gm-skill 2.0.1117 → 2.0.1119

package/README.md

@@ -28,7 +28,7 @@ npx gm-skill-bootstrap
 
 ## Version
 
-`2.0.1117` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` republishes this package alongside all 15 platform packages.
+`2.0.1119` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` republishes this package alongside all 15 platform packages.
 
 ## Source of truth
 

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -2,6 +2,7 @@ import fs from 'fs';
 import path from 'path';
 import os from 'os';
 import crypto from 'crypto';
+import https from 'https';
 import { watch } from 'fs';
 import { spawn, spawnSync } from 'child_process';
 import net from 'net';
@@ -736,6 +737,46 @@ async function runSpoolWatcher(instance, spoolDir) {
   setInterval(writeStatus, 5000);
   writeStatus();
 
+  const UPDATE_AVAILABLE_PATH = path.join(spoolDir, '.update-available.json');
+  const UPDATE_CHECK_INTERVAL_MS = 5 * 60 * 1000;
+  function checkForUpdate() {
+    const installed = resolveVersion(instance);
+    const req = https.get({
+      host: 'api.github.com',
+      path: '/repos/AnEntrypoint/plugkit-bin/releases/latest',
+      headers: { 'user-agent': 'plugkit-watcher', 'accept': 'application/json' },
+      timeout: 5000,
+    }, (res) => {
+      if (res.statusCode !== 200) { res.resume(); return; }
+      const chunks = [];
+      res.on('data', c => chunks.push(c));
+      res.on('end', () => {
+        try {
+          const rel = JSON.parse(Buffer.concat(chunks).toString('utf-8'));
+          const tag = rel && rel.tag_name;
+          if (!tag) return;
+          const latest = tag.replace(/^v/, '');
+          if (latest === installed) {
+            try { fs.unlinkSync(UPDATE_AVAILABLE_PATH); } catch (_) {}
+            return;
+          }
+          fs.writeFileSync(UPDATE_AVAILABLE_PATH, JSON.stringify({
+            installed,
+            latest,
+            checked_at_ms: Date.now(),
+            instruction: 'plugkit is out of date. To update, close the running watcher and re-bootstrap with the @latest flag, e.g. node ~/.claude/gm-tools/plugkit-wasm-wrapper.js spool & after running bootstrap with {latest: true}.',
+            update_url: `https://github.com/AnEntrypoint/plugkit-bin/releases/tag/v${latest}`,
+          }, null, 2));
+          console.log(`[update] available: installed=${installed} latest=${latest} → wrote ${UPDATE_AVAILABLE_PATH}`);
+        } catch (_) {}
+      });
+    });
+    req.on('timeout', () => req.destroy());
+    req.on('error', () => {});
+  }
+  setTimeout(checkForUpdate, 10_000);
+  setInterval(checkForUpdate, UPDATE_CHECK_INTERVAL_MS);
+
   const pollInterval = setInterval(async () => {
     const existing = walkDir(inDir);
     for (const fullPath of existing) {

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1117",
+  "version": "2.0.1119",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/lib/skill-bootstrap.js

@@ -100,6 +100,157 @@ function computeFileHash(filePath) {
   return crypto.createHash('sha256').update(content).digest('hex');
 }
 
