gm-codex 2.0.956 → 2.0.958

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-codex",
-  "version": "2.0.956",
+  "version": "2.0.958",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": {
     "name": "AnEntrypoint",

package/bin/plugkit.sha256

@@ -1,6 +1,6 @@
-322a1149762ce77196e12ed43e6cb1b508fe79881ac9b977f5628d306def9d7e  plugkit-win32-x64.exe
-fef4cc7dcac3bb1445dc2db6e7686813f0ff85987149bb5189e5473e9a9de546  plugkit-win32-arm64.exe
-41701f43841581cf47dc608c4470e771889b24658b5997fa3eb66193dcbe1f3f  plugkit-darwin-x64
-7e3e79af802e5aa861f37c6abf367dfd636c22a2868a9ba12a5b2ac718581b5c  plugkit-darwin-arm64
-2578cbfaef623e15f70187a140197c0e9b2cf2126d973c768fe7c23e75c7fd5e  plugkit-linux-x64
-6b0023e89d117bee68d89991c0a931f3d91bc70c5bd1a855c9d2d658eb1d400f  plugkit-linux-arm64
+589901e0dbd74db2db6535b427f68597b4effa65f25d9daebdfeae824c1e3d0e  plugkit-win32-x64.exe
+0b3397d1c3f137bfd18f3de8e5761aff277980f3b4015e871f9605c6a8e70438  plugkit-win32-arm64.exe
+0345f10c867ec2bf61771faccf2e45362a34faa11b070799c7fcb6fab60fcbd8  plugkit-darwin-x64
+1f009e5be441ad2de6034cfb4a0d16783db7ba4f0f10394ba8fb297118258b83  plugkit-darwin-arm64
+cfcc0035526df5d8bbc571635c65df9f8c91861ee982aa6b9b0998b066975326  plugkit-linux-x64
+be04ce01e64f336dd8dff0de66e9b399edf154265673324342558131a4ffe744  plugkit-linux-arm64

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.323
+0.1.324

package/bin/rtk.sha256

@@ -1,5 +1,5 @@
-25a8fbf7bc1fa573853d24aa55fe210cdbfecbba210ca11c8dcae92eaaf5b4a5  rtk-win32-x64.exe
-9d0fb553b86081532676ed0008186d38a3731a336dd94f9d5804235df6857a5b  rtk-win32-arm64.exe
+31fb1e501f7074dd0ec8af8bcb1cfbb4161de17b834e94d8dc097e48b01667c4  rtk-win32-x64.exe
+c6005ea4404275858eadd39b1e8122157d24db4757f8ff2b7361c685ce7d5545  rtk-win32-arm64.exe
 1b1e792767ed0e1e6ca0e2f0a8de02e77b06dea2f5ae667278b94baf239fcdc3  rtk-darwin-x64
 9717978d9d6216ea50c94444e00e359479b6315a17bd48c16064b267c8b0b60d  rtk-darwin-arm64
 a100d3defac54194144e5723aec57e6f286b42298c67145c8428815246c9ee56  rtk-linux-x64

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.956",
+  "version": "2.0.958",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -23,5 +23,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.323"
+  "plugkitVersion": "0.1.324"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-codex",
-  "version": "2.0.956",
+  "version": "2.0.958",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.956",
+  "version": "2.0.958",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": {
     "name": "AnEntrypoint",

package/skills/gm/SKILL.md

@@ -50,12 +50,13 @@ N facts → N parallel calls in one message. End of turn: scan for un-memorized
 
 ## Execution order
 
-1. Recall (`exec:recall`) — cheapest
-2. Code execution (`exec:<lang>`, `exec:codesearch`) — 90% of unknowns
-3. Web (`WebFetch`, `WebSearch`) — env facts not in codebase
-4. User — last resort
+1. Recall (`exec:recall` via Bash) — cheapest
+2. Code execution — write to `.gm/exec-spool/in/<lang>/<N>.<ext>` (nodejs, python, bash, typescript, go, rust, c, cpp, java, deno); spool watcher runs and writes `out/<N>.json`
+3. Codebase search (`exec:codesearch` via Bash) — 90% of lookups
+4. Web (`WebFetch`, `WebSearch`) — env facts not in codebase
+5. User — last resort
 
-`exec:<lang>` only via Bash. Never `Bash(node/npm/npx/bun)`. `git push` triggers auto CI watch via Stop hook.
+Bash accepts ONLY git commands and utility verbs (`exec:recall`, `exec:codesearch`, `exec:memorize`, `exec:wait`, `exec:browser`, etc.). All code execution goes via the spool. Never `Bash(node/npm/npx/bun)`. `git push` triggers auto CI watch via Stop hook.
 
