash
-# Install dependencies
 npm install
-
-# Build
 npm run build
-
-# Run tests
 npm test
-
-# Watch mode (rebuilds on changes)
-npm run dev
+npm run dev     # watch mode
 ```
 
 ## License

package/SKILL.md

@@ -0,0 +1,139 @@
+---
+name: arkitek-relay
+description: Connect this agent to ArkiTek for secure remote chat via SSE. No tunnels, no open ports.
+metadata: {"openclaw": {"requires": {"env": ["ARKITEK_API_KEY"], "bins": ["node", "npx"]}, "primaryEnv": "ARKITEK_API_KEY", "emoji": "\uD83D\uDCE1", "homepage": "https://arkitekai.com", "install": [{"id": "npm", "kind": "node", "package": "arkitek-relay-skill", "bins": ["arkitek-relay-skill"], "label": "Install ArkiTek Relay (npm)"}]}}
+---
+
+# ArkiTek Relay Skill
+
+This skill connects your OpenClaw agent to [ArkiTek](https://arkitekai.com) — a web UI for chatting with AI agents remotely. It opens a secure, outbound-only SSE connection from your agent to ArkiTek's cloud relay, and forwards incoming messages directly to your OpenClaw gateway. No tunnels, public URLs, or open ports required.
+
+## Quick Start
+
+1. Install the relay:
+
+```
+npm install -g arkitek-relay-skill
+```
+
+2. Get your API key from [arkitekai.com](https://arkitekai.com) (Agents → Add Agent → Create)
+
+3. Run the relay:
+
+```
+npx arkitek-relay-skill
+```
+
+On first run, the relay will:
+- Auto-detect your OpenClaw installation and gateway config
+- Place the skill definition (`SKILL.md`) into OpenClaw's skills directory
+- Prompt for your ArkiTek API key
+- Test the gateway connection
+- Check that `/v1/responses` is enabled (and offer to enable it if not)
+- Save configuration to `~/.arkitek-relay/config.json`
+- Offer to install as a system service (auto-start on boot)
+- Connect to ArkiTek
+
+Subsequent runs load the saved config automatically.
+
+## Commands
+
+```
+npx arkitek-relay-skill               Start the relay (guided setup on first run)
+npx arkitek-relay-skill --install     Re-run guided setup
+npx arkitek-relay-skill --init-skill  Place SKILL.md into OpenClaw's skills directory
+npx arkitek-relay-skill --doctor      Run diagnostic checks
+npx arkitek-relay-skill --status      Show saved configuration
+npx arkitek-relay-skill --logs        View relay log output
+npx arkitek-relay-skill --uninstall   Remove service and saved config
+npx arkitek-relay-skill --help        Show all options
+```
+
+## Manual Setup (Advanced)
+
+If you prefer manual configuration, set these environment variables or pass them as CLI flags:
+
+```
+ARKITEK_API_KEY=ak_your_key_here
+OPENCLAW_GATEWAY_URL=http://localhost:18789
+OPENCLAW_GATEWAY_TOKEN=your_token_here
+```
+
+Make sure the `/v1/responses` endpoint is enabled in OpenClaw:
+
+```
+openclaw gateway config.patch --set gateway.http.endpoints.responses.enabled=true
+```
+
+Then start the relay:
+
+```
+npx arkitek-relay-skill
+```
+
+## How it works
+
+```
+ArkiTek Web UI  ←→  ArkiTek Cloud  ←——SSE——  This Skill  ——POST→  OpenClaw Gateway
+    (user)            (relay)                  (bridge)             (your agent)
+```
+
+All connections are outbound from the agent. Nothing is exposed on the agent's network.
+
+## Skill Definition Placement
+
+During setup, the relay automatically places its `SKILL.md` into OpenClaw's skills directory so your agent can discover it:
+
+- Default location: `~/.openclaw/skills/arkitek-relay/SKILL.md`
+- Custom directory: `--skills-dir <path>` overrides the default
+- The `--init-skill` command can re-run this step independently
+
+OpenClaw will discover the skill on next load. Verify with `openclaw skills list`.
+
+## Config Resolution
+
+The relay resolves configuration from multiple sources (highest priority first):
+
+1. CLI flags (`--api-key`, `--gateway-url`, `--gateway-token`)
+2. Environment variables (`ARKITEK_API_KEY`, `OPENCLAW_GATEWAY_URL`, etc.)
