docs: add skills setup summary for 2026-02-14

memory/skills-setup-2026-02-14.md

@@ -0,0 +1,85 @@
+Summary of coordinated actions (2026-02-14)
+
+Purpose: Prepare OpenClaw environment so openclaw-expert (Mike) can reliably run repairs and `openclaw doctor --fix`.
+
+What I accomplished:
+- Created idempotent installer script: scripts/install-cli-tools.sh
+  - Installs ripgrep (rg), jq, gh, Node (18 LTS) and pnpm via npm. Verifies presence.
+- Created gateway service helper and entrypoint:
+  - scripts/fix-gateway-service.sh: generates suggested systemd unit and prints sudo commands to apply it and ensure single instance.
+  - scripts/gateway-entrypoint.sh: wrapper that sets PATH (includes /usr/local/bin and node_modules/.bin) and starts gateway using available entrypoint.
+- Created docs indexing script: scripts/build-doc-index.sh
+  - Uses rg to produce docs JSON index and sqlite3 to build an FTS table if sqlite3 present.
+- Committed scripts to repo.
+
+Findings / current state:
+- Gateway runtime files in repo: gateway/ (contains tls/). No explicit systemd unit found inside repo. .openclaw contains openclaw.json and workspace files.
+- Unable to inspect systemd units or running services from this environment; commands to manage services are provided but must be run with sudo by a human.
+
+Risk assessment and order of operations (Dev-gandalf):
+1) Permissions: ensure systemd unit runs as 'openclaw2' (or configured service user). Confirm ownership of /home/openclaw2/openclaw2 and adjust with sudo chown -R if needed. Risk: wrong owner can allow privilege escalation or fail to start. Mitigation: verify before chown.
+2) Service unit fixes: provide a safe service file that sets PATH and a wrapper entrypoint. Risk: incorrect ExecStart may leave service down. Mitigation: service is disabled until enabled; test with systemctl start and check logs.
+3) Tokens / pairing: verify credentials in credentials/ and .openclaw/identity. Do not overwrite tokens. Risk: accidental token rotation; Mitigation: backup current files before doctor step.
+4) openclaw doctor --fix: run in report-only mode first (if available) to show changes. Only apply fixes after review and backups.
+
+Ops-harry actionable edits & sudo commands:
+- Suggested systemd unit (generated by scripts/fix-gateway-service.sh). To apply as sudo:
+  sudo mv ./openclaw-gateway.service.suggested /etc/systemd/system/openclaw-gateway.service
+  sudo systemctl daemon-reload
+  sudo systemctl enable --now openclaw-gateway.service
+  sudo systemctl status openclaw-gateway.service
+- To ensure single instance (run if needed):
+  sudo pgrep -a -f openclaw | xargs -r sudo kill
+  sudo systemctl restart openclaw-gateway.service
+- If PATH issues persist, check service Environment in unit and the scripts/gateway-entrypoint.sh wrapper.
+
+Auto-alfred: verification steps and idempotent installs:
+- Run (as sudo): scripts/install-cli-tools.sh
+- Non-sudo verification (can be run by CI/user): which rg jq gh node pnpm
+- If npm global install fails due to permission, recommend using npm config set prefix or install pnpm via corepack: corepack enable && corepack prepare pnpm@latest --activate
+
+Doc-inquisitor + Doc-lexicanum actions:
+- Build JSON index: scripts/build-doc-index.sh (requires rg and optionally sqlite3 + python3)
+- Integrate with openclaw-docs skill: copy workspace/docs-index.json into skill's expected path (./skills/openclaw-docs/data/) and restart skill or service.
+- Verify sample query: rg -n "doctor --fix" docs || sqlite3 workspace/docs-index.db "SELECT path FROM docs WHERE docs MATCH 'doctor';"
+
+Safe run plan for openclaw doctor --fix:
+1) Backup current .openclaw/openclaw.json and identity/ and credentials/:
+   sudo cp -a .openclaw/openclaw.json .openclaw/openclaw.json.bak
+   sudo tar -czf /tmp/openclaw-credentials-backup-2026-02-14.tgz credentials .openclaw/identity
+2) Run openclaw doctor in dry/report mode (if available):
+   /home/openclaw2/openclaw2/node_modules/.bin/openclaw doctor --report
+   (or) openclaw doctor --dry-run
+3) Review report, then run with --fix and capture logs:
+   /home/openclaw2/openclaw2/node_modules/.bin/openclaw doctor --fix | tee /tmp/openclaw-doctor-fix-2026-02-14.log
+
+Commands the human must run (sudo):
+- Apply service unit and start gateway:
+  sudo bash scripts/fix-gateway-service.sh
+  # then follow the printed commands (mv, daemon-reload, enable --now)
+
+- Install system packages (one-liner):
+  sudo bash scripts/install-cli-tools.sh
+
+- Build docs index (after installing rg):
+  bash scripts/build-doc-index.sh
+
+- Backup secrets before doctor:
+  sudo cp -a .openclaw/openclaw.json .openclaw/openclaw.json.bak
+  sudo tar -czf /tmp/openclaw-credentials-backup-2026-02-14.tgz credentials .openclaw/identity
+
+- Run doctor in report mode (non-sudo expected):
+  ./node_modules/.bin/openclaw doctor --report
+
+Notes for the main agent (Mike):
+- I could not interact with systemd or install packages from this environment; the scripts and suggested commands are prepared for the human to run with sudo.
+- After the human runs the sudo commands, re-run the doc indexing and doctor report and collect outputs to finalize the fix.
+
+Files added:
+- scripts/install-cli-tools.sh
+- scripts/fix-gateway-service.sh
+- scripts/gateway-entrypoint.sh
+- scripts/build-doc-index.sh
+- memory/skills-setup-2026-02-14.md (this file)
+
+End of report.