 Skill chain: `planning` → `gm-execute` → `gm-emit` → `gm-complete` → `update-docs`.
 

package/skills/gm-complete/SKILL.md

@@ -33,10 +33,9 @@ Failure triage: broken output to EMIT, wrong logic to EXECUTE, new unknown to PL
 
 ## End-to-end verification
 
-Real system, real data, witness actual output. Doc updates, "saying done", and screenshots alone are not verification.
+Real system, real data, witness actual output. Doc updates, "saying done", and screenshots alone are not verification. Write the e2e probe to the spool (`.gm/exec-spool/in/nodejs/<N>.js`):
 
 ```
-exec:nodejs
 const { fn } = await import('/abs/path/to/module.js');
 console.log(await fn(realInput));
 ```
@@ -59,8 +58,9 @@ Pre-flight: run `git diff --name-only origin/main..HEAD` and grep for `client/|d
 
 ## Integration test gate
 
+Write to `.gm/exec-spool/in/nodejs/<N>.js`:
+
 ```
-exec:nodejs
 const { execSync } = require('child_process');
 try { execSync('node test.js', { stdio: 'inherit', timeout: 30000 }); console.log('PASS'); }
 catch (e) { console.error('FAIL'); process.exit(1); }
@@ -70,8 +70,9 @@ Failure → `gm-execute`. No test.js in a repo with testable surface → `gm-exe
 
 ## Git enforcement
 
+Run directly via Bash:
+
 ```
-exec:bash
 git status --porcelain
 git log origin/main..HEAD --oneline
 ```

package/skills/gm-emit/SKILL.md

@@ -30,10 +30,9 @@ Any failure regresses to `gm-execute` to witness what was missing, or `planning`
 
 ## Pre-emit run
 
-Mandatory before writing any file.
+Mandatory before writing any file. Write the probe to the spool (`.gm/exec-spool/in/nodejs/<N>.js`):
 
 ```
-exec:nodejs
 const { fn } = await import('/abs/path/to/module.js');
 console.log(await fn(realInput));
 ```
@@ -42,7 +41,7 @@ Import the actual module from disk to witness current behavior as the baseline.
 
 ## Writing
 
-`exec:nodejs` with `require('fs')`. Write only when every gate mutable resolves simultaneously.
+Use the Write tool, or a nodejs spool file with `require('fs')`. Write only when every gate mutable resolves simultaneously.
 
 ## Post-emit verification
 

package/skills/gm-execute/SKILL.md

@@ -40,7 +40,7 @@ Spend on `.prd` items in descending order of consequence-if-wrong × distance-fr
 
 ## Code execution
 
-`exec:<lang>` only via Bash. Languages: nodejs (default), bash, python, typescript, go, rust, c, cpp, java, deno, cmd. File I/O via `exec:nodejs` + `require('fs')`. Git directly in Bash. Never `Bash(node/npm/npx/bun)`.
+Code runs through the file-spool, not Bash. Write a file to `.gm/exec-spool/in/<lang>/<N>.<ext>` (e.g. `in/nodejs/42.js`, `in/python/43.py`, `in/bash/44.sh`); the spool watcher executes and writes `out/<N>.json`; the result returns as systemMessage. Languages: nodejs (default), bash, python, typescript, go, rust, c, cpp, java, deno. File I/O via a nodejs spool file + `require('fs')`. Git directly in Bash. Utility verbs (`exec:recall`, `exec:codesearch`, `exec:memorize`, `exec:wait`, `exec:sleep`, `exec:browser`, etc.) DO run via Bash with the verb on line 1 and arg on line 2. Never `Bash(node/npm/npx/bun)`.
 
 Pack runs: `Promise.allSettled`, each idea own try/catch, under 12s per call. Runner: `exec:runner\n{start|stop|status}`.
 
@@ -61,10 +61,10 @@ Start two words, change/add one per pass, minimum four attempts before concludin
 
 ## Import-based execution
 
-Hypotheses become real by importing actual modules from disk. Reimplemented behavior is UNKNOWN.
+Hypotheses become real by importing actual modules from disk. Reimplemented behavior is UNKNOWN. Write the import probe to the spool:
 
