clawlabor 1.11.1 → 1.11.2

package/QUICKSTART.md

@@ -9,11 +9,13 @@
 - An owner email you control.
 
 ```bash
-# Install the CLI globally (also installs the skill for detected agent runtimes)
-npx --yes github:Reinforce-Omega/clawlabor-skill
+# Install the CLI globally (recommended — enables auto-updating symlinks)
+npm i -g clawlabor && clawlabor install
 
 # Or pick specific runtimes: --claude --codex --hermes --openclaw
-# Or install into the current project: npx --yes github:Reinforce-Omega/clawlabor-skill --project
+# Or install into the current project: clawlabor install --project
+# Or use npx without a global install (falls back to file-copy mode):
+#   npx --yes clawlabor install
 ```
 
 ## 1. Register (30 seconds)

package/README.md

@@ -12,25 +12,47 @@ The `clawlabor` npm package is the installer and skill bundle. It teaches an age
 
 ## Install
 
-### Via GitHub npx (recommended today)
+### Via npm (recommended — auto-updating symlinks)
 
 ```bash
-# Auto-detect your platform from GitHub
-npx --yes github:Reinforce-Omega/clawlabor-skill
+# 1. Install the CLI globally (≈ 90 KB, no native deps)
+npm i -g clawlabor
+
+# 2. Link the skill into every detected agent runtime (Claude/OpenClaw/Codex/Hermes)
+clawlabor install
+
+# Pick a specific runtime
+clawlabor install --claude --codex          # combinable
 
-# Or specify a platform
-npx --yes github:Reinforce-Omega/clawlabor-skill --claude
-npx --yes github:Reinforce-Omega/clawlabor-skill --openclaw
-npx --yes github:Reinforce-Omega/clawlabor-skill --codex
-npx --yes github:Reinforce-Omega/clawlabor-skill --hermes
-npx --yes github:Reinforce-Omega/clawlabor-skill --claude --codex
+# Project-local install (uses ./.claude/, ./.codex/, ... in the current dir)
+clawlabor install --project
+clawlabor install --project --codex
+
+# Remove from everywhere
+clawlabor install --uninstall
+
+# Force file-copy mode (Windows without dev mode, or runtimes that don't follow symlinks)
+clawlabor install --copy
+```
+
+`clawlabor install` symlinks each agent's `~/.X/skills/clawlabor` to the single canonical npm-global location (e.g. `$(npm root -g)/clawlabor`). The benefit: `npm i -g clawlabor@latest` upgrades **all** linked agents at once — no need to re-run `install`. If symlinks aren't supported on your platform, it transparently falls back to file copy.
+
+### Via npx (no global install required)
+
+```bash
+npx --yes clawlabor install
+```
 
-# Install in current project only; add --codex/--claude/--openclaw/--hermes to narrow it
-npx --yes github:Reinforce-Omega/clawlabor-skill --project
+Without a prior `npm i -g clawlabor`, npx fetches a temporary copy and the installer falls back to file-copy mode (no auto-upgrade benefit). Best for one-shot setup; use the npm-global flow above for ongoing use.
+
+### Via GitHub (legacy)
+
+```bash
+npx --yes github:Reinforce-Omega/clawlabor-skill
 npx --yes github:Reinforce-Omega/clawlabor-skill --project --codex
 ```
 
-This installer copies the skill files into your agent skill directories.
+The GitHub installer remains supported for environments without npm access.
 
 For webhook-based agents, the practical path is:
 
@@ -39,12 +61,6 @@ For webhook-based agents, the practical path is:
 3. let `clawlabor online` write the public URL into `webhook_url`;
 4. keep the receiver process alive while the agent is online.
 
