skimpyclaw 0.3.4 → 0.3.6

package/dist/__tests__/doctor.runner.test.js

@@ -1,5 +1,5 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest';
-const { mockLoadConfig, mockCheckNodeVersion, mockCheckPackageManagerAvailable, mockCheckTypeScriptCompile, mockCheckConfigExistsAndValidJson, mockCheckRequiredEnvVars, mockCheckEnvVarPatterns, mockCheckAllowedPathsWritable, mockCheckProviderAuth, mockCheckTelegramToken, mockCheckDiscordToken, mockCheckBrowserBinaryIfEnabled, mockCheckVoiceDependencies, mockCheckMcpConfig, mockCheckGatewayHostBindable, mockCheckSkimpyclawDirWritable, mockCheckPortAvailability, mockCheckSandboxAvailable, } = vi.hoisted(() => ({
+const { mockLoadConfig, mockCheckNodeVersion, mockCheckPackageManagerAvailable, mockCheckTypeScriptCompile, mockCheckConfigExistsAndValidJson, mockCheckRequiredEnvVars, mockCheckEnvVarPatterns, mockCheckAllowedPathsWritable, mockCheckProviderAuth, mockCheckTelegramToken, mockCheckDiscordToken, mockCheckBrowserBinaryIfEnabled, mockCheckPlaywrightIfBrowserEnabled, mockCheckVoiceDependencies, mockCheckMcpConfig, mockCheckGatewayHostBindable, mockCheckSkimpyclawDirWritable, mockCheckPortAvailability, mockCheckSandboxAvailable, } = vi.hoisted(() => ({
     mockLoadConfig: vi.fn(),
     mockCheckNodeVersion: vi.fn(),
     mockCheckPackageManagerAvailable: vi.fn(),
@@ -12,6 +12,7 @@ const { mockLoadConfig, mockCheckNodeVersion, mockCheckPackageManagerAvailable,
     mockCheckTelegramToken: vi.fn(),
     mockCheckDiscordToken: vi.fn(),
     mockCheckBrowserBinaryIfEnabled: vi.fn(),
+    mockCheckPlaywrightIfBrowserEnabled: vi.fn(),
     mockCheckVoiceDependencies: vi.fn(),
     mockCheckMcpConfig: vi.fn(),
     mockCheckGatewayHostBindable: vi.fn(),
@@ -34,6 +35,7 @@ vi.mock('../doctor/checks.js', () => ({
     checkTelegramToken: mockCheckTelegramToken,
     checkDiscordToken: mockCheckDiscordToken,
     checkBrowserBinaryIfEnabled: mockCheckBrowserBinaryIfEnabled,
+    checkPlaywrightIfBrowserEnabled: mockCheckPlaywrightIfBrowserEnabled,
     checkVoiceDependencies: mockCheckVoiceDependencies,
     checkMcpConfig: mockCheckMcpConfig,
     checkGatewayHostBindable: mockCheckGatewayHostBindable,
@@ -75,6 +77,7 @@ describe('doctor runner', () => {
         mockCheckTelegramToken.mockReset();
         mockCheckDiscordToken.mockReset();
         mockCheckBrowserBinaryIfEnabled.mockReset();
+        mockCheckPlaywrightIfBrowserEnabled.mockReset();
         mockCheckVoiceDependencies.mockReset();
         mockCheckMcpConfig.mockReset();
         mockCheckGatewayHostBindable.mockReset();
@@ -92,6 +95,7 @@ describe('doctor runner', () => {
         mockCheckTelegramToken.mockResolvedValue(okCheck('telegram_token_valid', 'channels'));
         mockCheckDiscordToken.mockResolvedValue(okCheck('discord_token_valid', 'channels'));
         mockCheckBrowserBinaryIfEnabled.mockResolvedValue(okCheck('browser_binary_available', 'runtime'));
+        mockCheckPlaywrightIfBrowserEnabled.mockResolvedValue(okCheck('playwright_installed', 'runtime', 'Browser tools disabled'));
         mockCheckVoiceDependencies.mockResolvedValue(okCheck('voice_dependencies', 'runtime', 'Voice disabled'));
         mockCheckMcpConfig.mockResolvedValue(okCheck('mcp_config', 'runtime', 'MCP tools not configured'));
         mockCheckGatewayHostBindable.mockResolvedValue(okCheck('gateway_host_bindable', 'runtime', '127.0.0.1 (always available)'));

package/dist/__tests__/package-manager-detection.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/package-manager-detection.test.js

