pi-skill-shiori 0.6.8 → 0.6.10

package/CHANGELOG.md

@@ -2,17 +2,31 @@
 
 ## Unreleased
 
-### Changed
+## [0.6.10] - 2026-09-21
 
-- Bump package version to `0.6.7` for the next patch release.
+### Fixed
 
-- Add Buy Me a Coffee sponsor button to README and native GitHub funding link via `.github/FUNDING.yml`.
+- Prune stale `.pi/cache/skill-shiori/index-*.sqlite` databases. Every index rebuild wrote a new `index-<pid>-<ts>.sqlite` file and never removed the older ones, so a long-lived vault accumulated hundreds of files (336 files / 33 MB in the local vault). Rebuilds now delete databases older than a one hour grace window; the live database, recent files, and locked files are left in place.
+
+## [0.6.9] - 2026-08-22
+
+### Changed
+
+- Merge the 2026-08-22 managed OSS dependency and maintenance PR batch.
 
 ## [0.6.8] - 2026-08-04
 
 ### Changed
 
 - Bump package version for the Discord release webhook verification.
+- Add dotfield.xyz Discord community badge to README.
+
+## [0.6.7] - 2026-07-20
+
+### Changed
+
+- Bump package version to `0.6.7` for the next patch release.
+- Add Buy Me a Coffee sponsor button to README and native GitHub funding link via `.github/FUNDING.yml`.
 
 ## [0.6.6] - 2026-07-07
 

package/Docs/usage.md

@@ -100,7 +100,7 @@ Generate a starter policy from discovered skills:
 /shiori:bootstrap
 ```
 
-This writes a generated review file next to `.pi/skill-shiori.yml`. Review it before using it as your real policy.
+This writes `.pi/skill-shiori.generated.yml` next to your project policy. Review the draft, copy the sections you want into `.pi/skill-shiori.yml`, then run `/shiori:reload`.
 
 ## Suppression statuses
 
@@ -167,6 +167,24 @@ command: offers=1, loaded=2, zeroHits=1
 top skills: auth-helper(1/2), deploy-kit(1/1)
 ```
 
+## Agent tools
+
+Shiori registers two tools the agent can call after candidates appear:
+
+```ts
+// Discover matching skills for a natural-language task (may pre-load multiple bodies)
+shiori_recommend({ task: "browser scraping screenshot" })
+
+// Load one selected skill body after a candidate matches
+shiori_load_skill({ skill: "reddit-research" })
+```
+
+`shiori_recommend` returns compact summaries and may pre-load matching `SKILL.md` bodies. The Pi UI shows a collapsed result like `✓ Shiori playwright-cli [trigger], gstack-browse [description]`.
+
+`shiori_load_skill` loads one skill by name. The Pi UI shows a compact result like `✓ Loaded reddit-research (6.3KB)`.
+
+See [Recommendation surface](recommendation-surface.md) for badge vocabulary and multi-skill examples.
+
 ## Related docs
 
 - [Recommendation surface](recommendation-surface.md) — reason badges, Always Visible policy, and metrics interplay

package/README.md

@@ -19,7 +19,7 @@ For maintenance priorities and the phased plan, see [`ROADMAP.md`](ROADMAP.md).
 
 Pi Skill Shiori is a [Pi](https://pi.dev/) package for vaults or projects with many Agent Skills where the default catalog becomes noisy and expensive. It hides the normal skill catalog when safe, recommends triggerable skills with compact summaries, and loads full `SKILL.md` bodies on demand.
 
-`0.6.8` is the current working release. Prompt-boundary suppression is intentionally conservative: if Shiori cannot safely recognize a catalog boundary, it leaves the prompt untouched and warns instead of deleting too much.
+`0.6.10` is the current working release. Prompt-boundary suppression is intentionally conservative: if Shiori cannot safely recognize a catalog boundary, it leaves the prompt untouched and warns instead of deleting too much.
 
