gm-qwen 2.0.984 → 2.0.986

package/bin/plugkit.js

@@ -1,48 +1,108 @@
 #!/usr/bin/env node
 'use strict';
-// Minimal exec wrapper. ZERO bootstrap, ZERO version-probe, ZERO async work.
-// Just shell out to ~/.claude/gm-tools/plugkit{.exe} with inherited stdio.
-// The Rust binary handles its own self-update at startup (detached); first-time
-// bootstrap is done by gm-cc postinstall.js. Hot path is one spawnSync, ~150ms
-// of node startup overhead.
+// Hot path: spawnSync to ~/.claude/gm-tools/plugkit.exe with inherited stdio.
+// Cold path (session-start / prompt-submit OR missing binary): synchronously
+// ensure gm-tools/plugkit{.exe} matches the pinned version, then run hook.
+// Cache-aware: when local matches the pin (sha-checked), zero network calls.
 
 const { spawnSync } = require('child_process');
 const path = require('path');
 const fs = require('fs');
 const os = require('os');
 
+const wrapperDir = __dirname;
+
 function toolsBin() {
   const home = process.env.USERPROFILE || process.env.HOME || os.homedir();
   const exe = process.platform === 'win32' ? 'plugkit.exe' : 'plugkit';
   return path.join(home, '.claude', 'gm-tools', exe);
 }
 
-function legacyBesideWrapper() {
-  const dir = __dirname;
-  const p = os.platform();
-  const a = os.arch();
-  let candidates = [];
-  if (p === 'win32') candidates = [path.join(dir, a === 'arm64' ? 'plugkit-win32-arm64.exe' : 'plugkit-win32-x64.exe')];
-  else if (p === 'darwin') candidates = [path.join(dir, a === 'arm64' ? 'plugkit-darwin-arm64' : 'plugkit-darwin-x64')];
-  else candidates = [path.join(dir, (a === 'arm64' || a === 'aarch64') ? 'plugkit-linux-arm64' : 'plugkit-linux-x64')];
-  for (const c of candidates) if (fs.existsSync(c)) return c;
+function sha256OfFileSync(filePath) {
+  try {
+    const crypto = require('crypto');
+    const h = crypto.createHash('sha256');
+    const fd = fs.openSync(filePath, 'r');
+    try {
+      const buf = Buffer.alloc(1 << 20);
+      let n;
+      while ((n = fs.readSync(fd, buf, 0, buf.length, null)) > 0) h.update(buf.subarray(0, n));
+    } finally { fs.closeSync(fd); }
+    return h.digest('hex');
+  } catch (_) { return null; }
+}
+
+function platformAsset() {
+  const p = process.platform;
+  const a = process.arch;
+  if (p === 'win32') return a === 'arm64' ? 'plugkit-win32-arm64.exe' : 'plugkit-win32-x64.exe';
+  if (p === 'darwin') return a === 'arm64' ? 'plugkit-darwin-arm64' : 'plugkit-darwin-x64';
+  return (a === 'arm64' || a === 'aarch64') ? 'plugkit-linux-arm64' : 'plugkit-linux-x64';
+}
+
+function readPinnedVersion() {
+  try { return fs.readFileSync(path.join(wrapperDir, 'plugkit.version'), 'utf8').trim(); } catch (_) { return null; }
+}
+
+function readExpectedSha() {
+  try {
+    const manifest = fs.readFileSync(path.join(wrapperDir, 'plugkit.sha256'), 'utf8');
+    const asset = platformAsset();
+    for (const line of manifest.split(/\r?\n/)) {
+      const parts = line.trim().split(/\s+/);
+      if (parts.length >= 2 && parts[parts.length - 1].replace(/^\*/, '') === asset) {
+        return parts[0].toLowerCase();
+      }
+    }
+  } catch (_) {}
   return null;
 }
 
