gm-skill 2.0.2024 → 2.0.2026

package/AGENTS.md

@@ -24,23 +24,19 @@ Skills encode environment-specific constraints that override general knowledge.
 
 Repo root = package root = published `gm-skill` npm package; no factory, no separate build-output dir. Entry: `skills/gm/SKILL.md`. Orchestration lives in rs-plugkit, served on-demand via `instruction`. The 8 phase-prose files (entry/plan/execute/emit/verify/consolidate/update_docs/browser) live single-sourced inside rs-plugkit itself (`crates/plugkit-core/src/orchestrator/instructions/prose/*.md`, `include_str!`'d at build) -- a prose edit there requires a Rust rebuild via the normal cascade, no cross-repo sync step. Gate/residual text stays genuinely zero-rebuild: editable `gm-plugkit/instructions/gates/` and `gm-plugkit/instructions/residual/` in this repo, read at runtime with `prose.rs`'s per-key fallback to a compiled default (`.gm/instructions/<key>.md` per-project-overridable). Detail in the recall store (`recall: string-externalization project`).
 
-## WASM guest, three interchangeable hosts (agentplug-runner is the live one)
+## WASM guest, one native host (agentplug-runner is the sole loader)
 
-Plugkit-core = the wasm cdylib guest (the gm brain), published as `plugkit.wasm`/`plugkit-slim.wasm` from `AnEntrypoint/plugkit-bin` by the cascade. It is host-agnostic: THREE distinct native/JS hosts load that same byte-identical wasm and serve the byte-identical spool ABI (`in/`/`out/` layout, verb names), so a gm-driven session works identically regardless of which booted it. In precedence order (`gm-plugkit/cli.js::tryDelegateToRunner`):
+Plugkit-core = the wasm cdylib guest (the gm brain), published as `plugkit.wasm`/`plugkit-slim.wasm` from `AnEntrypoint/plugkit-bin` by the cascade. It is host-agnostic, and `agentplug-runner` is the SOLE host that loads it. The JS wasm-host (`plugkit-wasm-wrapper.js` + `gm-plugkit/wrapper/`) and the redundant `gm-runner` native host are both retired -- there is no fallback loader; agentplug-runner is required.
 
-1. **`agentplug-runner`** (repo `AnEntrypoint/agentplug`, published to `AnEntrypoint/agentplug-bin`) -- the LIVE, preferred host. A real native wasmtime binary that loads gm.wasm as one plugin among siblings (`bert`/`libsql`/`treesitter`), routing gm.wasm's `host_plugin_call`/`host_vec_embed` to those shared plugins. This is why gm fetches `plugkit-slim.wasm` (no baked-in embedding weights -- bert supplies them out-of-wasm). `.status.json` `runtime` reads `agentplug` when this host is serving. Browser is driven via direct CDP and task via a native process registry, both native in agentplug-host.
-2. **`gm-runner`** (rs-plugkit `crates/gm-runner/`, published to `AnEntrypoint/gm-runner-bin`) -- a native FALLBACK, tried second. Loads the same wasm as a single module with a stub `host_plugin_call` and no shared-plugin routing; strictly a subset of agentplug-runner. Its own CDP browser + task registry were ported to match agentplug. Retirement is tracked (`gm-runner-redundant-host-consolidation`).
-3. **`plugkit-wasm-wrapper.js`** (JS/bun, in `gm-plugkit/`) -- the original JS host, tried last, only when no native runner is published for the platform. The `gm-plugkit` npm identity + `bootstrap.js` (seed/refresh) + `cli.js` (delegation) stay load-bearing as the thin launcher edge (`bun x gm-plugkit@latest spool` re-execs into the first available native runner and exits); the wrapper's own wasm-host code + `supervisor.js` only run as the pure-JS fallback.
+**`agentplug-runner`** (repo `AnEntrypoint/agentplug`, published to `AnEntrypoint/agentplug-bin`) is a real native wasmtime binary that loads gm.wasm as one plugin among siblings (`bert`/`libsql`/`treesitter`), routing gm.wasm's `host_plugin_call`/`host_vec_embed` to those shared plugins. This is why gm fetches `plugkit-slim.wasm` (no baked-in embedding weights -- bert supplies them out-of-wasm). `.status.json` `runtime` reads `agentplug`. Browser is driven via direct CDP and task via a native process registry, both native in agentplug-host (agentplug's `crates/agentplug-host/src/browser.rs` has its own embedded `cdp_eval.js`, so the browser verb needs nothing from the retired JS wrapper).
 
