gm-skill 2.0.1256 → 2.0.1258

package/README.md

@@ -35,7 +35,7 @@ An earlier generation fanned out fifteen per-platform downstream repos (gm-cc, g
 
 ## Version
 
-`2.0.1256` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
+`2.0.1258` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
 
 ## Source of truth
 

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.464
+0.1.465

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-5f964bb1da8059f4d6969dc179e407cc14fa91860135389a611d1896085b59be  plugkit.wasm
+09af78c6bc70c9933aad2ca7fb53b739a8a4f19fb08b19ba6fe33997d15de8e7  plugkit.wasm

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -27,213 +27,6 @@ const ORCHESTRATOR_VERBS = new Set(['instruction', 'transition', 'phase-status',
 const TURN_IDLE_MS = 30_000;
 const _turns = new Map();
 
-const SPOOL_POLL_GATE_MARK = '__gm_spool_poll_gate__';
-
-function spoolPollGateScript() {
-  return `#!/usr/bin/env node
-// ${SPOOL_POLL_GATE_MARK}
-// PreToolUse hook that blocks bash polling of .gm/exec-spool.
-// Plugkit is synchronous from the agent's view; the Read tool is the canonical
-// way to inspect response files. This hook denies Bash commands that try to
-// poll or shell-read the spool directory.
-
-const SPOOL_POLL_PATTERNS = [
-  /\\bsleep\\s+\\d+(?:\\.\\d+)?\\s*[;&]+\\s*(?:cat|ls|tail|head|find|test|grep)\\b[^|]*\\.gm[\\\\/](?:exec-spool|spool)/i,
-  /\\bStart-Sleep\\b[^;|]*?[;|]\\s*(?:Get-Content|Test-Path|Get-ChildItem|cat|ls|gci|gc|tp)\\b[^|]*\\.gm[\\\\/](?:exec-spool|spool)/i,
-  /\\b(?:cat|ls|tail|head|Get-Content|Test-Path|Get-ChildItem)\\b[^|]*\\.gm[\\\\/](?:exec-spool|spool)[^|]*?[;&|]+\\s*(?:sleep|Start-Sleep)\\b/i,
-  /\\bwhile\\b[^;]*?(?:!|-not)\\s*(?:-(?:f|e)\\s+|Test-Path\\s+)[^;]*?\\.gm[\\\\/](?:exec-spool|spool)/i,
-  /\\buntil\\b[^;]*?(?:-f|-e|Test-Path)\\s+[^;]*?\\.gm[\\\\/](?:exec-spool|spool)/i,
-  /\\bfor\\s+i\\s+in\\b[^;]*?;\\s*do\\b[^;]*?(?:sleep|Start-Sleep)[^;]*?\\.gm[\\\\/](?:exec-spool|spool)/i,
-  /\\b(?:cat|head|tail|less|more|type|Get-Content|gc)\\s+(?:-[A-Za-z]+\\s+)*['"]?[^'"|;&]*\\.gm[\\\\/](?:exec-spool|spool)[\\\\/]\\.status\\.json\\b/i,
-  /\\b(?:cat|head|tail|less|more|type|Get-Content|gc)\\s+(?:-[A-Za-z]+\\s+)*['"]?[^'"|;&]*\\.gm[\\\\/](?:exec-spool|spool)[\\\\/]\\.watcher\\.log\\b/i,
-  /\\b(?:ls|dir|Get-ChildItem|gci)\\s+(?:-[A-Za-z]+\\s+)*['"]?[^'"|;&]*\\.gm[\\\\/](?:exec-spool|spool)(?:[\\\\/](?:in|out)?)?[\\\\/]?['"]?\\s*(?:$|[|;&])/i,
-  /\\b(?:test|Test-Path|tp)\\s+(?:-[A-Za-z]+\\s+)?['"]?[^'"|;&]*\\.gm[\\\\/](?:exec-spool|spool)[\\\\/](?:out|in)[\\\\/]/i,
-  /\\bfind\\b[^|]*['"]?[^'"|;&]*\\.gm[\\\\/](?:exec-spool|spool)\\b/i,
-  /\\b(?:xargs|parallel|fzf)\\b[^|]*\\.gm[\\\\/](?:exec-spool|spool)/i,
-];
-
-const SPOOL_POLL_REASON = 'spool polling and bash-reads of .gm/exec-spool/ are forbidden — plugkit is synchronous from your view, and the Read tool is the canonical way to inspect spool files. Specific replacements:\\n\\n- Instead of \`cat .gm/exec-spool/.status.json\` → use the Read tool: \`Read .gm/exec-spool/.status.json\`\\n- Instead of \`ls .gm/exec-spool/out/\` → check the specific response file you wrote, e.g. \`Read .gm/exec-spool/out/<verb>-<N>.json\`\\n- Instead of \`cat .gm/exec-spool/.watcher.log\` → use the Read tool with offset for tailing\\n- Instead of \`sleep N; cat .gm/exec-spool/<...>\` → just Read the response file directly; if it doesn\\'t exist yet, the watcher is dead (Read .gm/exec-spool/.status.json — fresh ts means alive) or the verb is slow (Read .gm/exec-spool/.watcher.log for the dispatch trace)\\n\\nYou are the state machine. Plugkit serves the response the moment you write the request file. If you find yourself thinking "let me just check whether the file is there yet" — use Read. If you find yourself thinking "the watcher might have died" — Read .gm/exec-spool/.status.json. Bash on .gm/exec-spool/ is wrong every single time.';
