shadok-ai 0.17.13 → 0.17.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -0
- package/context/ledger-skill/ledger.mjs +50 -12
- package/dist/agent-login.js +8 -1
- package/dist/agent-login.js.map +1 -1
- package/dist/server.js +36 -7
- package/dist/server.js.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -859,6 +859,7 @@ machine, which silently shifts every daily prompt on a server running in UTC.
|
|
|
859
859
|
| `SHADOK_PILOT_PROMPT=0` | don't inject the cockpit system prompt |
|
|
860
860
|
| `SHADOK_GREETING=0` | the lead agent starts silent — no first-message greeting |
|
|
861
861
|
| `SHADOK_LEDGER=0` | turn OFF the shared-ledger reflex — a per-instance state table siblings read/write so they stop re-surfacing resolved work, plus a `⟦ledger⟧` delta pushed ahead of each message (**ON by default**; `SHADOK_LEDGER=0` or the GUI/config setting turns it off) |
|
|
862
|
+
| `SHADOK_SEED_SKILLS=0` | don't rewrite the machine-wide skill scripts at boot — for a build run side by side with another instance, so it doesn't hand that instance's agents scripts newer than the server they call |
|
|
862
863
|
| `SHADOK_RESUME_SUMMARY=1` | don't auto-answer the resume-from-summary prompt |
|
|
863
864
|
| `SHADOK_SSH_IDENTITY=0` · `SHADOK_FORCE_SSH_IDENTITY=1` | disable / force the Docker SSH identity |
|
|
864
865
|
| `TELEGRAM_BOT_TOKEN` · `TELEGRAM_ALLOWED_CHATS` | override the stored config |
|
|
@@ -14,6 +14,14 @@
|
|
|
14
14
|
// with no port/key), it reads and writes the local file directly —
|
|
15
15
|
// SHADOK_LEDGER_FILE if the server handed one, else the legacy global file.
|
|
16
16
|
// Nothing about the single-group / off-server case changes.
|
|
17
|
+
//
|
|
18
|
+
// The SAME fallback catches a server that is reachable but OLDER than this
|
|
19
|
+
// script: skills are seeded machine-wide at every boot, so any build booted on
|
|
20
|
+
// the host (a side-by-side verification run) rewrites them under the running
|
|
21
|
+
// server, and a route this file calls may simply not exist there. A 404 is that
|
|
22
|
+
// fact, and it must degrade to the local table instead of failing the write —
|
|
23
|
+
// see invariant 57. Only a 404: a 401/403 is a real auth problem with a human
|
|
24
|
+
// action behind it (invariant 33) and stays loud.
|
|
17
25
|
import fs from "node:fs";
|
|
18
26
|
import os from "node:os";
|
|
19
27
|
import path from "node:path";
|
|
@@ -61,8 +69,10 @@ function mintId(rows) {
|
|
|
61
69
|
}
|
|
62
70
|
|
|
63
71
|
/** Call the server. Exits with a clear message on a transport/HTTP failure —
|
|
64
|
-
* the same shape as the secrets skill.
|
|
65
|
-
|
|
72
|
+
* the same shape as the secrets skill. With `soft404`, a 404 returns null
|
|
73
|
+
* instead of exiting: the caller then has a local-file path to degrade to, and
|
|
74
|
+
* a 404 means THIS ROUTE does not exist on the running build (invariant 57). */
|
|
75
|
+
async function api(method, p, body, { soft404 = false } = {}) {
|
|
66
76
|
let res;
|
|
67
77
|
try {
|
|
68
78
|
res = await fetch(BASE + p, {
|
|
@@ -82,6 +92,14 @@ async function api(method, p, body) {
|
|
|
82
92
|
process.exit(1);
|
|
83
93
|
}
|
|
84
94
|
const raw = await res.text();
|
|
95
|
+
if (res.status === 404 && soft404) {
|
|
96
|
+
console.error(
|
|
97
|
+
`ledger: the running cockpit does not serve ${method} ${p} (it predates this skill copy) — ` +
|
|
98
|
+
`using the local table ${FILE}. Skills are re-seeded at every boot, so a newer build ` +
|
|
99
|
+
`booted on this host can leave them ahead of the running server.`,
|
|
100
|
+
);
|
|
101
|
+
return null;
|
|
102
|
+
}
|
|
85
103
|
if (!res.ok) {
|
|
86
104
|
let msg = raw.slice(0, 300);
|
|
87
105
|
try {
|
|
@@ -131,7 +149,10 @@ function fmt(e, now) {
|
|
|
131
149
|
/** The rows a read works over: on-server, the server-scoped table (own group ∪
|
|
132
150
|
* public); off-server, the local file. */
|
|
133
151
|
async function visibleRows() {
|
|
134
|
-
if (useServer)
|
|
152
|
+
if (useServer) {
|
|
153
|
+
const r = await api("GET", "/ledger", undefined, { soft404: true });
|
|
154
|
+
if (r) return r.entries ?? [];
|
|
155
|
+
}
|
|
135
156
|
return loadFile(FILE);
|
|
136
157
|
}
|
|
137
158
|
|
|
@@ -199,13 +220,9 @@ async function doRecord(rest) {
|
|
|
199
220
|
public: f.public === true ? true : undefined,
|
|
200
221
|
};
|
|
201
222
|
|
|
202
|
-
|
|
203
|
-
|
|
204
|
-
|
|
205
|
-
// upsert to it, so a cross-group clobber is impossible by construction.
