gm-kilo 2.0.156 → 2.0.159

package/agents/gm.md

@@ -50,6 +50,8 @@ Scope: All available skills and their mandatory usage rules. Every skill listed
 
 **`gm` agent** — Subagent orchestration. MANDATORY for parallel work waves. Launch via Task tool with subagent_type gm:gm. Maximum 3 per wave. Independent items run simultaneously; dependent items wait. Sequential execution of independent items is forbidden.
 
+**`exec` tool** — Transparent code execution via pre-tool-use hook interception. Call as a native tool with params: `lang` (nodejs|python|bash|sh|cmd|go|rust|c|cpp|java|deno|typescript, default nodejs), `code` (the code or command to run), `cmd` (alias for code, preferred for bash/cmd langs), `cwd` (optional working directory). Returns stdout+stderr of execution as the tool response. The hook intercepts the call, runs it via gm-exec, and returns the output synchronously. Use instead of Bash tool for all code and shell execution.
+
 
 
 ## CHARTER 1: PRD
@@ -183,7 +185,8 @@ Server + client split:
 
 **BASH WHITELIST** — environment blocks all bash except:
 - `git` — version control only
-- `bun x gm-exec` — all other shell/code execution:
+- `exec` tool — preferred over Bash for all code execution and shell commands (intercepted by hook, runs via gm-exec, returns output as tool response)
+- `bun x gm-exec` — fallback when exec tool is unavailable:
   - `bun x gm-exec bash [--cwd=<dir>] <cmd>` — run shell commands
   - `bun x gm-exec exec [--lang=<lang>] [--cwd=<dir>] [--file=<path>] <code>` — execute code (nodejs default; langs: nodejs, python, go, rust, c, cpp, java, deno, bash, cmd)
   - `bun x gm-exec status <task_id>` — poll status + drain output of background task
@@ -364,9 +367,10 @@ SYSTEM_INVARIANTS = {
 }
 
 TOOL_INVARIANTS = {
-  default: `bun x gm-exec` (not raw bash, not grep, not glob),
-  code_execution: `bun x gm-exec exec <code>`,
-  file_operations: `bun x gm-exec exec` with inline fs,
+  default: `exec` tool (not raw bash, not grep, not glob),
+  exec_tool: use exec tool for all code execution when available (lang=nodejs|python|bash|etc, code=..., cwd=...),
+  code_execution: `exec` tool with lang param, fallback to `bun x gm-exec exec <code>`,
+  file_operations: `exec` tool with lang=nodejs and inline fs, fallback to `bun x gm-exec exec` with inline fs,
   exploration: codesearch ONLY (Glob=blocked, Grep=blocked, Explore=blocked, Read-for-discovery=blocked),
   overview: `code-search` skill,
   process_lifecycle: `process-management` skill (PM2 mandatory for all servers/workers/daemons),
@@ -455,7 +459,7 @@ Notes have exactly two valid destinations:
 - **Temporary notes** (work-in-progress tracking, mutables, hypotheses) → `.prd` only
 - **Permanent notes** (decisions, constraints, gotchas, architectural choices) → `CLAUDE.md` only
 
-No other locations. No inline comments. No README notes. No TODO comments. No doc strings that serve as notes. If it belongs nowhere else, it belongs in `.prd` (if temporary) or `CLAUDE.md` (if permanent). If it belongs in neither, it should not be written at all.
+No other locations. No inline comments. No README notes. No TODO comments. No doc strings that serve as notes. No separate memory files. If it belongs nowhere else, it belongs in `.prd` (if temporary) or `CLAUDE.md` (if permanent). If it belongs in neither, it should not be written at all. When asked to remember something permanently, add it to CLAUDE.md — that is the single durable memory store across sessions.
 
 ### CONFLICT RESOLUTION
 

package/hooks/pre-tool-use-hook.js

@@ -18,6 +18,35 @@ const run = () => {
 
     if (!tool_name) return { allow: true };
 
+    if (tool_name === 'exec') {
+      const { lang = 'nodejs', code, cmd, cwd } = tool_input || {};
+      const actualCode = code || cmd;
+      if (!actualCode) {
+        return { block: true, reason: 'exec tool requires code or cmd parameter' };
+      }
+      try {
+        let args;
+        if (lang === 'bash' || lang === 'cmd' || lang === 'sh') {
+          args = ['x', 'gm-exec', 'bash'];
+          if (cwd) args.push(`--cwd=${cwd}`);
+          args.push(actualCode);
+        } else {
+          args = ['x', 'gm-exec', 'exec', `--lang=${lang}`];
+          if (cwd) args.push(`--cwd=${cwd}`);
+          args.push(actualCode);
+        }
+        const result = execSync('bun ' + args.map(a => JSON.stringify(a)).join(' '), {
+          encoding: 'utf-8',
+          timeout: 30000,
+          stdio: ['ignore', 'pipe', 'pipe']
+        });
+        return { block: true, reason: result || '(no output)' };
+      } catch (e) {
+        const err = (e.stdout || '') + (e.stderr || '') || e.message;
+        return { block: true, reason: `exec error: ${err}` };
+      }
+    }
+
     if (forbiddenTools.includes(tool_name)) {
       return { block: true, reason: 'Use the code-search skill for codebase exploration instead of Grep/Glob/find. Describe what you need in plain language — it understands intent, not just patterns.' };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-kilo",
-  "version": "2.0.156",
+  "version": "2.0.159",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",