gm-skill 2.0.1484 → 2.0.1485

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1484",
+  "version": "2.0.1485",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -2757,6 +2757,16 @@ async function runSpoolWatcher(instance, spoolDir) {
       const relPath = path.relative(inDir, filePath);
       const dir = path.dirname(relPath);
       const verb = dir === '.' ? path.basename(filePath, path.extname(filePath)) : dir;
+      // Defense-in-depth beyond walkDir's dot-dir skip: a real verb is a single clean
+      // segment (e.g. instruction, prd-resolve). A derived verb containing a path
+      // separator or a dot-segment means the file lives under a stray nested spool
+      // (in/prd-resolve/.gm/exec-spool/…); dispatching it builds a bogus verb+outName
+      // and ENOENT-storms every tick. Skip + unmark so it never re-enters the loop.
+      if (/[\\/]/.test(verb) || verb.split(/[\\/]/).some(seg => seg.startsWith('.'))) {
+        try { logEvent('plugkit', 'spool.skip-nested-verb', { rel: relPath, derived_verb: verb }); } catch (_) {}
+        unmarkProcessed(key);
+        return;
+      }
       let body = content.trim() || '{}';
       const taskBase = path.basename(filePath, path.extname(filePath));
 

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1484",
+  "version": "2.0.1485",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1484",
+  "version": "2.0.1485",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",