gm-skill 2.0.1283 → 2.0.1285

package/README.md

@@ -35,7 +35,7 @@ An earlier generation fanned out fifteen per-platform downstream repos (gm-cc, g
 
 ## Version
 
-`2.0.1283` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
+`2.0.1285` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
 
 ## Source of truth
 

package/bin/bootstrap.js

@@ -258,9 +258,12 @@ async function extractNpmPackageWasm(destPath, version) {
 
     const npxResolved = resolveWindowsExe('npx');
     const isCmdShim = process.platform === 'win32' && /\.(cmd|bat)$/i.test(npxResolved);
+    const rawArgs = [NPM_PACKAGE + '@' + version, '--prefix', tempDir];
+    const spawnCmd = isCmdShim && /\s/.test(npxResolved) ? `"${npxResolved}"` : npxResolved;
+    const spawnArgs = isCmdShim ? rawArgs.map(a => /[\s"]/.test(a) ? `"${a.replace(/"/g, '\\"')}"` : a) : rawArgs;
     const result = spawnSync(
-      npxResolved,
-      [NPM_PACKAGE + '@' + version, '--prefix', tempDir],
+      spawnCmd,
+      spawnArgs,
       {
         stdio: ['ignore', 'pipe', 'pipe'],
         timeout: ATTEMPT_TIMEOUT_MS,

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.475
+0.1.476

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-357a9a30b53595578a4aba6aec254613c47221055b299d42986fe1052cb19ee2  plugkit.wasm
+627006998cb293c98a69e06affaeace13a996e69c08cb63b44362b7a630ffc5e  plugkit.wasm

package/gm-plugkit/bootstrap.js

@@ -207,7 +207,10 @@ async function extractNpmPackageWasm(destPath, version) {
     const args = ['install', '--no-audit', '--no-fund', '--no-save', NPM_PACKAGE + '@' + version];
     const isCmdShim = process.platform === 'win32' && /\.(cmd|bat)$/i.test(cmd);
 
-    const result = spawnSync(cmd, args, {
+    const spawnCmd = isCmdShim ? `"${cmd}"` : cmd;
+    const spawnArgs = isCmdShim ? args.map(a => /[\s"]/.test(a) ? `"${a.replace(/"/g, '\\"')}"` : a) : args;
+
+    const result = spawnSync(spawnCmd, spawnArgs, {
       cwd: tempDir,
       stdio: ['ignore', 'pipe', 'pipe'],
       timeout: ATTEMPT_TIMEOUT_MS,

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -638,10 +638,15 @@ function sleepSync(ms) {
 }
 
 function runPlaywriter(pw, args, timeoutMs) {
-  return spawnSync(pw.cmd, [...pw.baseArgs, ...args], {
+  const allArgs = [...pw.baseArgs, ...args];
+  const useShell = !!pw.shell;
+  const spawnCmd = useShell && /\s/.test(pw.cmd) ? `"${pw.cmd}"` : pw.cmd;
+  const spawnArgs = useShell ? allArgs.map(a => /[\s"]/.test(String(a)) ? `"${String(a).replace(/"/g, '\\"')}"` : a) : allArgs;
+  return spawnSync(spawnCmd, spawnArgs, {
     encoding: 'utf-8',
     timeout: timeoutMs,
-    shell: pw.shell,
+    shell: useShell,
+    windowsHide: true,
     env: process.env,
   });
 }
@@ -736,6 +741,27 @@ function isColdRunProfile(profileDir) {
   }
 }
 
+function resolveManagedBrowserKey(pw) {
+  if (process.env.PLAYWRITER_BROWSER_KEY) {
+    const k = process.env.PLAYWRITER_BROWSER_KEY;
+    if (/^profile:/.test(k)) {
+      throw new Error(`PLAYWRITER_BROWSER_KEY=${k} points at a user OS browser profile; refusing — managed sessions must use install:Chromium:*`);
+    }
+    return k;
+  }
+  let text = '';
+  try {
+    const r = runPlaywriter(pw, ['browser', 'list'], 8000);
+    text = (r && (r.stdout || r.stderr)) || '';
+  } catch (e) {
+    throw new Error(`playwriter browser list failed: ${e.message}`);
+  }
+  const lines = text.split(/\r?\n/);
+  const installChromium = lines.map(l => (l.match(/\b(install:Chromium:[A-Za-z0-9_-]+)\b/) || [])[1]).find(Boolean);
+  if (installChromium) return installChromium;
+  throw new Error(`no managed Chromium install detected; playwriter browser list returned: ${scrubBrowserRunnerText(text).trim()}`);
+}
+
 function waitForExtensionReady(pw, profileDir, opts) {
   const cold = (opts && typeof opts.cold === 'boolean') ? opts.cold : isColdRunProfile(profileDir);
   const timeoutMs = (opts && opts.timeoutMs) || (cold ? 180000 : 30000);
@@ -745,10 +771,11 @@ function waitForExtensionReady(pw, profileDir, opts) {
   let attempt = 0;
   let lastErr = '';
   let lastProgressAt = start;
+  const browserKey = resolveManagedBrowserKey(pw);
   while (Date.now() < deadline) {
     const remaining = deadline - Date.now();
     const innerTimeout = Math.max(28000, Math.min(remaining, 30000));
-    const r = runPlaywriter(pw, ['session', 'new'], innerTimeout);
+    const r = runPlaywriter(pw, ['session', 'new', '--browser', browserKey], innerTimeout);
     if (r && r.status === 0) return r;
     lastErr = scrubBrowserRunnerText((r && (r.stderr || r.stdout)) || '');
     const now = Date.now();

