gm-skill 2.0.1528 → 2.0.1530

package/AGENTS.md

@@ -30,7 +30,7 @@ The plugkit stack runs as a wasm cdylib loaded by `plugkit-wasm-wrapper.js` unde
 
 **Every wasm host-import `extern "C"` block carries `#[link(wasm_import_module = "env")]`.** The host provides every possible host fn (host_kv_get/put/query, host_vec_search, host_git, host_log, host_now_ms, host_fs_*, host_env_get, host_exec_js, host_random_fill, ...) under the `env` import module (`plugkit-wasm-wrapper.js` `importObject.env`). A bare `extern "C"` block links only because lenient linkers tolerate the unresolved module; the strict Linux release `rust-lld` in CI errors `undefined symbol: host_*` and Build-WASM fails. This holds in rs-plugkit AND every dep crate linked into the cdylib (rs-learn) AND any sibling that builds wasm (rs-exec, rs-search). The trap: `cargo check` and even `cargo build --release` on a non-Linux host both pass while CI fails -- the linker differs by host, so the only reproduction is a Linux release link; the CI job log is admin-gated, so Build-WASM echoes `::error::` annotations to surface the lld error publicly. Add a host import anywhere and the block carries the attribute or the cascade goes dark. Full incident in rs-learn (`recall: cascade outage wasm import module link`).
 
-**`plugkit-wasm-wrapper.js` is ESM; never use inline `require()` for a node builtin -- import it at module scope.** The wrapper runs under both node and bun, and the supervisor's `resolveRuntime()` prefers bun. Under bun's ESM, `require` is not a global, so an inline `const x = require('crypto'|'net'|'http'|'https'|'child_process')` throws `require is not defined` -- and because those calls sit in `catch(_){}` blocks, the failure is silent: it broke `_ownWrapperSha12` (status.wrapper_sha stayed null, leaving the supervisor wrapper-sha-drift recycle inert), `_wrapperShaAtBoot` and its self-drift-restart, the synthetic-session cwd-hash, and the file-index sha -- all only under the bun watcher, which is why it hid for so long (node-run watchers have `require` via CJS interop). Every node builtin is imported once at the top (`import crypto from 'crypto'`, etc.); inline `require` of a builtin is forbidden. Full incident in rs-learn (`recall: wrapper require not defined under bun`).
+**`plugkit-wasm-wrapper.js` is ESM; import node builtins at module scope, never inline `require()` (throws silently under bun's ESM inside `catch(_){}`).** Full incident in rs-learn (`recall: wrapper require not defined under bun`).
 
 **Every single-instance / lock guard is atomic (`fs.openSync(path,'wx')` O_EXCL or atomic-rename), never check-then-act; count plugkit processes by executable Name not command-line substring.** Both are Windows concurrency mechanics whose full incident lives in rs-learn (`recall: supervisor churn TOCTOU atomic guard`).
 

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.634
+0.1.635

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-7437aa3d4ce3b12aa74d60ba264525b27abc80bfb4f67340d286b6ab7d66e9f1  plugkit.wasm
+eaef35fadc535e11a1e1d2030e8cad3014fd7dd5fc032a79ab5c16ccac44252d  plugkit.wasm

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1528",
+  "version": "2.0.1530",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -453,56 +453,6 @@ function readCurrentSess() {
 
 const __lockRejectedEmitAt = new Map();
 