-`bin/install.js` best-effort-downloads BOTH native runners (agentplug-runner and gm-runner, each sha256-verified) but hard-requires neither -- a platform with no published binary silently falls through to the JS host. Each host fetches the same `plugkit.wasm`/`plugkit-slim.wasm` from `plugkit-bin`, sha256-pinned. Size + embedded-model mechanics: the recall store (`recall: WASM-only plugkit size mechanics`).
+The `gm-plugkit` npm identity stays load-bearing as the thin launcher edge only: `bun x gm-plugkit@latest spool` (`cli.js::tryDelegateToRunner`) re-execs into `~/.gm-tools/agentplug-runner` and exits; `bootstrap.js` still seeds per-project wiring and downloads `plugkit.wasm`/`plugkit-slim.wasm` (sha256-pinned) from `plugkit-bin`. `startSpoolDaemon()` launches agentplug-runner or, when it is absent, fails loudly with an actionable install message -- there is no silent no-loader state. Size + embedded-model mechanics: the recall store (`recall: WASM-only plugkit size mechanics`).
 
-**Native runners auto-update the wasm they serve, not themselves.** agentplug-runner and gm-runner each poll `plugkit-bin`'s Releases API every 600s for a newer tag; on a mismatch they download+verify the new wasm and a local-version-skew check triggers a clean in-process reload. The runner *executables* self-update only via `bin/install.js` re-run (agentplug-runner additionally adopts a staged `.new` on the next start).
+**`bin/install.js` hard-requires agentplug-runner.** It downloads the sha256-verified native runner from `AnEntrypoint/agentplug-bin` for the host platform, and if none is published (or the download/verify fails) it fails the install loudly with a clear message rather than leaving the user with no loader. There is no JS-host fallback to silently fall through to anymore.
 
-Wasm host-import link-module rule (`#[link(wasm_import_module="env")]` on every host-import extern block, every dep crate): the recall store (`recall: wasm host-import link-module trap`).
-
-**`plugkit-wasm-wrapper.js` is ESM; import node builtins at module scope, never inline `require()`** (recall store: `recall: wrapper require not defined under bun`).
+**agentplug-runner auto-updates the wasm it serves, not itself.** It polls `plugkit-bin`'s Releases API every 600s for a newer tag; on a mismatch it downloads+verifies the new wasm and a local-version-skew check triggers a clean in-process reload. The runner *executable* self-updates only via `bin/install.js` re-run (it additionally adopts a staged `.new` on the next start).
 
-**`~/.gm-tools/` is one shared install across every project's watcher on the machine -- never run gm-plugkit's own `cli.js`/`bootstrap.js` directly against the gm source checkout on a live machine.** `bun x gm-plugkit@latest` fetches an isolated npm-temp copy and is always safe; a direct `node`/`bun` invocation of the repo's own `gm-plugkit/cli.js` copies the local dev-tree wrapper over the shared install and cascades a wrapper-sha-drift kill across every other project's watcher. `ensureWrapperFresh()` refuses this unless `GM_PLUGKIT_ALLOW_DEV_WRAPPER_OVERWRITE=1` is set (recall store: `recall: shared install machine-wide wrapper-drift storm`).
+Wasm host-import link-module rule (`#[link(wasm_import_module="env")]` on every host-import extern block, every dep crate): the recall store (`recall: wasm host-import link-module trap`).
 