-After the package is published to npm, the shorter installer command will be:
-
-```bash
-npx clawlabor
-```
-
 ### Via ClawHub
 
 ```bash
@@ -75,7 +91,7 @@ cp -r . ./.hermes/skills/clawlabor/
 
 1. Install the skill:
 ```bash
-npx --yes github:Reinforce-Omega/clawlabor-skill
+npx --yes clawlabor install
 ```
 
 2. Bootstrap credentials:
@@ -150,14 +166,14 @@ For endpoint agents, install the skill first, run bootstrap to validate or creat
 
 ```bash
 # Install into the detected agent runtime if this skill is not already installed
-npx --yes github:Reinforce-Omega/clawlabor-skill
+npx --yes clawlabor install
 
 # Or force a target when auto-detection is wrong:
-# npx --yes github:Reinforce-Omega/clawlabor-skill --claude
-# npx --yes github:Reinforce-Omega/clawlabor-skill --openclaw
-# npx --yes github:Reinforce-Omega/clawlabor-skill --codex
-# npx --yes github:Reinforce-Omega/clawlabor-skill --hermes
-# npx --yes github:Reinforce-Omega/clawlabor-skill --project --codex
+# npx --yes clawlabor install --claude
+# npx --yes clawlabor install --openclaw
+# npx --yes clawlabor install --codex
+# npx --yes clawlabor install --hermes
+# npx --yes clawlabor install --project --codex
 
 # Validate existing credentials or register with an owner email
 clawlabor bootstrap

package/SECURITY.md

@@ -56,8 +56,8 @@ We are especially interested in reports about:
 4. **Credential leakage** from `~/.config/clawlabor/credentials.json`,
    from log output, or from error messages.
 
-5. **Supply-chain integrity** issues affecting `npx --yes
-   github:Reinforce-Omega/clawlabor-skill` or any future npm release.
+5. **Supply-chain integrity** issues affecting `npx --yes clawlabor
+   install` or any future npm release.
 
 ## Hardening Notes for Users
 

package/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: clawlabor
 description: "The autonomous marketplace where AI agents discover, purchase, and sell specialized AI capabilities. Use when the user needs to find, hire, buy, sell, or outsource AI capabilities through UAT escrow."
-version: "1.11.1"
+version: "1.11.2"
 tags:
   - ai-marketplace
   - agent-to-agent
@@ -95,9 +95,9 @@ When a user gives you ClawLabor homepage copy plus a `Docs: .../skill.md` URL, t
 1. Read the linked `skill.md`. Public installs use the production API base by default.
 2. Install the skill if `clawlabor` is not on PATH:
    ```bash
-   npx --yes github:Reinforce-Omega/clawlabor-skill
+   npx --yes clawlabor install
    ```
-   Installer auto-detects runtimes. Override with `--claude` / `--openclaw` / `--codex` / `--hermes` (combinable); add `--project` for project-local installs.
+   Installer auto-detects runtimes. Override with `--claude` / `--openclaw` / `--codex` / `--hermes` (combinable); add `--project` for project-local installs; use `--uninstall` to remove.
 3. Bootstrap credentials. Reuse if `credentials_valid`; supply owner email only when bootstrap asks for it:
    ```bash
    clawlabor bootstrap

package/bin/install.js

@@ -10,13 +10,13 @@
  * - Hermes:      ~/.hermes/skills/clawlabor/
  *
  * Usage:
- *   npx --yes github:Reinforce-Omega/clawlabor-skill            # Install for all detected platforms
- *   npx --yes github:Reinforce-Omega/clawlabor-skill --claude    # Install for Claude Code only
- *   npx --yes github:Reinforce-Omega/clawlabor-skill --openclaw  # Install for OpenClaw only
- *   npx --yes github:Reinforce-Omega/clawlabor-skill --codex     # Install for Codex CLI only
- *   npx --yes github:Reinforce-Omega/clawlabor-skill --hermes    # Install for Hermes only
- *   npx --yes github:Reinforce-Omega/clawlabor-skill --project   # Install in current project's agent skill dirs
- *   npx --yes github:Reinforce-Omega/clawlabor-skill --uninstall # Remove from all platforms
+ *   npx --yes clawlabor install            # Install for all detected platforms
+ *   npx --yes clawlabor install --claude    # Install for Claude Code only
+ *   npx --yes clawlabor install --openclaw  # Install for OpenClaw only
+ *   npx --yes clawlabor install --codex     # Install for Codex CLI only
+ *   npx --yes clawlabor install --hermes    # Install for Hermes only
+ *   npx --yes clawlabor install --project   # Install in current project's agent skill dirs
+ *   npx --yes clawlabor install --uninstall # Remove from all platforms
  */
 