@@ -0,0 +1,172 @@
+import { describe, expect, it, beforeEach, afterEach } from 'vitest';
+import { join } from 'path';
+import { mkdtempSync, writeFileSync, rmSync } from 'fs';
+import { tmpdir } from 'os';
+// Import the real functions (no mocks needed — these are pure fs reads)
+import { detectPackageManager, buildValidationCommand } from '../code-agents/executor.js';
+describe('detectPackageManager', () => {
+    let tempDir;
+    beforeEach(() => {
+        tempDir = mkdtempSync(join(tmpdir(), 'pm-detect-'));
+    });
+    afterEach(() => {
+        rmSync(tempDir, { recursive: true, force: true });
+    });
+    it('returns pnpm as fallback when no indicators present', () => {
+        expect(detectPackageManager(tempDir)).toBe('pnpm');
+    });
+    it('detects yarn from packageManager field', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            packageManager: 'yarn@4.1.0',
+        }));
+        expect(detectPackageManager(tempDir)).toBe('yarn');
+    });
+    it('detects pnpm from packageManager field', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            packageManager: 'pnpm@9.0.0',
+        }));
+        expect(detectPackageManager(tempDir)).toBe('pnpm');
+    });
+    it('detects npm from packageManager field', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            packageManager: 'npm@10.0.0',
+        }));
+        expect(detectPackageManager(tempDir)).toBe('npm');
+    });
+    it('detects bun from packageManager field', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            packageManager: 'bun@1.0.0',
+        }));
+        expect(detectPackageManager(tempDir)).toBe('bun');
+    });
+    it('detects yarn from yarn.lock', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({ name: 'test' }));
+        writeFileSync(join(tempDir, 'yarn.lock'), '');
+        expect(detectPackageManager(tempDir)).toBe('yarn');
+    });
+    it('detects pnpm from pnpm-lock.yaml', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({ name: 'test' }));
+        writeFileSync(join(tempDir, 'pnpm-lock.yaml'), '');
+        expect(detectPackageManager(tempDir)).toBe('pnpm');
+    });
+    it('detects npm from package-lock.json', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({ name: 'test' }));
+        writeFileSync(join(tempDir, 'package-lock.json'), '{}');
+        expect(detectPackageManager(tempDir)).toBe('npm');
+    });
+    it('detects bun from bun.lockb', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({ name: 'test' }));
+        writeFileSync(join(tempDir, 'bun.lockb'), '');
+        expect(detectPackageManager(tempDir)).toBe('bun');
+    });
+    it('detects bun from bun.lock', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({ name: 'test' }));
+        writeFileSync(join(tempDir, 'bun.lock'), '');
+        expect(detectPackageManager(tempDir)).toBe('bun');
+    });
+    it('packageManager field takes priority over lockfile', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            packageManager: 'yarn@4.1.0',
+        }));
+        // Also has a pnpm lockfile — packageManager should win
+        writeFileSync(join(tempDir, 'pnpm-lock.yaml'), '');
+        expect(detectPackageManager(tempDir)).toBe('yarn');
+    });
+    it('handles malformed package.json gracefully', () => {
+        writeFileSync(join(tempDir, 'package.json'), 'not valid json{{{');
+        expect(detectPackageManager(tempDir)).toBe('pnpm');
+    });
+    // wp-calypso case: yarn project with yarn.lock
+    it('detects yarn for wp-calypso-like project', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'wp-calypso',
+            scripts: { build: 'yarn build:client', test: 'jest' },
+        }));
+        writeFileSync(join(tempDir, 'yarn.lock'), '# yarn lockfile v1\n');
+        expect(detectPackageManager(tempDir)).toBe('yarn');
+    });
+});
+describe('buildValidationCommand', () => {
+    let tempDir;
+    beforeEach(() => {
+        tempDir = mkdtempSync(join(tmpdir(), 'pm-cmd-'));
+    });
+    afterEach(() => {
+        rmSync(tempDir, { recursive: true, force: true });
+    });
+    it('returns pnpm build && pnpm test for pnpm project with both scripts', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            scripts: { build: 'tsc', test: 'vitest' },
+        }));
+        writeFileSync(join(tempDir, 'pnpm-lock.yaml'), '');
+        expect(buildValidationCommand(tempDir)).toBe('pnpm build && pnpm test');
+    });
+    it('returns yarn build && yarn test for yarn project with both scripts', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            scripts: { build: 'tsc', test: 'jest' },
+        }));
+        writeFileSync(join(tempDir, 'yarn.lock'), '');
+        expect(buildValidationCommand(tempDir)).toBe('yarn build && yarn test');
+    });
+    it('returns npm run build && npm run test for npm project with both scripts', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            scripts: { build: 'tsc', test: 'jest' },
+        }));
+        writeFileSync(join(tempDir, 'package-lock.json'), '{}');
+        expect(buildValidationCommand(tempDir)).toBe('npm run build && npm run test');
+    });
+    it('returns bun build && bun test for bun project with both scripts', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            scripts: { build: 'bun build', test: 'bun test' },
+        }));
+        writeFileSync(join(tempDir, 'bun.lockb'), '');
+        expect(buildValidationCommand(tempDir)).toBe('bun build && bun test');
+    });
+    it('returns only test command when build script is missing', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            scripts: { test: 'jest' },
+        }));
+        writeFileSync(join(tempDir, 'yarn.lock'), '');
+        expect(buildValidationCommand(tempDir)).toBe('yarn test');
+    });
+    it('returns only build command when test script is missing', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            scripts: { build: 'tsc' },
+        }));
+        writeFileSync(join(tempDir, 'yarn.lock'), '');
+        expect(buildValidationCommand(tempDir)).toBe('yarn build');
+    });
+    it('falls back to both commands when no package.json exists', () => {
+        // No package.json, no lockfile → pnpm fallback
+        expect(buildValidationCommand(tempDir)).toBe('pnpm build && pnpm test');
+    });
+    it('falls back to both commands when scripts object is empty', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'test',
+            scripts: {},
+        }));
+        writeFileSync(join(tempDir, 'yarn.lock'), '');
+        expect(buildValidationCommand(tempDir)).toBe('yarn build && yarn test');
+    });
+    // wp-calypso scenario
+    it('generates yarn commands for wp-calypso-like project', () => {
+        writeFileSync(join(tempDir, 'package.json'), JSON.stringify({
+            name: 'wp-calypso',
+            packageManager: 'yarn@4.5.0',
+            scripts: { build: 'yarn workspaces foreach build', test: 'jest' },
+        }));
+        writeFileSync(join(tempDir, 'yarn.lock'), '# yarn lockfile v1\n');
+        expect(buildValidationCommand(tempDir)).toBe('yarn build && yarn test');
+    });
+});