 **Every single-instance/lock guard is atomic** (O_EXCL / atomic-rename), never check-then-act (recall store: `recall: supervisor churn TOCTOU atomic guard`).
 

package/bin/bootstrap.js

@@ -595,7 +595,7 @@ function pidCommandLineForKillGuard(pid) {
 }
 
 function pidIsPlugkitProcess(pid) {
-  return /plugkit-wasm-wrapper\.js|plugkit-supervisor\.js|gm-plugkit[\\\/]supervisor\.js/i.test(pidCommandLineForKillGuard(pid));
+  return /agentplug-runner(\.exe)?/i.test(pidCommandLineForKillGuard(pid));
 }
 
 function writeKillAttribution(targetSpoolDir, info) {

package/bin/install.js

@@ -176,7 +176,9 @@ function runPlugkitBootstrap() {
 // agentplug-runner's CI (AnEntrypoint/agentplug's .github/workflows/release.yml)
 // publishing to AnEntrypoint/agentplug-bin -- must stay byte-identical to that
 // workflow's `artifact:` matrix values. Returns null for a host combination CI
-// does not build, so the caller falls back to the JS host without crashing.
+// does not build; agentplug-runner is the sole spool loader now (the JS host
+// was retired), so a null here means there is no loader for this platform and
+// the installer fails loudly rather than leaving a silent no-loader state.
 function agentplugRunnerAssetName() {
   const plat = process.platform;
   const arch = process.arch;
@@ -231,15 +233,14 @@ function gmToolsDir() {
 }
 
 
-// Downloads agentplug-runner (the sole native wasm plugin-host now -- hosts
-// gm.wasm plus the separate libsql/bert/treesitter plugin wasm modules via a
+// Downloads agentplug-runner (the SOLE native wasm plugin-host -- hosts gm.wasm
+// plus the separate libsql/bert/treesitter plugin wasm modules via a
 // host-mediated plugin_call ABI) from agentplug-bin's GitHub Releases,
 // sha256-sidecar-verified with an atomic rename, so a corrupt/partial download
-// is never accepted. Best-effort: any failure (offline, unpublished platform,
-// network) resolves false rather than throwing, so install never hard-fails
-// over a runner fetch -- cli.js's tryDelegateToRunner then falls back to the
-// pure-JS wasm host. gm-runner was retired once agentplug-runner reached full
-// 6-platform parity (it was a strictly-inferior single-module duplicate).
+// is never accepted. Returns true on success, false on any failure (offline,
+// unpublished platform, network, sha mismatch). The JS wasm-host was retired,
+// so agentplug-runner is required: main() hard-fails the install when this
+// returns false, rather than leaving the user with no spool loader at all.
 async function downloadAgentplugRunner({ silent } = {}) {
   const assetName = agentplugRunnerAssetName();
   if (!assetName) {
@@ -350,7 +351,28 @@ async function main() {
   }
 
   await runPlugkitBootstrap();
-  await downloadAgentplugRunner({ silent: false });
+
+  // agentplug-runner is the sole spool loader (the JS wasm-host was retired).
+  // Its download is a HARD requirement -- if the platform has no published
+  // binary, or the download/verification fails, there is no loader at all, so
+  // fail loudly with an actionable message rather than silently leaving the
+  // user with an installed skill that cannot boot a spool watcher.
+  const runnerReady = await downloadAgentplugRunner({ silent: false });
+  if (!runnerReady) {
+    const asset = agentplugRunnerAssetName();
+    err('');
+    err('FATAL: agentplug-runner could not be installed, and it is the sole spool loader.');
+    if (!asset) {
+      err(`No agentplug-runner binary is published for this platform (${process.platform}/${process.arch}).`);
+      err('The JS wasm-host fallback has been retired, so there is no loader available for this platform.');
+      err('Request a build at https://github.com/AnEntrypoint/agentplug-bin/issues, or install on a supported');
+      err('platform: linux-x64, linux-arm64, macos-x64, macos-arm64, windows-x64, windows-arm64.');
+    } else {
+      err(`The download or sha256 verification of ${asset} from AnEntrypoint/agentplug-bin failed`);
+      err('(see the messages above). Check your network/proxy and re-run: npx gm-skill install');
+    }
+    return 1;
+  }
 
   out('');
   out('Done. Open Claude Code and run /gm. New top-level skill dirs may need one restart to register.');

package/bin/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-acd7bc0e2ee1d9dc3311ee37e74e2cb5b59f15559a1d29aacc703ddacf323199  plugkit-slim.wasm
+fc7364d869507c548db7846b67e71084c8d9c0c5a18c39a09afaf3f28155d4cd  plugkit-slim.wasm

