drop another .md file to compare - side-by-side diff against maintenance

maintenance

Runs regular health checks so your tools keep working.

description: "Triggers on prompt mention of 'maintenance'."

personal 2 files 10 recent evals

Export

What it does for you

Runs regular health checks so your tools keep working.

What it produces

A recent result, so you can see the kind of work it returns.

loading…

How to get it

These run inside the Snappy workspace. Want this working in your business? I set skills like this up with you, in one focused week.

Work with me

For developers how this skill is built, graded, and how it runs

at a glance- the short version

actorExported functions in state/lib/maintenance.ts.

auditorNone wired yet - eval is manual (Robert review).

eval modeshape

categoryOps

stages2

what's inside - the parts that make up a skill 3/4 present

A skill is just a few plain-text files. Only the main one is required. The rest are optional, added as the work needs them. This is what the skill is made of; how it runs is just below.

The skill

state/skills/maintenance/SKILL.md present

the skill itself, in plain text

The main file. It says what the skill is and lays out the steps in plain English.

Code

state/lib/maintenance.ts present

code the skill can run

Reusable code this skill can call when it needs to.

Scripts

state/bin/maintenance/ not present

helper scripts

Optional. Added when a skill has a few commands to run.

Loader

state/skills/maintenance/AGENTS.md present

what the AI loads on the fly

Loaded automatically the moment this skill is needed. Kept short on purpose.

how it's graded - what counts as a good run 4 criteria · 4 deterministic

Each row is one thing a good run has to get right. deterministic means a quick check decides, pass or fail. judge means the AI reads the result and rates it. Grading each piece on its own (instead of one overall score) shows exactly where a run fell short, so the fix is obvious.

name

kind

check

checkurl_execution

deterministic

The log file 'state/log/pending-eval.ndjson' contains a record for 'checkUrl()' execution with a successful outcome.

checkssl_execution

deterministic

The log file 'state/log/pending-eval.ndjson' contains a record for 'checkSsl()' execution with a successful outcome.

checkallprojects_execution

deterministic

The log file 'state/log/pending-eval.ndjson' contains a record for 'checkAllProjects()' execution with a successful outcome.

log_entry_freshness

deterministic

The timestamp in 'state/log/pending-eval.ndjson' for the skill execution is recent and corresponds to the current run.

how it runs - the shared frame every skill uses 5/5 present

Every skill runs the same way. One part does the work, a separate part checks it, and a short loader hands the AI exactly what it needs for the job. Anything this skill doesn't use shows a one-line note saying why, on purpose, not by accident.

makes the work The worker

present

Exported functions in state/lib/maintenance.ts. the worker

Does the actual work. Whatever it produces is what gets checked next.

checks the work The reviewer

present

None wired yet - eval is manual (Robert review). the checker

A separate checker grades the work, so the part that made it can't approve its own work.

frame

learns Self-correction

present

fixes itself learns from gaps

When a run hits a gap, the skill gets edited on the spot [FIXED] or queued for a bigger rewrite [LOGGED], so it keeps getting better.

tidies up Background fixes

present

queued for rewrite runs in the background

Bigger fixes that can't be made on the spot get queued and rewritten in the background later.

remembers Run history

present

state/log/pending-eval.ndjson pending runs

Every run is written down here, then reviewed by hand each week.

Critical rules the things this skill must not get wrong

No must-not-break rules called out for this skill. Anything important lives in the writeup below.

what it has learned - fixes written back in over time sample

When a run hits something this skill didn't handle, the fix gets written back into the skill so it doesn't happen again. FIXED means it was corrected on the spot. LOGGED means it's queued for a bigger rewrite. Either way, the skill gets a little better and never makes the same mistake twice.

Loading feedback rows…

how the work flows- who makes it, who checks it

actor Exported functions in state/lib/maintenance.ts.

1 generator

invoke

actor = Exported functions in state/lib/maintenance.ts.

import from `state/lib/maintenance.ts` — `checkUrl()`, `checkSsl()`, `checkAllProjects()

+ eval for this step

auditor None wired yet - eval is manual (Robert review).

2 data

eval log

`state/log/pending-eval.ndjson` (manual review until shape gate added)

+ eval for this step

SKILL.md- the skill, written out in plain English

maintenance

Project health checks across all Snappy infrastructure.

Ported from kernel snappy-maintenance in Phase 0.5. See state/lib/maintenance.ts for the full API surface.

Steps

checkUrl() - see state/lib/maintenance.ts
checkSsl() - see state/lib/maintenance.ts
checkAllProjects() - see state/lib/maintenance.ts

Eval

Actor: the exported functions in state/lib/maintenance.ts. Auditor: none wired yet - eval is manual (Robert review). File a state/log/pending-eval.ndjson row on each run.

Score convention:

Outcome	Score
Pass on first try	1.0
Failed first, auto-fix applied, re-check passed	0.5
Still failing or unrecoverable	0.0

Gotchas

via the Phase 0.5 driver. Only these rewrites were applied: already in state/lib/)

realpathSync(process.argv[1]) CLI guard wrapped in try/catch

See the kernel SKILL.md for the original long-form guidance if you need it

(read-only reference at the kernel path above).

