gm-skill 2.0.2072 → 2.0.2074

package/bin/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-a2f86a786b748b1e78bad3631ba0698c22bb20268fa91965d85cb23b253c8d45  plugkit-slim.wasm
+52edc96a3174126830758063c7907c1df38cc98824604eacc4cec7bbe0dd0d81  plugkit-slim.wasm

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.955
+0.1.956

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-557adc2bf67ec76b6219bd37572673fa37a5b9b501edd78806de031ab4f8ea56  plugkit.wasm
+e48bfd12a8d27e6c813f8a1473eab68ab8c48f637fa91d94ae020282257194f2  plugkit.wasm

package/gm-plugkit/bootstrap.js

@@ -28,13 +28,15 @@ const {
   killPid,
   killSpoolWatcherInCwd,
   proactiveKillForNewInstall,
+  ensureNextStepWiring: ensureNextStepWiringShared,
 } = shared;
 
-// ensureNextStepWiring here is intentionally NOT imported from
-// bootstrap-shared -- this file's version does strictly more (CLAUDE.md
-// prepend, AGENTS.md append, managed .npmignore block) than bin/bootstrap.js's
-// leaner one, so it is genuinely-different logic, not accidental drift, and
-// stays local to this file.
+// This file's own ensureNextStepWiring below delegates the shared prefix
+// (seed next-step.md, prepend CLAUDE.md, append AGENTS.md) to
+// bootstrap-shared's ensureNextStepWiringShared, then adds strictly more
+// (a managed .npmignore block) that bootstrap-shared's leaner version does
+// not need -- genuinely-different logic on top of a shared base, not two
+// independent copies of the same first 40 lines.
 
 function resolveWindowsExe(cmd) {
   if (process.platform !== 'win32') return cmd;
@@ -177,48 +179,7 @@ function ensureInstructionsBundle(cwd) {
 }
 
 function ensureNextStepWiring(cwd) {
-  const changes = [];
-  const gmDir = path.join(cwd, '.gm');
-  try { fs.mkdirSync(gmDir, { recursive: true }); }
-  catch (e) { obsEvent('bootstrap', 'next-step.wiring.target-failed', { target: gmDir, error: e.message }); }
-
-  const nextStepPath = path.join(gmDir, 'next-step.md');
-  const nextStepBody = '# Next step\n\nDispatch the `instruction` verb to plugkit by writing `.gm/exec-spool/in/instruction/<N>.txt` (any unique N) with body `{}` (or `{"prompt":"<user request>"}` on the first dispatch of the turn). Read the response from `.gm/exec-spool/out/<N>.json` and follow the imperative in the `instruction` field.\n\nThis file is auto-rewritten by plugkit on every instruction dispatch.\n';
-  try {
-    if (!fs.existsSync(nextStepPath)) {
-      fs.writeFileSync(nextStepPath, nextStepBody);
-      changes.push('seeded .gm/next-step.md');
-    }
-  } catch (e) { obsEvent('bootstrap', 'next-step.wiring.target-failed', { target: nextStepPath, error: e.message }); }
-
-
-  const claudeMdPath = path.join(cwd, 'CLAUDE.md');
-  try {
-    if (!fs.existsSync(claudeMdPath)) {
-      fs.writeFileSync(claudeMdPath, '@AGENTS.md\n');
-      changes.push('created CLAUDE.md');
-    } else {
-      const cur = fs.readFileSync(claudeMdPath, 'utf8');
-      const hasLine = cur.split(/\r?\n/).some(l => l.trim() === '@AGENTS.md');
-      if (!hasLine) {
-        fs.writeFileSync(claudeMdPath, '@AGENTS.md\n' + cur);
-        changes.push('prepended @AGENTS.md to CLAUDE.md');
-      }
-    }
-  } catch (e) { obsEvent('bootstrap', 'next-step.wiring.target-failed', { target: claudeMdPath, error: e.message }); }
-
-  const agentsMdPath = path.join(cwd, 'AGENTS.md');
-  try {
-    if (fs.existsSync(agentsMdPath)) {
-      const cur = fs.readFileSync(agentsMdPath, 'utf8');
-      const hasLine = cur.split(/\r?\n/).some(l => l.trim() === '@.gm/next-step.md');
-      if (!hasLine) {
-        const sep = cur.endsWith('\n') ? '' : '\n';
-        fs.writeFileSync(agentsMdPath, cur + sep + '\n@.gm/next-step.md\n');
-        changes.push('appended @.gm/next-step.md to AGENTS.md');
-      }
-    }
-  } catch (e) { obsEvent('bootstrap', 'next-step.wiring.target-failed', { target: agentsMdPath, error: e.message }); }
+  const changes = ensureNextStepWiringShared(cwd);
 