package/dist/__tests__/setup.test.js

@@ -128,8 +128,9 @@ describe('setup config generation', () => {
                 cronWeather: true,
                 timezone: 'America/New_York',
                 weatherLocation: 'Austin, TX',
-                skillCodeReview: true,
                 skillDailyNotes: true,
+                skillWeather: true,
+                skillWebSearch: false,
             },
         });
         expect(config.cron.jobs).toHaveLength(2);
@@ -138,7 +139,7 @@ describe('setup config generation', () => {
         expect(config.cron.jobs[1].schedule.tz).toBe('America/New_York');
         expect(config.cron.jobs[1].payload.message).toContain('Austin, TX');
         expect(config.skills.enabled).toBe(true);
-        expect(config.skills.entries['code-review']).toBe(true);
         expect(config.skills.entries['daily-notes']).toBe(true);
+        expect(config.skills.entries['weather']).toBe(true);
     });
 });

package/dist/cli.js

@@ -780,10 +780,18 @@ function sandboxImageExists(runtime, image) {
     return spawnSync(runtime, ['image', 'inspect', image], { encoding: 'utf-8' }).status === 0;
 }
 function resolveSandboxDir() {
+    // 1. Check CWD (user is in repo root)
     const cwdSandbox = join(process.cwd(), 'sandbox');
     if (existsSync(join(cwdSandbox, 'Dockerfile'))) {
         return cwdSandbox;
     }
+    // 2. Check relative to package root (global/npm install)
+    const thisFile = fileURLToPath(import.meta.url);
+    const pkgRoot = join(thisFile, '..', '..'); // dist/src/cli.js -> repo root
+    const pkgSandbox = join(pkgRoot, 'sandbox');
+    if (existsSync(join(pkgSandbox, 'Dockerfile'))) {
+        return pkgSandbox;
+    }
     return null;
 }
 function parseSandboxOption(args, flag) {
@@ -942,7 +950,30 @@ async function commandSandbox(args) {
         }
         return failed ? 1 : 0;
     }
-    console.log('Usage: skimpyclaw sandbox <status|prune|init|doctor>');
+    console.log(`Usage: skimpyclaw sandbox <command>
+
+Commands:
+  init     Build sandbox image and enable in config
+  status   List active sandbox containers
+  prune    Remove orphaned sandbox containers
+  doctor   Run targeted sandbox diagnostics
+
+Init options:
+  --runtime <container|docker>   Container runtime (default: auto-detect)
+  --profile <minimal|dev|full>   Package set (default: minimal)
+  --image <name>                 Image name (default: skimpyclaw-sandbox:latest)
+  --network <name>               Network name (default: auto per runtime)
+
+Profiles:
+  minimal   bash, curl, git, gh, jq, python3, ripgrep, pnpm
+  dev       minimal + gcc, g++, make
+  full      dev + pip3, sqlite3, unzip, less
+
+Which runtime?
+  Apple Containers (macOS 26+) — lighter, faster startup, no daemon.
+  Docker — cross-platform, use if you already run Docker.
+  Auto-detect prefers Apple Containers, falls back to Docker.
+`);
     return 1;
 }
 export async function runCli(argv = process.argv.slice(2)) {
@@ -951,6 +982,17 @@ export async function runCli(argv = process.argv.slice(2)) {
         printHelp();
         return 0;
     }
+    if (command === '--version' || command === '-v' || command === 'version') {
+        const pkgPath = join(fileURLToPath(import.meta.url), '..', '..', 'package.json');
+        try {
+            const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+            console.log(`skimpyclaw v${pkg.version}`);
+        }
+        catch {
+            console.log('skimpyclaw (version unknown)');
+        }
+        return 0;
+    }
     try {
         if (command === 'start') {
             if (args.includes('--daemon')) {

package/dist/code-agents/executor.d.ts

@@ -1,4 +1,20 @@
 import type { CodeAgentBackgroundOptions, ValidationResult } from './types.js';
+/** Supported JS package managers. */
+export type PackageManager = 'pnpm' | 'yarn' | 'npm' | 'bun';
+/**
+ * Detect the package manager for a project directory.
+ * Detection order (first match wins):
+ * 1. package.json `packageManager` field (e.g. "yarn@4.1.0")
+ * 2. Lockfile presence: yarn.lock → yarn, pnpm-lock.yaml → pnpm, bun.lockb / bun.lock → bun, package-lock.json → npm
+ * 3. Fallback: 'pnpm' (SkimpyClaw default)
+ */
+export declare function detectPackageManager(workdir: string): PackageManager;
+/**
+ * Build the validation command for a project directory.
+ * Checks for `build` and `test` scripts in package.json, then runs them
+ * with the detected package manager. Falls back to `<pm> build && <pm> test`.
+ */
+export declare function buildValidationCommand(workdir: string): string;
 /** Run build/test validation. Shared by solo agents and team orchestrator. */
 export declare function runValidation(workdir: string): Promise<ValidationResult>;
 /** Background execution of a coding agent. Updates task status throughout. */