+3. Saved config (`~/.arkitek-relay/config.json`)
+4. Auto-detected from OpenClaw (`~/.openclaw/openclaw.json`)
+5. Defaults
+
+The gateway token is never saved to disk — it's always read live from CLI, environment, or OpenClaw's config so key rotations are picked up automatically.
+
+## System Service
+
+During setup, the relay offers to install as a system service that starts automatically on boot:
+
+- **macOS**: LaunchAgent (`~/Library/LaunchAgents/com.arkitekai.relay.plist`)
+- **Linux**: systemd user unit (`~/.config/systemd/user/arkitek-relay.service`)
+- **Windows**: Scheduled task (runs at logon)
+
+The service is user-scoped (no root/admin required), keeps the relay running in the background, and auto-restarts on crashes. Remove it anytime with `--uninstall`.
+
+## Security
+
+- Outbound-only HTTPS connections — no open ports or public URLs
+- TLS enforced — refuses to run if TLS verification is disabled
+- API key validated before any network request
+- API keys are never logged (masked as `ak_****...last4`)
+- OpenClaw config is read with ownership and permission checks
+- Gateway token is never persisted — always read live
+- System service is user-scoped — no elevated privileges required
+
+## Troubleshooting
+
+**Relay shows "Echo mode":**
+- Run `npx arkitek-relay-skill --doctor` to diagnose
+- Check that OpenClaw gateway is running
+- Verify `/v1/responses` endpoint is enabled in OpenClaw config
+
+**Agent offline in ArkiTek:**
+- Check relay status: `npx arkitek-relay-skill --doctor`
+- Verify internet connectivity to arkitekai.com
+- Restart: `npx arkitek-relay-skill`
+
+**"API key invalid or revoked":**
+- Run `npx arkitek-relay-skill --install` to reconfigure
+- Verify the key in ArkiTek's dashboard

package/dist/cli/doctor.d.ts

@@ -0,0 +1,3 @@
+import type { CLIOptions } from "../types.js";
+export declare function runDoctor(cli: CLIOptions): Promise<void>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/cli/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmB9C,wBAAsB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiL9D"}

package/dist/cli/doctor.js

@@ -0,0 +1,165 @@
+import { DEFAULT_GATEWAY_URL } from "../types.js";
+import { readPersistedConfig, getConfigPath, getLogPath, getErrorLogPath, } from "../config/resolver.js";
+import { existsSync, statSync } from "node:fs";
+import { detectOpenClaw, testGatewayReachable, testResponsesEndpoint, findInstalledSkill, } from "../config/openclaw.js";
+import { getServiceStatus } from "../service/index.js";
+import { maskKey } from "../validation.js";
+import * as ui from "./ui.js";
+export async function runDoctor(cli) {
+    ui.heading("ArkiTek Relay \u2014 Diagnostics");
+    let issues = 0;
+    // 1. Node.js
+    const nodeVersion = process.versions.node;
+    const major = parseInt(nodeVersion.split(".")[0], 10);
+    if (major >= 20) {
+        ui.success(`Node.js ${nodeVersion}`);
+    }
+    else {
+        ui.error(`Node.js ${nodeVersion} \u2014 version 20.3+ required`);
+        issues++;
+    }
+    // 2. Persisted config
+    const persisted = readPersistedConfig();
+    if (persisted) {
+        ui.success(`Config found at ${getConfigPath()}`);
+        ui.dimmed(`  Installed: ${persisted.installedAt}`);
+        ui.dimmed(`  Updated:   ${persisted.lastUpdated}`);
+    }
+    else {
+        ui.warn("No saved config found. Run --install to set up.");
+        issues++;
+    }
+    // 3. API key
+    const apiKey = cli.apiKey || process.env.ARKITEK_API_KEY || persisted?.arkitekApiKey;
+    if (apiKey) {
+        ui.success(`ArkiTek API key: ${maskKey(apiKey)}`);
+    }
+    else {
+        ui.error("No ArkiTek API key found");
+        ui.dimmed("  Set ARKITEK_API_KEY, use --api-key, or run --install");
+        issues++;
+    }
+    // 4. OpenClaw config
+    const openclaw = detectOpenClaw();
+    if (openclaw) {
+        ui.success(`OpenClaw config: ${openclaw.configPath}`);
+        ui.dimmed(`  Gateway URL: ${openclaw.gatewayUrl}`);
+        ui.dimmed(`  Gateway token: ${openclaw.gatewayToken ? "present" : "not set"}`);
+        ui.dimmed(`  /v1/responses: ${openclaw.responsesEnabled ? "enabled" : "disabled"}`);
+        if (!openclaw.responsesEnabled) {
+            ui.warn("/v1/responses endpoint is disabled in OpenClaw config");
