gm-kilo 2.0.455 → 2.0.457

package/agents/memorize.md

@@ -1,17 +1,17 @@
 ---
 name: memorize
-description: Background memory agent. Classifies context into memory/ dir and CLAUDE.md. Aggressively prunes stale/derivable/duplicate entries.
+description: Background memory agent. Classifies context into memory/ dir and AGENTS.md. Aggressively prunes stale/derivable/duplicate entries.
 agent: true
 ---
 
 # Memorize — Background Memory Agent
 
 Memory dir: C:/Users/user/.claude/projects/C--dev-plugforge/memory/
-CLAUDE.md: C:/dev/plugforge/CLAUDE.md
+AGENTS.md: C:/dev/plugforge/AGENTS.md
 
 ## STEP 1: READ
 
-Read memory dir contents and MEMORY.md index. Read all existing memory files. Read CLAUDE.md in full.
+Read memory dir contents and MEMORY.md index. Read all existing memory files. Read AGENTS.md in full.
 
 If memory dir does not exist, create it. If MEMORY.md does not exist, create it empty.
 
@@ -20,7 +20,7 @@ If memory dir does not exist, create it. If MEMORY.md does not exist, create it
 Run BEFORE writing any new content.
 
 Remove entries that are:
-- Contradicted or superseded by current CLAUDE.md or observable codebase facts
+- Contradicted or superseded by current AGENTS.md or observable codebase facts
 - Duplicates of other entries (merge into one)
 - Derivable at runtime via exec:codesearch: file paths, function names, API shapes, architecture patterns
 - Active task state, current progress, session narration
@@ -39,7 +39,7 @@ Examine the ## CONTEXT TO MEMORIZE section at the end of this prompt. For each f
 - reference: pointers to external systems, URLs, paths
 
 Discard:
-- Facts already covered in CLAUDE.md (exact or paraphrase)
+- Facts already covered in AGENTS.md (exact or paraphrase)
 - Obvious facts derivable from reading the code
 - Active task state or session progress
 
@@ -76,14 +76,14 @@ No frontmatter. Max 200 lines.
 
 ## STEP 6: CONSOLIDATE
 
-For each memory file: if its content is already fully covered by CLAUDE.md (exact or equivalent), delete the memory file and remove its line from MEMORY.md.
+For each memory file: if its content is already fully covered by AGENTS.md (exact or equivalent), delete the memory file and remove its line from MEMORY.md.
 
-## STEP 7: CLAUDE.md
+## STEP 7: AGENTS.md
 
 A non-obvious technical caveat qualifies if it required multiple failed runs to discover and would not be apparent from reading code or docs.
 
 For each qualifying fact from context:
-- If CLAUDE.md already covers it → skip
+- If AGENTS.md already covers it → skip
 - If genuinely non-obvious → append to the appropriate section
 
 Never add: obvious patterns, active task progress, redundant restatements.

package/gm-kilo.mjs

@@ -68,6 +68,14 @@ function runExecSync(rawLang, code, cwd) {
   return result;
 }
 