-
-function stripHeredocsAndStringLiterals(command) {
-  let s = String(command);
-  s = s.replace(/<<-?\\s*'([A-Z_]+)'[\\s\\S]*?\\n\\1/g, '');
-  s = s.replace(/<<-?\\s*"?([A-Z_]+)"?[\\s\\S]*?\\n\\1/g, '');
-  s = s.replace(/\\$\\(cat\\s+<<-?\\s*'?([A-Z_]+)'?[\\s\\S]*?\\n\\1\\s*\\)/g, '');
-  s = s.replace(/-m\\s+(['"])(?:\\\\.|(?!\\1)[^\\\\])*\\1/g, '-m STR');
-  s = s.replace(/--message[= ]+(['"])(?:\\\\.|(?!\\1)[^\\\\])*\\1/g, '--message STR');
-  return s;
-}
-
-function isSpoolPollCommand(command) {
-  if (!command) return null;
-  const stripped = stripHeredocsAndStringLiterals(command);
-  for (const re of SPOOL_POLL_PATTERNS) {
-    if (re.test(stripped)) return re.source;
-  }
-  return null;
-}
-
-function isBrowserRunningFileLocal(rel) {
-  if (!rel) return false;
-  const norm = String(rel).replace(/\\\\/g, '/');
-  if (/\\.(html?|tsx|jsx|vue|svelte)$/i.test(norm)) return true;
-  if (/\\.(mjs|cjs|js|ts|css|scss|sass)$/i.test(norm) && /^(src|public|site|app|pages|components|client|web)\\//i.test(norm)) return true;
-  return false;
-}
-
-function hashFileShortLocal(cwd, rel) {
-  try {
-    const fs = require('fs');
-    const path = require('path');
-    const crypto = require('crypto');
-    const abs = path.isAbsolute(rel) ? rel : path.join(cwd, rel);
-    const buf = fs.readFileSync(abs);
-    return crypto.createHash('sha256').update(buf).digest('hex').slice(0, 12);
-  } catch (_) { return ''; }
-}
-
-function recordBrowserEditLocal(cwd, filePath) {
-  try {
-    const fs = require('fs');
-    const path = require('path');
-    let rel = filePath;
-    try { rel = path.relative(cwd, filePath); } catch (_) {}
-    if (!isBrowserRunningFileLocal(rel)) return false;
-    const editsFile = path.join(cwd, '.gm', 'exec-spool', '.turn-browser-edits.json');
-    fs.mkdirSync(path.dirname(editsFile), { recursive: true });
-    let list = [];
-    try { list = JSON.parse(fs.readFileSync(editsFile, 'utf8')); if (!Array.isArray(list)) list = []; } catch (_) {}
-    const relPath = rel.replace(/\\\\/g, '/');
-    const hash = hashFileShortLocal(cwd, relPath);
-    const idx = list.findIndex(e => e && e.file === relPath);
-    const entry = { file: relPath, ts: Date.now(), hash };
-    if (idx === -1) list.push(entry); else list[idx] = entry;
-    fs.writeFileSync(editsFile, JSON.stringify(list));
-    return true;
-  } catch (_) { return false; }
-}
-
-let raw = '';
-process.stdin.setEncoding('utf8');
-process.stdin.on('data', (chunk) => { raw += chunk; });
-process.stdin.on('end', () => {
-  let event = {};
-  try { event = JSON.parse(raw || '{}'); } catch (_) { event = {}; }
-  const tool = event.tool_name || event.tool || '';
-  const input = event.tool_input || event.input || {};
-  const cwd = event.cwd || process.env.CLAUDE_PROJECT_DIR || process.cwd();
-
-  if (tool === 'Write' || tool === 'Edit' || tool === 'MultiEdit') {
-    const fp = input.file_path || input.filePath || input.path || '';
-    if (fp) {
-      try { recordBrowserEditLocal(cwd, fp); } catch (_) {}
-    }
-    process.stdout.write(JSON.stringify({ continue: true }));
-    process.exit(0);
-  }
-
-  if (tool !== 'Bash') {
-    process.stdout.write(JSON.stringify({ continue: true }));
-    process.exit(0);
-  }
-  const command = input.command || input.cmd || '';
