gm-skill 2.0.1346 → 2.0.1348

package/AGENTS.md

@@ -96,7 +96,7 @@ Every possible skill's `allowed-tools:` frontmatter is reduced to `Skill, Read,
 
 **Push is part of COMPLETE, never optional, never asked**: every possible session that mutates tracked files ends with commit + push to origin. Asking the user "do you want me to push?" is a deviation — the push IS the validation dispatch (`verify.rs`: "The push you make IS the validation dispatch"). The chain is not COMPLETE until the remote reflects HEAD. ccsniff `--git-discipline` and a pending `deviation.complete-without-push` event flag sessions that close without pushing.
 
-**Push requires clean worktree**: `git push` is admissible only when `git status --porcelain` returns empty. A push from a dirty tree orphans the unstaged delta and breaks the next session's first read. Enforced in `lib/spool-dispatch.js::canExecuteGit('git-push')` (porcelain probe via spool exec) and rs-plugkit `gates.rs` COMPLETE branch; instruction prose (`verify.rs`, `update_docs.rs`) restates it imperatively; `residual.rs` skips the scan when dirty so the four-observation window cannot be claimed past an unwitnessed delta. ccsniff `--git-discipline` flags the deviation post-hoc.
+**Push requires clean worktree witnessed in its own tool-use event**: `git push` is admissible only when `git status --porcelain` returns empty, and the porcelain probe must be its own Bash tool-use event before the push — a separate `Bash(...)` call, not a `&&`-chained shell command within the push event. ccsniff `--git-discipline` scans the last 20 Bash **tool-use events** (not shell commands inside those events) for an explicit porcelain probe; `add && commit && push` in one Bash call counts as one event with no porcelain witness even when the worktree is clean by construction. A push from a dirty tree orphans the unstaged delta and breaks the next session's first read. Enforced in `lib/spool-dispatch.js::canExecuteGit('git-push')` (porcelain probe via spool exec) and rs-plugkit `gates.rs` COMPLETE branch; instruction prose (`verify.rs`, `update_docs.rs`) restates it imperatively; `residual.rs` skips the scan when dirty so the four-observation window cannot be claimed past an unwitnessed delta. ccsniff `--git-discipline` flags the deviation post-hoc — true positives now that ccsniff 1.1.8+ strips quoted commit-message bodies before regex match.
 
 **memorize dispatch manages CLAUDE.md / AGENTS.md**: Do not inline-edit. Dispatch via spool: write `.gm/exec-spool/in/memorize/<N>.txt` with the fact text; the wasm orchestrator embeds and persists it. Classifier rejects changelog-shaped facts from AGENTS.md ingestion (rs-learn store still accepts them).
 

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.507
+0.1.508

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-cbb9776c778d083d309433ad6bbe69a2ee2f73380569b070838db061b474ba35  plugkit.wasm
+800691ac4060f87f53e89133fbf027137f18df870c4e03c1d891591e83cd1887  plugkit.wasm

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1346",
+  "version": "2.0.1348",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -2061,11 +2061,27 @@ async function runSpoolWatcher(instance, spoolDir) {
   }, 5000);
 
   const _instanceVersionAtBoot = readInstanceVersion(instance);
+  let _driftLoggedOnce = false;
   setInterval(() => {
     try {
       const fileV = readFileVersionOnly();
       const instV = _instanceVersionAtBoot;
       if (!fileV || !instV || fileV === instV) return;
+      const bootReason = process.env.PLUGKIT_BOOT_REASON || 'unknown';
+      const unsupervised = bootReason === 'direct-no-supervisor';
+      if (unsupervised) {
+        if (_driftLoggedOnce) return;
+        _driftLoggedOnce = true;
+        logEvent('plugkit', 'version.drift-detected-no-exit', {
+          instance_version: instV,
+          file_version: fileV,
+          action: 'suppress-exit',
+          reason: 'no-supervisor-to-respawn',
+          boot_reason: bootReason,
+        });
+        console.error(`[plugkit-wasm] version drift detected: instance=${instV} file=${fileV} — exit SUPPRESSED (boot_reason=${bootReason}; no supervisor to respawn)`);
+        return;
+      }
       logEvent('plugkit', 'version.drift', {
         instance_version: instV,
         file_version: fileV,
@@ -2096,12 +2112,28 @@ async function runSpoolWatcher(instance, spoolDir) {
     const _crypto = require('crypto');
     _wrapperShaAtBoot = _crypto.createHash('sha256').update(fs.readFileSync(_wrapperPathInstalled)).digest('hex');
   } catch (_) {}
+  let _wrapperDriftLoggedOnce = false;
   setInterval(() => {
     try {
       if (!_wrapperShaAtBoot) return;
       const _crypto = require('crypto');
       const cur = _crypto.createHash('sha256').update(fs.readFileSync(_wrapperPathInstalled)).digest('hex');
       if (cur === _wrapperShaAtBoot) return;
+      const bootReason = process.env.PLUGKIT_BOOT_REASON || 'unknown';
+      const unsupervised = bootReason === 'direct-no-supervisor';
+      if (unsupervised) {
+        if (_wrapperDriftLoggedOnce) return;
+        _wrapperDriftLoggedOnce = true;
+        logEvent('plugkit', 'wrapper.drift-detected-no-exit', {
+          boot_sha: _wrapperShaAtBoot.slice(0, 12),
+          file_sha: cur.slice(0, 12),
+          action: 'suppress-exit',
+          reason: 'no-supervisor-to-respawn',
+          boot_reason: bootReason,
+        });
+        console.error(`[plugkit-wasm] wrapper.js drift detected — exit SUPPRESSED (boot_reason=${bootReason}; no supervisor to respawn)`);
+        return;
+      }
       logEvent('plugkit', 'wrapper.drift', {
         boot_sha: _wrapperShaAtBoot.slice(0, 12),
         file_sha: cur.slice(0, 12),

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1346",
+  "version": "2.0.1348",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.507"
+  "plugkitVersion": "0.1.508"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1346",
+  "version": "2.0.1348",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",