+const BANNED_BASH = ['grep','rg','find','glob','awk','sed','cat','head','tail'];
+function bashBannedTool(code) {
+  for (const t of BANNED_BASH) { if (new RegExp('(^|\\||;|&&|\\$\\()\\s*'+t+'(\\s|$)').test(code)) return t; }
+  return null;
+}
+
+let sessionStarted = false;
+
 export async function GmPlugin({ directory }) {
   const agentMd = join(__dirname, '..', 'agents', 'gm.md');
   const prdFile = join(directory, '.prd');
@@ -86,6 +94,11 @@ export async function GmPlugin({ directory }) {
           }
         } catch(e) {}
       } catch(e) {}
+      if (!sessionStarted) {
+        sessionStarted = true;
+        try { runPlugkit(['hook', 'session-start']); } catch(e) {}
+        try { runPlugkit(['bootstrap', directory]); } catch(e) {}
+      }
       try { const rules = readFileSync(agentMd,'utf-8'); if (rules) output.system.unshift(rules); } catch(e) {}
       try {
         if (existsSync(prdFile)) {
@@ -128,14 +141,20 @@ export async function GmPlugin({ directory }) {
       if (input.tool === 'Task' && input.args?.subagent_type === 'Explore') {
         throw new Error('The Explore agent is blocked. Use exec:codesearch in the Bash tool instead.\n\nexec:codesearch\n<natural language description of what to find>');
       }
+      if (input.tool === 'Skill') {
+        const skill = ((input.args && input.args.skill) || '').toLowerCase().replace(/^gm:/,'');
+        if (skill === 'explore' || skill === 'search') {
+          throw new Error('The search/explore skill is blocked. Use exec:codesearch instead.\n\nexec:codesearch\n<natural language description>');
+        }
+      }
       if (input.tool === 'write' || input.tool === 'Write' || input.tool === 'edit') {
         const fp = (output.args && output.args.file_path) || (input.args && input.args.file_path) || '';
         const base = basename(fp).toLowerCase();
         const ext = extname(fp);
         const blocked = FORBIDDEN_FILE_RE.some(re => re.test(base)) || FORBIDDEN_PATH_RE.some(p => fp.includes(p))
-          || (DOC_BLOCK_RE.test(ext) && !base.startsWith('claude') && !base.startsWith('readme') && !fp.includes('/skills/'));
+          || (DOC_BLOCK_RE.test(ext) && !base.startsWith('claude') && !base.startsWith('agents') && !base.startsWith('readme') && !fp.includes('/skills/'));
         if (blocked) {
-          throw new Error('Cannot create test/doc files. Use .prd for task notes, CLAUDE.md for permanent notes.');
+          throw new Error('Cannot create test/doc files. Use .prd for task notes, AGENTS.md for permanent notes.');
         }
       }
       if (input.tool !== 'bash' && input.tool !== 'Bash') return;
@@ -147,6 +166,11 @@ export async function GmPlugin({ directory }) {
         output.args.command = "echo 'Bash tool can only be used with exec syntax:\n\nexec[:lang]\n<command>\n\nExamples:\nexec\nls -la\n\nexec:nodejs\nconsole.log(\"hello\")' 1>&2 && false";
         return;
       }
+      const rawLang = (m[1]||'').toLowerCase();
+      if (rawLang === 'bash' || rawLang === 'sh' || rawLang === '') {
+        const banned = bashBannedTool(m[2]);
+        if (banned) throw new Error('`'+banned+'` is blocked in exec:bash. Use exec:codesearch instead.');
+      }
       const result = runExecSync(m[1]||'', m[2], output.args.workdir || directory);
       output.args = { ...output.args, command: safePrintf('exec:'+(m[1]||'nodejs')+' output:\n\n'+result) };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-kilo",
-  "version": "2.0.455",
+  "version": "2.0.457",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/scripts/bootstrap.js

@@ -5,7 +5,7 @@ const path = require('path');
 const https = require('https');
 const { execFileSync } = require('child_process');
 
-const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || process.env.CODEX_PLUGIN_ROOT;
+const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || process.env.CODEX_PLUGIN_ROOT || process.env.KILO_PLUGIN_ROOT || process.env.OC_PLUGIN_ROOT || process.env.extensionPath;
 if (!pluginRoot) process.exit(0);
 
 const IS_WIN = process.platform === 'win32';

