@wipcomputer/wip-ldm-os 0.4.76 → 0.4.77

package/SKILL.md

@@ -9,7 +9,7 @@ license: MIT
 compatibility: Requires git, npm, node. Node.js 18+.
 metadata:
   display-name: "LDM OS"
-  version: "0.4.76"
+  version: "0.4.77"
   homepage: "https://github.com/wipcomputer/wip-ldm-os"
   author: "Parker Todd Brooks"
   category: infrastructure

package/lib/deploy.mjs

@@ -14,6 +14,7 @@ import {
   lstatSync, readlinkSync, unlinkSync, chmodSync, readdirSync,
   renameSync, rmSync, statSync, symlinkSync,
 } from 'node:fs';
+import { createHash } from 'node:crypto';
 import { join, basename, resolve, dirname } from 'node:path';
 import { tmpdir } from 'node:os';
 import { detectInterfaces, describeInterfaces, detectToolbox } from './detect.mjs';
@@ -750,6 +751,45 @@ function installCLI(repoPath, door) {
   }
 }
 
+// Stable content hash over a directory tree. Used by deployExtension to
+// decide whether to skip a redeploy. Before this, deployExtension skipped
+// when source and deployed had equal versions ... but a prior partial
+// install could have bumped the package.json without finishing the copy,
+// leaving deployed package.json "current" while other files (guard.mjs,
+// core.mjs, etc.) were stale. The 2026-04-20 wip-release 1.9.74 -> 1.9.75
+// rollout hit that (source core.mjs had runNpmPublish, deployed didn't,
+// both package.jsons reported 1.9.75). Skip only when versions match AND
+// content hashes match; otherwise redeploy to heal the drift.
+function computeTreeHash(dir) {
+  if (!existsSync(dir)) return null;
+  const skipNames = new Set([
+    '.git', 'node_modules', 'ai', '_trash', '.worktrees', 'logs', 'test', 'tests', '__tests__',
+  ]);
+  const hash = createHash('sha256');
+  function walk(d, rel) {
+    let entries;
+    try { entries = readdirSync(d, { withFileTypes: true }); }
+    catch { return; }
+    entries.sort((a, b) => a.name.localeCompare(b.name));
+    for (const e of entries) {
+      if (skipNames.has(e.name)) continue;
+      const p = join(d, e.name);
+      const r = rel ? `${rel}/${e.name}` : e.name;
+      if (e.isDirectory()) walk(p, r);
+      else if (e.isFile()) {
+        try {
+          hash.update(r);
+          hash.update('\0');
+          hash.update(readFileSync(p));
+          hash.update('\0');
+        } catch {}
+      }
+    }
+  }
+  walk(dir, '');
+  return hash.digest('hex');
+}
+
 function deployExtension(repoPath, name) {
   const sourcePkg = readJSON(join(repoPath, 'package.json'));
   const ldmDest = join(LDM_EXTENSIONS, name);
@@ -759,18 +799,28 @@ function deployExtension(repoPath, name) {
 
   const cmp = compareSemver(newVersion, currentVersion);
   if (newVersion && currentVersion && cmp <= 0) {
-    skip(`LDM: ${name} already at v${currentVersion}${cmp < 0 ? ` (source is older: v${newVersion})` : ''}`);
-    // Ensure OC copy exists too
-    const ocName = resolveOcPluginName(repoPath, name);
-    const ocDest = join(OC_EXTENSIONS, ocName);
-    if (!existsSync(ocDest) && !DRY_RUN) {
-      mkdirSync(ocDest, { recursive: true });
-      cpSync(ldmDest, ocDest, { recursive: true });
-      ok(`OpenClaw: synced to ${ocDest}`);
-    } else {
-      skip(`OpenClaw: ${ocName} already at v${currentVersion}`);
+    // Versions equal or deployed is newer. Verify content hash before
+    // short-circuiting ... a prior partial install could have bumped
+    // package.json but not copied the other files, leaving deployed
+    // apparently "current" while code is stale.
+    const srcHash = computeTreeHash(repoPath);
+    const dstHash = computeTreeHash(ldmDest);
+    if (srcHash && dstHash && srcHash === dstHash) {
+      skip(`LDM: ${name} already at v${currentVersion}${cmp < 0 ? ` (source is older: v${newVersion})` : ''}`);
+      // Ensure OC copy exists too
+      const ocName = resolveOcPluginName(repoPath, name);
+      const ocDest = join(OC_EXTENSIONS, ocName);
+      if (!existsSync(ocDest) && !DRY_RUN) {
+        mkdirSync(ocDest, { recursive: true });
+        cpSync(ldmDest, ocDest, { recursive: true });
+        ok(`OpenClaw: synced to ${ocDest}`);
+      } else {
+        skip(`OpenClaw: ${ocName} already at v${currentVersion}`);
+      }
+      return true;
     }
-    return true;
+    // Content differs despite matching version; fall through to redeploy.
+    ok(`LDM: ${name} v${currentVersion} reports same version but content differs; redeploying`);
   }
 
   if (DRY_RUN) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ldm-os",
-  "version": "0.4.76",
+  "version": "0.4.77",
   "type": "module",
   "description": "LDM OS: identity, memory, and sovereignty infrastructure for AI agents",
   "engines": {