|
|
206
|
-
row = (await api("POST", "/ledger/record", patch)).row;
|
|
207
|
-
} else {
|
|
208
|
-
// Off-server fallback: write the local file directly (mono-tenant / hand-run).
|
|
223
|
+
// Off-server (or older-server) fallback: write the local file directly
|
|
224
|
+
// (mono-tenant / hand-run / a build that does not serve the route).
|
|
225
|
+
const recordLocally = () => {
|
|
209
226
|
const rows0 = loadFile(FILE);
|
|
210
227
|
let next;
|
|
211
228
|
try {
|
|
@@ -219,8 +236,29 @@ async function doRecord(rest) {
|
|
|
219
236
|
console.error(String(e?.message ?? e));
|
|
220
237
|
process.exit(2);
|
|
221
238
|
}
|
|
222
|
-
|
|
223
|
-
|
|
239
|
+
try {
|
|
240
|
+
saveFile(FILE, next);
|
|
241
|
+
} catch (e) {
|
|
242
|
+
// Worth naming rather than a stack: on a multi-tenant instance the table
|
|
243
|
+
// is 0600 in the SERVER's home, so a dropped agent cannot write it — the
|
|
244
|
+
// row is lost and a human has to update/restart the instance.
|
|
245
|
+
console.error(
|
|
246
|
+
`ledger: could not write ${FILE} — ${e?.message ?? e}. The record was NOT saved; ` +
|
|
247
|
+
`tell the operator (the cockpit is older than this skill copy, see invariant 57).`,
|
|
248
|
+
);
|
|
249
|
+
process.exit(1);
|
|
250
|
+
}
|
|
251
|
+
return byId ? resolveId(next, f.id) : next.find((r) => normEntity(r.entity) === normEntity(f.entity));
|
|
252
|
+
};
|
|
253
|
+
|
|
254
|
+
let row;
|
|
255
|
+
if (useServer) {
|
|
256
|
+
// The server stamps the authoring group (from the session) and scopes the
|
|
257
|
+
// upsert to it, so a cross-group clobber is impossible by construction.
|
|
258
|
+
const r = await api("POST", "/ledger/record", patch, { soft404: true });
|
|
259
|
+
row = r ? r.row : recordLocally();
|
|
260
|
+
} else {
|
|
261
|
+
row = recordLocally();
|
|
224
262
|
}
|
|
225
263
|
|
|
226
264
|
const k = rowKind(row);
|
package/dist/agent-login.js
CHANGED
|
@@ -73,7 +73,14 @@ function tmux(args, input) {
|
|
|
73
73
|
}
|
|
74
74
|
function capture(session) {
|
|
75
75
|
try {
|
|
76
|
-
|
|
76
|
+
// `-J` rejoins visually WRAPPED lines. The login OAuth URL (the full
|
|
77
|
+
// claude.ai scope set) is long enough to wrap the pane, and without `-J`
|
|
78
|
+
// `capture-pane` returns the wrap as two lines — so `parseSetupTokenUrl`'s
|
|
79
|
+
// `\S+` stops at the newline and hands back a TRUNCATED URL (no `state`, no
|
|
80
|
+
// `code_challenge_method`), which claude.com rejects as an invalid OAuth
|
|
81
|
+
// request. Width alone is not a safe fix (a longer URL wraps again); `-J`
|
|
82
|
+
// reassembles whatever the width.