package/scripts/postinstall-kilo.js

@@ -102,19 +102,17 @@ function install() {
   safeCopyDirectory(path.join(sourceDir, 'skills'), path.join(kiloDir, 'skills'));
   safeCopyFile(path.join(sourceDir, 'kilocode.json'), path.join(kiloDir, 'kilocode.json'));
   safeCopyFile(path.join(sourceDir, '.mcp.json'), path.join(kiloDir, '.mcp.json'));
-  safeCopyFile(path.join(sourceDir, 'gm.mjs'), path.join(kiloDir, 'gm.mjs'));
-  safeCopyFile(path.join(sourceDir, 'index.mjs'), path.join(kiloDir, 'index.mjs'));
+  safeCopyFile(path.join(sourceDir, 'gm-kilo.mjs'), path.join(kiloDir, 'plugins', 'gm-kilo.mjs'));
+  safeCopyFile(path.join(sourceDir, 'gm.json'), path.join(kiloDir, 'gm.json'));
   safeCopyFile(path.join(sourceDir, 'README.md'), path.join(kiloDir, 'README.md'));
   safeCopyFile(path.join(sourceDir, 'LICENSE'), path.join(kiloDir, 'LICENSE'));
   safeCopyFile(path.join(sourceDir, 'CONTRIBUTING.md'), path.join(kiloDir, 'CONTRIBUTING.md'));
   safeCopyFile(path.join(sourceDir, '.gitignore'), path.join(kiloDir, '.gitignore'));
   safeCopyFile(path.join(sourceDir, '.editorconfig'), path.join(kiloDir, '.editorconfig'));
 
-  const pluginDir = path.join(kiloDir, 'plugin');
-  if (!fs.existsSync(pluginDir)) fs.mkdirSync(pluginDir, { recursive: true });
-  const gmMjsSrc = path.join(sourceDir, 'gm.mjs');
-  if (fs.existsSync(gmMjsSrc)) safeCopyFile(gmMjsSrc, path.join(pluginDir, 'gm.mjs'));
-  fs.writeFileSync(path.join(pluginDir, 'index.js'), "export { default } from './gm.mjs';\n", 'utf-8');
+  safeCopyDirectory(path.join(sourceDir, 'skills'), path.join(kiloDir, 'skills'));
+  safeCopyDirectory(path.join(sourceDir, 'lang'), path.join(kiloDir, 'lang'));
+  safeCopyDirectory(path.join(sourceDir, 'bin'), path.join(kiloDir, 'bin'));
 
   updateGitignore(projectRoot);
 

package/scripts/postinstall-oc.js

@@ -104,18 +104,17 @@ function install() {
   safeCopyDirectory(path.join(sourceDir, 'skills'), path.join(ocDir, 'skills'));
   safeCopyFile(path.join(sourceDir, 'opencode.json'), path.join(ocDir, 'opencode.json'));
   safeCopyFile(path.join(sourceDir, '.mcp.json'), path.join(ocDir, '.mcp.json'));
-  safeCopyFile(path.join(sourceDir, 'gm.mjs'), path.join(ocDir, 'gm.mjs'));
-  safeCopyFile(path.join(sourceDir, 'index.mjs'), path.join(ocDir, 'index.mjs'));
+  safeCopyFile(path.join(sourceDir, 'gm-oc.mjs'), path.join(ocDir, 'plugins', 'gm-oc.mjs'));
+  safeCopyFile(path.join(sourceDir, 'gm.json'), path.join(ocDir, 'gm.json'));
   safeCopyFile(path.join(sourceDir, 'README.md'), path.join(ocDir, 'README.md'));
   safeCopyFile(path.join(sourceDir, 'LICENSE'), path.join(ocDir, 'LICENSE'));
   safeCopyFile(path.join(sourceDir, 'CONTRIBUTING.md'), path.join(ocDir, 'CONTRIBUTING.md'));
   safeCopyFile(path.join(sourceDir, '.gitignore'), path.join(ocDir, '.gitignore'));
   safeCopyFile(path.join(sourceDir, '.editorconfig'), path.join(ocDir, '.editorconfig'));
 
-  const pluginsDir = path.join(ocDir, 'plugins');
-  if (!fs.existsSync(pluginsDir)) fs.mkdirSync(pluginsDir, { recursive: true });
-  const gmMjsSrc = path.join(sourceDir, 'gm.mjs');
-  if (fs.existsSync(gmMjsSrc)) safeCopyFile(gmMjsSrc, path.join(pluginsDir, 'gm-oc.mjs'));
+  safeCopyDirectory(path.join(sourceDir, 'skills'), path.join(ocDir, 'skills'));
+  safeCopyDirectory(path.join(sourceDir, 'lang'), path.join(ocDir, 'lang'));
+  safeCopyDirectory(path.join(sourceDir, 'bin'), path.join(ocDir, 'bin'));
 
   updateGitignore(projectRoot);
 

package/skills/gm-complete/SKILL.md

@@ -118,7 +118,7 @@ gh run view <run_id> --log-failed
 
 5. All runs must reach `conclusion: success` before advancing. A failed CI run is a KNOWN mutable that blocks completion — never ignore it.
 