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.935
+0.1.936

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-89e0937c8879886b66420c807e7decc29d6723df91300c63028de6c6cefeed1b  plugkit.wasm
+6492759f1cf535d6b899f22d1a31c00296397ae493aa755a6c735940128d9b18  plugkit.wasm

package/gm-plugkit/bootstrap.js

@@ -258,19 +258,17 @@ function gmToolsDir() {
 // before ever loading its wasm-embedded safetensors fallback (see
 // rs-plugkit/crates/plugkit-core/src/embed.rs::init_ctx) -- a slim build
 // (feature=slim, no embedded weights at all) is only safe to fetch on a host
-// that actually answers host_vec_embed for real. plugkit-wasm-wrapper.js
-// wires that answer through gm-runner's native candle path
-// (hostEmbedViaGmRunner) or agentplug-runner's shared daemon, both gated on
-// one of these two binaries existing under ~/.gm-tools -- mirrors that same
-// on-disk presence check here so bootstrap-time artifact selection and
-// runtime embed-delegation eligibility never disagree. Absence of both means
-// no host_vec_embed answer will ever come, so fetching fat (which carries its
-// own wasm-side embedding fallback) is the only safe choice.
+// that actually answers host_vec_embed for real. agentplug-runner answers it
+// via its shared bert plugin daemon; the check is gated on the runner binary
+// existing under ~/.gm-tools so bootstrap-time artifact selection and runtime
+// embed-delegation eligibility never disagree. Absence means no host_vec_embed
+// answer will ever come, so fetching fat (which carries its own wasm-side
+// embedding fallback) is the only safe choice.
 function hasNativeEmbedRunner() {
   const dir = gmToolsDir();
   const names = process.platform === 'win32'
-    ? ['gm-runner.exe', 'agentplug-runner.exe']
-    : ['gm-runner', 'agentplug-runner'];
+    ? ['agentplug-runner.exe']
+    : ['agentplug-runner'];
   return names.some(n => { try { return fs.existsSync(path.join(dir, n)); } catch (_) { return false; } });
 }
 
@@ -279,21 +277,21 @@ function hasNativeEmbedRunner() {
 // agents, each `git worktree add`-ing a fresh physical directory) shares the
 // SAME underlying repo as its main checkout but has its own separate
 // directory tree. Every cwd-derived project-dir computation in this file and
-// in supervisor.js/cli.js must funnel through this so a worktree-spawned
-// process resolves to the SAME .gm/exec-spool/ as its main-repo sibling --
-// otherwise the single-instance supervisor lock can never see a sibling
-// worktree's already-running watcher, and every worktree cold-boots its own
-// independent watcher (each loading the full embed model + running its own
-// cold reindex of what is, conceptually, the same project). Live-measured
+// in cli.js must funnel through this so a worktree-spawned process resolves to
+// the SAME .gm/exec-spool/ as its main-repo sibling -- otherwise the
+// single-instance watcher guard can never see a sibling worktree's
+// already-running watcher, and every worktree cold-boots its own independent
+// watcher (each loading the full embed model + running its own cold reindex of
+// what is, conceptually, the same project). Live-measured
 // this session under real concurrent multi-agent load: this was the actual
 // root cause of a user-flagged "memory grows to ~2GB then clears" churn
 // pattern -- N worktrees of one repo each independently paying full
 // cold-embed cost instead of sharing one already-warm watcher, and the
 // resulting CPU contention pushed genuinely-busy processes past their
 // heartbeat deadline into a restart cycle that produces the sawtooth memory
-// pattern. Mirrors the existing browserRootDir() resolution already used for
-// browser-session state in plugkit-wasm-wrapper.js (same fix, same reason,
-// applied one layer up at the process-boot-dedup level).
+// pattern. agentplug-runner roots its own browser-session state at the git
+// common dir for the same reason (same fix, same reason, applied one layer up
+// at the process-boot-dedup level).
 function resolveProjectRoot(start) {
   const resolved = path.resolve(start);
   try {
@@ -373,23 +371,6 @@ function releaseLock(lockPath) {
   try { fs.unlinkSync(lockPath); } catch (_) {}
 }
 