+function httpGet(url, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    const req = https.get(url, { timeout: timeoutMs, headers: { 'accept': 'application/json', 'user-agent': 'gm-skill-bootstrap' } }, (res) => {
+      if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+        res.resume();
+        httpGet(res.headers.location, timeoutMs).then(resolve, reject);
+        return;
+      }
+      if (res.statusCode !== 200) {
+        res.resume();
+        reject(new Error(`HTTP ${res.statusCode} ${url}`));
+        return;
+      }
+      const chunks = [];
+      res.on('data', (c) => chunks.push(c));
+      res.on('end', () => resolve(Buffer.concat(chunks)));
+      res.on('error', reject);
+    });
+    req.on('timeout', () => { req.destroy(new Error(`timeout ${timeoutMs}ms ${url}`)); });
+    req.on('error', reject);
+  });
+}
+
+async function getLatestRemoteVersion() {
+  let version = null;
+  let source = null;
+  try {
+    const buf = await httpGet('https://api.github.com/repos/AnEntrypoint/plugkit-bin/releases/latest', 3000);
+    const rel = JSON.parse(buf.toString('utf-8'));
+    const tag = rel && rel.tag_name;
+    if (tag) {
+      version = tag.replace(/^v/, '');
+      source = 'github-releases';
+    }
+  } catch (e) {
+    emitBootstrapEvent('warn', 'GitHub Releases lookup failed', { error: e.message });
+  }
+  if (!version) {
+    try {
+      const buf = await httpGet('https://registry.npmjs.org/gm-plugkit/latest', 3000);
+      const pkg = JSON.parse(buf.toString('utf-8'));
+      if (pkg && pkg.plugkitVersion) {
+        version = pkg.plugkitVersion;
+        source = 'npm-gm-plugkit';
+      } else if (pkg && pkg.version) {
+        version = pkg.version;
+        source = 'npm-gm-plugkit-fallback';
+      }
+    } catch (e) {
+      emitBootstrapEvent('warn', 'npm fallback lookup failed', { error: e.message });
+    }
+  }
+  if (!version) {
+    emitBootstrapEvent('warn', 'All latest-version lookups failed; falling back to manifest');
+    return null;
+  }
+  let sha = '';
+  try {
+    const shaBuf = await httpGet(`https://github.com/AnEntrypoint/plugkit-bin/releases/download/v${version}/plugkit.wasm.sha256`, 3000);
+    sha = shaBuf.toString('utf-8').trim().split(/\s+/)[0];
+  } catch (e) {
+    emitBootstrapEvent('warn', 'sha fetch failed; will verify after download', { error: e.message, version });
+  }
+  emitBootstrapEvent('info', 'Resolved latest plugkit version', { version, source, hasSha: Boolean(sha) });
+  return { version, sha, source };
+}
+
+function gitignorePath(cwd) { return path.join(cwd, '.gitignore'); }
+
+function getManagedGitignoreEntries() {
+  return [
+    '.gm/exec-spool/',
+    '.gm/gm-fired-*',
+    '.gm/needs-gm',
+    '.gm/lastskill',
+    '.gm/turn-state.json',
+    '.gm/turn-state.json.corrupted-*',
+    '.gm/residual-check-fired',
+    '.gm/bootstrap-status.json',
+    '.gm/bootstrap-error.json',
+    '.gm/rslearn-counter.json',
+    '.gm/trajectory-drafts/',
+    '.gm/ingest-drafts/',
+    '.gm/prd-state.json',
+    '.gm/subagent-*.json',
+    '.plugkit-browser-profile/',
+    '.plugkit-browser-profile-*/',
+  ];
+}
+
+function getMustStayTracked() {
+  return [
+    '.gm/rs-learn.db',
+    '.gm/code-search/',
+    '.gm/disciplines/',
+    '.gm/prd.yml',
+    '.gm/mutables.yml',
+    'gm-data/rs-learn.db',
+    'gm-data/code-search/',
+    'gm-data/disciplines/',
+  ];
+}
+
+function ensureManagedGitignore(cwd) {
+  try {
+    const gi = gitignorePath(cwd);
+    let content = '';
+    try { content = fs.readFileSync(gi, 'utf-8'); } catch (_) {}
+    const START = '# >>> plugkit managed';
+    const END = '# <<< plugkit managed';
+    const entries = getManagedGitignoreEntries();
+    const block = [START, ...entries, END].join('\n');
+    const startIdx = content.indexOf(START);
+    const endIdx = content.indexOf(END);
+    let cleaned;
+    if (startIdx !== -1 && endIdx !== -1 && endIdx > startIdx) {
+      const before = content.slice(0, startIdx).replace(/\n+$/, '');
+      const after = content.slice(endIdx + END.length).replace(/^\n+/, '');
+      cleaned = [before, block, after].filter(Boolean).join('\n');
+    } else {
+      cleaned = content.replace(/\n+$/, '');
+      cleaned = cleaned ? `${cleaned}\n\n${block}` : block;
+    }
+    if (!cleaned.endsWith('\n')) cleaned += '\n';
+    if (cleaned !== content) {
+      fs.writeFileSync(gi, cleaned);
+      emitBootstrapEvent('info', 'Managed .gitignore block updated', { path: gi, entries: entries.length });
+    }
+    const mustTrack = getMustStayTracked();
+    const lines = cleaned.split(/\r?\n/);
+    const inManaged = (idx) => {
+      let inside = false;
+      for (let i = 0; i <= idx; i++) {
+        if (lines[i] === START) inside = true;
+        else if (lines[i] === END) inside = false;
+      }
+      return inside;
+    };
+    for (let i = 0; i < lines.length; i++) {
+      const t = lines[i].trim();
+      if (!t || t.startsWith('#')) continue;
+      if (inManaged(i)) continue;
+      if (mustTrack.includes(t)) {
+        emitBootstrapEvent('warn', 'Hostile .gitignore entry — must stay tracked', { entry: t, line: i + 1 });
+      }
+    }
+  } catch (e) {
+    emitBootstrapEvent('warn', 'ensureManagedGitignore failed', { error: e.message });
+  }
+}
+
 async function downloadPlugkitBinary(version) {
   const binaryName = 'plugkit.wasm';
   const url = `https://github.com/AnEntrypoint/plugkit-bin/releases/download/v${version}/${binaryName}`;
@@ -291,17 +442,36 @@ async function spawnPlugkitWatcher(wasmPath) {
   }
 }
 