-  const pattern = isSpoolPollCommand(command);
-  if (!pattern) {
-    process.stdout.write(JSON.stringify({ continue: true }));
-    process.exit(0);
-  }
-  try {
-    const fs = require('fs');
-    const path = require('path');
-    const os = require('os');
-    const day = new Date().toISOString().slice(0, 10);
-    const dir = path.join(process.env.GM_LOG_DIR || path.join(os.homedir(), '.claude', 'gm-log'), day);
-    fs.mkdirSync(dir, { recursive: true });
-    fs.appendFileSync(path.join(dir, 'hook.jsonl'), JSON.stringify({
-      ts: new Date().toISOString(),
-      sub: 'hook',
-      event: 'deviation.spool-poll',
-      pid: process.pid,
-      sess: event.session_id || process.env.CLAUDE_SESSION_ID || process.env.GM_SESSION_ID || '',
-      cwd: process.cwd(),
-      operation: 'bash',
-      pattern,
-      command_excerpt: String(command).slice(0, 200),
-      via: 'pre-tool-use-hook',
-    }) + '\\n');
-  } catch (_) {}
-  process.stdout.write(JSON.stringify({
-    decision: 'block',
-    reason: SPOOL_POLL_REASON,
-  }));
-  process.exit(2);
-});
-`;
-}
-
-function ensureSpoolPollGate(cwd) {
-  try {
-    const gmHooks = path.join(cwd, '.gm', 'hooks');
-    fs.mkdirSync(gmHooks, { recursive: true });
-    const gateScript = path.join(gmHooks, 'spool-poll-gate.js');
-    const want = spoolPollGateScript();
-    let need = true;
-    let oldSha = '';
-    let existed = false;
-    try {
-      const existing = fs.readFileSync(gateScript, 'utf8');
-      existed = true;
-      if (existing === want) need = false;
-      else {
-        try {
-          const _crypto = require('crypto');
-          oldSha = _crypto.createHash('sha256').update(existing).digest('hex').slice(0, 12);
-        } catch (_) {}
-      }
-    } catch (_) {}
-    if (need) {
-      fs.writeFileSync(gateScript, want);
-      try {
-        const _crypto = require('crypto');
-        const newSha = _crypto.createHash('sha256').update(want).digest('hex').slice(0, 12);
-        try {
-          logEvent('bootstrap', existed ? 'gate.refreshed' : 'gate.installed', {
-            cwd,
-            path: gateScript,
-            old_sha: oldSha || null,
-            new_sha: newSha,
-            bytes: Buffer.byteLength(want, 'utf8'),
-          });
-        } catch (_) {}
-      } catch (_) {}
-    }
-
-    const claudeDir = path.join(cwd, '.claude');
-    fs.mkdirSync(claudeDir, { recursive: true });
-    const settingsPath = path.join(claudeDir, 'settings.json');
-    let settings = {};
-    try {
-      const rawSettings = fs.readFileSync(settingsPath, 'utf8');
-      settings = JSON.parse(rawSettings || '{}');
-    } catch (_) { settings = {}; }
-    if (!settings.hooks || typeof settings.hooks !== 'object') settings.hooks = {};
-    if (!Array.isArray(settings.hooks.PreToolUse)) settings.hooks.PreToolUse = [];
-    const wantCommand = `node "\${CLAUDE_PROJECT_DIR}/.gm/hooks/spool-poll-gate.js"`;
-    for (const matcher of ['Bash', 'Write', 'Edit', 'MultiEdit']) {
-      let entry = settings.hooks.PreToolUse.find(e => e && e.matcher === matcher);
-      if (!entry) {
-        entry = { matcher, hooks: [] };
-        settings.hooks.PreToolUse.push(entry);
-      }
-      if (!Array.isArray(entry.hooks)) entry.hooks = [];
-      const already = entry.hooks.some(h => h && typeof h.command === 'string' && h.command.includes('spool-poll-gate.js'));
-      if (!already) {
-        entry.hooks.push({ type: 'command', command: wantCommand });
-      }
-    }
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-  } catch (_) {}
-}
 