+// Returns true if gm-tools binary matches pinned version by sha. Fast: no network.
+function isReady() {
+  const bin = toolsBin();
+  if (!fs.existsSync(bin)) return false;
+  const expected = readExpectedSha();
+  if (!expected) return true; // no manifest to compare against — trust existence
+  const actual = sha256OfFileSync(bin);
+  return actual && actual.toLowerCase() === expected;
+}
+
+// Synchronously run bootstrap.js in a child node. Blocks until install finishes
+// (or fails). Bootstrap itself is cache-aware: re-download only when sha differs
+// from manifest. Wraps stdio:inherit so the user sees progress.
+function ensureReady(silent) {
+  if (isReady()) return true;
+  const bootstrap = path.join(wrapperDir, 'bootstrap.js');
+  const r = spawnSync(process.execPath, [bootstrap], {
+    stdio: silent ? ['ignore', 'pipe', 'pipe'] : ['ignore', 'inherit', 'inherit'],
+    windowsHide: true,
+  });
+  return r.status === 0 && isReady();
+}
+
 function main() {
   const args = process.argv.slice(2);
   const isHook = args[0] === 'hook';
-  let bin = toolsBin();
-  if (!fs.existsSync(bin)) {
-    bin = legacyBesideWrapper();
-    if (!bin) {
-      // Binary not yet installed. If this is a hook, exit cleanly so CC doesn't
-      // see an error; postinstall will populate gm-tools on /plugin install.
-      if (isHook) process.exit(0);
-      process.stderr.write('[plugkit] binary not found at ~/.claude/gm-tools/plugkit — run postinstall\n');
+  const hookSubcmd = isHook ? (args[1] || '') : '';
+
+  // Synchronous readiness check on these hooks. Hot path: isReady() is sha-match
+  // against pinned manifest, returns true in <50ms with no network.
+  const blocksUntilReady = hookSubcmd === 'session-start' || hookSubcmd === 'prompt-submit';
+
+  if (blocksUntilReady) {
+    if (!ensureReady(false)) {
+      process.stderr.write('[plugkit] bootstrap failed; aborting hook\n');
       process.exit(1);
     }
+  } else if (!fs.existsSync(toolsBin())) {
+    // For non-blocking hooks (pre-tool-use, post-tool-use, stop, etc.): if the
+    // binary doesn't exist yet, exit cleanly — session-start will populate it.
+    if (isHook) process.exit(0);
+    process.exit(1);
   }
+
+  const bin = toolsBin();
   const r = spawnSync(bin, args, { stdio: 'inherit', windowsHide: true });
   process.exit(r.status ?? 1);
 }

package/bin/plugkit.sha256

@@ -1,6 +1,6 @@
-c938ab1d5651cb586a67652b2249c006b31a7fd39c68df39ad9f8ff762b53dbd  plugkit-win32-x64.exe
-91094a9948594e0b6ad232037ae1ed5e958ea54d060b023fb76e4c3e47c47ba0  plugkit-win32-arm64.exe
-ece14d52bdca7fc3652e82942caeae5dfc14467b01e8c503ff84aa3bc9b36f78  plugkit-darwin-x64
-149ebb637564f45881a7f050043499cf95b3c0b92ce4848936b36d6ddd43d3a8  plugkit-darwin-arm64
-2bd0d5bac2b13d118e0b4f0fa0164dba1580e045801d56bb1f976eacc0025d37  plugkit-linux-x64
-05a4a3f804029a3fc6ba3eb6622d2cea5dbaa32ef9b360a20f460c5a8e95b02f  plugkit-linux-arm64
+af4b0d3ab31f104ac744f12502377f98c40daa15ecc432d3e457e4cfd38bc975  plugkit-win32-x64.exe
+7d8635c11f0e61d496e5961109f2df21a00b1478176ae90b779c437dbbd9efb0  plugkit-win32-arm64.exe
+965f657007282bd22bc712d095939c0d45b16aee153832b49d15562f20567b54  plugkit-darwin-x64
+aadc456903ec71af39e3519af6638021d2159534601304959ddc36456f53aaf7  plugkit-darwin-arm64
+90dd164ccd31e0f97710b9eb92b2e8127617c3f03522a205c7b0ff8df7b9c257  plugkit-linux-x64
+4e10f4c4af5516de6c1b8b46d11c9a904eaa9e251f1c6018020baa4c189c07f2  plugkit-linux-arm64

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.340
+0.1.341

package/bin/rtk.sha256

@@ -1,5 +1,5 @@
-3e4417d0380ca1171e9c67e2bba1d42a2ee9ed3c8df814b8816d483e778b99bb  rtk-win32-x64.exe
-2e757fd4bb4d7a3797f788b4e8933908b6ee4debc86098d3dece4356c1657c94  rtk-win32-arm64.exe
+3de194e9d628eb5b1b2113d35312442c403bc3caee92f5cb70ee9715200453ef  rtk-win32-x64.exe
+6d60d3b7ff499e194c69c86b7d18bc93e394a5f9c4ae7a751338675634ea9311  rtk-win32-arm64.exe
 1b1e792767ed0e1e6ca0e2f0a8de02e77b06dea2f5ae667278b94baf239fcdc3  rtk-darwin-x64
 9717978d9d6216ea50c94444e00e359479b6315a17bd48c16064b267c8b0b60d  rtk-darwin-arm64
 a100d3defac54194144e5723aec57e6f286b42298c67145c8428815246c9ee56  rtk-linux-x64

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.984",
+  "version": "2.0.986",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -23,5 +23,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.340"
+  "plugkitVersion": "0.1.341"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-qwen",
-  "version": "2.0.984",
+  "version": "2.0.986",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",