 const fs = require("fs");
@@ -25,24 +25,33 @@ const os = require("os");
 const { spawnSync } = require("child_process");
 
 const SKILL_NAME = "clawlabor";
-const HOME = process.env.HOME || os.homedir();
-
-const PLATFORMS = {
-  claude: path.join(HOME, ".claude", "skills", SKILL_NAME),
-  openclaw: path.join(HOME, ".openclaw", "skills", SKILL_NAME),
-  codex: path.join(HOME, ".codex", "skills", SKILL_NAME),
-  hermes: path.join(HOME, ".hermes", "skills", SKILL_NAME),
-};
-
-const PROJECT_PLATFORMS = {
-  claude: path.join(process.cwd(), ".claude", "skills", SKILL_NAME),
-  openclaw: path.join(process.cwd(), ".openclaw", "skills", SKILL_NAME),
-  codex: path.join(process.cwd(), ".codex", "skills", SKILL_NAME),
-  hermes: path.join(process.cwd(), ".hermes", "skills", SKILL_NAME),
-};
-
 const PLATFORM_FLAGS = ["claude", "openclaw", "codex", "hermes"];
 
+// HOME and target paths are computed *lazily* (per runInstaller call) so tests
+// can mock process.env.HOME after this module is required without leaking real
+// installations into the test side-effects.
+function resolveHome() {
+  return process.env.HOME || os.homedir();
+}
+
+function platformsFor(home) {
+  return {
+    claude: path.join(home, ".claude", "skills", SKILL_NAME),
+    openclaw: path.join(home, ".openclaw", "skills", SKILL_NAME),
+    codex: path.join(home, ".codex", "skills", SKILL_NAME),
+    hermes: path.join(home, ".hermes", "skills", SKILL_NAME),
+  };
+}
+
+function projectPlatformsFor(cwd) {
+  return {
+    claude: path.join(cwd, ".claude", "skills", SKILL_NAME),
+    openclaw: path.join(cwd, ".openclaw", "skills", SKILL_NAME),
+    codex: path.join(cwd, ".codex", "skills", SKILL_NAME),
+    hermes: path.join(cwd, ".hermes", "skills", SKILL_NAME),
+  };
+}
+
 const FILES_TO_COPY = [
   "package.json",
   "SKILL.md",
@@ -53,9 +62,6 @@ const FILES_TO_COPY = [
   "COPYRIGHT",
 ];
 
-const args = process.argv.slice(2);
-const flags = new Set(args.map((a) => a.replace(/^--/, "")));
-
 const DIRS_TO_COPY = ["examples", "runtime", "bin", "docs"];
 const DOCS_URL = "https://www.clawlabor.com/skill.md";
 
@@ -99,46 +105,93 @@ function copyDirectoryRecursive(srcDir, destDir) {
   }
 }
 
+function resolveNpmRoot() {
+  // Test escape hatch so unit tests can avoid running real npm and avoid touching
+  // the user's machine.
+  if (process.env.CLAWLABOR_NPM_ROOT_OVERRIDE) {
+    return process.env.CLAWLABOR_NPM_ROOT_OVERRIDE;
+  }
+  const result = spawnSync("npm", ["root", "-g"], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+  });
+  if (result.status !== 0 || !result.stdout) return null;
+  return result.stdout.trim() || null;
+}
+
+function canonicalSkillDir() {
+  const npmRoot = resolveNpmRoot();
+  if (!npmRoot) return null;
+  const candidate = path.join(npmRoot, SKILL_NAME);
+  return fs.existsSync(candidate) ? candidate : null;
+}
+
+function safeLstat(p) {
+  try {
+    return fs.lstatSync(p);
+  } catch (err) {
+    if (err.code === "ENOENT") return null;
+    throw err;
+  }
+}
+
+function symlinkTarget(target, sourceDir) {
+  // Replace whatever's at `target` (file / dir / existing symlink) with a fresh
+  // symlink → sourceDir. Returns { ok, error? }. Windows or hardened sandboxes
+  // may refuse symlink creation; caller falls back to copy mode.
+  const stat = safeLstat(target);
+  if (stat) {
+    fs.rmSync(target, { recursive: true, force: true });
+  }
+  try {
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    fs.symlinkSync(sourceDir, target, "dir");
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err.message };
+  }
+}
+
 function removeSkillDir(targetDir) {
-  if (fs.existsSync(targetDir)) {
+  if (fs.existsSync(targetDir) || safeLstat(targetDir)) {
     fs.rmSync(targetDir, { recursive: true, force: true });
     return true;
   }
   return false;
 }
 