 function applyDisciplineSigil(rawBody) {
   let parsed;
@@ -1602,7 +1395,6 @@ async function runSpoolWatcher(instance, spoolDir) {
   fs.mkdirSync(inDir, { recursive: true });
   fs.mkdirSync(outDir, { recursive: true });
 
-  try { ensureSpoolPollGate(process.env.CLAUDE_PROJECT_DIR || process.cwd()); } catch (_) {}
 
   const LOCK_PATH = path.join(spoolDir, '.watcher.lock');
   let _ownWrapperSha12 = '';
@@ -2388,7 +2180,6 @@ async function tryInstantiate(wasmPath) {
 
     if (args[0] === 'spool') {
       const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();
-      ensureSpoolPollGate(projectDir);
       const spoolDir = path.join(projectDir, '.gm', 'exec-spool');
       await runSpoolWatcher(instance, spoolDir);
     } else if (args[0] === 'dispatch') {

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1256",
+  "version": "2.0.1258",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.464"
+  "plugkitVersion": "0.1.465"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1256",
+  "version": "2.0.1258",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "gm.json"
   ],
   "dependencies": {
-    "gm-plugkit": "^2.0.1256"
+    "gm-plugkit": "^2.0.1258"
   },
   "engines": {
     "node": ">=16.0.0"

package/lib/spool-poll-gate.js

@@ -1,54 +0,0 @@
-#!/usr/bin/env node
-const { isSpoolPollCommand, SPOOL_POLL_REASON, logDeviation, recordBrowserEdit, isBrowserRunningFile } = require('./spool-dispatch.js');
-
-let raw = '';
-process.stdin.setEncoding('utf8');
-process.stdin.on('data', (chunk) => { raw += chunk; });
-process.stdin.on('end', () => {
-  let event = {};
-  try { event = JSON.parse(raw || '{}'); } catch (_) { event = {}; }
-  const tool = event.tool_name || event.tool || '';
-  const input = event.tool_input || event.input || {};
-  const cwd = event.cwd || process.env.CLAUDE_PROJECT_DIR || process.cwd();
-
-  if (tool === 'Write' || tool === 'Edit' || tool === 'MultiEdit') {
-    const fp = input.file_path || input.filePath || input.path || '';
-    if (fp && isBrowserRunningFile(require('path').relative(cwd, fp))) {
-      try { recordBrowserEdit(cwd, fp); } catch (_) {}
-      try {
-        logDeviation('browser-edit.recorded', {
-          operation: tool.toLowerCase(),
-          file: fp,
-          sess: event.session_id || process.env.CLAUDE_SESSION_ID || process.env.GM_SESSION_ID || '',
-        });
-      } catch (_) {}
-    }
-    process.stdout.write(JSON.stringify({ continue: true }));
-    process.exit(0);
-  }
-
-  if (tool !== 'Bash') {
-    process.stdout.write(JSON.stringify({ continue: true }));
-    process.exit(0);
-  }
-  const command = input.command || input.cmd || '';
-  const pattern = isSpoolPollCommand(command);
-  if (!pattern) {
-    process.stdout.write(JSON.stringify({ continue: true }));
-    process.exit(0);
-  }
-  try {
-    logDeviation('deviation.spool-poll', {
-      operation: 'bash',
-      pattern,
-      command_excerpt: String(command).slice(0, 200),
-      via: 'pre-tool-use-hook',
-      sess: event.session_id || process.env.CLAUDE_SESSION_ID || process.env.GM_SESSION_ID || '',
-    });
-  } catch (_) {}
-  process.stdout.write(JSON.stringify({
-    decision: 'block',
-    reason: SPOOL_POLL_REASON,
-  }));
-  process.exit(2);
-});