-function resolveNpxJsCli() {
-  if (process.platform !== 'win32') return null;
-  const candidates = [];
-  if (process.env.npm_config_prefix) {
-    candidates.push(path.join(process.env.npm_config_prefix, 'node_modules', 'npm', 'bin', 'npx-cli.js'));
-  }
-  const programFiles = process.env.ProgramFiles || 'C:\\Program Files';
-  candidates.push(path.join(programFiles, 'nodejs', 'node_modules', 'npm', 'bin', 'npx-cli.js'));
-  candidates.push(path.join(path.dirname(process.execPath), 'node_modules', 'npm', 'bin', 'npx-cli.js'));
-  const appdata = process.env.APPDATA;
-  if (appdata) candidates.push(path.join(appdata, 'npm', 'node_modules', 'npm', 'bin', 'npx-cli.js'));
-  for (const c of candidates) {
-    try { if (fs.existsSync(c)) return c; } catch (_) {}
-  }
-  return null;
-}
-
 async function extractNpmPackageWasm(destPath, version) {
   const tempDir = path.join(path.dirname(destPath), '.npm-extract-' + Date.now());
   try {
@@ -590,7 +571,7 @@ function pidCommandLineForKillGuard(pid) {
 }
 
 function pidIsPlugkitProcess(pid) {
-  return /plugkit-wasm-wrapper\.js|plugkit-supervisor\.js|gm-plugkit[\\\/]supervisor\.js/i.test(pidCommandLineForKillGuard(pid));
+  return /agentplug-runner(\.exe)?/i.test(pidCommandLineForKillGuard(pid));
 }
 
 function writeKillAttribution(targetSpoolDir, info) {
@@ -854,8 +835,6 @@ function copyWasmToGmTools(wasmPath, version) {
   const dst = gmToolsDir();
   fs.mkdirSync(dst, { recursive: true });
   const target = path.join(dst, 'plugkit.wasm');
-  const wrapperSrc = path.join(__dirname, 'plugkit-wasm-wrapper.js');
-  const wrapperDst = path.join(dst, 'plugkit-wasm-wrapper.js');
 
   let wasmFresh = false;
   if (fs.existsSync(target)) {
@@ -888,17 +867,6 @@ function copyWasmToGmTools(wasmPath, version) {
     }
   } catch (_) {}
 
-  if (fs.existsSync(wrapperSrc)) {
-    let wrapperFresh = false;
-    if (fs.existsSync(wrapperDst)) {
-      try {
-        const cur = sha256OfFileSync(wrapperDst);
-        const src = sha256OfFileSync(wrapperSrc);
-        if (cur === src) wrapperFresh = true;
-      } catch (_) {}
-    }
-    if (!wrapperFresh) fs.copyFileSync(wrapperSrc, wrapperDst);
-  }
 }
 
 function getWasmPath() {
@@ -915,60 +883,6 @@ function isReady() {
   return fs.existsSync(wasm);
 }
 
