gm-kilo 2.0.456 → 2.0.457

package/gm-kilo.mjs

@@ -68,6 +68,14 @@ function runExecSync(rawLang, code, cwd) {
   return result;
 }
 
+const BANNED_BASH = ['grep','rg','find','glob','awk','sed','cat','head','tail'];
+function bashBannedTool(code) {
+  for (const t of BANNED_BASH) { if (new RegExp('(^|\\||;|&&|\\$\\()\\s*'+t+'(\\s|$)').test(code)) return t; }
+  return null;
+}
+
+let sessionStarted = false;
+
 export async function GmPlugin({ directory }) {
   const agentMd = join(__dirname, '..', 'agents', 'gm.md');
   const prdFile = join(directory, '.prd');
@@ -86,6 +94,11 @@ export async function GmPlugin({ directory }) {
           }
         } catch(e) {}
       } catch(e) {}
+      if (!sessionStarted) {
+        sessionStarted = true;
+        try { runPlugkit(['hook', 'session-start']); } catch(e) {}
+        try { runPlugkit(['bootstrap', directory]); } catch(e) {}
+      }
       try { const rules = readFileSync(agentMd,'utf-8'); if (rules) output.system.unshift(rules); } catch(e) {}
       try {
         if (existsSync(prdFile)) {
@@ -128,6 +141,12 @@ export async function GmPlugin({ directory }) {
       if (input.tool === 'Task' && input.args?.subagent_type === 'Explore') {
         throw new Error('The Explore agent is blocked. Use exec:codesearch in the Bash tool instead.\n\nexec:codesearch\n<natural language description of what to find>');
       }
+      if (input.tool === 'Skill') {
+        const skill = ((input.args && input.args.skill) || '').toLowerCase().replace(/^gm:/,'');
+        if (skill === 'explore' || skill === 'search') {
+          throw new Error('The search/explore skill is blocked. Use exec:codesearch instead.\n\nexec:codesearch\n<natural language description>');
+        }
+      }
       if (input.tool === 'write' || input.tool === 'Write' || input.tool === 'edit') {
         const fp = (output.args && output.args.file_path) || (input.args && input.args.file_path) || '';
         const base = basename(fp).toLowerCase();
@@ -147,6 +166,11 @@ export async function GmPlugin({ directory }) {
         output.args.command = "echo 'Bash tool can only be used with exec syntax:\n\nexec[:lang]\n<command>\n\nExamples:\nexec\nls -la\n\nexec:nodejs\nconsole.log(\"hello\")' 1>&2 && false";
         return;
       }
+      const rawLang = (m[1]||'').toLowerCase();
+      if (rawLang === 'bash' || rawLang === 'sh' || rawLang === '') {
+        const banned = bashBannedTool(m[2]);
+        if (banned) throw new Error('`'+banned+'` is blocked in exec:bash. Use exec:codesearch instead.');
+      }
       const result = runExecSync(m[1]||'', m[2], output.args.workdir || directory);
       output.args = { ...output.args, command: safePrintf('exec:'+(m[1]||'nodejs')+' output:\n\n'+result) };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-kilo",
-  "version": "2.0.456",
+  "version": "2.0.457",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/scripts/bootstrap.js

@@ -5,7 +5,7 @@ const path = require('path');
 const https = require('https');
 const { execFileSync } = require('child_process');
 
-const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || process.env.CODEX_PLUGIN_ROOT;
+const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || process.env.CODEX_PLUGIN_ROOT || process.env.KILO_PLUGIN_ROOT || process.env.OC_PLUGIN_ROOT || process.env.extensionPath;
 if (!pluginRoot) process.exit(0);
 
 const IS_WIN = process.platform === 'win32';