-const UNAMBIGUOUS_CLIENT_EXT_RE = /\.(?:html?|jsx|tsx|vue|svelte|css|scss|sass)$/i;
-const AMBIGUOUS_JS_EXT_RE = /\.(?:m?js|cjs|ts)$/i;
-const BROWSER_REACHABLE_DIR_RE = /(?:^|\/)(?:site|public|web|www|client|frontend|ui|assets|static|dist|build|docs)\//i;
-const NODE_ONLY_DIR_RE = /(?:^|\/)(?:lib|bin|scripts?|gm-plugkit|node_modules|tests?|__tests__|\.gm)\//i;
-
-function isBrowserRelevantPath(rel, cwd) {
-  if (UNAMBIGUOUS_CLIENT_EXT_RE.test(rel)) return true;
-  if (!AMBIGUOUS_JS_EXT_RE.test(rel)) return false;
-  if (NODE_ONLY_DIR_RE.test(rel)) return false;
-  if (BROWSER_REACHABLE_DIR_RE.test(rel)) return true;
-  try {
-    const dir = path.dirname(path.isAbsolute(rel) ? rel : path.join(cwd, rel));
-    const sibs = fs.readdirSync(dir);
-    if (sibs.some(f => /\.html?$/i.test(f))) return true;
-  } catch (_) {}
-  return false;
-}
-
-function autoRecordBrowserEditsFromBody(body, cwd, taskBase, verb) {
-  if (!body || typeof body !== 'string') return;
-  const BROWSER_EXT_RE = /[\w.\-/\\]+\.(?:html?|tsx?|jsx?|mjs|cjs|vue|svelte|css|scss|sass)\b/gi;
-  const matches = body.match(BROWSER_EXT_RE);
-  if (!matches || matches.length === 0) return;
-  const seen = new Set();
-  const editsFile = path.join(cwd, '.gm', 'exec-spool', '.turn-browser-edits.json');
-  let list = [];
-  try { list = JSON.parse(fs.readFileSync(editsFile, 'utf8')); if (!Array.isArray(list)) list = []; } catch (_) {}
-  let added = 0;
-  for (const raw of matches) {
-    let rel = String(raw).replace(/^["'`(]+|["'`)]+$/g, '').replace(/\\/g, '/');
-    if (rel.startsWith('http://') || rel.startsWith('https://') || rel.startsWith('//')) continue;
-    if (rel.includes('node_modules/') || rel.startsWith('.gm/') || rel.includes('/.gm/')) continue;
-    if (!isBrowserRelevantPath(rel, cwd)) continue;
-    if (seen.has(rel)) continue;
-    seen.add(rel);
-    const abs = path.isAbsolute(rel) ? rel : path.join(cwd, rel);
-    let st;
-    try { st = fs.statSync(abs); } catch (_) { continue; }
-    if (!st.isFile()) continue;
-    let hash = '';
-    try { hash = crypto.createHash('sha256').update(fs.readFileSync(abs)).digest('hex').slice(0, 12); } catch (_) {}
-    const idx = list.findIndex(e => e && e.file === rel);
-    const entry = { file: rel, ts: Date.now(), hash, source_verb: verb, source_task: taskBase };
-    if (idx === -1) { list.push(entry); added++; } else { list[idx] = entry; }
-  }
-  if (added > 0) {
-    try { fs.mkdirSync(path.dirname(editsFile), { recursive: true }); fs.writeFileSync(editsFile, JSON.stringify(list)); } catch (_) {}
-    logEvent('plugkit', 'browser.edits-autorecorded', { verb, task: taskBase, files: list.slice(-added).map(e => e.file), added });
-  }
-}
 
 function logEvent(sub, event, fields) {
   if (process.env.GM_LOG_DISABLE) return;
@@ -3088,10 +3038,6 @@ async function runSpoolWatcher(instance, spoolDir) {
         try { _writeStatusBusy(180000); } catch (_) {}
       }
 
-      if (verb === 'memorize-fire' || verb === 'transition' || verb === 'prd-resolve' || verb === 'mutable-resolve') {
-        try { autoRecordBrowserEditsFromBody(body, process.cwd(), taskBase, verb); } catch (_) {}
-      }
-
       let autoRecallPayload = null;
       if (verb === 'instruction') {
         const sessForRecall = readCurrentSess();

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1528",
+  "version": "2.0.1530",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.634"
+  "plugkitVersion": "0.1.635"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1528",
+  "version": "2.0.1530",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",