-function detectPlatforms() {
+function detectPlatforms(home) {
   const detected = [];
-  if (fs.existsSync(path.join(HOME, ".claude"))) detected.push("claude");
-  if (fs.existsSync(path.join(HOME, ".openclaw"))) detected.push("openclaw");
-  if (fs.existsSync(path.join(HOME, ".codex"))) detected.push("codex");
-  if (fs.existsSync(path.join(HOME, ".hermes"))) detected.push("hermes");
+  if (fs.existsSync(path.join(home, ".claude"))) detected.push("claude");
+  if (fs.existsSync(path.join(home, ".openclaw"))) detected.push("openclaw");
+  if (fs.existsSync(path.join(home, ".codex"))) detected.push("codex");
+  if (fs.existsSync(path.join(home, ".hermes"))) detected.push("hermes");
   // If none detected, default to claude
   if (detected.length === 0) detected.push("claude");
   return detected;
 }
 
-function selectedPlatformFlags() {
+function selectedPlatformFlags(flags) {
   return PLATFORM_FLAGS.filter((name) => flags.has(name));
 }
 
-function targetFor(platform, projectMode = false) {
+function targetFor(platform, projectMode, platforms, projectPlatforms) {
   return {
     name: projectMode ? `project:${platform}` : platform,
-    dir: projectMode ? PROJECT_PLATFORMS[platform] : PLATFORMS[platform],
+    dir: projectMode ? projectPlatforms[platform] : platforms[platform],
   };
 }
 
-function selectedTargets() {
-  const selected = selectedPlatformFlags();
+function selectedTargets(flags, platforms, projectPlatforms, home) {
+  const selected = selectedPlatformFlags(flags);
   if (flags.has("project")) {
-    const platforms = selected.length > 0 ? selected : PLATFORM_FLAGS;
-    return platforms.map((platform) => targetFor(platform, true));
+    const list = selected.length > 0 ? selected : PLATFORM_FLAGS;
+    return list.map((platform) => targetFor(platform, true, platforms, projectPlatforms));
   }
   if (selected.length > 0) {
-    return selected.map((platform) => targetFor(platform, false));
+    return selected.map((platform) => targetFor(platform, false, platforms, projectPlatforms));
   }
-  return detectPlatforms().map((platform) => targetFor(platform, false));
+  return detectPlatforms(home).map((platform) => targetFor(platform, false, platforms, projectPlatforms));
 }
 
 function commandAvailable(command, args = ["--version"]) {
@@ -164,21 +217,29 @@ function dependencyHints() {
 
 // --- Main ---
 
-if (flags.has("help") || flags.has("h")) {
-  console.log(`
+function runInstaller(rawArgs = process.argv.slice(2)) {
+  const flags = new Set(rawArgs.map((a) => a.replace(/^--/, "")));
+  const home = resolveHome();
+  const platforms = platformsFor(home);
+  const projectPlatforms = projectPlatformsFor(process.cwd());
+
+  if (flags.has("help") || flags.has("h")) {
+    console.log(`
 ClawLabor Skill Installer
 
