gm-skill 2.0.1218 → 2.0.1219

package/README.md

@@ -35,7 +35,7 @@ An earlier generation fanned out fifteen per-platform downstream repos (gm-cc, g
 
 ## Version
 
-`2.0.1218` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
+`2.0.1219` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
 
 ## Source of truth
 

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.446
+0.1.447

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-f47f68684b3860078e10698ca188c302968eb99fbc6608a2851eb3ded4b55df8  plugkit.wasm
+0ce920f00138b9524a0a1ad062dab691e4959497853644a7d06403c2b77ed480  plugkit.wasm

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -1223,7 +1223,17 @@ function makeHostFunctions(instanceRef) {
         const opts = optsStr ? JSON.parse(optsStr) : {};
         const lang = opts.lang || 'nodejs';
         const cwd = opts.cwd || process.cwd();
-        const timeoutMs = opts.timeoutMs || 30000;
+        const rawTimeout = opts.timeoutMs;
+        if (rawTimeout === undefined || rawTimeout === null || typeof rawTimeout !== 'number' || !Number.isFinite(rawTimeout) || rawTimeout <= 0 || !Number.isInteger(rawTimeout)) {
+          return writeWasmJson(instanceRef.value, {
+            ok: false,
+            error: 'missing timeoutMs',
+            required: 'positive integer milliseconds',
+            paper_ref: '§20',
+            received: rawTimeout === undefined ? null : rawTimeout,
+          });
+        }
+        const timeoutMs = rawTimeout;
         let cmd, args;
         if (lang === 'nodejs' || lang === 'js') { cmd = process.execPath; args = ['-e', code]; }
         else if (lang === 'python') { cmd = 'python'; args = ['-c', code]; }
@@ -1755,6 +1765,13 @@ async function runSpoolWatcher(instance, spoolDir) {
         const sessForRecall = readCurrentSess();
         if (isInstructionTurnStart(sessForRecall)) {
           autoRecallPayload = tryAutoRecallForTurnEntry(instance, sessForRecall, process.cwd());
+          try {
+            const _spoolDir = path.join(process.cwd(), '.gm', 'exec-spool');
+            for (const _f of ['.turn-browser-edits.json', '.turn-browser-witnessed']) {
+              const _p = path.join(_spoolDir, _f);
+              if (fs.existsSync(_p)) fs.unlinkSync(_p);
+            }
+          } catch (_) {}
         }
       }
 
@@ -1781,6 +1798,15 @@ async function runSpoolWatcher(instance, spoolDir) {
       logEvent('plugkit', 'dispatch.end', { verb, task: taskBase, dur_ms, out_bytes: resultStr.length });
       emitOrchestratorEvents(verb, taskBase, resultStr);
 
+      if (verb === 'browser') {
+        try {
+          const witnessFile = path.join(process.cwd(), '.gm', 'exec-spool', '.turn-browser-witnessed');
+          fs.mkdirSync(path.dirname(witnessFile), { recursive: true });
+          fs.writeFileSync(witnessFile, JSON.stringify({ ts: Date.now(), task: taskBase, dur_ms }));
+          logEvent('plugkit', 'browser.witness-marked', { task: taskBase });
+        } catch (_) {}
+      }
+
       try { instance.exports.plugkit_free(verbPtr, verbBytes.length); } catch (_) {}
       try { instance.exports.plugkit_free(bodyPtr, bodyBytes.length); } catch (_) {}
       try { instance.exports.plugkit_free(ptr, len); } catch (_) {}

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1218",
+  "version": "2.0.1219",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.446"
+  "plugkitVersion": "0.1.447"
 }

package/lib/spool-dispatch.js

@@ -59,6 +59,69 @@ function hasUnpushedCommits(cwd) {
 
 const TOPLEVEL_DOC_ALLOWLIST = new Set(['AGENTS.md', 'CLAUDE.md', 'README.md', 'SKILLS.md', 'CHANGELOG.md', 'LICENSE', 'LICENSE.md']);
 
