gm-skill 2.0.1512 → 2.0.1514

package/AGENTS.md

@@ -28,6 +28,8 @@ This repo IS the published `gm-skill` npm package. The repo root is the package
 
 The plugkit stack runs as a wasm cdylib loaded by `plugkit-wasm-wrapper.js` under Node/bun. No native binaries are built, downloaded, or published. The shipped `plugkit.wasm` (~149MB, embeds bge-small-en-v1.5 for offline in-wasm embeddings) is fetched at bootstrap from `plugkit-wasm` npm / `plugkit-bin` gh-releases, sha256-pinned, not bundled in `gm-skill`. Full size/embedding mechanics in rs-learn (`recall: WASM-only plugkit size mechanics`).
 
+**Every wasm host-import `extern "C"` block carries `#[link(wasm_import_module = "env")]`.** The host provides every possible host fn (host_kv_get/put/query, host_vec_search, host_git, host_log, host_now_ms, host_fs_*, host_env_get, host_exec_js, host_random_fill, …) under the `env` import module (`plugkit-wasm-wrapper.js` `importObject.env`). A bare `extern "C"` block links only because lenient linkers tolerate the unresolved module; the strict Linux release `rust-lld` in CI errors `undefined symbol: host_*` and Build-WASM fails. This holds in rs-plugkit AND every dep crate linked into the cdylib (rs-learn) AND any sibling that builds wasm (rs-exec, rs-search). The trap: `cargo check` and even `cargo build --release` on a non-Linux host both pass while CI fails — the linker differs by host, so the only reproduction is a Linux release link; the CI job log is admin-gated, so Build-WASM echoes `::error::` annotations to surface the lld error publicly. Add a host import anywhere and the block carries the attribute or the cascade goes dark. Full incident in rs-learn (`recall: cascade outage wasm import module link`).
+
 ## Spool dispatch ABI
 
 Agents dispatch verbs by writing to `.gm/exec-spool/in/<verb>/<N>.txt` (request body) and reading the response from `.gm/exec-spool/out/<verb>-<N>.json` (nested verbs) or `.gm/exec-spool/out/<N>.json` (root verbs). The wasm orchestrator services every possible verb; the harness never executes side effects directly.

package/bin/plugkit-supervisor.js

@@ -5,6 +5,13 @@ const fs = require('fs');
 const path = require('path');
 const os = require('os');
 const { spawn, spawnSync } = require('child_process');
+const crypto = require('crypto');
+
+function wrapperSha12OnDisk() {
+  try {
+    return crypto.createHash('sha256').update(fs.readFileSync(resolveWrapper())).digest('hex').slice(0, 12);
+  } catch (_) { return null; }
+}
 
 const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();
 const spoolDir = path.join(projectDir, '.gm', 'exec-spool');
@@ -248,6 +255,25 @@ function checkWatcherHealth() {
       severity: 'critical',
     });
     killChild('supervisor-killed-stale-heartbeat');
+    return;
+  }
+  // A published wrapper-only fix (no wasm version bump) is copied to ~/.gm-tools by the next
+  // bootstrap's ensureWrapperFresh, but a healthy running watcher keeps the old wrapper until it
+  // restarts. Compare the watcher's reported wrapper_sha against the on-disk wrapper; on drift,
+  // recycle so the fix goes live without a manual kill. Skip while busy (a long verb is running).
+  const status = readStatus();
+  if (status && !(status.busy_until && status.busy_until > Date.now())) {
+    const reported = status.wrapper_sha || null;
+    const onDisk = wrapperSha12OnDisk();
+    if (reported && onDisk && reported !== onDisk) {
+      logEvent('supervisor.wrapper-sha-drift', {
+        watcher_pid: currentChildPid,
+        reported_sha: reported,
+        on_disk_sha: onDisk,
+        severity: 'info',
+      });
+      killChild('supervisor-killed-wrapper-sha-drift');
+    }
   }
 }
 

