gm-skill 2.0.1228 → 2.0.1230

package/README.md

@@ -35,7 +35,7 @@ An earlier generation fanned out fifteen per-platform downstream repos (gm-cc, g
 
 ## Version
 
-`2.0.1228` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
+`2.0.1230` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
 
 ## Source of truth
 

package/bin/bootstrap.js

@@ -17,6 +17,29 @@ function log(msg) {
   try { process.stderr.write(`[plugkit-bootstrap] ${msg}\n`); } catch (_) {}
 }
 
+// Resolve a bare command name to its actual .exe on Windows. cmd.exe + .cmd
+// shim chains re-enter conhost (visible window flash) even with
+// windowsHide:true on the parent. Spawning the real .exe directly lets
+// CREATE_NO_WINDOW propagate. Falls back to .cmd or the original name when
+// no .exe is found. See [[windows-spawn-cmd-shim-flash]].
+function resolveWindowsExe(cmd) {
+  if (process.platform !== 'win32') return cmd;
+  try {
+    const r = spawnSync('where', [cmd], {
+      encoding: 'utf-8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+      windowsHide: true,
+      timeout: 800,
+    });
+    if (r.status !== 0) return cmd;
+    const lines = (r.stdout || '').split(/\r?\n/).map(l => l.trim()).filter(Boolean);
+    const exe = lines.find(l => /\.exe$/i.test(l));
+    return exe || lines[0] || cmd;
+  } catch {
+    return cmd;
+  }
+}
+
 function probeBinaryVersion(binPath) {
   try {
     const { spawnSync } = require('child_process');
@@ -232,8 +255,9 @@ async function extractNpmPackageWasm(destPath, version) {
     log(`extracting npm package ${NPM_PACKAGE}@${version} to ${tempDir}`);
     obsEvent('bootstrap', 'npm.extract.start', { package: NPM_PACKAGE, version });
 
+    const npxResolved = resolveWindowsExe('npx');
     const result = spawnSync(
-      process.platform === 'win32' ? 'npx.cmd' : 'npx',
+      npxResolved,
       [NPM_PACKAGE + '@' + version, '--prefix', tempDir],
       {
         stdio: ['ignore', 'pipe', 'pipe'],

package/gm-plugkit/bootstrap.js

@@ -7,6 +7,28 @@ const os = require('os');
 const crypto = require('crypto');
 const { spawn, spawnSync } = require('child_process');
 
+// Resolve a bare command name to its actual .exe on Windows. cmd.exe + .cmd
+// shim chains re-enter conhost (visible window flash) even with
+// windowsHide:true on the parent. Spawning the real .exe directly lets
+// CREATE_NO_WINDOW propagate. See [[windows-spawn-cmd-shim-flash]].
+function resolveWindowsExe(cmd) {
+  if (process.platform !== 'win32') return cmd;
+  try {
+    const r = spawnSync('where', [cmd], {
+      encoding: 'utf-8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+      windowsHide: true,
+      timeout: 800,
+    });
+    if (r.status !== 0) return cmd;
+    const lines = (r.stdout || '').split(/\r?\n/).map(l => l.trim()).filter(Boolean);
+    const exe = lines.find(l => /\.exe$/i.test(l));
+    return exe || lines[0] || cmd;
+  } catch {
+    return cmd;
+  }
+}
+
 const NPM_PACKAGE = 'plugkit-wasm';
 const ATTEMPT_TIMEOUT_MS = 10 * 60 * 1000;
 const MAX_ATTEMPTS = 3;
@@ -180,7 +202,7 @@ async function extractNpmPackageWasm(destPath, version) {
 
     fs.writeFileSync(path.join(tempDir, 'package.json'), JSON.stringify({ name: 'plugkit-extract', version: '0.0.0', private: true }));
 
-    const cmd = process.platform === 'win32' ? 'npm.cmd' : 'npm';
+    const cmd = resolveWindowsExe('npm');
     const args = ['install', '--no-audit', '--no-fund', '--no-save', NPM_PACKAGE + '@' + version];
 
     const result = spawnSync(cmd, args, {
@@ -189,7 +211,6 @@ async function extractNpmPackageWasm(destPath, version) {
       timeout: ATTEMPT_TIMEOUT_MS,
       encoding: 'utf8',
       windowsHide: true,
-      shell: process.platform === 'win32',
     });
 
     if (result.error) throw result.error;