package/dist/code-agents/executor.js

@@ -1,6 +1,6 @@
 // Code Agent Executor - Background execution logic
 import { spawn, exec } from 'child_process';
-import { createWriteStream } from 'fs';
+import { createWriteStream, existsSync, readFileSync } from 'fs';
 import { join } from 'path';
 // SKIMPYCLAW_ROOT for log paths
 const SKIMPYCLAW_ROOT = join(import.meta.dirname || process.cwd(), '..', '..');
@@ -12,10 +12,83 @@ import { startTrace, addEvent, endTrace } from '../audit.js';
 import { buildUsageRecord, recordUsage } from '../usage.js';
 import { ensureContainer, SANDBOX_DEFAULTS, getRuntime } from '../sandbox/index.js';
 const CANCELLED_MESSAGE = 'Cancelled by user';
+/**
+ * Detect the package manager for a project directory.
+ * Detection order (first match wins):
+ * 1. package.json `packageManager` field (e.g. "yarn@4.1.0")
+ * 2. Lockfile presence: yarn.lock → yarn, pnpm-lock.yaml → pnpm, bun.lockb / bun.lock → bun, package-lock.json → npm
+ * 3. Fallback: 'pnpm' (SkimpyClaw default)
+ */
+export function detectPackageManager(workdir) {
+    // 1. Check package.json packageManager field
+    try {
+        const pkgPath = join(workdir, 'package.json');
+        if (existsSync(pkgPath)) {
+            const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+            if (typeof pkg.packageManager === 'string') {
+                const name = pkg.packageManager.split('@')[0].toLowerCase();
+                if (name === 'yarn')
+                    return 'yarn';
+                if (name === 'pnpm')
+                    return 'pnpm';
+                if (name === 'npm')
+                    return 'npm';
+                if (name === 'bun')
+                    return 'bun';
+            }
+        }
+    }
+    catch { /* ignore parse errors, fall through */ }
+    // 2. Check lockfiles
+    if (existsSync(join(workdir, 'yarn.lock')))
+        return 'yarn';
+    if (existsSync(join(workdir, 'pnpm-lock.yaml')))
+        return 'pnpm';
+    if (existsSync(join(workdir, 'bun.lockb')) || existsSync(join(workdir, 'bun.lock')))
+        return 'bun';
+    if (existsSync(join(workdir, 'package-lock.json')))
+        return 'npm';
+    // 3. Fallback
+    return 'pnpm';
+}
+/**
+ * Build the validation command for a project directory.
+ * Checks for `build` and `test` scripts in package.json, then runs them
+ * with the detected package manager. Falls back to `<pm> build && <pm> test`.
+ */
+export function buildValidationCommand(workdir) {
+    const pm = detectPackageManager(workdir);
+    const run = pm === 'npm' ? 'npm run' : pm;
+    // Check which scripts exist in package.json
+    let hasBuild = false;
+    let hasTest = false;
+    try {
+        const pkgPath = join(workdir, 'package.json');
+        if (existsSync(pkgPath)) {
+            const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+            const scripts = pkg.scripts || {};
+            hasBuild = !!scripts.build;
+            hasTest = !!scripts.test;
+        }
+    }
+    catch { /* ignore */ }
+    const parts = [];
+    if (hasBuild)
+        parts.push(`${run} build`);
+    if (hasTest)
+        parts.push(`${run} test`);
+    // If neither build nor test scripts exist, still try — the scripts
+    // might be defined in a workspace root or the commands may work anyway
+    if (parts.length === 0) {
+        parts.push(`${run} build`, `${run} test`);
+    }
+    return parts.join(' && ');
+}
 /** Run build/test validation. Shared by solo agents and team orchestrator. */
 export function runValidation(workdir) {
+    const cmd = buildValidationCommand(workdir);
     return new Promise((resolve) => {
-        exec('pnpm build && pnpm test', {
+        exec(cmd, {
             cwd: workdir,
             timeout: VALIDATE_TIMEOUT_MS,
             maxBuffer: 5 * 1024 * 1024,
@@ -242,8 +315,9 @@ export async function runCodeAgentBackground(id, agent, task, workdir, validate,
             caTask.outputPreview = agentOutput.slice(0, 500);
             caTask.liveOutput = undefined;
             writeCodeAgentTask(caTask);
+            const validationCmd = buildValidationCommand(workdir);
             const runValidationPromise = () => new Promise((res) => {
-                const validationProc = exec('pnpm build && pnpm test', {
+                const validationProc = exec(validationCmd, {
                     cwd: workdir,
                     timeout: VALIDATE_TIMEOUT_MS,
                     maxBuffer: 5 * 1024 * 1024,

