gm-skill 2.0.1540 → 2.0.1542

package/AGENTS.md

@@ -28,7 +28,7 @@ This repo IS the published `gm-skill` npm package. The repo root is the package
 
 The plugkit stack runs as a wasm cdylib loaded by `plugkit-wasm-wrapper.js` under Node/bun. No native binaries are built, downloaded, or published. The shipped `plugkit.wasm` (~149MB, embeds bge-small-en-v1.5 for offline in-wasm embeddings) is fetched at bootstrap from `plugkit-wasm` npm / `plugkit-bin` gh-releases, sha256-pinned, not bundled in `gm-skill`. Full size/embedding mechanics in rs-learn (`recall: WASM-only plugkit size mechanics`).
 
-**Every wasm host-import `extern "C"` block carries `#[link(wasm_import_module = "env")]`.** Holds in rs-plugkit AND every dep crate linked into the cdylib (rs-learn) AND any sibling that builds wasm (rs-exec, rs-search) -- add a host import anywhere and the block carries the attribute or the cascade goes dark. The trap (bare block links on non-Linux hosts so `cargo check`/`build --release` pass while strict Linux `rust-lld` in CI fails `undefined symbol: host_*`; only a Linux release link reproduces) + the full host-fn `env` enumeration live in rs-learn (`recall: cascade outage wasm import module link`).
+**Every wasm host-import `extern "C"` block carries `#[link(wasm_import_module = "env")]`.** Holds in rs-plugkit AND every dep crate linked into the cdylib (rs-learn) AND any sibling that builds wasm (rs-exec, rs-search) -- add a host import anywhere and the block carries the attribute or the cascade goes dark. The silent-pass trap (local builds stay green, only Linux CI link fails), recovery, and the full host-fn `env` enumeration live in rs-learn (`recall: cascade outage wasm import module link`, `recall: wasm host-import link-module trap`).
 
 **`plugkit-wasm-wrapper.js` is ESM; import node builtins at module scope, never inline `require()` (throws silently under bun's ESM inside `catch(_){}`).** Full incident in rs-learn (`recall: wrapper require not defined under bun`).
 

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.638
+0.1.639

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-4446475d6343de16cbb4bcf7352daede709192c86877378b2b56e4475094b83c  plugkit.wasm
+d2b32fb436ed9b4a70e0816b0492596209bf5fe3e7dc4e163380e6974490be09  plugkit.wasm

package/gm-plugkit/bootstrap.js

@@ -606,7 +606,25 @@ function copyWasmToGmTools(wasmPath, version) {
       if (cur === src) wasmFresh = true;
     } catch (_) {}
   }
-  if (!wasmFresh) fs.copyFileSync(wasmPath, target);
+  if (!wasmFresh) {
+    // copyFileSync truncates the target before streaming ~149MB, leaving a window where
+    // a crash or a concurrent watcher load sees a truncated/absent wasm (the
+    // "self-heal: wasm not installed" crash-loop during an upgrade). Copy to a
+    // pid-suffixed temp and rename over the target: same-volume rename is atomic,
+    // with the Windows EEXIST/EPERM unlink+retry.
+    const tmp = `${target}.partial-${process.pid}`;
+    fs.copyFileSync(wasmPath, tmp);
+    try { fs.renameSync(tmp, target); }
+    catch (err) {
+      if (err.code === 'EEXIST' || err.code === 'EPERM') {
+        try { fs.unlinkSync(target); } catch (_) {}
+        fs.renameSync(tmp, target);
+      } else {
+        try { fs.unlinkSync(tmp); } catch (_) {}
+        throw err;
+      }
+    }
+  }
   fs.writeFileSync(path.join(dst, 'plugkit.version'), version);
 