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -736,6 +736,24 @@ function cleanDeadProfileFragments(cwd) {
   }
 }
 
+function resolveWindowsExeLocal(cmd) {
+  if (process.platform !== 'win32') return cmd;
+  try {
+    const out = spawnSync('where', [cmd], {
+      encoding: 'utf-8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+      windowsHide: true,
+      timeout: 800,
+    });
+    if (out.status !== 0) return cmd;
+    const lines = (out.stdout || '').split(/\r?\n/).map(l => l.trim()).filter(Boolean);
+    const exe = lines.find(l => /\.exe$/i.test(l));
+    return exe || lines[0] || cmd;
+  } catch {
+    return cmd;
+  }
+}
+
 function isPortReachableSync(host, port, timeoutMs) {
   const r = spawnSync(process.execPath, ['-e', `
     const net = require('net');
@@ -777,8 +795,12 @@ function ensureAcptoapi() {
     if (_acptoapiBoot.spawned_at && Date.now() - _acptoapiBoot.spawned_at < 30000) {
       return;
     }
-    const isWindows = process.platform === 'win32';
-    const cmd = isWindows ? 'bun.exe' : 'bun';
+    // Resolve `bun` to its actual .exe on Windows so the spawned daemon
+    // doesn't enter conhost via a bun.cmd shim. See
+    // [[windows-spawn-cmd-shim-flash]] — cmd.exe + .cmd chain re-enters
+    // conhost even with windowsHide:true on the parent. Falls back to
+    // the bare name on non-Windows / when `where` can't resolve.
+    const cmd = resolveWindowsExeLocal('bun');
     const child = spawn(cmd, ['x', 'acptoapi@latest'], {
       detached: true,
       stdio: 'ignore',

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1228",
+  "version": "2.0.1230",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/lib/daemon-bootstrap.js

@@ -5,6 +5,28 @@ const { spawn, execSync } = require('child_process');
 const os = require('os');
 const spool = require('./spool.js');
 
+// Resolve a bare command name to its .exe on Windows. cmd.exe + .cmd shim
+// chains re-enter conhost (visible window flash) even with windowsHide:true
+// on the parent. Spawning the real .exe directly lets CREATE_NO_WINDOW
+// propagate cleanly. Falls back to the original name if no .exe is found.
+// See [[windows-spawn-cmd-shim-flash]] for the discipline rationale.
+function resolveWindowsExe(cmd) {
+  if (process.platform !== 'win32') return cmd;
+  try {
+    const out = execSync(`where ${cmd}`, {
+      encoding: 'utf-8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+      windowsHide: true,
+      timeout: 800,
+    });
+    const lines = out.split(/\r?\n/).map(l => l.trim()).filter(Boolean);
+    const exe = lines.find(l => /\.exe$/i.test(l));
+    return exe || lines[0] || cmd;
+  } catch {
+    return cmd;
+  }
+}
+
 const LOG_DIR = path.join(os.homedir(), '.claude', 'gm-log');
 const GM_STATE_DIR = path.join(os.homedir(), '.gm');
 
@@ -159,7 +181,7 @@ async function ensureRsLearningDaemonRunning() {
       CLAUDE_SESSION_ID: sessionId,
     });
 
-    const proc = spawn('bun', ['x', 'rs-learn@latest'], {
+    const proc = spawn(resolveWindowsExe('bun'), ['x', 'rs-learn@latest'], {
       detached: true,
       stdio: 'ignore',
       windowsHide: true,
@@ -213,7 +235,7 @@ async function ensureAcptoapiRunning() {
     });
 
     try {
-      const child = spawn('bun', ['x', 'acptoapi@latest'], {
+      const child = spawn(resolveWindowsExe('bun'), ['x', 'acptoapi@latest'], {
         detached: true,
         stdio: 'ignore',
         windowsHide: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1228",
+  "version": "2.0.1230",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "gm.json"
   ],
   "dependencies": {
-    "gm-plugkit": "^2.0.1228"
+    "gm-plugkit": "^2.0.1230"
   },
   "engines": {
     "node": ">=16.0.0"