package/dist/code-agents/utils.js

@@ -2,6 +2,7 @@
 import { execSync } from 'child_process';
 import { resolve, join } from 'path';
 import { homedir } from 'os';
+import { buildValidationCommand } from './executor.js';
 // Resolve CLI paths once at import time so spawn doesn't get ENOENT
 function resolveCliPath(name) {
     try {
@@ -113,7 +114,7 @@ export function buildCodeAgentArgs(input) {
         '--mcp-config', playwrightMcp,
         ...toolArgs,
         '--max-turns', maxTurns,
-        '--append-system-prompt', 'Output text only. Never use say or TTS. Focus on the coding task. Run pnpm build && pnpm test to verify changes.',
+        '--append-system-prompt', `Output text only. Never use say or TTS. Focus on the coding task. Run ${buildValidationCommand(input.workdir || process.cwd())} to verify changes.`,
     ];
     // Only pass model to Claude CLI if it's not a known non-Claude model.
     // GPT/Codex/Kimi/o-series models would be rejected by the Claude CLI.
@@ -152,6 +153,10 @@ export function buildTeamNotification(task, getChildTask) {
             lines.push(`  ${childIcon} ${child.id} (${childDur}): ${subtask}`);
         }
     }
+    // Synthesis result
+    if (task.outputPreview) {
+        lines.push(`\nResult: ${task.outputPreview}`);
+    }
     // Errors
     if (task.error && task.error !== 'Validation failed') {
         lines.push(`\nError: ${task.error}`);
@@ -169,8 +174,7 @@ export function buildSoloNotification(task) {
         const validation = task.validationPassed ? ' Build/tests pass.' : '';
         let message = `✅ Coding agent ${task.id} completed (${dur}).${validation}\n\nTask: ${taskPreview}`;
         if (task.outputPreview) {
-            const preview = task.outputPreview.slice(0, 300);
-            message += `\n\nResult: ${preview}`;
+            message += `\n\nResult: ${task.outputPreview}`;
         }
         return message;
     }

package/dist/doctor/checks.d.ts

@@ -12,6 +12,7 @@ export declare function checkTelegramToken(token: string): Promise<DoctorCheckRe
 export declare function checkDiscordToken(token: string): Promise<DoctorCheckResult>;
 export declare function checkBrowserBinaryIfEnabled(config: Config): Promise<DoctorCheckResult>;
 export declare function checkVoiceDependencies(config: Config): Promise<DoctorCheckResult>;
+export declare function checkPlaywrightIfBrowserEnabled(config: Config): Promise<DoctorCheckResult>;
 export declare function checkMcpConfig(config: Config): Promise<DoctorCheckResult>;
 export declare function checkGatewayHostBindable(host: string): Promise<DoctorCheckResult>;
 export declare function checkSkimpyclawDirWritable(): Promise<DoctorCheckResult>;

package/dist/doctor/checks.js

@@ -274,16 +274,32 @@ export async function checkVoiceDependencies(config) {
     if (ffmpeg.status !== 0) {
         issues.push('ffmpeg not found');
     }
-    // Check for whisper-cli (C++) or whisper (Python)
+    // Check for STT: local whisper OR API provider
     const whisperCli = spawnSync('which', ['whisper-cli'], { encoding: 'utf-8' });
     const whisperPy = spawnSync('which', ['whisper'], { encoding: 'utf-8' });
-    if (whisperCli.status !== 0 && whisperPy.status !== 0) {
-        issues.push('whisper not found (neither whisper-cli nor whisper)');
+    const hasLocalWhisper = whisperCli.status === 0 || whisperPy.status === 0;
+    // Check if any API STT provider is configured
+    const hasApiStt = Object.values(config.voice?.providers || {}).some((p) => p && typeof p === 'object' && 'stt' in p);
+    if (!hasLocalWhisper && !hasApiStt) {
+        issues.push('No STT available — install whisper-cli (brew install whisper-cpp) or configure an API STT provider (e.g. openai.stt)');
     }
     if (issues.length > 0) {
-        return fail(name, category, issues.join('; '), 'Install ffmpeg and whisper-cli (or whisper) for voice features.');
+        return fail(name, category, issues.join('; '), 'Install ffmpeg, and either whisper-cli (brew install whisper-cpp) or add openai.stt to voice providers.');
     }
-    return ok(name, category, 'ffmpeg and whisper available');
+    const sttMethod = hasLocalWhisper ? (whisperCli.status === 0 ? 'whisper-cli' : 'whisper') : 'API STT';
+    return ok(name, category, `ffmpeg and ${sttMethod} available`);
+}
+export async function checkPlaywrightIfBrowserEnabled(config) {
+    const name = 'playwright_installed';
+    const category = 'runtime';
+    if (!isAnyBrowserEnabled(config)) {
+        return ok(name, category, 'Browser tools disabled');
+    }
+    const pw = spawnSync('npx', ['playwright', '--version'], { encoding: 'utf-8', timeout: 10000 });
+    if (pw.status === 0) {
+        return ok(name, category, `Playwright ${(pw.stdout || '').trim()}`);
+    }
+    return fail(name, category, 'Playwright not installed', 'Run: npx playwright install chromium');
 }
 export async function checkMcpConfig(config) {
     const name = 'mcp_config';