package/scripts/postinstall-kilo.js

@@ -102,19 +102,17 @@ function install() {
   safeCopyDirectory(path.join(sourceDir, 'skills'), path.join(kiloDir, 'skills'));
   safeCopyFile(path.join(sourceDir, 'kilocode.json'), path.join(kiloDir, 'kilocode.json'));
   safeCopyFile(path.join(sourceDir, '.mcp.json'), path.join(kiloDir, '.mcp.json'));
-  safeCopyFile(path.join(sourceDir, 'gm.mjs'), path.join(kiloDir, 'gm.mjs'));
-  safeCopyFile(path.join(sourceDir, 'index.mjs'), path.join(kiloDir, 'index.mjs'));
+  safeCopyFile(path.join(sourceDir, 'gm-kilo.mjs'), path.join(kiloDir, 'plugins', 'gm-kilo.mjs'));
+  safeCopyFile(path.join(sourceDir, 'gm.json'), path.join(kiloDir, 'gm.json'));
   safeCopyFile(path.join(sourceDir, 'README.md'), path.join(kiloDir, 'README.md'));
   safeCopyFile(path.join(sourceDir, 'LICENSE'), path.join(kiloDir, 'LICENSE'));
   safeCopyFile(path.join(sourceDir, 'CONTRIBUTING.md'), path.join(kiloDir, 'CONTRIBUTING.md'));
   safeCopyFile(path.join(sourceDir, '.gitignore'), path.join(kiloDir, '.gitignore'));
   safeCopyFile(path.join(sourceDir, '.editorconfig'), path.join(kiloDir, '.editorconfig'));
 
-  const pluginDir = path.join(kiloDir, 'plugin');
-  if (!fs.existsSync(pluginDir)) fs.mkdirSync(pluginDir, { recursive: true });
-  const gmMjsSrc = path.join(sourceDir, 'gm.mjs');
-  if (fs.existsSync(gmMjsSrc)) safeCopyFile(gmMjsSrc, path.join(pluginDir, 'gm.mjs'));
-  fs.writeFileSync(path.join(pluginDir, 'index.js'), "export { default } from './gm.mjs';\n", 'utf-8');
+  safeCopyDirectory(path.join(sourceDir, 'skills'), path.join(kiloDir, 'skills'));
+  safeCopyDirectory(path.join(sourceDir, 'lang'), path.join(kiloDir, 'lang'));
+  safeCopyDirectory(path.join(sourceDir, 'bin'), path.join(kiloDir, 'bin'));
 
   updateGitignore(projectRoot);
 

package/scripts/postinstall-oc.js

@@ -104,18 +104,17 @@ function install() {
   safeCopyDirectory(path.join(sourceDir, 'skills'), path.join(ocDir, 'skills'));
   safeCopyFile(path.join(sourceDir, 'opencode.json'), path.join(ocDir, 'opencode.json'));
   safeCopyFile(path.join(sourceDir, '.mcp.json'), path.join(ocDir, '.mcp.json'));
-  safeCopyFile(path.join(sourceDir, 'gm.mjs'), path.join(ocDir, 'gm.mjs'));
-  safeCopyFile(path.join(sourceDir, 'index.mjs'), path.join(ocDir, 'index.mjs'));
+  safeCopyFile(path.join(sourceDir, 'gm-oc.mjs'), path.join(ocDir, 'plugins', 'gm-oc.mjs'));
+  safeCopyFile(path.join(sourceDir, 'gm.json'), path.join(ocDir, 'gm.json'));
   safeCopyFile(path.join(sourceDir, 'README.md'), path.join(ocDir, 'README.md'));
   safeCopyFile(path.join(sourceDir, 'LICENSE'), path.join(ocDir, 'LICENSE'));
   safeCopyFile(path.join(sourceDir, 'CONTRIBUTING.md'), path.join(ocDir, 'CONTRIBUTING.md'));
   safeCopyFile(path.join(sourceDir, '.gitignore'), path.join(ocDir, '.gitignore'));
   safeCopyFile(path.join(sourceDir, '.editorconfig'), path.join(ocDir, '.editorconfig'));
 
-  const pluginsDir = path.join(ocDir, 'plugins');
-  if (!fs.existsSync(pluginsDir)) fs.mkdirSync(pluginsDir, { recursive: true });
-  const gmMjsSrc = path.join(sourceDir, 'gm.mjs');
-  if (fs.existsSync(gmMjsSrc)) safeCopyFile(gmMjsSrc, path.join(pluginsDir, 'gm-oc.mjs'));
+  safeCopyDirectory(path.join(sourceDir, 'skills'), path.join(ocDir, 'skills'));
+  safeCopyDirectory(path.join(sourceDir, 'lang'), path.join(ocDir, 'lang'));
+  safeCopyDirectory(path.join(sourceDir, 'bin'), path.join(ocDir, 'bin'));
 
   updateGitignore(projectRoot);