   try {

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1540",
+  "version": "2.0.1542",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -2212,6 +2212,32 @@ async function runSpoolWatcher(instance, spoolDir) {
           detected_at: Date.now(),
         });
         try { console.error(`[plugkit-wasm] VERB ABORT detected: prior watcher pid=${priorVerb.pid} died inside verb=${priorVerb.verb} task=${priorVerb.task}`); } catch (_) {}
+        // The aborted dispatch otherwise gets NO response file: the in-file was consumed,
+        // the prior watcher died before writing out/, and the agent waits forever on a
+        // Read that never lands (then must git-archaeology whether the verb's side effects
+        // happened). Write a definite failure response so the agent's Read returns
+        // immediately and it re-dispatches. Both out-name shapes are written because
+        // .verb-active.json does not record whether the dispatch was root or nested;
+        // the agent reads whichever its dispatch shape expects, the other is swept.
+        if (priorVerb.verb && priorVerb.task) {
+          try {
+            const abortBody = JSON.stringify({
+              ok: false,
+              error: `verb aborted: watcher pid=${priorVerb.pid} died mid-verb; side effects may be partial -- verify state, then re-dispatch`,
+              verb_aborted: true,
+              verb: priorVerb.verb,
+              task: priorVerb.task,
+            });
+            const abortOutDir = path.join(path.dirname(STATUS_PATH_FOR_VERB_ABORT), 'out');
+            fs.mkdirSync(abortOutDir, { recursive: true });
+            const nestedName = path.join(abortOutDir, `${priorVerb.verb}-${priorVerb.task}.json`);
+            if (!fs.existsSync(nestedName)) fs.writeFileSync(nestedName, abortBody);
+            if (priorVerb.verb !== priorVerb.task) {
+              const rootName = path.join(abortOutDir, `${priorVerb.task}.json`);
+              if (!fs.existsSync(rootName)) fs.writeFileSync(rootName, abortBody);
+            }
+          } catch (_) {}
+        }
       }
       try { fs.unlinkSync(VERB_ACTIVE_PATH); } catch (_) {}
     }
@@ -3628,7 +3654,24 @@ async function selfHealFromGithubReleases() {
         }
         const toolsDir = GM_TOOLS_ROOT;
         fs.mkdirSync(toolsDir, { recursive: true });
-        fs.writeFileSync(path.join(toolsDir, 'plugkit.wasm'), wasm);
+        // Replace the live wasm atomically. A direct writeFileSync truncates the target
+        // before streaming ~149MB, so a crash mid-write or a concurrent watcher load in
+        // that window sees a truncated or absent wasm ("self-heal: wasm not installed"
+        // crash-loop). Write to a pid-suffixed temp and rename over the target; rename
+        // on the same volume is atomic, with the Windows EEXIST/EPERM unlink+retry.
+        const wasmTarget = path.join(toolsDir, 'plugkit.wasm');
+        const wasmTmp = `${wasmTarget}.partial-${process.pid}`;
+        fs.writeFileSync(wasmTmp, wasm);
+        try { fs.renameSync(wasmTmp, wasmTarget); }
+        catch (renameErr) {
+          if (renameErr.code === 'EEXIST' || renameErr.code === 'EPERM') {
+            try { fs.unlinkSync(wasmTarget); } catch (_) {}
+            fs.renameSync(wasmTmp, wasmTarget);
+          } else {
+            try { fs.unlinkSync(wasmTmp); } catch (_) {}
+            throw renameErr;
+          }
+        }
         fs.writeFileSync(path.join(toolsDir, 'plugkit.version'), version);
         const wrapperSrc = __filename;
         const wrapperDst = path.join(toolsDir, 'plugkit-wasm-wrapper.js');

package/gm-plugkit/supervisor.js

@@ -85,10 +85,39 @@ function acquireSingleInstance() {
         let other = NaN;
         try { other = parseInt(fs.readFileSync(SUPERVISOR_PID_PATH, 'utf-8').trim(), 10); } catch (_) {}
         if (Number.isFinite(other) && other !== process.pid && pidAlive(other)) {
-          logEvent('supervisor.refused-duplicate', { existing_pid: other, severity: 'warn' });
-          return false;
+          // An alive holder pid is not the same as a working holder: a wedged supervisor
+          // (event loop stuck, watcher dead, neither .supervisor.json nor .status.json
+          // advancing) blocks every newcomer forever under a pidAlive-only check, forcing
+          // manual process kills to recover the spool. Discriminate by progress, not
+          // liveness: holder is wedged only when its own status heartbeat AND the spool
+          // status are both stale past the takeover window, honoring a future busy_until
+          // exactly as checkWatcherHealth does.
+          const TAKEOVER_STALE_MS = 45_000;
+          const now = Date.now();
+          let supTs = 0;
+          try { supTs = (JSON.parse(fs.readFileSync(SUPERVISOR_PATH, 'utf-8')).ts) || 0; } catch (_) {}
+          const spool = readStatus();
+          const spoolBusy = spool && spool.busy_until && spool.busy_until > now;
+          const spoolTs = (spool && spool.ts) || 0;
+          const holderWedged = !spoolBusy
+            && (now - supTs) > TAKEOVER_STALE_MS
+            && (now - spoolTs) > TAKEOVER_STALE_MS;
+          if (!holderWedged) {
+            logEvent('supervisor.refused-duplicate', { existing_pid: other, severity: 'warn' });
+            return false;
+          }
+          logEvent('supervisor.takeover-wedged', {
+            existing_pid: other,
+            supervisor_status_age_ms: now - supTs,
+            spool_status_age_ms: now - spoolTs,
+            severity: 'critical',
+          });
+          try { process.kill(other, 'SIGTERM'); } catch (_) {}
+          if (process.platform === 'win32') {
+            try { spawnSync('taskkill', ['/F', '/T', '/PID', String(other)], { stdio: 'ignore', windowsHide: true, timeout: 3000 }); } catch (_) {}
+          }
         }
-        // Holder is dead/stale: remove and retry the exclusive create once.
+        // Holder is dead/stale/wedged: remove and retry the exclusive create once.
         try { fs.unlinkSync(SUPERVISOR_PID_PATH); } catch (_) {}
         continue;
       }

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1540",
+  "version": "2.0.1542",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.638"
+  "plugkitVersion": "0.1.639"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1540",
+  "version": "2.0.1542",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",