+            ui.dimmed("  Fix: openclaw gateway config.patch --set gateway.http.endpoints.responses.enabled=true");
+            issues++;
+        }
+    }
+    else {
+        ui.warn("OpenClaw config not found at ~/.openclaw/openclaw.json");
+        issues++;
+    }
+    // 5. Gateway reachability
+    const gatewayUrl = cli.gatewayUrl ||
+        process.env.OPENCLAW_GATEWAY_URL ||
+        openclaw?.gatewayUrl ||
+        DEFAULT_GATEWAY_URL;
+    const gatewayReachable = await testGatewayReachable(gatewayUrl);
+    if (gatewayReachable) {
+        ui.success(`Gateway reachable at ${gatewayUrl}`);
+    }
+    else {
+        ui.error(`Gateway not reachable at ${gatewayUrl}`);
+        ui.dimmed("  Is OpenClaw running? Try: openclaw gateway start");
+        issues++;
+    }
+    // 6. /v1/responses live check
+    if (gatewayReachable) {
+        const gatewayToken = cli.gatewayToken ||
+            process.env.OPENCLAW_GATEWAY_TOKEN ||
+            openclaw?.gatewayToken;
+        const endpointStatus = await testResponsesEndpoint(gatewayUrl, gatewayToken);
+        if (endpointStatus === "enabled") {
+            ui.success("/v1/responses endpoint is responding");
+        }
+        else if (endpointStatus === "disabled") {
+            ui.error("/v1/responses endpoint returned 405 (disabled)");
+            ui.dimmed("  Fix: openclaw gateway config.patch --set gateway.http.endpoints.responses.enabled=true");
+            issues++;
+        }
+        else {
+            ui.warn("/v1/responses endpoint status unknown");
+        }
+    }
+    // 7. ArkiTek cloud
+    let arkitekReachable = false;
+    try {
+        await fetch("https://arkitekai.com", {
+            method: "HEAD",
+            signal: AbortSignal.timeout(5_000),
+        });
+        arkitekReachable = true;
+    }
+    catch {
+        // not reachable
+    }
+    if (arkitekReachable) {
+        ui.success("ArkiTek cloud reachable (arkitekai.com)");
+    }
+    else {
+        ui.error("Cannot reach arkitekai.com");
+        ui.dimmed("  Check internet connection and firewall (outbound HTTPS port 443)");
+        issues++;
+    }
+    // 8. System service
+    const service = await getServiceStatus();
+    if (service.installed) {
+        if (service.running) {
+            ui.success(`System service: running (${service.platform})`);
+        }
+        else {
+            ui.warn(`System service: installed but not running (${service.platform})`);
+            issues++;
+        }
+        if (service.servicePath) {
+            ui.dimmed(`  ${service.servicePath}`);
+        }
+    }
+    else {
+        ui.dimmed("System service: not installed (optional)");
+        ui.dimmed("  Install with: npx arkitek-relay-skill --install");
+    }
+    // 9. SKILL.md placement
+    const skillPath = findInstalledSkill();
+    if (skillPath) {
+        ui.success(`Skill definition installed: ${skillPath}`);
+    }
+    else {
+        ui.warn("SKILL.md not found in OpenClaw skills directory");
+        ui.dimmed("  Fix: npx arkitek-relay-skill --init-skill");
+        issues++;
+    }
+    // 10. Log file sizes
+    const LOG_WARN_BYTES = 100 * 1024 * 1024; // 100MB
+    for (const [label, logFile] of [
+        ["Output log", getLogPath()],
+        ["Error log", getErrorLogPath()],
+    ]) {
+        if (existsSync(logFile)) {
+            const size = statSync(logFile).size;
+            if (size > LOG_WARN_BYTES) {
+                const sizeMB = (size / (1024 * 1024)).toFixed(0);
+                ui.warn(`${label} is ${sizeMB}MB — consider truncating`);
+                ui.dimmed(`  File: ${logFile}`);
+                ui.dimmed(`  Truncate: : > "${logFile}"`);
+                issues++;
+            }
+        }
+    }
+    // Summary
+    console.log();
+    if (issues === 0) {
+        ui.success("All checks passed. Your relay should work correctly.");
+    }
+    else {
+        ui.warn(`${issues} issue${issues > 1 ? "s" : ""} found. Fix the items above and run --doctor again.`);
+    }
+}
+//# sourceMappingURL=doctor.js.map