package/dist/doctor/runner.js

@@ -1,5 +1,5 @@
 import { loadConfig } from '../config.js';
-import { checkNodeVersion, checkPackageManagerAvailable, checkTypeScriptCompile, checkConfigExistsAndValidJson, checkRequiredEnvVars, checkEnvVarPatterns, checkAllowedPathsWritable, checkProviderAuth, checkTelegramToken, checkDiscordToken, checkBrowserBinaryIfEnabled, checkVoiceDependencies, checkMcpConfig, checkGatewayHostBindable, checkSkimpyclawDirWritable, checkPortAvailability, checkSandboxAvailable, } from './checks.js';
+import { checkNodeVersion, checkPackageManagerAvailable, checkTypeScriptCompile, checkConfigExistsAndValidJson, checkRequiredEnvVars, checkEnvVarPatterns, checkAllowedPathsWritable, checkProviderAuth, checkTelegramToken, checkDiscordToken, checkBrowserBinaryIfEnabled, checkPlaywrightIfBrowserEnabled, checkVoiceDependencies, checkMcpConfig, checkGatewayHostBindable, checkSkimpyclawDirWritable, checkPortAvailability, checkSandboxAvailable, } from './checks.js';
 export function computeExitCode(report) {
     if (report.checks.some((check) => !check.ok && check.fatal)) {
         return 2;
@@ -99,6 +99,7 @@ export async function runDoctor() {
         }
     }
     checks.push(await runSafe('browser_binary_available', 'runtime', () => checkBrowserBinaryIfEnabled(config)));
+    checks.push(await runSafe('playwright_installed', 'runtime', () => checkPlaywrightIfBrowserEnabled(config)));
     checks.push(await runSafe('voice_dependencies', 'runtime', () => checkVoiceDependencies(config)));
     checks.push(await runSafe('mcp_config', 'runtime', () => checkMcpConfig(config)));
     checks.push(await runSafe('gateway_host_bindable', 'runtime', () => checkGatewayHostBindable(config.gateway.host ?? '127.0.0.1')));

package/dist/setup.d.ts

@@ -21,8 +21,9 @@ interface SetupStarters {
     cronWeather: boolean;
     timezone: string;
     weatherLocation: string;
-    skillCodeReview: boolean;
     skillDailyNotes: boolean;
+    skillWeather: boolean;
+    skillWebSearch: boolean;
 }
 interface SetupBuildInput {
     workspaceDir: string;