-function runningFromGmSourceRepo() {
-  try {
-    const pkgPath = path.join(__dirname, '..', 'package.json');
-    if (!fs.existsSync(pkgPath)) return false;
-    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
-    return pkg && pkg.name === 'gm-skill';
-  } catch (_) { return false; }
-}
-
-function ensureWrapperFresh() {
-  try {
-    const wrapperSrc = path.join(__dirname, 'plugkit-wasm-wrapper.js');
-    const wrapperDst = path.join(gmToolsDir(), 'plugkit-wasm-wrapper.js');
-    if (!fs.existsSync(wrapperSrc)) return false;
-    if (runningFromGmSourceRepo() && process.env.GM_PLUGKIT_ALLOW_DEV_WRAPPER_OVERWRITE !== '1') {
-      log(`refusing to overwrite the shared ~/.gm-tools wrapper from the gm source repo (${wrapperSrc}) -- this machine-wide install is shared by every project's watcher; set GM_PLUGKIT_ALLOW_DEV_WRAPPER_OVERWRITE=1 to opt in, or use 'bun x gm-plugkit@latest' which fetches an isolated npm copy instead`);
-      return false;
-    }
-    let same = false;
-    if (fs.existsSync(wrapperDst)) {
-      try {
-        const a = sha256OfFileSync(wrapperSrc);
-        const b = sha256OfFileSync(wrapperDst);
-        if (a === b) same = true;
-      } catch (_) {}
-    }
-    if (same) return false;
-    // Many independent per-project watchers share this one gmToolsDir() install --
-    // concurrent CLI invocations from different projects can race this copy, so
-    // it's lock-guarded (atomic O_EXCL) + tmp-write-then-rename, never a direct
-    // in-place copyFileSync another reader could observe half-written.
-    fs.mkdirSync(gmToolsDir(), { recursive: true });
-    const lockPath = wrapperDst + '.lock';
-    acquireLock(lockPath);
-    try {
-      let stillSame = false;
-      if (fs.existsSync(wrapperDst)) {
-        try {
-          const a = sha256OfFileSync(wrapperSrc);
-          const b = sha256OfFileSync(wrapperDst);
-          if (a === b) stillSame = true;
-        } catch (_) {}
-      }
-      if (stillSame) return false;
-      const tmpDst = wrapperDst + '.tmp.' + process.pid;
-      fs.copyFileSync(wrapperSrc, tmpDst);
-      fs.renameSync(tmpDst, wrapperDst);
-      return true;
-    } finally {
-      releaseLock(lockPath);
-    }
-  } catch (_) { return false; }
-}
-
 function ensureGmPlugkitVersionFresh() {
   try {
     const ownPkg = JSON.parse(fs.readFileSync(path.join(__dirname, 'package.json'), 'utf-8'));
@@ -1223,10 +1137,9 @@ async function ensureReady(opts) {
 
   if (isReady() && !versionDrift) {
     const wasmPath = getWasmPath();
-    const wrapperUpdated = ensureWrapperFresh();
     const versionMarkerUpdated = ensureGmPlugkitVersionFresh();
     ensureSkillMdFresh();
-    return { ok: true, wasmPath, binaryPath: wasmPath, status: (wrapperUpdated || versionMarkerUpdated) ? 'wrapper-refreshed' : 'already-ready', version: installed };
+    return { ok: true, wasmPath, binaryPath: wasmPath, status: versionMarkerUpdated ? 'version-refreshed' : 'already-ready', version: installed };
   }
   if (targetVersion && targetVersion !== pinnedVersion) {
     try {
@@ -1243,7 +1156,6 @@ async function ensureReady(opts) {
     if (versionDrift && isReady()) {
       log(`bootstrap for ${targetVersion} failed (${bootErr.message || bootErr}); keeping running watcher on installed ${installed} (no kill, serve cached wasm)`);
       const cachedPath = getWasmPath();
-      ensureWrapperFresh();
       ensureSkillMdFresh();
       return { ok: true, wasmPath: cachedPath, binaryPath: cachedPath, status: 'bootstrap-failed-served-cached', version: installed };
     }
@@ -1254,7 +1166,6 @@ async function ensureReady(opts) {
     try { killSpoolWatcherInCwd(`version_drift:${installed}->${targetVersion}`); } catch (_) {}
   }
 
-  ensureWrapperFresh();
   ensureSkillMdFresh();
   return { ok: true, wasmPath, binaryPath: wasmPath, status: 'bootstrapped', version: targetVersion || installed };
 }
@@ -1263,46 +1174,21 @@ function getBinaryPath() {
   return getWasmPath();
 }
 