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1283",
+  "version": "2.0.1285",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.475"
+  "plugkitVersion": "0.1.476"
 }

package/lib/daemon-bootstrap.js

@@ -28,6 +28,15 @@ function resolveWindowsExe(cmd) {
   }
 }
 
+// When spawning a .cmd/.bat shim with shell:true on Windows, cmd.exe re-parses
+// the command string and breaks on unquoted spaces (e.g. "C:\Program Files\...").
+// Quote the cmd and any space-containing args so cmd.exe sees them as single tokens.
+function shellQuoteWin(cmdOrArg) {
+  const s = String(cmdOrArg);
+  if (!/[\s"]/.test(s)) return s;
+  return `"${s.replace(/"/g, '\\"')}"`;
+}
+
 const LOG_DIR = path.join(os.homedir(), '.claude', 'gm-log');
 const GM_STATE_DIR = path.join(os.homedir(), '.gm');
 
@@ -187,14 +196,19 @@ async function ensureRsLearningDaemonRunning() {
     // DETACHED_PROCESS (0x00000008) detaches the process group. Windows-only;
     // Node ignores creationFlags on POSIX.
     const bunExe = resolveWindowsExe('bun');
-    const proc = spawn(bunExe, ['x', 'rs-learn@latest'], {
-      detached: true,
-      stdio: 'ignore',
-      windowsHide: true,
-      env,
-      ...(process.platform === 'win32' && /\.(cmd|bat)$/i.test(bunExe) ? { shell: true } : {}),
-      creationFlags: 0x08000000 | 0x00000008,
-    });
+    const useShell = process.platform === 'win32' && /\.(cmd|bat)$/i.test(bunExe);
+    const proc = spawn(
+      useShell ? shellQuoteWin(bunExe) : bunExe,
+      useShell ? ['x', 'rs-learn@latest'].map(shellQuoteWin) : ['x', 'rs-learn@latest'],
+      {
+        detached: true,
+        stdio: 'ignore',
+        windowsHide: true,
+        env,
+        ...(useShell ? { shell: true } : {}),
+        creationFlags: 0x08000000 | 0x00000008,
+      }
+    );
 
     const pid = proc.pid;
     proc.unref();
@@ -240,14 +254,19 @@ async function ensureRsCodeinsightDaemonRunning() {
     });
 
     const bunExe = resolveWindowsExe('bun');
-    const proc = spawn(bunExe, ['x', 'rs-codeinsight@latest'], {
-      detached: true,
-      stdio: 'ignore',
-      windowsHide: true,
-      env,
-      ...(process.platform === 'win32' && /\.(cmd|bat)$/i.test(bunExe) ? { shell: true } : {}),
-      creationFlags: 0x08000000 | 0x00000008,
-    });
+    const useShell = process.platform === 'win32' && /\.(cmd|bat)$/i.test(bunExe);
+    const proc = spawn(
+      useShell ? shellQuoteWin(bunExe) : bunExe,
+      useShell ? ['x', 'rs-codeinsight@latest'].map(shellQuoteWin) : ['x', 'rs-codeinsight@latest'],
+      {
+        detached: true,
+        stdio: 'ignore',
+        windowsHide: true,
+        env,
+        ...(useShell ? { shell: true } : {}),
+        creationFlags: 0x08000000 | 0x00000008,
+      }
+    );
 
     const pid = proc.pid;
     proc.unref();
@@ -288,14 +307,19 @@ async function ensureRsSearchDaemonRunning() {
     });
 
     const bunExe = resolveWindowsExe('bun');
-    const proc = spawn(bunExe, ['x', 'rs-search@latest'], {
-      detached: true,
-      stdio: 'ignore',
-      windowsHide: true,
-      env,
-      ...(process.platform === 'win32' && /\.(cmd|bat)$/i.test(bunExe) ? { shell: true } : {}),
-      creationFlags: 0x08000000 | 0x00000008,
-    });
+    const useShell = process.platform === 'win32' && /\.(cmd|bat)$/i.test(bunExe);
+    const proc = spawn(
+      useShell ? shellQuoteWin(bunExe) : bunExe,
+      useShell ? ['x', 'rs-search@latest'].map(shellQuoteWin) : ['x', 'rs-search@latest'],
+      {
+        detached: true,
+        stdio: 'ignore',
+        windowsHide: true,
+        env,
+        ...(useShell ? { shell: true } : {}),
+        creationFlags: 0x08000000 | 0x00000008,
+      }
+    );
 
     const pid = proc.pid;
     proc.unref();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1283",
+  "version": "2.0.1285",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "gm.json"
   ],
   "dependencies": {
-    "gm-plugkit": "^2.0.1283"
+    "gm-plugkit": "^2.0.1285"
   },
   "engines": {
     "node": ">=16.0.0"