 ## Features
 
@@ -37,7 +37,7 @@ Pi Skill Shiori is a [Pi](https://pi.dev/) package for vaults or projects with m
 ### Global install from npm
 
 ```bash
-pi install npm:pi-skill-shiori@0.6.8
+pi install npm:pi-skill-shiori@0.6.10
 ```
 
 Without a version pin:
@@ -49,7 +49,7 @@ pi install npm:pi-skill-shiori
 ### Project-local install from npm
 
 ```bash
-pi install -l npm:pi-skill-shiori@0.6.8
+pi install -l npm:pi-skill-shiori@0.6.10
 ```
 
 Without a version pin:
@@ -61,7 +61,7 @@ pi install -l npm:pi-skill-shiori
 ### Install from GitHub
 
 ```bash
-pi install git:github.com/eiei114/pi-skill-shiori@v0.6.8
+pi install git:github.com/eiei114/pi-skill-shiori@v0.6.10
 pi install -l git:github.com/eiei114/pi-skill-shiori
 ```
 
@@ -83,7 +83,7 @@ pi install -l /absolute/path/to/pi-skill-shiori
 1. Install the package (see [Install](#install)).
 2. Create `.pi/skill-shiori.yml` in your Pi project (see [Docs/usage.md](Docs/usage.md#configure)).
 3. Start Pi and run `/shiori:doctor` to confirm policy path, indexed roots, and suppression status.
-4. Use `/shiori:bootstrap` to draft a policy from discovered skills, then `/shiori:reload` after edits.
+4. Use `/shiori:bootstrap` to write `.pi/skill-shiori.generated.yml`, review it, copy needed sections into `.pi/skill-shiori.yml`, then run `/shiori:reload`.
 5. Ask the agent for help; Shiori injects compact candidates or use `/shiori:recommend` for an interactive flow.
 
 Commands take no inline arguments. Details are collected after launch via Pi UI prompts.
@@ -98,13 +98,19 @@ Commands take no inline arguments. Details are collected after launch via Pi UI
 | `/shiori:recommend` | Interactive recommendation flow with optional pre-load. |
 | `/shiori:stats` | Show operational counters and recommendation quality summary. |
 
-Shiori registers one tool:
+Shiori registers two tools:
 
 ```ts
+// Discover matching skills for a natural-language task (may pre-load multiple bodies)
+shiori_recommend({ task: "browser scraping screenshot" })
+
+// Load one selected skill body after a candidate matches
 shiori_load_skill({ skill: "reddit-research" })
 ```
 
-The model receives the full selected `SKILL.md` content. The Pi UI shows a compact result like `✓ Loaded reddit-research (6.3KB)`.
+`shiori_recommend` returns compact summaries and may pre-load matching `SKILL.md` bodies. The Pi UI shows a collapsed result like `✓ Shiori playwright-cli [trigger], gstack-browse [description]`.
+
+`shiori_load_skill` loads one skill by name. The Pi UI shows a compact result like `✓ Loaded reddit-research (6.3KB)`.
 
 Recommended skills show compact reason badges (`[trigger]`, `[description]`, `[low match]`). See [`Docs/recommendation-surface.md`](Docs/recommendation-surface.md) for badge vocabulary and metrics interplay.
 
@@ -173,4 +179,4 @@ For vulnerability reporting, see [`SECURITY.md`](SECURITY.md).
 
 ## License
 
-MIT
+MIT

package/ROADMAP.md

@@ -58,7 +58,7 @@ semver classification. Patches default to `patch`; `none` means no package publi
 | # | Slice | Bump | Status |
 |---|---|---|---|
 | 1 | Add README status badges (CI, Publish, npm version, npm downloads, License, Pi package, Trusted Publishing) | patch | done |
-| 2 | Add `version:check` CI gate (block publishable-path changes without a semver increase) | none | planned |
+| 2 | Add `version:check` CI gate (validate semver and CHANGELOG policy on pull requests) | none | done |
 | 3 | Pin GitHub Actions to commit SHAs in `ci.yml`, `auto-release.yml`, `publish.yml` | none | planned |
 