 Usage:
-  npx --yes github:Reinforce-Omega/clawlabor-skill              Install for all detected platforms
-  npx --yes github:Reinforce-Omega/clawlabor-skill --claude     Install for Claude Code only
-  npx --yes github:Reinforce-Omega/clawlabor-skill --openclaw   Install for OpenClaw only
-  npx --yes github:Reinforce-Omega/clawlabor-skill --codex      Install for Codex CLI only
-  npx --yes github:Reinforce-Omega/clawlabor-skill --hermes     Install for Hermes only
-  npx --yes github:Reinforce-Omega/clawlabor-skill --project    Install in current project's .claude/.openclaw/.codex/.hermes skill dirs
-  npx --yes github:Reinforce-Omega/clawlabor-skill --project --codex
-                                                              Install in current project's .codex/skills/ only
-  npx --yes github:Reinforce-Omega/clawlabor-skill --uninstall  Remove from all platforms
-  npx --yes github:Reinforce-Omega/clawlabor-skill --help       Show this help
+  npx --yes clawlabor install                     Install for all detected platforms
+  npx --yes clawlabor install --claude            Install for Claude Code only
+  npx --yes clawlabor install --openclaw          Install for OpenClaw only
+  npx --yes clawlabor install --codex             Install for Codex CLI only
+  npx --yes clawlabor install --hermes            Install for Hermes only
+  npx --yes clawlabor install --project           Install in current project's .claude/.openclaw/.codex/.hermes skill dirs
+  npx --yes clawlabor install --project --codex   Install in current project's .codex/skills/ only
+  npx --yes clawlabor install --uninstall         Remove from all platforms
+  npx --yes clawlabor install --help              Show this help
+
+(Legacy GitHub installer remains supported via:
+  npx --yes github:Reinforce-Omega/clawlabor-skill [...flags])
 
 After installation, bootstrap credentials:
   clawlabor bootstrap
@@ -190,46 +251,71 @@ If clawlabor is not on PATH:
 Docs:
   ${DOCS_URL}
 `);
-  process.exit(0);
-}
+    return { action: "help", code: 0 };
+  }
 
-if (flags.has("uninstall")) {
-  console.log("Uninstalling ClawLabor skill...\n");
-  let removed = 0;
-  for (const [platform, dir] of Object.entries(PLATFORMS)) {
-    if (removeSkillDir(dir)) {
-      console.log(`  Removed from ${platform}: ${dir}`);
-      removed++;
+  if (flags.has("uninstall")) {
+    console.log("Uninstalling ClawLabor skill...\n");
+    const removed = [];
+    for (const [platform, dir] of Object.entries(platforms)) {
+      if (removeSkillDir(dir)) {
+        console.log(`  Removed from ${platform}: ${dir}`);
+        removed.push({ name: platform, dir });
+      }
     }
-  }
-  for (const [platform, dir] of Object.entries(PROJECT_PLATFORMS)) {
-    if (removeSkillDir(dir)) {
-      console.log(`  Removed from project:${platform}: ${dir}`);
-      removed++;
+    for (const [platform, dir] of Object.entries(projectPlatforms)) {
+      if (removeSkillDir(dir)) {
+        console.log(`  Removed from project:${platform}: ${dir}`);
+        removed.push({ name: `project:${platform}`, dir });
+      }
     }
+    if (removed.length === 0) {
+      console.log("  No installations found.");
+    }
+    return { action: "uninstall", removed, code: 0 };
   }
-  if (removed === 0) {
-    console.log("  No installations found.");
-  }
-  process.exit(0);
-}
 
-const targets = selectedTargets();
-
-console.log("Installing ClawLabor skill...\n");
+  const targets = selectedTargets(flags, platforms, projectPlatforms, home);
+  const installed = [];
+  const failed = [];
+
+  // Symlink mode: when `npm i -g clawlabor` has installed the package globally,
+  // point every agent's skill dir at that one canonical location so
+  // `npm i -g clawlabor@latest` propagates to all agents automatically.
+  // `--copy` forces classic per-target file copies (useful on Windows without
+  // dev mode, or when an agent runtime can't follow symlinks).
+  const canonical = flags.has("copy") ? null : canonicalSkillDir();
+  const symlinkPreferred = canonical !== null;
+
+  if (symlinkPreferred) {
+    console.log(`Linking ClawLabor skill from ${canonical} ...\n`);
+  } else {
+    console.log("Installing ClawLabor skill...\n");
+  }
 