|
|
83
|
+
return tmux(["capture-pane", "-t", session, "-p", "-J"]);
|
|
77
84
|
}
|
|
78
85
|
catch {
|
|
79
86
|
return "";
|
package/dist/agent-login.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agent-login.js","sourceRoot":"","sources":["../src/agent-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,kFAAkF;AAClF,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAC;AACjC,gEAAgE;AAChE,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,4EAA4E;AAC5E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,YAAY,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;QAC/B,OAAO;YACL,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY;YAC1B,SAAS,EAAE,OAAO,CAAC,CAAC,qBAAqB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI;SACxF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAYD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;AAEtC,SAAS,IAAI,CAAC,IAAc,EAAE,KAAc;IAC1C,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE;QAChC,QAAQ,EAAE,MAAM;QAChB,KAAK;QACL,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAC1B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"agent-login.js","sourceRoot":"","sources":["../src/agent-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,kFAAkF;AAClF,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAC;AACjC,gEAAgE;AAChE,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,4EAA4E;AAC5E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,YAAY,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;QAC/B,OAAO;YACL,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY;YAC1B,SAAS,EAAE,OAAO,CAAC,CAAC,qBAAqB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI;SACxF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAYD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;AAEtC,SAAS,IAAI,CAAC,IAAc,EAAE,KAAc;IAC1C,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE;QAChC,QAAQ,EAAE,MAAM;QAChB,KAAK;QACL,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAC1B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,IAAI,CAAC;QACH,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,kCAAkC;QAClC,OAAO,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,qEAAqE;AACrE,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC;QAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7B,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,IAAY;IAEZ,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IACzF,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,aAAa,EAAE;QAClB,OAAO,EAAE,KAAK,EAAE,sEAAsE,EAAE,CAAC;IAE3F,wEAAwE;IACxE,8EAA8E;IAC9E,wEAAwE;IACxE,+EAA+E;IAC/E,yEAAyE;IACzE,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACtD,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG;QACV,KAAK;QACL,GAAG,KAAK;QACR,QAAQ,IAAI,EAAE;QACd,QAAQ,IAAI,EAAE;QACd,WAAW,IAAI,EAAE;QACjB,qBAAqB;QACrB,uBAAuB;QACvB,IAAI,CAAC,GAAG;QACR,GAAG,IAAI,CAAC,IAAI;KACb;SACE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;SACnD,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,IAAI,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,6BAA6B,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,CAAC,GAAS;QACd,IAAI;QACJ,IAAI;QACJ,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC;QAC3B,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;KAC9D,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QAChG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,IAAI,GAAG,EAAE,CAAC;YACR,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;YACZ,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,IAAY;IAEZ,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yDAAyD,EAAE,CAAC;IACzF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAExD,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IAEjE,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxF,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM;QACpD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,0EAA0E;QAC1E,qEAAqE;QACrE,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC;YACrC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,2BAA2B;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,+CAA+C;YACjD,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0DAA0D,EAAE,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;YACf,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,2EAA2E;YAC3E,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU;gBACrC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;gBACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;AACvE,CAAC"}
|
package/dist/server.js
CHANGED
|
@@ -7374,6 +7374,25 @@ try {
|
|
|
7374
7374
|
catch {
|
|
7375
7375
|
/* best effort — the CTA still starts an agent, just without the role */
|
|
7376
7376
|
}
|
|
7377
|
+
/**
|
|
7378
|
+
* Do we rewrite the machine-wide skill scripts at this boot?
|
|
7379
|
+
*
|
|
7380
|
+
* The skills below are seeded OUTSIDE the running tree — the server user's
|
|
7381
|
+
* `~/.claude/skills`, plus `/etc/claude-code/.claude/skills` in multi-tenant —
|
|
7382
|
+
* and they are rewritten at EVERY boot. That is what makes a merged SKILL.md
|
|
7383
|
+
* reach existing agents with no reload, and it is also a trap: a build started
|
|
7384
|
+
* side by side to verify a change (the sanctioned way, see CLAUDE.md "Running
|
|
7385
|
+
* YOUR build") rewrites the shared skills UNDER the running production server,
|
|
7386
|
+
* leaving every agent on the host with scripts newer than the server they call.
|
|
7387
|
+
* Measured: the ledger skill began posting a route the running build did not
|
|
7388
|
+
* serve, so `record` answered 404 host-wide while `check` kept working — a
|
|
7389
|
+
* half-broken tool, which is worse than a broken one (invariant 57).
|
|
7390
|
+
*
|
|
7391
|
+
* `SHADOK_SEED_SKILLS=0` is the fourth property of a safe side-by-side run,
|
|
7392
|
+
* next to `PORT`, `SHADOK_VERSION_CHECK_MIN=0` and the per-dir Telegram token.
|
|
7393
|
+
* Default ON: an ordinary boot must keep refreshing them.
|
|
7394
|
+
*/
|
|
7395
|
+
const SEED_SKILLS = (process.env.SHADOK_SEED_SKILLS ?? "").trim() !== "0";
|
|
7377
7396
|
// Install/refresh the bundled "shadok-scheduler" skill so agents can set up
|
|
7378
7397
|
// their own channel's crons in plain language. Server-owned, overwritten each
|
|
7379
7398
|
// boot to stay current.