package/dist/setup.js

@@ -460,17 +460,20 @@ export function buildSetupConfig(input) {
         cronWeather: false,
         timezone: Intl.DateTimeFormat().resolvedOptions().timeZone || 'UTC',
         weatherLocation: 'New York, NY',
-        skillCodeReview: false,
         skillDailyNotes: false,
+        skillWeather: false,
+        skillWebSearch: false,
     };
     const basePaths = ['${HOME}/.skimpyclaw'];
     const allPaths = [...basePaths, ...(input.extraAllowedPaths || [])];
     const starterCronJobs = buildStarterCronJobs(starters);
     const starterSkillEntries = {};
-    if (starters.skillCodeReview)
-        starterSkillEntries['code-review'] = true;
     if (starters.skillDailyNotes)
         starterSkillEntries['daily-notes'] = true;
+    if (starters.skillWeather)
+        starterSkillEntries['weather'] = true;
+    if (starters.skillWebSearch)
+        starterSkillEntries['web-search'] = true;
     return {
         gateway: {
             port: 18790,
@@ -595,19 +598,6 @@ const REQUIRED_TEMPLATE_DEFAULTS = {
     'HEARTBEAT.md': '# HEARTBEAT\n\nIf nothing needs attention, reply HEARTBEAT_OK.\n',
 };
 const STARTER_SKILL_TEMPLATES = {
-    'code-review': `---
-name: code-review
-description: Structured code review checklist for bugs, regressions, and missing tests.
-triggers: ["review", "pr", "regression", "tests"]
-priority: 80
----
-
-When asked to review code:
-1. Focus on correctness and regressions first.
-2. Call out missing or weak test coverage.
-3. Prefer concrete file-level findings.
-4. End with risk summary and recommended fixes.
-`,
     'daily-notes': `---
 name: daily-notes
 description: Keep daily notes organized under the configured daily notes directory.
@@ -620,6 +610,36 @@ When writing daily notes:
 2. Include sections: Priorities, Schedule, Notes, Follow-ups.
 3. Keep entries concise and actionable.
 4. Avoid creating files outside the configured daily notes directory.
+`,
+    'weather': `---
+name: weather
+description: Fetch and format weather data for daily briefings and quick checks.
+triggers: ["weather", "forecast", "temperature", "rain"]
+priority: 45
+---
+
+When asked about weather or generating a daily briefing:
+1. Use web search to find current weather for the user's location.
+2. Format as: conditions, high/low temps, precipitation chance.
+3. Keep it to 2-3 sentences max.
+4. Include any weather alerts if present.
+5. For daily briefings: mention if rain is expected (affects outdoor plans).
+`,
+    'web-search': `---
+name: web-search
+description: Search the web using the Browser tool. Opens DuckDuckGo, reads results, and returns findings.
+triggers: ["search", "look up", "google", "find online", "web search"]
+priority: 50
+---
+
+When asked to search the web:
+1. Use the Browser tool to open https://html.duckduckgo.com/html/?q=<URL-encoded query>
+2. Use getText to read the search results page.
+3. If a specific result looks promising, open that URL and extract the relevant content.
+4. Summarize findings concisely — include source URLs.
+5. Close the browser when done.
+
+Do NOT fabricate results. If the search returns nothing useful, say so.
 `,
 };
 function ensureCoreTemplates(agentDir) {
@@ -638,10 +658,12 @@ function ensureStarterSkills(starters) {
     const skillsDir = join(CONFIG_DIR, 'skills');
     mkdirSync(skillsDir, { recursive: true });
     const requested = [];
-    if (starters.skillCodeReview)
-        requested.push('code-review');
     if (starters.skillDailyNotes)
         requested.push('daily-notes');
+    if (starters.skillWeather)
+        requested.push('weather');
+    if (starters.skillWebSearch)
+        requested.push('web-search');
     for (const skillName of requested) {
         const dir = join(skillsDir, skillName);
         const skillPath = join(dir, 'SKILL.md');
@@ -876,6 +898,22 @@ export async function runSetup(options = {}) {
             else {
                 statusWarn('Chrome not found — browser tool may not work until Chrome is installed');
             }
+            // Check for Playwright
+            const pw = spawnSync('npx', ['playwright', '--version'], { encoding: 'utf-8', timeout: 10000 });
+            if (pw.status === 0) {
+                statusOk('Playwright detected');
+            }
+            else {
+                console.log('');
+                console.log('   ┌─────────────────────────────────────────────────────────┐');
+                console.log('   │  Browser tool requires Playwright. Install it:          │');
+                console.log('   │                                                         │');
+                console.log('   │    npx playwright install chromium                      │');
+                console.log('   │                                                         │');
+                console.log('   │  Without this, the browser tool will fail at runtime.   │');
+                console.log('   └─────────────────────────────────────────────────────────┘');
+                console.log('');
+            }
         }
         else {
             statusOk('browser disabled');
@@ -891,6 +929,32 @@ export async function runSetup(options = {}) {
             else {
                 statusWarn('ffmpeg not found — voice features may not work until ffmpeg is installed');
             }
+            // Check for STT (speech-to-text) capability
+            const whisperCli = spawnSync('which', ['whisper-cli'], { encoding: 'utf-8' });
+            const whisperPy = spawnSync('which', ['whisper'], { encoding: 'utf-8' });
+            if (whisperCli.status === 0) {
+                statusOk('whisper-cli detected (whisper.cpp)');
+            }
+            else if (whisperPy.status === 0) {
+                statusOk('whisper detected (Python)');
+            }
+            else {
+                console.log('');
+                console.log('   ┌─────────────────────────────────────────────────────────┐');
+                console.log('   │  Voice transcription (STT) requires one of:             │');
+                console.log('   │                                                         │');
+                console.log('   │  Option A: Local whisper.cpp (free, recommended)        │');
+                console.log('   │    brew install whisper-cpp                             │');
+                console.log('   │    whisper-cpp-download-ggml-model small                │');
+                console.log('   │                                                         │');
+                console.log('   │  Option B: OpenAI Whisper API ($0.006/min)              │');
+                console.log('   │    Add OPENAI_API_KEY to ~/.skimpyclaw/.env             │');
+                console.log('   │    Config auto-includes openai.stt if provider selected │');
+                console.log('   │                                                         │');
+                console.log('   │  Without either, voice messages cannot be transcribed.  │');
+                console.log('   └─────────────────────────────────────────────────────────┘');
+                console.log('');
+            }
         }
         else {
             statusOk('voice disabled');
@@ -953,15 +1017,17 @@ export async function runSetup(options = {}) {
             const locationInput = await ask(rl, '   Weather location (city, state/country) [New York, NY]: ');
             weatherLocation = locationInput || 'New York, NY';
         }
-        const addCodeReviewSkill = /^y(es)?$/i.test(await ask(rl, '   Add starter skill: code-review? [y/N]: '));
         const addDailyNotesSkill = /^y(es)?$/i.test(await ask(rl, '   Add starter skill: daily-notes? [y/N]: '));
+        const addWeatherSkill = /^y(es)?$/i.test(await ask(rl, '   Add starter skill: weather? [y/N]: '));
+        const addWebSearchSkill = /^y(es)?$/i.test(await ask(rl, '   Add starter skill: web-search (uses Browser tool)? [y/N]: '));
         const starters = {
             cronTechNews: addTechNewsCron,
             cronWeather: addWeatherCron,
             timezone: cronTimezone,
             weatherLocation,
-            skillCodeReview: addCodeReviewSkill,
             skillDailyNotes: addDailyNotesSkill,
+            skillWeather: addWeatherSkill,
+            skillWebSearch: addWebSearchSkill,
         };
         const { envContent, config: generatedConfig } = buildSetupArtifacts({
             workspaceDir: extraAllowedPaths[0] || join(homedir(), '.skimpyclaw'),

package/dist/tools/browser-tool.js

@@ -97,7 +97,7 @@ async function ensureBrowser(config, overrides) {
                 '--no-first-run',
                 '--no-default-browser-check',
             ],
-            ignoreDefaultArgs: ['--enable-automation'],
+            ignoreDefaultArgs: ['--enable-automation', '--no-sandbox'],
         });
     }
     catch (err) {