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1512",
+  "version": "2.0.1514",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -12,6 +12,13 @@ import { fileURLToPath } from 'url';
 // (browser/chromium spawn, long exec) stamp a busy_until window into .status.json before the
 // blocking call, so a liveness probe reads "busy" not "dead" while the event loop is blocked.
 let _writeStatusBusy = () => {};
+// Latest busy_until epoch ms stamped by a long synchronous verb (codesearch rebuild, chromium
+// spawn). scanStalledTurns reads it so a busy watcher is not mis-flagged as an idle stall.
+let _lastBusyUntil = 0;
+// First 12 hex of sha256 of this watcher's own gmTools wrapper. Module-scoped so writeStatus
+// (a different function scope) can stamp status.wrapper_sha, which the supervisor compares
+// against the on-disk wrapper to recycle a watcher running a stale wrapper-only fix.
+let _ownWrapperSha12 = '';
 
 function spawnSync(cmd, args, opts) {
   return _rawSpawnSync(cmd, args, { windowsHide: true, ...(opts || {}) });
@@ -373,6 +380,10 @@ function turnTick(sess, verb, taskBase, phase, prdPending) {
 const STALL_MS = 300_000;
 function scanStalledTurns() {
   const now = Date.now();
+  // A long synchronous verb (codesearch index rebuild, chromium spawn) stamps busy_until and
+  // blocks the spool — the agent is legitimately waiting, not stalled. Honor it exactly as
+  // supervisor.js checkWatcherHealth does, so a busy watcher never emits a false mid-chain-stall.
+  if (_lastBusyUntil && _lastBusyUntil > now) return;
   for (const [key, t] of _turns) {
     if (!t || typeof t !== 'object' || !Number.isFinite(t.startTs)) continue;
     if (t.stallEmitted) continue;
@@ -2071,7 +2082,6 @@ async function runSpoolWatcher(instance, spoolDir) {
 
 
   const LOCK_PATH = path.join(spoolDir, '.watcher.lock');
-  let _ownWrapperSha12 = '';
   try {
     const _crypto = require('crypto');
     const _wp = path.join(GM_TOOLS_ROOT, 'plugkit-wasm-wrapper.js');
@@ -3095,7 +3105,7 @@ async function runSpoolWatcher(instance, spoolDir) {
       // busy_until tells probes "alive but synchronously busy until this epoch ms" — read it
       // alongside ts: a stale ts whose busy_until is still in the future is a busy watcher, not
       // a dead one. The pre-verb writeStatus(busyMs) stamps it before the blocking call.
-      if (busyMs && busyMs > 0) rec.busy_until = now + busyMs;
+      if (busyMs && busyMs > 0) { rec.busy_until = now + busyMs; _lastBusyUntil = rec.busy_until; }
       fs.writeFileSync(STATUS_PATH, JSON.stringify(rec));
     } catch (_) {}
   }

package/gm-plugkit/supervisor.js

@@ -4,8 +4,18 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const crypto = require('crypto');
 const { spawn, spawnSync } = require('child_process');
 
+function wrapperSha12OnDisk() {
+  try {
+    const primary = path.join(os.homedir(), '.gm-tools', 'plugkit-wasm-wrapper.js');
+    const fallback = path.join(os.homedir(), '.claude', 'gm-tools', 'plugkit-wasm-wrapper.js');
+    const wp = fs.existsSync(primary) ? primary : fallback;
+    return crypto.createHash('sha256').update(fs.readFileSync(wp)).digest('hex').slice(0, 12);
+  } catch (_) { return null; }
+}
+
 const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();
 const spoolDir = path.join(projectDir, '.gm', 'exec-spool');
 fs.mkdirSync(spoolDir, { recursive: true });
@@ -227,6 +237,25 @@ function checkWatcherHealth() {
     if (process.platform === 'win32') {
       try { spawnSync('taskkill', ['/F', '/T', '/PID', String(currentChildPid)], { stdio: 'ignore', windowsHide: true, timeout: 3000 }); } catch (_) {}
     }
+    return;
+  }
+  // A published wrapper-only fix (no wasm version bump) lands in ~/.gm-tools via the next
+  // bootstrap's ensureWrapperFresh, but a healthy running watcher keeps the old wrapper until it
+  // restarts. On wrapper_sha drift (watcher's reported sha != on-disk), recycle so the fix goes
+  // live without a manual kill. busy_until already returned above, so the watcher is not mid-verb.
+  const reported = status.wrapper_sha || null;
+  const onDisk = wrapperSha12OnDisk();
+  if (reported && onDisk && reported !== onDisk) {
+    logEvent('supervisor.wrapper-sha-drift', {
+      watcher_pid: currentChildPid,
+      reported_sha: reported,
+      on_disk_sha: onDisk,
+      severity: 'info',
+    });
+    try { process.kill(currentChildPid, 'SIGTERM'); } catch (_) {}
+    if (process.platform === 'win32') {
+      try { spawnSync('taskkill', ['/F', '/T', '/PID', String(currentChildPid)], { stdio: 'ignore', windowsHide: true, timeout: 3000 }); } catch (_) {}
+    }
   }
 }
 

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1512",
+  "version": "2.0.1514",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1512",
+  "version": "2.0.1514",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",