 ### Month 2 — Stabilization and design boundaries
@@ -98,7 +98,7 @@ Current status against the shared Pi extension OSS policy. Gaps become Month 1 w
 - [x] `package.json` `files` is explicit (no `node_modules`, tests, or local state)
 - [x] No template `example-skill` / `example` / `example-theme` resources shipped
 - [ ] **README status badges** (CI, Publish, npm version, npm downloads, License, Pi package, Trusted Publishing) — *Month 1 #1*
-- [ ] **`version:check` CI gate** so publishable-path changes cannot merge without a bump — *Month 1 #2*
+- [x] **`version:check` CI gate** validates semver/CHANGELOG policy on pull requests — *Month 1 #2*
 - [ ] **Pin GitHub Actions to commit SHAs** (currently floating `@v4`) — *Month 1 #3*
 
 ## Current backlog integration

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-skill-shiori",
-  "version": "0.6.8",
+  "version": "0.6.10",
   "description": "Pi extension that reduces Agent Skill catalog tokens with policy-based skill retrieval and on-demand skill loading.",
   "type": "module",
   "license": "MIT",
@@ -54,9 +54,9 @@
     "typebox": "*"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.83.0",
-    "@earendil-works/pi-coding-agent": "^0.83.0",
-    "@earendil-works/pi-tui": "^0.83.0",
+    "@earendil-works/pi-ai": "^0.85.0",
+    "@earendil-works/pi-coding-agent": "^0.84.1",
+    "@earendil-works/pi-tui": "^0.85.1",
     "@types/node": "^26.0.0",
     "tsx": "^4.22.4",
     "typebox": "latest",

package/src/indexer.ts

@@ -1,8 +1,62 @@
-import { mkdir } from "node:fs/promises";
+import { mkdir, readdir, stat, unlink } from "node:fs/promises";
 import { createRequire } from "node:module";
-import { join } from "node:path";
+import { basename, join } from "node:path";
 import type { RetrievalBackend, ShioriPolicy, SkillRecord } from "./types.js";
 
+const INDEX_FILE_PATTERN = /^index-\d+-\d+\.sqlite(?:-(?:wal|shm|journal))?$/;
+
+/**
+ * Index databases are written with a per-process name, so every rebuild adds a
+ * file. Prune older ones after a grace window: long enough that a concurrent
+ * process keeps its database, short enough that a busy vault does not grow
+ * without bound.
+ */
+export const DEFAULT_INDEX_GRACE_MS = 60 * 60 * 1000;
+
+export interface PruneIndexOptions {
+  /** File name to keep, usually the database this process just opened. */
+  keep?: string;
+  /** Files newer than this window are left alone. */
+  graceMs?: number;
+  /** Clock override for tests. */
+  now?: number;
+}
+
+/**
+ * Best-effort cleanup of stale index databases. Locked files (a live process on
+ * Windows) and unreadable entries are skipped instead of failing the build.
+ */
+export async function pruneStaleIndexFiles(cacheDir: string, options: PruneIndexOptions = {}): Promise<string[]> {
+  const graceMs = options.graceMs ?? DEFAULT_INDEX_GRACE_MS;
+  const now = options.now ?? Date.now();
+  const removed: string[] = [];
+
+  let entries: string[];
+  try {
+    entries = await readdir(cacheDir);
+  } catch {
+    return removed;
+  }
+
+  for (const entry of entries) {
+    if (!INDEX_FILE_PATTERN.test(entry)) continue;
+    if (options.keep && entry === options.keep) continue;
+
+    const target = join(cacheDir, entry);
+    try {
+      const info = await stat(target);
+      if (!info.isFile()) continue;
+      if (now - info.mtimeMs < graceMs) continue;
+      await unlink(target);
+      removed.push(entry);
+    } catch {
+      // Locked (a live process owns it) or already gone: leave it for next time.
+    }
+  }
+
+  return removed;
+}
+
 export interface SkillIndex {
   skills: SkillRecord[];
   policy: ShioriPolicy;
@@ -24,6 +78,7 @@ export async function buildSkillIndex(cwd: string, skills: SkillRecord[], policy
     await mkdir(cacheDir, { recursive: true });
 
     const db = new sqlite.DatabaseSync(dbPath);
+    await pruneStaleIndexFiles(cacheDir, { keep: basename(dbPath) });
     db.exec(
       "CREATE VIRTUAL TABLE skill_fts USING fts5(name, description, triggers, path, tokenize='unicode61 remove_diacritics 2')",
     );