gm-plugkit 2.0.1483 → 2.0.1485

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1483",
+  "version": "2.0.1485",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/plugkit-wasm-wrapper.js

@@ -2757,6 +2757,16 @@ async function runSpoolWatcher(instance, spoolDir) {
       const relPath = path.relative(inDir, filePath);
       const dir = path.dirname(relPath);
       const verb = dir === '.' ? path.basename(filePath, path.extname(filePath)) : dir;
+      // Defense-in-depth beyond walkDir's dot-dir skip: a real verb is a single clean
+      // segment (e.g. instruction, prd-resolve). A derived verb containing a path
+      // separator or a dot-segment means the file lives under a stray nested spool
+      // (in/prd-resolve/.gm/exec-spool/…); dispatching it builds a bogus verb+outName
+      // and ENOENT-storms every tick. Skip + unmark so it never re-enters the loop.
+      if (/[\\/]/.test(verb) || verb.split(/[\\/]/).some(seg => seg.startsWith('.'))) {
+        try { logEvent('plugkit', 'spool.skip-nested-verb', { rel: relPath, derived_verb: verb }); } catch (_) {}
+        unmarkProcessed(key);
+        return;
+      }
       let body = content.trim() || '{}';
       const taskBase = path.basename(filePath, path.extname(filePath));
 
@@ -2876,18 +2886,24 @@ async function runSpoolWatcher(instance, spoolDir) {
     }
   };
 
-  function walkDir(dir) {
+  function walkDir(dir, depth = 0) {
     const files = [];
     try {
       for (const entry of fs.readdirSync(dir)) {
         if (/\.tmp\.\d+(\.|$)/.test(entry)) continue;
+        // The verb tree is in/<verb>/[<sub>/]<N>.<ext> — at most two levels deep. A
+        // dot-prefixed dir (e.g. a stray nested .gm/exec-spool/ created by a misfire)
+        // is never a verb dir; recursing into it derives a bogus verb like
+        // `prd-resolve\.gm\exec-spool` and dispatch-errors on every tick forever.
+        // Skip dot-dirs and cap depth so a spool-inside-spool cannot wedge the watcher.
+        if (entry.startsWith('.')) continue;
         const fullPath = path.join(dir, entry);
         let stat;
         try { stat = fs.statSync(fullPath); } catch (_) { continue; }
         if (stat.isFile()) {
           files.push(fullPath);
-        } else if (stat.isDirectory()) {
-          files.push(...walkDir(fullPath));
+        } else if (stat.isDirectory() && depth < 2) {
+          files.push(...walkDir(fullPath, depth + 1));
         }
       }
     } catch (e) {
@@ -3329,6 +3345,10 @@ async function runSpoolWatcher(instance, spoolDir) {
   watch(inDir, { recursive: true }, (eventType, filename) => {
     if (!filename) return;
     if (/\.tmp\.\d+(\.|$)/.test(filename)) return;
+    // Skip any path with a dot-prefixed segment (e.g. a stray nested
+    // prd-resolve/.gm/exec-spool/…): it is not a real verb dispatch and walking it
+    // derives a bogus verb that dispatch-errors on every tick. Matches walkDir's guard.
+    if (filename.split(/[\\/]/).some(seg => seg.startsWith('.'))) return;
     const fullPath = path.join(inDir, filename);
     markActivity('watch');