package/dist/tools/definitions.js

@@ -142,7 +142,7 @@ export const CODE_WITH_AGENT_TOOL = {
             model: { type: 'string', description: 'Model override (e.g. opus, gpt-5.3-codex)' },
             max_turns: { type: 'number', description: 'Max agentic turns, Claude only (default: 30)' },
             timeout_minutes: { type: 'number', description: 'Timeout in minutes (default: 10, max: 30)' },
-            validate: { type: 'boolean', description: 'Run pnpm build && pnpm test after (default: true)' },
+            validate: { type: 'boolean', description: 'Run build && test after completion using the auto-detected package manager (default: true)' },
         },
         required: ['task'],
     },
@@ -159,7 +159,7 @@ export const CODE_WITH_TEAM_TOOL = {
             agent: { type: 'string', enum: ['claude', 'codex', 'kimi'], description: 'Which coding CLI to use for all team workers. Omit to use configured default.' },
             model: { type: 'string', description: 'Model override (e.g. claude-sonnet-4-5, gpt-5.3-codex)' },
             timeout_minutes: { type: 'number', description: 'Total timeout in minutes (default: 20, max: 60)' },
-            validate: { type: 'boolean', description: 'Run pnpm build && pnpm test after all agents complete (default: true)' },
+            validate: { type: 'boolean', description: 'Run build && test after all agents complete using the auto-detected package manager (default: true)' },
         },
         required: ['task'],
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skimpyclaw",
-  "version": "0.3.4",
+  "version": "0.3.6",
   "description": "Lightweight personal AI assistant with Telegram and Discord integration",
   "type": "module",
   "main": "dist/index.js",
@@ -10,30 +10,12 @@
   },
   "files": [
     "dist",
+    "sandbox",
     "templates",
     "com.skimpyclaw.gateway.plist.example",
     "README.md",
     "LICENSE"
   ],
-  "scripts": {
-    "cli": "tsx src/cli.ts",
-    "start": "tsx src/index.ts",
-    "dev": "tsx watch src/index.ts",
-    "dashboard:dev": "pnpm --dir web/dashboard dev",
-    "dashboard:build": "pnpm --dir web/dashboard install --frozen-lockfile && pnpm --dir web/dashboard build",
-    "docs:dev": "pnpm --dir docs dev",
-    "docs:build": "pnpm --dir docs install --frozen-lockfile && pnpm --dir docs build",
-    "docs:preview": "pnpm --dir docs preview",
-    "setup": "tsx src/setup.ts",
-    "onboard": "tsx src/cli.ts onboard",
-    "build": "tsc && pnpm dashboard:build",
-    "release:check": "pnpm build && pnpm test",
-    "release:local": "bash ./scripts/release.sh",
-    "lint": "eslint \"src/**/*.ts\"",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "ci": "pnpm run lint && pnpm run typecheck && pnpm run test"
-  },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.52.0",
     "@grammyjs/runner": "^2.0.3",
@@ -55,11 +37,6 @@
     "openai": "^4.47.0",
     "playwright": "^1.49.0"
   },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "esbuild"
-    ]
-  },
   "devDependencies": {
     "@eslint/js": "^9.39.2",
     "@types/node": "^20.11.0",
@@ -69,5 +46,24 @@
     "typescript": "^5.4.0",
     "typescript-eslint": "^8.54.0",
     "vitest": "^4.0.18"
+  },
+  "scripts": {
+    "cli": "tsx src/cli.ts",
+    "start": "tsx src/index.ts",
+    "dev": "tsx watch src/index.ts",
+    "dashboard:dev": "pnpm --dir web/dashboard dev",
+    "dashboard:build": "pnpm --dir web/dashboard install --frozen-lockfile && pnpm --dir web/dashboard build",
+    "docs:dev": "pnpm --dir docs dev",
+    "docs:build": "pnpm --dir docs install --frozen-lockfile && pnpm --dir docs build",
+    "docs:preview": "pnpm --dir docs preview",
+    "setup": "tsx src/setup.ts",
+    "onboard": "tsx src/cli.ts onboard",
+    "build": "tsc && pnpm dashboard:build",
+    "release:check": "pnpm build && pnpm test",
+    "release:local": "bash ./scripts/release.sh",
+    "lint": "eslint \"src/**/*.ts\"",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "ci": "pnpm run lint && pnpm run typecheck && pnpm run test"
   }
-}
+}

package/sandbox/Dockerfile

@@ -0,0 +1,40 @@
+FROM node:22-slim
+
+ARG SKIMPY_PROFILE=minimal
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    bash \
+    ca-certificates \
+    curl \
+    git \
+    gnupg \
+    jq \
+    python3 \
+    ripgrep \
+  && mkdir -p /etc/apt/keyrings \
+  && curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+    | gpg --dearmor -o /etc/apt/keyrings/githubcli-archive-keyring.gpg \
+  && chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
+  && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+    > /etc/apt/sources.list.d/github-cli.list \
+  && apt-get update \
+  && apt-get install -y --no-install-recommends gh \
+  && if [ "$SKIMPY_PROFILE" = "dev" ] || [ "$SKIMPY_PROFILE" = "full" ]; then \
+      apt-get install -y --no-install-recommends build-essential make gcc g++ pkg-config; \
+    fi \
+  && if [ "$SKIMPY_PROFILE" = "full" ]; then \
+      apt-get install -y --no-install-recommends python3-pip sqlite3 unzip less; \
+    fi \
+  && rm -rf /var/lib/apt/lists/*
+
+# Install pnpm globally (Claude Code not needed inside sandbox)
+RUN npm install -g pnpm
+
+# Create non-root user matching typical macOS uid/gid
+RUN groupadd -g 20 sandboxgrp || true \
+  && useradd -m -s /bin/bash -u 501 -g 20 sandbox || true
+
+USER sandbox
+WORKDIR /workspace
+
+CMD ["sleep", "infinity"]