package/dist/cli/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAe;IAC7C,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAE/C,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,aAAa;IACb,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,EAAE,CAAC,OAAO,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,KAAK,CAAC,WAAW,WAAW,gCAAgC,CAAC,CAAC;QACjE,MAAM,EAAE,CAAC;IACX,CAAC;IAED,sBAAsB;IACtB,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACd,EAAE,CAAC,OAAO,CAAC,mBAAmB,aAAa,EAAE,EAAE,CAAC,CAAC;QACjD,EAAE,CAAC,MAAM,CAAC,gBAAgB,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,EAAE,CAAC,MAAM,CAAC,gBAAgB,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC;IACX,CAAC;IAED,aAAa;IACb,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,EAAE,aAAa,CAAC;IACxE,IAAI,MAAM,EAAE,CAAC;QACX,EAAE,CAAC,OAAO,CAAC,oBAAoB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrC,EAAE,CAAC,MAAM,CAAC,wDAAwD,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC;IACX,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,EAAE,CAAC,OAAO,CAAC,oBAAoB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,kBAAkB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACnD,EAAE,CAAC,MAAM,CACP,oBAAoB,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CACpE,CAAC;QACF,EAAE,CAAC,MAAM,CACP,oBAAoB,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CACzE,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC/B,EAAE,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YACjE,EAAE,CAAC,MAAM,CACP,0FAA0F,CAC3F,CAAC;YACF,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAClE,MAAM,EAAE,CAAC;IACX,CAAC;IAED,0BAA0B;IAC1B,MAAM,UAAU,GACd,GAAG,CAAC,UAAU;QACd,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,QAAQ,EAAE,UAAU;QACpB,mBAAmB,CAAC;IACtB,MAAM,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,gBAAgB,EAAE,CAAC;QACrB,EAAE,CAAC,OAAO,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;QACnD,EAAE,CAAC,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC;IACX,CAAC;IAED,8BAA8B;IAC9B,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,YAAY,GAChB,GAAG,CAAC,YAAY;YAChB,OAAO,CAAC,GAAG,CAAC,sBAAsB;YAClC,QAAQ,EAAE,YAAY,CAAC;QACzB,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAChD,UAAU,EACV,YAAY,CACb,CAAC;QACF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;YACzC,EAAE,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAC3D,EAAE,CAAC,MAAM,CACP,0FAA0F,CAC3F,CAAC;YACF,MAAM,EAAE,CAAC;QACX,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,uBAAuB,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QACH,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACvC,EAAE,CAAC,MAAM,CACP,oEAAoE,CACrE,CAAC;QACF,MAAM,EAAE,CAAC;IACX,CAAC;IAED,oBAAoB;IACpB,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACzC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,EAAE,CAAC,OAAO,CAAC,4BAA4B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,IAAI,CAAC,8CAA8C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC3E,MAAM,EAAE,CAAC;QACX,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,EAAE,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAC;IACjE,CAAC;IAED,wBAAwB;IACxB,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,IAAI,SAAS,EAAE,CAAC;QACd,EAAE,CAAC,OAAO,CAAC,+BAA+B,SAAS,EAAE,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC3D,EAAE,CAAC,MAAM,CACP,6CAA6C,CAC9C,CAAC;QACF,MAAM,EAAE,CAAC;IACX,CAAC;IAED,qBAAqB;IACrB,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;IAClD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI;QAC7B,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC;QAC5B,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC;KACxB,EAAE,CAAC;QACX,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;YACpC,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACjD,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,MAAM,0BAA0B,CAAC,CAAC;gBACzD,EAAE,CAAC,MAAM,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;gBAChC,EAAE,CAAC,MAAM,CAAC,oBAAoB,OAAO,GAAG,CAAC,CAAC;gBAC1C,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU;IACV,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,CACL,GAAG,MAAM,SAAS,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qDAAqD,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/init-skill.d.ts

@@ -0,0 +1,3 @@
+import type { CLIOptions } from "../types.js";
+export declare function runInitSkill(cli: CLIOptions): Promise<void>;
+//# sourceMappingURL=init-skill.d.ts.map

