gm-qwen 2.0.983 → 2.0.985

package/bin/plugkit.js

@@ -1,48 +1,108 @@
 #!/usr/bin/env node
 'use strict';
-// Minimal exec wrapper. ZERO bootstrap, ZERO version-probe, ZERO async work.
-// Just shell out to ~/.claude/gm-tools/plugkit{.exe} with inherited stdio.
-// The Rust binary handles its own self-update at startup (detached); first-time
-// bootstrap is done by gm-cc postinstall.js. Hot path is one spawnSync, ~150ms
-// of node startup overhead.
+// Hot path: spawnSync to ~/.claude/gm-tools/plugkit.exe with inherited stdio.
+// Cold path (session-start / prompt-submit OR missing binary): synchronously
+// ensure gm-tools/plugkit{.exe} matches the pinned version, then run hook.
+// Cache-aware: when local matches the pin (sha-checked), zero network calls.
 
 const { spawnSync } = require('child_process');
 const path = require('path');
 const fs = require('fs');
 const os = require('os');
 
+const wrapperDir = __dirname;
+
 function toolsBin() {
   const home = process.env.USERPROFILE || process.env.HOME || os.homedir();
   const exe = process.platform === 'win32' ? 'plugkit.exe' : 'plugkit';
   return path.join(home, '.claude', 'gm-tools', exe);
 }
 
-function legacyBesideWrapper() {
-  const dir = __dirname;
-  const p = os.platform();
-  const a = os.arch();
-  let candidates = [];
-  if (p === 'win32') candidates = [path.join(dir, a === 'arm64' ? 'plugkit-win32-arm64.exe' : 'plugkit-win32-x64.exe')];
-  else if (p === 'darwin') candidates = [path.join(dir, a === 'arm64' ? 'plugkit-darwin-arm64' : 'plugkit-darwin-x64')];
-  else candidates = [path.join(dir, (a === 'arm64' || a === 'aarch64') ? 'plugkit-linux-arm64' : 'plugkit-linux-x64')];
-  for (const c of candidates) if (fs.existsSync(c)) return c;
+function sha256OfFileSync(filePath) {
+  try {
+    const crypto = require('crypto');
+    const h = crypto.createHash('sha256');
+    const fd = fs.openSync(filePath, 'r');
+    try {
+      const buf = Buffer.alloc(1 << 20);
+      let n;
+      while ((n = fs.readSync(fd, buf, 0, buf.length, null)) > 0) h.update(buf.subarray(0, n));
+    } finally { fs.closeSync(fd); }
+    return h.digest('hex');
+  } catch (_) { return null; }
+}
+
+function platformAsset() {
+  const p = process.platform;
+  const a = process.arch;
+  if (p === 'win32') return a === 'arm64' ? 'plugkit-win32-arm64.exe' : 'plugkit-win32-x64.exe';
+  if (p === 'darwin') return a === 'arm64' ? 'plugkit-darwin-arm64' : 'plugkit-darwin-x64';
+  return (a === 'arm64' || a === 'aarch64') ? 'plugkit-linux-arm64' : 'plugkit-linux-x64';
+}
+
+function readPinnedVersion() {
+  try { return fs.readFileSync(path.join(wrapperDir, 'plugkit.version'), 'utf8').trim(); } catch (_) { return null; }
+}
+
+function readExpectedSha() {
+  try {
+    const manifest = fs.readFileSync(path.join(wrapperDir, 'plugkit.sha256'), 'utf8');
+    const asset = platformAsset();
+    for (const line of manifest.split(/\r?\n/)) {
+      const parts = line.trim().split(/\s+/);
+      if (parts.length >= 2 && parts[parts.length - 1].replace(/^\*/, '') === asset) {
+        return parts[0].toLowerCase();
+      }
+    }
+  } catch (_) {}
   return null;
 }
 
