gm-skill 2.0.1838 → 2.0.1840

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.839
+0.1.840

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-7e0a8cb997a43e605689519cdcf69c5133ec49c7f542f62825f52bb3d6b193b7  plugkit.wasm
+1c158d73707afaabe93a67270076573a4bd89a93262ff52f9c691277074b873f  plugkit.wasm

package/gm-plugkit/instructions/browser.md

@@ -32,6 +32,8 @@ screenshot\n<expression>
 dom=<css-selector>\n
 ```
 
+**Never a JSON object body.** The body is always one of the plain-text shapes above -- never `{"command":"launch","url":"...","timeoutMs":...}` or any other JSON-object payload. Every other spool verb (`prd-add`, `mutable-add`, `transition`, ...) takes structured JSON, which makes a JSON body an easy but wrong guess for `browser` specifically -- this verb is the one exception, string-only. A JSON-shaped body is rejected up front with a clear error naming the supported shapes; passing it anyway used to fall through to evaluating the raw JSON as a JS expression, producing an opaque `SyntaxError: Unexpected token ':'` with no indication of the real mistake. To launch and navigate: `session new` once, then `url=<target>\n<expression>` on the same or next dispatch -- there is no separate "launch" command.
+
 **Open on the page you want to test, not a blank one.** A bare `https://...` URL body navigates the session straight to that page and returns `{url, title}` -- the simplest "show me this page." `url=<url>\n<expression>` navigates first, then runs your expression on the loaded page, so the global/DOM you assert is already there in one dispatch instead of a blank surface you must `page.goto` yourself. `url=` composes with `timeout=` and `capture` -- stack the prefix lines in order `timeout=`, then `url=`, then `capture`, the expression last; the prepended `page.goto` rides inside the capture so its navigation console/network is captured too. A bare expression with no `url=`/bare-URL prefix runs against whatever the session is already on -- a never-navigated session is on `about:blank`, so the expression evaluates an empty page and the envelope comes back with `landed_on_blank: true` and a `hint` telling you to add `url=`; navigate first and the surprise never happens. `session new` returns the id you carry. (`session close` and `session kill` are aliases.) Default per-eval timeout 120000ms; operations that legitimately exceed it prefix `timeout=<ms>\n` (wrapper clamps to 120000ms). The response carries `timeout_ms_used`; `browser.runner-timeout` fires at the cap -- read `stderr`, narrow or raise, never retry blind at the same budget.
 
 **`capture\n<expression>` is the zero-boilerplate debug path -- prefer it.** Prefix your script with `capture` (or `profile`) on its own line and the wrapper auto-attaches `page.on('console'|'pageerror'|'requestfinished')` before your code runs, runs your script in an async wrapper (your top-level `await`/`return` work unchanged), and returns `{result: <your return>, debug: {console, pageErrors, network, performance}}` -- page console logs, uncaught errors, per-request network timing, and navigation performance, captured for free. Combine with timeout via `timeout=<ms>\ncapture\n<expr>`. Use the bare expression only when you do not want the capture overhead.

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1838",
+  "version": "2.0.1840",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -2772,6 +2772,17 @@ function makeHostFunctions(instanceRef) {
         __idleClosedSessions.delete(sessionId);
         stampBrowserLastUse(cwd, sessionId);
         markInflight(sessionId, curPid);
+        {
+          const bodyForShapeCheck = trimmed.replace(/^(?:timeout=\d+\s*\n|url=\S+[ \t]*\n)*/, '').trim();
+          if (/^\{/.test(bodyForShapeCheck)) {
+            return writeWasmJson(instanceRef.value, {
+              ok: false,
+              stdout: '',
+              stderr: 'browser verb body is a JSON object, not a supported body shape. The browser verb takes plain-text prefixed bodies only: "session new", "session close", "timeout=<ms>\\n<expr>", "url=<target>\\n<expr>", a bare URL, "screenshot[=name]\\n<expr>", "dom=<selector>\\n<expr>", or "capture|profile|trace ...\\n<expr>" -- never a {"command":...} JSON payload. Use "session new" to open a session, then "url=<target>\\n<js-expression>" to navigate and evaluate in one dispatch.',
+              exit_code: 1,
+            });
+          }
+        }
         let evalBody = body;
         let timeoutMs = 120000;
         const timeoutMatch = body.match(/^timeout=(\d+)\s*\n([\s\S]*)$/);

package/gm-plugkit/plugkit.version

@@ -1 +1 @@
-0.1.839
+0.1.840

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1838",
+  "version": "2.0.1840",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.839"
+  "plugkitVersion": "0.1.840"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1838",
+  "version": "2.0.1840",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",