Graduation

This skill is prose. Graduate by defining a deterministic auditor and flipping eval: auto.

Rubric

criteria:
  - name: checkurl_execution
    kind: deterministic
    check: "The log file 'state/log/pending-eval.ndjson' contains a record for 'checkUrl()' execution with a successful outcome."
  - name: checkssl_execution
    kind: deterministic
    check: "The log file 'state/log/pending-eval.ndjson' contains a record for 'checkSsl()' execution with a successful outcome."
  - name: checkallprojects_execution
    kind: deterministic
    check: "The log file 'state/log/pending-eval.ndjson' contains a record for 'checkAllProjects()' execution with a successful outcome."
  - name: log_entry_freshness
    kind: deterministic
    check: "The timestamp in 'state/log/pending-eval.ndjson' for the skill execution is recent and corresponds to the current run."

AGENTS.md- what the AI loads when this skill comes up

maintenance - loader

Per-turn rules for the maintenance skill. Full reference: state/skills/maintenance/SKILL.md. Do not skip these.

Critical Rules

_(no failures recorded yet - this skill is a Phase 0.5 mechanical port from snappy-maintenance with no hard-won rules. Read state/skills/maintenance/SKILL.md and state/lib/maintenance.ts before invoking. Eval is manual until an auditor is wired.)_

Commands

| ui dashboard | state/skills/maintenance/resources/ui.openui | |invoke: import from state/lib/maintenance.ts - checkUrl(), checkSsl(), checkAllProjects() |eval log: state/log/pending-eval.ndjson (manual review until shape gate added)

OpenUI Resource

Skill-owned OpenUI Lang resource: state/skills/maintenance/resources/ui.openui. Read it before rendering or editing this skill's generated component surface.
Treat this resource as a first-class artifact of the skill, not a generic chat response. Improve it when the skill's user-facing output needs to become richer.
System resources compose OpenUI primitives and inherit SnappyChat tokens. Use ui_contract: branded in SKILL.md only for deliberate platform or client visuals.

Known Pitfalls

Skill frontmatter says eval: shape but no auditor is wired - log to pending-eval.ndjson
Confused with snappy-os doctor (lint sweep, separate from this) - doctor runs state/lint/*.ts, this skill checks external HTTP/SSL targets

Self-Test

An agent reading this should correctly:

[ ] Distinguish this skill (URL/SSL probes) from snappy-os doctor (lint sweep)?
[ ] Log to state/log/pending-eval.ndjson because no shape auditor exists yet?
[ ] Find the API surface in state/lib/maintenance.ts?

Self-report

If this loader fell short, append a line:

echo "[$(date -u +%FT%TZ)] maintenance: <what was missing>" >> state/log/loader-feedback.log

Self-correcting loader (PID feedback)

This is the rule that makes loaders learn. Ported from snappy-kernel, where it demonstrably worked: the snappy-dom-cartographer skill mapped Skool admin UI once, every later ship-agent inherited the full map for free.

Before you finish, do two things:

1. Fix gaps (P - proportional). MANDATORY. If this loader didn't cover your case - if you had to read another file, run an undocumented command, work around a wrong selector, or discover a quirk - you MUST attempt an Edit to this AGENTS.md before you log.

Default action: edit this file. Surgical. Add the missing line, table

row, or code example where it belongs. No restructuring.

Only LOGGED is allowed when: the fix needs >10 lines, spans multiple

files, or requires a structural rewrite. In that case the state/regen/drain.sh queue picks it up asynchronously.

"I didn't have time" / "it's minor" / "the next agent will figure it out"

are NOT valid reasons. Minor gaps compound - that's the whole point of this loop.

Concrete example of a valid P-fix: discover agent-browser screenshot

takes path positionally not as --output <path>. One line in a table. Edit it in. Do not just log it.

The goal: the next agent never has to leave the loader.

2. Log the result.

echo "[$(date -u +%FT%TZ)] maintenance: <what was missing or fixed> [FIXED|LOGGED]" >> state/log/loader-feedback.log

FIXED = you patched this loader inline (P-fix).
LOGGED = too large for inline; the PostToolUse enqueue + Stop-hook drain

will rewrite the loader from scratch on next session-end.

Do not skip this. Every agent run must leave the system better than it found it. The loader is the setpoint; you are the sensor; the gap is the error signal; closing the gap is the correction.

api.ts- the code it can call

#!/usr/bin/env npx tsx
/**
 * snappy-maintenance/api.ts -- Project health checks across all Snappy infrastructure.
 *
 * HTTP health probes, SSL expiry checks, and bulk project sweeps.
 *
 * Usage:
 *   npx tsx api.ts check https://total-crm.fly.dev/health
 *   npx tsx api.ts ssl total-crm.fly.dev
 *   npx tsx api.ts all
 *
 * Or import as module:
 *   import { checkUrl, checkSsl, checkAllProjects } from "./maintenance.ts";
 */

import { execSync } from "child_process";
import { env } from "./env.ts";
import { realpathSync } from "fs";