+const BROWSER_FILE_EXT_RE = /\.(html?|tsx|jsx|vue|svelte|mjs|cjs|js|ts|css|scss|sass)$/i;
+const BROWSER_FILE_DIR_RE = /^(src|public|site|app|pages|components|client|web)[\\/]/i;
+
+function isBrowserRunningFile(rel) {
+  if (!rel) return false;
+  const norm = String(rel).replace(/\\/g, '/');
+  if (/\.(html?|tsx|jsx|vue|svelte)$/i.test(norm)) return true;
+  if (/\.(mjs|cjs|js|ts|css|scss|sass)$/i.test(norm) && BROWSER_FILE_DIR_RE.test(norm)) return true;
+  return false;
+}
+
+function browserEditsFile(cwd) {
+  return path.join(cwd || process.cwd(), '.gm', 'exec-spool', '.turn-browser-edits.json');
+}
+function browserWitnessFile(cwd) {
+  return path.join(cwd || process.cwd(), '.gm', 'exec-spool', '.turn-browser-witnessed');
+}
+
+function recordBrowserEdit(cwd, filePath) {
+  try {
+    const root = cwd || process.cwd();
+    let rel = filePath;
+    try { rel = path.relative(root, filePath); } catch (_) {}
+    if (!isBrowserRunningFile(rel)) return false;
+    const f = browserEditsFile(root);
+    fs.mkdirSync(path.dirname(f), { recursive: true });
+    let list = [];
+    try { list = JSON.parse(fs.readFileSync(f, 'utf8')); if (!Array.isArray(list)) list = []; } catch (_) {}
+    const entry = { file: rel.replace(/\\/g, '/'), ts: Date.now() };
+    if (!list.some(e => e && e.file === entry.file)) list.push(entry);
+    fs.writeFileSync(f, JSON.stringify(list));
+    return true;
+  } catch (_) { return false; }
+}
+
+function clearBrowserTurnMarkers(cwd) {
+  const root = cwd || process.cwd();
+  for (const p of [browserEditsFile(root), browserWitnessFile(root)]) {
+    try { if (fs.existsSync(p)) fs.unlinkSync(p); } catch (_) {}
+  }
+}
+
+function markBrowserWitnessed(cwd, meta) {
+  try {
+    const f = browserWitnessFile(cwd);
+    fs.mkdirSync(path.dirname(f), { recursive: true });
+    fs.writeFileSync(f, JSON.stringify({ ts: Date.now(), ...(meta || {}) }));
+  } catch (_) {}
+}
+
+function readBrowserEdits(cwd) {
+  try {
+    const f = browserEditsFile(cwd);
+    if (!fs.existsSync(f)) return [];
+    const list = JSON.parse(fs.readFileSync(f, 'utf8'));
+    return Array.isArray(list) ? list : [];
+  } catch (_) { return []; }
+}
+
+function isBrowserWitnessed(cwd) {
+  try { return fs.existsSync(browserWitnessFile(cwd)); } catch (_) { return false; }
+}
+
 function unsolicitedDocs(cwd) {
   try {
     const r = spawnSync('git', ['status', '--porcelain'], {
@@ -285,6 +348,13 @@ function checkDispatchGates(sessionId, operation, extra) {
         logDeviation('deviation.unsolicited-doc-created', { file: f, operation });
       }
     }
+    const browserEdits = readBrowserEdits(cwd);
+    if (browserEdits.length > 0 && !isBrowserWitnessed(cwd)) {
+      const files = browserEdits.map(e => e.file);
+      const shown = files.slice(0, 5).join(', ') + (files.length > 5 ? `, +${files.length - 5} more` : '');
+      residuals.push(`Browser Witness required: you edited ${shown} without dispatching the browser verb to witness the change in a live page. Per paper §23 this is non-negotiable. Either dispatch browser to verify the edit works in-browser, or revert the changes.`);
+      logDeviation('deviation.browser-witness-missing', { files, operation });
+    }
     if (residuals.length > 0) {
       logDeviation('deviation.gate-deny', { operation, reason: 'stop-gate residuals', residuals });
       return { allowed: false, reason: `stop-gate residuals: ${residuals.join('; ')}`, residuals };
@@ -339,4 +409,4 @@ function checkDispatchGates(sessionId, operation, extra) {
   return { allowed: true };
 }
 
-module.exports = { dispatchSpool, checkDispatchGates, isWorktreeDirty, hasUnpushedCommits, unsolicitedDocs, logDeviation, markInstructionSeen, hasDispatchedInstruction, isSpoolPollCommand, SPOOL_POLL_REASON };
+module.exports = { dispatchSpool, checkDispatchGates, isWorktreeDirty, hasUnpushedCommits, unsolicitedDocs, logDeviation, markInstructionSeen, hasDispatchedInstruction, isSpoolPollCommand, SPOOL_POLL_REASON, recordBrowserEdit, markBrowserWitnessed, clearBrowserTurnMarkers, isBrowserRunningFile, readBrowserEdits, isBrowserWitnessed };

package/lib/spool-poll-gate.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const { isSpoolPollCommand, SPOOL_POLL_REASON, logDeviation } = require('./spool-dispatch.js');
+const { isSpoolPollCommand, SPOOL_POLL_REASON, logDeviation, recordBrowserEdit, isBrowserRunningFile } = require('./spool-dispatch.js');
 
 let raw = '';
 process.stdin.setEncoding('utf8');
@@ -9,6 +9,24 @@ process.stdin.on('end', () => {
   try { event = JSON.parse(raw || '{}'); } catch (_) { event = {}; }
   const tool = event.tool_name || event.tool || '';
   const input = event.tool_input || event.input || {};
+  const cwd = event.cwd || process.env.CLAUDE_PROJECT_DIR || process.cwd();
+
+  if (tool === 'Write' || tool === 'Edit' || tool === 'MultiEdit') {
+    const fp = input.file_path || input.filePath || input.path || '';
+    if (fp && isBrowserRunningFile(require('path').relative(cwd, fp))) {
+      try { recordBrowserEdit(cwd, fp); } catch (_) {}
+      try {
+        logDeviation('browser-edit.recorded', {
+          operation: tool.toLowerCase(),
+          file: fp,
+          sess: event.session_id || process.env.CLAUDE_SESSION_ID || process.env.GM_SESSION_ID || '',
+        });
+      } catch (_) {}
+    }
+    process.stdout.write(JSON.stringify({ continue: true }));
+    process.exit(0);
+  }
+
   if (tool !== 'Bash') {
     process.stdout.write(JSON.stringify({ continue: true }));
     process.exit(0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1218",
+  "version": "2.0.1219",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "gm.json"
   ],
   "dependencies": {
-    "gm-plugkit": "^2.0.1218"
+    "gm-plugkit": "^2.0.1219"
   },
   "engines": {
     "node": ">=16.0.0"