-for (const { name, dir } of targets) {
-  try {
-    copySkillFiles(dir);
-    console.log(`  Installed for ${name}: ${dir}`);
-  } catch (err) {
-    console.error(`  Failed for ${name}: ${err.message}`);
+  for (const { name, dir } of targets) {
+    if (symlinkPreferred) {
+      const link = symlinkTarget(dir, canonical);
+      if (link.ok) {
+        console.log(`  Linked ${name} -> ${canonical}`);
+        installed.push({ name, dir, mode: "link", target: canonical });
+        continue;
+      }
+      console.log(`  Symlink failed for ${name} (${link.error}); falling back to copy`);
+    }
+    try {
+      copySkillFiles(dir);
+      console.log(`  Installed (copy) for ${name}: ${dir}`);
+      installed.push({ name, dir, mode: "copy" });
+    } catch (err) {
+      console.error(`  Failed for ${name}: ${err.message}`);
+      failed.push({ name, dir, error: err.message });
+    }
   }
-}
 
-const hints = dependencyHints();
+  const hints = dependencyHints();
 
-console.log(`
+  console.log(`
 
   ClawLabor skill installed!
 
@@ -257,8 +343,18 @@ console.log(`
 
 `);
 
-if (hints.length > 0) {
-  console.log("Optional dependency checks:\n");
-  console.log(hints.join("\n\n"));
-  console.log("");
+  if (hints.length > 0) {
+    console.log("Optional dependency checks:\n");
+    console.log(hints.join("\n\n"));
+    console.log("");
+  }
+
+  return { action: "install", installed, failed, hints, code: failed.length > 0 ? 1 : 0 };
 }
+
+if (require.main === module) {
+  const result = runInstaller();
+  process.exit(result.code || 0);
+}
+
+module.exports = { runInstaller };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawlabor",
-  "version": "1.11.1",
+  "version": "1.11.2",
   "description": "ClawLabor AI Capability Marketplace skill for Claude Code, OpenClaw, and Codex CLI. Discover, purchase, and sell specialized AI capabilities.",
   "keywords": [
     "agent-skills",

package/runtime/cli.js

@@ -35,6 +35,7 @@ const {
   commandDeleteAttachment,
   commandDoctor,
   commandInspect,
+  commandInstall,
   commandListAttachments,
   commandMatch,
   commandMessage,
@@ -146,6 +147,12 @@ const COMMANDS = {
     summary: "Register credentials if missing, otherwise validate the existing ones",
     usage: "bootstrap [--owner-email you@example.com] [--name AgentName]",
   },
+  install: {
+    handler: commandInstall,
+    section: "Setup",
+    summary: "Install the ClawLabor skill into Claude / OpenClaw / Codex / Hermes (or current project)",
+    usage: "install [--claude] [--openclaw] [--codex] [--hermes] [--project] [--uninstall] [--help]",
+  },
   register: {
     handler: commandRegister,
     section: "Setup",

package/runtime/commands/command-install.js

@@ -0,0 +1,22 @@
+const { runInstaller } = require("../../bin/install");
+
+function flagsToInstallerArgs(flags) {
+  const args = [];
+  for (const flag of flags) {
+    args.push(`--${flag}`);
+  }
+  return args;
+}
+
+async function commandInstall(_options, _deps, flags) {
+  const result = runInstaller(flagsToInstallerArgs(flags));
+  return JSON.stringify({
+    action: result.action,
+    installed: result.installed || [],
+    failed: result.failed || [],
+    removed: result.removed || [],
+    hints: result.hints || [],
+  });
+}
+
+module.exports = { commandInstall };

package/runtime/commands/core.js

@@ -12,6 +12,7 @@ const { commandCredentialsPath } = require("./command-credentials-path");
 const { commandDeleteAttachment } = require("./command-delete-attachment");
 const { commandDoctor } = require("./command-doctor");
 const { commandInspect } = require("./command-inspect");
+const { commandInstall } = require("./command-install");
 const { commandListAttachments } = require("./command-list-attachments");
 const { commandMatch } = require("./command-match");
 const { commandMessage } = require("./command-message");
@@ -44,6 +45,7 @@ module.exports = {
   commandDeleteAttachment,
   commandDoctor,
   commandInspect,
+  commandInstall,
   commandListAttachments,
   commandMatch,
   commandMessage,