// KERNEL A4 EXCEPTION (non-DB skill referencing Xano URL):
// `xano-main` is an HTTP uptime probe target, not a Xano data call. It lives
// in the same list as fly.dev and cloudflare URLs and is fetched via plain
// `fetch()` in `checkUrl`. snappy-maintenance does not read or write Xano data
// anywhere — it only pings the `/me` endpoint to confirm the instance is up.
// Not a violation.
const KNOWN_PROJECTS: Record<string, string> = {
  "total-crm": "https://total-crm.fly.dev/health",
  "content-engine": "https://rb-content-engine.fly.dev/health",
  "skills-gateway": "https://skills.snappy.ai/.well-known/skills/index.json",
  "snappy-website": "https://snappy.ai",
  "xano-main": "https://xnwv-v1z6-dvnr.n7c.xano.io/api:e6emygx3/me",
  "box-server": "http://10.0.0.199:8080/health",
};

/** Check a URL and return status, ok flag, and latency. */
export async function checkUrl(url: string): Promise<{ url: string; status: number; ok: boolean; latencyMs: number; error?: string }> {
  const start = Date.now();
  try {
    const res = await fetch(url, { signal: AbortSignal.timeout(10_000) });
    return {
      url,
      status: res.status,
      ok: res.ok,
      latencyMs: Date.now() - start,
    };
  } catch (e: any) {
    return {
      url,
      status: 0,
      ok: false,
      latencyMs: Date.now() - start,
      error: e.message,
    };
  }
}

/** Check SSL certificate expiry for a domain. Returns days until expiry. */
export function checkSsl(domain: string): { domain: string; expiresIn: number; expiry: string; ok: boolean } {
  try {
    const raw = execSync(
      `echo | openssl s_client -servername ${domain} -connect ${domain}:443 2>/dev/null | openssl x509 -noout -enddate`,
      { encoding: "utf-8", timeout: 10_000 }
    ).trim();
    // Format: notAfter=Mar 15 12:00:00 2027 GMT
    const dateStr = raw.replace("notAfter=", "");
    const expiry = new Date(dateStr);
    const daysLeft = Math.floor((expiry.getTime() - Date.now()) / 86_400_000);
    return { domain, expiresIn: daysLeft, expiry: expiry.toISOString().slice(0, 10), ok: daysLeft > 14 };
  } catch (e: any) {
    return { domain, expiresIn: -1, expiry: "unknown", ok: false };
  }
}

/** Run health checks against all known project URLs. */
export async function checkAllProjects(): Promise<Record<string, { status: number; ok: boolean; latencyMs: number; error?: string }>> {
  const results: Record<string, { status: number; ok: boolean; latencyMs: number; error?: string }> = {};
  const checks = Object.entries(KNOWN_PROJECTS).map(async ([name, url]) => {
    const r = await checkUrl(url);
    results[name] = { status: r.status, ok: r.ok, latencyMs: r.latencyMs, error: r.error };
  });
  await Promise.all(checks);
  return results;
}

// --- CLI ---

if ((() => { try { return import.meta.url === `file://${realpathSync(process.argv[1])}`; } catch { return false; } })()) {
  (async () => {
    const [, , cmd, ...args] = process.argv;

    switch (cmd) {
      case "check": {
        const [url] = args;
        if (!url) { console.error("Usage: api.ts check <url>"); process.exit(1); }
        const result = await checkUrl(url);
        console.log(JSON.stringify(result, null, 2));
        break;
      }
      case "ssl": {
        const [domain] = args;
        if (!domain) { console.error("Usage: api.ts ssl <domain>"); process.exit(1); }
        console.log(JSON.stringify(checkSsl(domain), null, 2));
        break;
      }
      case "all": {
        const results = await checkAllProjects();
        for (const [name, r] of Object.entries(results)) {
          const icon = r.ok ? "OK" : "FAIL";
          console.log(`${icon}\t${name}\t${r.status}\t${r.latencyMs}ms${r.error ? "\t" + r.error : ""}`);
        }
        break;
      }
      default:
        console.log("Usage: npx tsx api.ts [check|ssl|all] ...");
    }
  })();
}

scripts- helper scripts it can run

prose-only skill - 1 inline code block live in SKILL.md above (no state/bin/ sidecar yet).

how we check it- the checks, plus the last 10 runs

rubric shape schema-shape check (no inline rubric)

recent mean 1.00 · 10 runs actor/auditor: unverifiable

deps none declared

timestamp	verb	score	primary_issue	artifact
2026-04-25 04:11Z	-	1.00	-	-
2026-04-21 15:59Z	-	1.00	-	-
2026-04-21 15:56Z	-	1.00	-	-
2026-04-21 03:53Z	-	1.00	-	-
2026-04-25 04:11Z	-	1.00	-	-
2026-04-21 15:59Z	-	1.00	-	-
2026-04-21 15:56Z	-	1.00	-	-
2026-04-21 03:53Z	-	1.00	-	-
2026-04-25 04:11Z	-	1.00	-	-
2026-04-21 15:59Z	-	1.00	-	-