+// Returns true if gm-tools binary matches pinned version by sha. Fast: no network.
+function isReady() {
+  const bin = toolsBin();
+  if (!fs.existsSync(bin)) return false;
+  const expected = readExpectedSha();
+  if (!expected) return true; // no manifest to compare against — trust existence
+  const actual = sha256OfFileSync(bin);
+  return actual && actual.toLowerCase() === expected;
+}
+
+// Synchronously run bootstrap.js in a child node. Blocks until install finishes
+// (or fails). Bootstrap itself is cache-aware: re-download only when sha differs
+// from manifest. Wraps stdio:inherit so the user sees progress.
+function ensureReady(silent) {
+  if (isReady()) return true;
+  const bootstrap = path.join(wrapperDir, 'bootstrap.js');
+  const r = spawnSync(process.execPath, [bootstrap], {
+    stdio: silent ? ['ignore', 'pipe', 'pipe'] : ['ignore', 'inherit', 'inherit'],
+    windowsHide: true,
+  });
+  return r.status === 0 && isReady();
+}
+
 function main() {
   const args = process.argv.slice(2);
   const isHook = args[0] === 'hook';
-  let bin = toolsBin();
-  if (!fs.existsSync(bin)) {
-    bin = legacyBesideWrapper();
-    if (!bin) {
-      // Binary not yet installed. If this is a hook, exit cleanly so CC doesn't
-      // see an error; postinstall will populate gm-tools on /plugin install.
-      if (isHook) process.exit(0);
-      process.stderr.write('[plugkit] binary not found at ~/.claude/gm-tools/plugkit — run postinstall\n');
+  const hookSubcmd = isHook ? (args[1] || '') : '';
+
+  // Synchronous readiness check on these hooks. Hot path: isReady() is sha-match
+  // against pinned manifest, returns true in <50ms with no network.
+  const blocksUntilReady = hookSubcmd === 'session-start' || hookSubcmd === 'prompt-submit';
+
+  if (blocksUntilReady) {
+    if (!ensureReady(false)) {
+      process.stderr.write('[plugkit] bootstrap failed; aborting hook\n');
       process.exit(1);
     }
+  } else if (!fs.existsSync(toolsBin())) {
+    // For non-blocking hooks (pre-tool-use, post-tool-use, stop, etc.): if the
+    // binary doesn't exist yet, exit cleanly — session-start will populate it.
+    if (isHook) process.exit(0);
+    process.exit(1);
   }
+
+  const bin = toolsBin();
   const r = spawnSync(bin, args, { stdio: 'inherit', windowsHide: true });
   process.exit(r.status ?? 1);
 }

package/bin/plugkit.sha256

@@ -1,6 +1,6 @@
-c08fd599e0b49d74b5cbae96e72f0a37d8950d8c571227e477204a810f5e6f03  plugkit-win32-x64.exe
-0a6a1f8e75815576729f93e3bd04bbc65f7ab79d36a488c0fe03db47a81bef76  plugkit-win32-arm64.exe
-35cebc201902ee34bbbd01c698286ed764cbc8cf1b31afdf7d15cc0fe21958a1  plugkit-darwin-x64
-78c637d8f387075753949dfa85c243b42482a3b0062d6c54b18d4220218190ef  plugkit-darwin-arm64
-06a8da1826625a6a94aae2c2852199b46c56e1984a8be016f433cc89a708221f  plugkit-linux-x64
-2eaa1f8ed9347d9ae2c6360b1e153a982afa9aaa5290f76c8017b2463eefcce5  plugkit-linux-arm64
+c938ab1d5651cb586a67652b2249c006b31a7fd39c68df39ad9f8ff762b53dbd  plugkit-win32-x64.exe
+91094a9948594e0b6ad232037ae1ed5e958ea54d060b023fb76e4c3e47c47ba0  plugkit-win32-arm64.exe
+ece14d52bdca7fc3652e82942caeae5dfc14467b01e8c503ff84aa3bc9b36f78  plugkit-darwin-x64
+149ebb637564f45881a7f050043499cf95b3c0b92ce4848936b36d6ddd43d3a8  plugkit-darwin-arm64
+2bd0d5bac2b13d118e0b4f0fa0164dba1580e045801d56bb1f976eacc0025d37  plugkit-linux-x64
+05a4a3f804029a3fc6ba3eb6622d2cea5dbaa32ef9b360a20f460c5a8e95b02f  plugkit-linux-arm64

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.339
+0.1.340

package/bin/rtk.sha256

@@ -1,5 +1,5 @@
-1fc637b025b9c79731a17806e977fb08e07773c94f4035b128719a96e9332456  rtk-win32-x64.exe
-c3806e4c33e830bb329a9d3534e17a1c5f04ef79d6c7ece1b137815a890c9790  rtk-win32-arm64.exe
+3e4417d0380ca1171e9c67e2bba1d42a2ee9ed3c8df814b8816d483e778b99bb  rtk-win32-x64.exe
+2e757fd4bb4d7a3797f788b4e8933908b6ee4debc86098d3dece4356c1657c94  rtk-win32-arm64.exe
 1b1e792767ed0e1e6ca0e2f0a8de02e77b06dea2f5ae667278b94baf239fcdc3  rtk-darwin-x64
 9717978d9d6216ea50c94444e00e359479b6315a17bd48c16064b267c8b0b60d  rtk-darwin-arm64
 a100d3defac54194144e5723aec57e6f286b42298c67145c8428815246c9ee56  rtk-linux-x64

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.983",
+  "version": "2.0.985",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -23,5 +23,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.339"
+  "plugkitVersion": "0.1.340"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-qwen",
-  "version": "2.0.983",
+  "version": "2.0.985",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",