gm-skill 2.0.1409 → 2.0.1410

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1409",
+  "version": "2.0.1410",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -2862,7 +2862,6 @@ async function runSpoolWatcher(instance, spoolDir) {
   const UPDATE_CHECK_SHARED_CACHE = path.join(GM_TOOLS_ROOT, '.update-check-cache.json');
   const UPDATE_CHECK_CACHE_TTL_MS = 4 * 60 * 1000;
   let _lastKnownDrift = null;
-  let _autoUpdateArmedFor = null;
   function readSharedUpdateCache() {
     try {
       const content = fs.readFileSync(UPDATE_CHECK_SHARED_CACHE, 'utf-8');
@@ -2964,18 +2963,9 @@ async function runSpoolWatcher(instance, spoolDir) {
       logEvent('plugkit', 'update.available', { installed, latest });
       _lastKnownDrift = latest;
     }
-    // Auto-update from the shared-cache path too, so any watcher (not only the one that hit the
-    // network) arms the self-respawn. The cache entry is only written after a 200 from
-    // /releases/latest, and the respawn's ensureReady re-verifies the wasm asset before downloading,
-    // so a bump here is safe even without per-asset confirmation in this branch.
-    if (isDrift && _autoUpdateArmedFor !== latest) {
-      try {
-        _autoUpdateArmedFor = latest;
-        const verFile = path.join(GM_TOOLS_ROOT, 'plugkit.version');
-        fs.writeFileSync(verFile, latest + '\n');
-        logEvent('plugkit', 'update.auto-armed', { installed, latest, source: 'shared-cache', action: 'bumped-version-file-for-drift-respawn' });
-      } catch (_) {}
-    }
+    // NOTE: no version-file bump here either — see the network-path comment above. Bumping the version
+    // file ahead of a verified binary download poisons installedVersionAtTools() and causes an infinite
+    // drift-respawn thrash. Auto-update is notify-only until a sha-verified force-download path exists.
   }
   function checkForUpdate() {
     const installed = resolveVersion(instance);
@@ -3018,7 +3008,7 @@ async function runSpoolWatcher(instance, spoolDir) {
             installed,
             latest,
             checked_at_ms: Date.now(),
-            instruction: 'plugkit is out of date. The watcher auto-updates: on the next drift-check tick it bumps the disk version file and self-respawns into the fresh wasm. No manual action needed.',
+            instruction: 'plugkit is out of date. Update with: bun x gm-plugkit@latest --kill-stale-watchers; bun x gm-plugkit@latest spool. A fresh boot downloads the new wasm and respawns; an in-place running watcher does not self-download.',
             update_url,
           }, null, 2));
           console.log(`[update] available: installed=${installed} latest=${latest} → wrote ${UPDATE_AVAILABLE_PATH}`);
@@ -3026,27 +3016,14 @@ async function runSpoolWatcher(instance, spoolDir) {
             logEvent('plugkit', 'update.available', { installed, latest, update_url });
             _lastKnownDrift = latest;
           }
-          // Auto-update: a running healthy watcher otherwise never self-updates — checkForUpdate
-          // only NOTIFIED, and the version-drift self-respawn compares instance-vs-disk-file, but
-          // the disk file only moved on a fresh boot that never ran while the watcher held the lock.
-          // Close the loop: once the release is fully published (wasm asset present, confirmed by
-          // this /releases/latest response carrying it), bump the disk version file to `latest`.
-          // The existing drift-check tick then sees instance != file and self-respawns; the respawn's
-          // ensureReady downloads the wasm matching the bumped version file. Guard against partial
-          // releases and respawn thrash: require the wasm asset, and write the file at most once per
-          // detected version (dedupe via _autoUpdateArmedFor).
-          try {
-            const hasWasmAsset = Array.isArray(rel.assets) && rel.assets.some(a => a && a.name === 'plugkit.wasm');
-            if (hasWasmAsset && latest !== installed && _autoUpdateArmedFor !== latest) {
-              _autoUpdateArmedFor = latest;
-              const verFile = path.join(GM_TOOLS_ROOT, 'plugkit.version');
-              fs.writeFileSync(verFile, latest + '\n');
-              logEvent('plugkit', 'update.auto-armed', { installed, latest, action: 'bumped-version-file-for-drift-respawn' });
-              console.log(`[update] auto-armed: bumped ${verFile} ${installed} -> ${latest}; drift-check will self-respawn into fresh wasm`);
-            }
-          } catch (e) {
-            logUpdateCheckError({ error: `auto-arm failed: ${String(e && e.message || e)}` });
-          }
+          // NOTE: do NOT bump the disk version file here to "arm" a drift-respawn. installedVersionAtTools()
+          // reads that file as the source of truth for the installed version; bumping it ahead of the actual
+          // wasm download makes ensureReady compute versionDrift=false (file==target) and isReady()=true, so it
+          // returns already-ready WITHOUT downloading the new binary — while the running instance is still the
+          // old version. The drift-check then sees instance(old) != file(new) forever and self-respawns in an
+          // infinite loop, each respawn reloading the same old wasm. The version file must only advance AFTER
+          // a verified binary download (bootstrap's job). Auto-update stays notify-only until ensureReady gains
+          // a sha-verified force-download path; see PRD watcher-autoupdate-thrash-fix.
         } catch (e) {
           logUpdateCheckError({ error: String(e && e.message || e) });
         }

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1409",
+  "version": "2.0.1410",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1409",
+  "version": "2.0.1410",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",