-function resolveNodeRuntime() {
-  const candidates = [];
-  if (process.env.PLUGKIT_RUNTIME) candidates.push(process.env.PLUGKIT_RUNTIME);
-  candidates.push('bun');
-  try {
-    const which = process.platform === 'win32' ? 'where' : 'which';
-    const out = require('child_process').spawnSync(which, ['bun'], { encoding: 'utf8', windowsHide: true });
-    if (out && out.stdout) {
-      const first = out.stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean)[0];
-      if (first) candidates.push(first);
-    }
-  } catch (_) {}
-  for (const c of candidates) {
-    try { const r = require('child_process').spawnSync(c, ['--version'], { stdio: 'ignore', windowsHide: true }); if (r && r.status === 0) return c; } catch (_) {}
-  }
-  const isNodeExe = (p) => /(^|[\\/])node(\.exe)?$/i.test(String(p || ''));
-  const nodeCandidates = [];
-  if (isNodeExe(process.env.GM_NODE_PATH)) nodeCandidates.push(process.env.GM_NODE_PATH);
-  if (isNodeExe(process.execPath)) nodeCandidates.push(process.execPath);
-  try {
-    const which = process.platform === 'win32' ? 'where' : 'which';
-    const out = require('child_process').spawnSync(which, ['node'], { encoding: 'utf8', windowsHide: true });
-    if (out && out.stdout) {
-      const first = out.stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean)[0];
-      if (first) nodeCandidates.push(first);
-    }
-  } catch (_) {}
-  for (const c of nodeCandidates) {
-    try { const r = require('child_process').spawnSync(c, ['--version'], { stdio: 'ignore', windowsHide: true }); if (r && r.status === 0) return c; } catch (_) {}
-  }
-  return process.execPath;
-}
-
 function startSpoolDaemon() {
   try {
-    const wrapper = path.join(gmToolsDir(), 'plugkit-wasm-wrapper.js');
-    if (!fs.existsSync(wrapper)) {
-      return { ok: false, error: `wrapper not at ${wrapper} -- ensureReady() must run first` };
+    const runnerName = process.platform === 'win32' ? 'agentplug-runner.exe' : 'agentplug-runner';
+    const runner = path.join(gmToolsDir(), runnerName);
+    if (!fs.existsSync(runner)) {
+      return {
+        ok: false,
+        error:
+          `agentplug-runner is not installed at ${runner} and is the sole supported spool loader. ` +
+          `The JS wasm-host has been retired. Install it with 'bun x gm-skill install' (or 'npx gm-skill install'), ` +
+          `which downloads the sha256-verified native runner from AnEntrypoint/agentplug-bin for this platform ` +
+          `(${process.platform}/${process.arch}). If no binary is published for this platform yet, there is no ` +
+          `loader available -- file an issue at https://github.com/AnEntrypoint/agentplug-bin so a binary is built for it.`,
+      };
     }
-    const runtime = resolveNodeRuntime();
     const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();
     const spoolDir = path.join(projectDir, '.gm', 'exec-spool');
     fs.mkdirSync(spoolDir, { recursive: true });
@@ -1315,20 +1201,18 @@ function startSpoolDaemon() {
       }
     } catch (_) {}
 
-    const cmd = runtime;
-    const args = [wrapper, 'spool'];
     const logFd = fs.openSync(logPath, 'a');
-    try { fs.writeSync(logFd, `\n--- daemon spawn ${new Date().toISOString()} parent=${process.pid} (js-host fallback, native runner absent) ---\n`); } catch (_) {}
-    const child = require('child_process').spawn(cmd, args, {
+    try { fs.writeSync(logFd, `\n--- daemon spawn ${new Date().toISOString()} parent=${process.pid} (agentplug-runner) ---\n`); } catch (_) {}
+    const child = require('child_process').spawn(runner, ['spool'], {
       detached: true,
       stdio: ['ignore', logFd, logFd],
       windowsHide: true,
-      env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir, PLUGKIT_BOOT_REASON: 'js-host-fallback' },
+      env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir, PLUGKIT_BOOT_REASON: 'agentplug-runner' },
     });
     try { fs.closeSync(logFd); } catch (_) {}
     const pid = child.pid;
     child.unref();
-    return { ok: true, pid, wrapper, runtime: cmd, logPath, supervised: false };
+    return { ok: true, pid, runner, logPath, supervised: false };
   } catch (e) {
     return { ok: false, error: e.message };
   }
@@ -1356,7 +1240,6 @@ module.exports = {
   readVersionFile,
   ensureGmPlugkitVersionFresh,
   ensureSkillMdFresh,
-  ensureWrapperFresh,
   readPinnedGmPlugkitVersion,
   resolveBunRuntime,
   spawnPinnedBoot,