-**Cascade awareness**: pushes to this repo may trigger downstream workflows (see CLAUDE.md Rust Binary Update Pipeline). After local CI passes, check downstream repos for triggered runs:
+**Cascade awareness**: pushes to this repo may trigger downstream workflows (see AGENTS.md Rust Binary Update Pipeline). After local CI passes, check downstream repos for triggered runs:
 ```
 exec:bash
 gh run list --repo AnEntrypoint/<downstream-repo> --limit 3 --json databaseId,name,status,conclusion

package/skills/planning/SKILL.md

@@ -111,7 +111,7 @@ Invoke `browser` skill. Escalation: (1) `exec:browser <js>` → (2) browser skil
 
 ## MANDATORY DEV WORKFLOW
 
-No comments. No test files. 200-line limit — split before continuing. Fail loud. No duplication. Scan before every edit. Duplicate concern = regress to PLAN. Errors throw with context — no `|| default`, no `catch { return null }`. `window.__debug` exposes all client state. CLAUDE.md via memorize only. CHANGELOG.md: append per commit.
+No comments. No test files. 200-line limit — split before continuing. Fail loud. No duplication. Scan before every edit. Duplicate concern = regress to PLAN. Errors throw with context — no `|| default`, no `catch { return null }`. `window.__debug` exposes all client state. AGENTS.md via memorize only. CHANGELOG.md: append per commit.
 
 **Minimal code / maximal DX process**: Before writing any logic, run this process in order — stop at the first step that resolves the need:
 1. **Native first** — does the language or runtime already do this? Use it exactly as designed.

package/skills/update-docs/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: update-docs
-description: UPDATE-DOCS phase. Refresh README.md, CLAUDE.md, and docs/index.html to reflect changes made this session. Commits and pushes doc updates. Terminal phase — declares COMPLETE.
+description: UPDATE-DOCS phase. Refresh README.md, AGENTS.md, and docs/index.html to reflect changes made this session. Commits and pushes doc updates. Terminal phase — declares COMPLETE.
 ---
 
 # GM UPDATE-DOCS — Documentation Refresh
@@ -35,7 +35,7 @@ Witness which files changed. Identify doc-sensitive changes: new skills, new sta
 ```
 exec:nodejs
 const fs = require('fs');
-['README.md', 'CLAUDE.md', 'docs/index.html',
+['README.md', 'AGENTS.md', 'docs/index.html',
  'gm-starter/agents/gm.md'].forEach(f => {
   try { console.log(`=== ${f} ===\n` + fs.readFileSync(f, 'utf8')); }
   catch(e) { console.log(`MISSING: ${f}`); }
@@ -50,7 +50,7 @@ Write only sections that changed. Do not rewrite unchanged content. Rules per fi
 
 **README.md**: platform count matches adapters in `platforms/`, skill tree diagram matches current state machine, quick start commands work.
 
-**CLAUDE.md**: Launch memorize sub-agent in background with session learnings. Do not inline-edit CLAUDE.md — the memorize agent handles extraction, deduplication, and writing. Use: `Agent(subagent_type='memorize', model='haiku', run_in_background=true, prompt='## CONTEXT TO MEMORIZE\n<session learnings>')`
+**AGENTS.md**: Launch memorize sub-agent in background with session learnings. Do not inline-edit AGENTS.md — the memorize agent handles extraction, deduplication, and writing. Use: `Agent(subagent_type='memorize', model='haiku', run_in_background=true, prompt='## CONTEXT TO MEMORIZE\n<session learnings>')`
 
 **docs/index.html**: `PHASES` array matches current skill state machine phases. Platform lists match `platforms/` directory. State machine diagram updated if new phases added.