package/dist/cli/init-skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-skill.d.ts","sourceRoot":"","sources":["../../src/cli/init-skill.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAY9C,wBAAsB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDjE"}

package/dist/cli/init-skill.js

@@ -0,0 +1,53 @@
+import { detectOpenClaw, findInstalledSkill, installSkillFile, getDefaultSkillsDir, getBundledSkillPath, } from "../config/openclaw.js";
+import { existsSync } from "node:fs";
+import { dirname } from "node:path";
+import * as ui from "./ui.js";
+export async function runInitSkill(cli) {
+    ui.heading("ArkiTek Relay — Install Skill Definition");
+    const bundledPath = getBundledSkillPath();
+    if (!existsSync(bundledPath)) {
+        ui.error("Bundled SKILL.md not found in the package.");
+        ui.dimmed("Try reinstalling: npm install -g arkitek-relay-skill");
+        process.exit(1);
+    }
+    ui.success("Bundled SKILL.md located");
+    const openclaw = detectOpenClaw();
+    if (openclaw) {
+        ui.success(`OpenClaw detected at ${openclaw.configPath}`);
+    }
+    else {
+        ui.warn("OpenClaw config not found at ~/.openclaw/openclaw.json");
+        ui.dimmed("The skill file will still be placed in the default location.");
+    }
+    const targetDir = cli.skillsDir || getDefaultSkillsDir();
+    ui.info(`Target directory: ${targetDir}/arkitek-relay/`);
+    const existing = findInstalledSkill();
+    if (existing) {
+        ui.warn(`Existing SKILL.md found at ${existing}`);
+        let shouldOverwrite = cli.yes;
+        if (!shouldOverwrite && process.stdin.isTTY) {
+            shouldOverwrite = await ui.confirm("Overwrite with the latest version?");
+        }
+        if (!shouldOverwrite) {
+            ui.dimmed("Skipped. Existing SKILL.md left in place.");
+            return;
+        }
+    }
+    try {
+        const targetOverride = cli.skillsDir || (existing ? dirname(dirname(existing)) : undefined);
+        const result = installSkillFile(targetOverride);
+        ui.success(result.existed
+            ? `SKILL.md updated at ${result.path}`
+            : `SKILL.md installed at ${result.path}`);
+        console.log();
+        ui.info("OpenClaw will discover this skill automatically on next load.");
+        ui.dimmed("To verify: openclaw skills list");
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        ui.error(`Failed to install SKILL.md: ${msg}`);
+        ui.dimmed("Try specifying a custom directory with --skills-dir <path>");
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=init-skill.js.map

package/dist/cli/init-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-skill.js","sourceRoot":"","sources":["../../src/cli/init-skill.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAe;IAChD,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;IAEvD,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACvD,EAAE,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAEvC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,EAAE,CAAC,OAAO,CAAC,wBAAwB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAClE,EAAE,CAAC,MAAM,CAAC,8DAA8D,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,mBAAmB,EAAE,CAAC;IACzD,EAAE,CAAC,IAAI,CAAC,qBAAqB,SAAS,iBAAiB,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,EAAE,CAAC,IAAI,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAElD,IAAI,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC;QAC9B,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5C,eAAe,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAChD,EAAE,CAAC,OAAO,CACR,MAAM,CAAC,OAAO;YACZ,CAAC,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE;YACtC,CAAC,CAAC,yBAAyB,MAAM,CAAC,IAAI,EAAE,CAC3C,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,EAAE,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACzE,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,EAAE,CAAC,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/cli/install.d.ts

@@ -0,0 +1,3 @@
+import type { CLIOptions } from "../types.js";
+export declare function runInstall(cli: CLIOptions): Promise<void>;
+//# sourceMappingURL=install.d.ts.map

package/dist/cli/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/cli/install.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA4B9C,wBAAsB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAyX/D"}