 ```
-exec:nodejs
+# write .gm/exec-spool/in/nodejs/42.js
 const { fn } = await import('/abs/path/to/module.js');
 console.log(await fn(realInput));
 ```

package/skills/planning/SKILL.md

@@ -53,7 +53,7 @@ Every unknown surfaced during PLAN lands as an entry in `.gm/mutables.yml` the s
 
 ## .prd format
 
-Path: `./.gm/prd.yml`. Write via `exec:nodejs` + `fs.writeFileSync`. Delete the file when empty.
+Path: `./.gm/prd.yml`. Write via the Write tool or by emitting a nodejs spool file (`in/nodejs/<N>.js`) that calls `fs.writeFileSync`. Delete the file when empty.
 
 ```yaml
 - id: kebab-id
@@ -103,7 +103,7 @@ The 200 lines are a *budget* for maximum surface coverage, not a target. Subsyst
 
 ## Execution norms encoded in the plan
 
-`exec:<lang>` only via Bash; file I/O via `exec:nodejs` + `fs`; git directly in Bash; never `Bash(node/npm/npx/bun)`. Paths in `exec:nodejs` are platform-literal — use `os.tmpdir()` and `path.join`, reserve `/tmp/...` for `exec:bash` heredocs. Every `exec:<lang>` and `exec:bash` call passes `--timeout-ms <ms>`; on timeout, partial output is preserved and the runner emits `[exec timed out after Nms; partial output above]` — re-issue with a higher budget rather than retrying blindly.
+Code execution writes to `.gm/exec-spool/in/<lang>/<N>.<ext>`; the spool watcher runs the file and emits `out/<N>.json` as systemMessage. Utility verbs (`exec:recall`, `exec:codesearch`, `exec:memorize`, `exec:wait`, etc.) and `git` run directly via Bash. Never `Bash(node/npm/npx/bun)`. Spool paths in nodejs files are platform-literal — use `os.tmpdir()` and `path.join`. The spool enforces per-task timeouts; on timeout, partial output is preserved and the watcher emits `[exec timed out after Nms; partial output above]`.
 
 `exec:codesearch` only — Grep/Glob/Find/Explore are hook-blocked. Start two words, change/add one per pass, minimum four attempts before concluding absent.
 

package/skills/update-docs/SKILL.md

@@ -11,18 +11,16 @@ Every claim in docs is verifiable against disk. Phase names match frontmatter, p
 
 ## Sequence
 
-What changed:
+What changed — run directly via Bash:
 
 ```
-exec:bash
 git log -5 --oneline
 git diff HEAD~1 --stat
 ```
 
-Read current docs:
+Read current docs via Read tool, or via a nodejs spool file (`in/nodejs/<N>.js`):
 
 ```
-exec:nodejs
 const fs = require('fs');
 ['README.md', 'AGENTS.md', 'docs/index.html', 'gm-starter/agents/gm.md'].forEach(f => {
   try { console.log(`=== ${f} ===\n` + fs.readFileSync(f, 'utf8')); }
@@ -37,18 +35,16 @@ Write changed sections only:
 - **docs/index.html** — `PHASES` array, platform lists, state machine diagram
 - **gm-starter/agents/gm.md** — skill chain line if new skills added
 
-Verify from disk:
+Verify from disk (Read tool, or a nodejs spool file):
 
 ```
-exec:nodejs
 const content = require('fs').readFileSync('/abs/path/file.md', 'utf8');
 console.log(content.includes('expectedString'), content.length);
 ```
 
-Commit and push:
+Commit and push directly via Bash:
 
 ```
-exec:bash
 git add README.md docs/index.html gm-starter/agents/gm.md
 git commit -m "docs: update documentation to reflect session changes"
 git push -u origin HEAD