|
|
@@ -7398,7 +7417,8 @@ function seedSchedulerSkill() {
|
|
|
7398
7417
|
/* best effort — scheduling still works via the GUI/Telegram/API */
|
|
7399
7418
|
}
|
|
7400
7419
|
}
|
|
7401
|
-
|
|
7420
|
+
if (SEED_SKILLS)
|
|
7421
|
+
seedSchedulerSkill();
|
|
7402
7422
|
// Install/refresh the bundled "shadok-secrets" skill, so an agent that obtains
|
|
7403
7423
|
// a credential can keep it for the next one. Server-owned, overwritten each
|
|
7404
7424
|
// boot to stay current — same contract as the scheduler skill above.
|
|
@@ -7420,7 +7440,8 @@ function seedSecretsSkill() {
|
|
|
7420
7440
|
/* best effort — the vault still works from the GUI and Telegram */
|
|
7421
7441
|
}
|
|
7422
7442
|
}
|
|
7423
|
-
|
|
7443
|
+
if (SEED_SKILLS)
|
|
7444
|
+
seedSecretsSkill();
|
|
7424
7445
|
// Install/refresh the bundled "shadok-reload" skill so an agent can respawn
|
|
7425
7446
|
// itself to pick up a changed pilot prompt or newly-seeded skills. Server-owned,
|
|
7426
7447
|
// overwritten each boot — same contract as the skills above.
|
|
@@ -7440,7 +7461,8 @@ function seedReloadSkill() {
|
|
|
7440
7461
|
/* best effort — no self-reload skill just means a manual restart, never a crash */
|
|
7441
7462
|
}
|
|
7442
7463
|
}
|
|
7443
|
-
|
|
7464
|
+
if (SEED_SKILLS)
|
|
7465
|
+
seedReloadSkill();
|
|
7444
7466
|
// Install/refresh the bundled "shadok-ledger" skill so agents can verify a
|
|
7445
7467
|
// status before asserting/acting, and record resolutions. Server-owned,
|
|
7446
7468
|
// overwritten each boot — same contract as the skills above. Seeded regardless
|
|
@@ -7462,7 +7484,8 @@ function seedLedgerSkill() {
|
|
|
7462
7484
|
/* best effort — an absent skill just means no ledger, never a crash */
|
|
7463
7485
|
}
|
|
7464
7486
|
}
|
|
7465
|
-
|
|
7487
|
+
if (SEED_SKILLS)
|
|
7488
|
+
seedLedgerSkill();
|
|
7466
7489
|
/**
|
|
7467
7490
|
* The `shadok-files` skill — handing a file to the person driving the cockpit.
|
|
7468
7491
|
*
|
|
@@ -7486,7 +7509,8 @@ function seedFilesSkill() {
|
|
|
7486
7509
|
/* best effort — a missing skill means paths get printed, not a broken boot */
|
|
7487
7510
|
}
|
|
7488
7511
|
}
|
|
7489
|
-
|
|
7512
|
+
if (SEED_SKILLS)
|
|
7513
|
+
seedFilesSkill();
|
|
7490
7514
|
// Install/refresh the bundled "shadok-ai-agents" skill so an agent in ANY repo
|
|
7491
7515
|
// (not just this one) can spawn/pilot other agents via pilotctl. It used to live
|
|
7492
7516
|
// only in the repo's .claude/skills — a project skill invisible to agents working
|
|
@@ -7508,13 +7532,18 @@ function seedAgentsSkill() {
|
|
|
7508
7532
|
/* best effort — no agents skill just means no cross-agent piloting, never a crash */
|
|
7509
7533
|
}
|
|
7510
7534
|
}
|
|
7511
|
-
|
|
7535
|
+
if (SEED_SKILLS)
|
|
7536
|
+
seedAgentsSkill();
|
|
7512
7537
|
// Multi-tenant: also install every skill machine-wide (Enterprise tier), so the
|
|
7513
7538
|
// per-tenant `sk-*` agents — which run under their own HOME, not the server's —
|
|
7514
7539
|
// get them without a per-HOME copy. Mono-tenant/dev keeps the personal install
|
|
7515
7540
|
// above and never touches /etc.
|
|
7516
|
-
if (DEPLOYMENT_MODE === "multi-tenant")
|
|
7541
|
+
if (DEPLOYMENT_MODE === "multi-tenant" && SEED_SKILLS)
|
|
7517
7542
|
seedSystemSkills();
|
|
7543
|
+
// Say it: a boot that did NOT refresh the shared skills must be visible, or a
|
|
7544
|
+
// side-by-side run and a broken seed look the same in the log.
|
|
7545
|
+
if (!SEED_SKILLS)
|
|
7546
|
+
console.log("skills: SHADOK_SEED_SKILLS=0 — left the machine-wide skills alone");
|
|
7518
7547
|
/** Run a package-manager install. Linux managers need root; if we aren't root,
|
|
7519
7548
|
* go through NON-interactive sudo so a password prompt fails fast rather than
|
|
7520
7549
|
* hanging the boot. brew (needsRoot:false) must never be sudo'd. */
|