-async function bootstrapPlugkit(sessionId) {
+async function bootstrapPlugkit(sessionId, options) {
   const startTime = Date.now();
+  const opts = options || {};
+  const forceLatest = Boolean(opts.latest);
 
   try {
-    emitBootstrapEvent('info', 'Bootstrap started');
+    emitBootstrapEvent('info', 'Bootstrap started', { forceLatest });
+
+    ensureManagedGitignore(process.cwd());
+
+    const manifest = readManifest();
+    let targetVersion = manifest.version;
+    let expectedHash = manifest.expectedHash;
+
+    if (forceLatest) {
+      const latest = await getLatestRemoteVersion();
+      if (latest && latest.version) {
+        targetVersion = latest.version;
+        expectedHash = latest.sha || expectedHash;
+        if (latest.version !== manifest.version) {
+          emitBootstrapEvent('info', 'forceLatest: using newer remote version', { latest: latest.version, manifest: manifest.version });
+        }
+      }
+    }
 
-    const { version: manifestVersion, expectedHash } = readManifest();
     const installedVersion = getInstalledVersion();
     const plugkitPath = getPlugkitPath();
 
-    const versionMismatch = installedVersion !== manifestVersion;
+    const manifestVersion = targetVersion;
+    const versionMismatch = installedVersion !== targetVersion;
     const binaryMissing = !fs.existsSync(plugkitPath);
 
     if (!binaryMissing && !versionMismatch) {
@@ -347,9 +517,12 @@ async function bootstrapPlugkit(sessionId) {
 
       if (binaryData) {
         const downloadedHash = crypto.createHash('sha256').update(binaryData).digest('hex');
-        if (downloadedHash !== expectedHash) {
+        if (expectedHash && downloadedHash !== expectedHash) {
           throw new Error(`Hash mismatch: got ${downloadedHash}, expected ${expectedHash}`);
         }
+        if (!expectedHash) {
+          emitBootstrapEvent('warn', 'No expected hash; trusting npm-resolved download', { sha: downloadedHash, version: manifestVersion });
+        }
 
         killExistingPlugkit();
         await writeBinaryWithRetry(plugkitPath, binaryData);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1117",
+  "version": "2.0.1119",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "gm.json"
   ],
   "dependencies": {
-    "gm-plugkit": "^2.0.1117"
+    "gm-plugkit": "^2.0.1119"
   },
   "engines": {
     "node": ">=16.0.0"

package/skills/gm-skill/SKILL.md

@@ -16,6 +16,10 @@ Check `.gm/exec-spool/.status.json`. If absent or `ts` > 15s old:
 
 Wait 2 seconds, verify `.status.json` is fresh. Then proceed.
 
+## Plugkit version updates
+
+The watcher checks GitHub Releases every 5 minutes for a newer plugkit. If drift is detected, it writes `.gm/exec-spool/.update-available.json` with `{installed, latest, instruction, update_url}`; if no drift, the file is removed. Read this file at session start (and occasionally afterward); if present, kill the current watcher, run `bootstrapPlugkit({latest: true})` once to fetch the new wasm, then restart the watcher. Default bootstrap never hits the network — only `{latest: true}` fetches the newest binary.
+
 ## Dispatch ABI
 
 Write request body to `.gm/exec-spool/in/<verb>/<N>.txt`. Read response from `.gm/exec-spool/out/<verb>-<N>.json` (nested verbs) or `out/<N>.json` (root verbs). Bodies are JSON, raw code, or a single phase name depending on the verb.