   // gm writes its own runtime data into .gm/ in every project it drives; if that
   // project is an npm package, that data must never be published. Maintain a

package/gm-plugkit/gm-process.js

@@ -42,7 +42,7 @@ function sha256OfFileSync(filePath) {
 function pidCommandLineForKillGuard(pid) {
   try {
     if (process.platform === 'win32') {
-      const r = spawnSync('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', `(Get-WmiObject Win32_Process -Filter "ProcessId=${Number(pid)}").CommandLine`], { encoding: 'utf8', windowsHide: true, timeout: 5000 });
+      const r = spawnSync('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', `(Get-CimInstance Win32_Process -Filter "ProcessId=${Number(pid)}").CommandLine`], { encoding: 'utf8', windowsHide: true, timeout: 5000 });
       return String((r && r.stdout) || '');
     }
     const r = spawnSync('ps', ['-p', String(pid), '-o', 'args='], { encoding: 'utf8', timeout: 5000 });

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.2072",
+  "version": "2.0.2074",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform wasm, verifies SHA256, and launches agentplug-runner (the native wasm host) as the spool watcher daemon.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-a2f86a786b748b1e78bad3631ba0698c22bb20268fa91965d85cb23b253c8d45  plugkit-slim.wasm
+52edc96a3174126830758063c7907c1df38cc98824604eacc4cec7bbe0dd0d81  plugkit-slim.wasm

package/gm-plugkit/plugkit.version

@@ -1 +1 @@
-0.1.955
+0.1.956

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.2072",
+  "version": "2.0.2074",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.955"
+  "plugkitVersion": "0.1.956"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.2072",
+  "version": "2.0.2074",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",

package/scripts/check-prose-bundle.mjs

@@ -19,9 +19,128 @@ for (const key of KEYS) {
   if (fs.readFileSync(fp, 'utf8').trim() === '') empty.push(key);
 }
 
+let bundleFailed = false;
 if (missing.length || empty.length) {
+  bundleFailed = true;
   if (missing.length) console.error(`prose bundle missing entries: ${missing.join(', ')}`);
   if (empty.length) console.error(`prose bundle empty entries: ${empty.join(', ')}`);
+} else {
+  console.log(`prose bundle complete: ${KEYS.length} keys present and non-empty`);
+}
+
+// Real conformance run: extract every `browser` verb mode-prefix and
+// exec_js `opts.*` field the served prose promises, and check that the
+// implementing native source (agentplug-host, the sole loader per this
+// repo's own architecture) actually references it. Static, not a live
+// dispatch -- this is a "did anyone even write the code" check, not a
+// behavioral one, but that is exactly what catches a "documented, zero
+// implementing code" gap: this check is what found the browser.md
+// screenshot/dom= gap live (agentplug-host/src/browser.rs had zero
+// BrowserMode variant for either, confirmed by grep before this script
+// was written). Runs against the checked-out submodules, so it only fires
+// in CI/local contexts where they're actually populated (a plain `git
+// clone` without --recurse-submodules leaves them empty per README.md's
+// own documented note -- absence there is skipped, not failed, matching
+// this repo's existing plain-clone tolerance).
+const proseSourceDir = path.join(root, 'rs-plugkit', 'crates', 'plugkit-core', 'src', 'orchestrator', 'instructions', 'prose');
+const browserMdPath = path.join(proseSourceDir, 'browser.md');
+const executeMdPath = path.join(proseSourceDir, 'execute.md');
+const browserRsPath = path.join(root, 'agentplug', 'crates', 'agentplug-host', 'src', 'browser.rs');
+const cdpEvalJsPath = path.join(root, 'agentplug', 'crates', 'agentplug-host', 'src', 'cdp_eval.js');
+const execJsRsPath = path.join(root, 'agentplug', 'crates', 'agentplug-host', 'src', 'exec_js.rs');
+
+// Every INDIVIDUAL file this check reads, not just the containing
+// directories -- a submodule can be present but shallow/partial (a
+// degenerate state distinct from "not cloned at all"), and the directory-
+// only check previously crashed with an unhandled ENOENT the moment any one
+// file was individually missing (live-reproduced this session: temporarily
+// removing browser.md alone, with every directory still present, crashed
+// the script instead of skipping gracefully).
+const requiredFiles = [browserMdPath, executeMdPath, browserRsPath, cdpEvalJsPath, execJsRsPath];
+const missingFiles = requiredFiles.filter((p) => !fs.existsSync(p));
+const submodulesPresent = missingFiles.length === 0;
+
+let conformanceFailed = false;
+if (!submodulesPresent) {
+  console.log(`prose-conformance: skipping -- missing file(s) (submodules not populated, or a partial/shallow checkout): ${missingFiles.map((p) => path.relative(root, p)).join(', ')}`);
+} else {
+  const browserMd = fs.readFileSync(path.join(proseSourceDir, 'browser.md'), 'utf8');
+  const browserRs = fs.readFileSync(browserRsPath, 'utf8');
+  const cdpEvalJs = fs.readFileSync(cdpEvalJsPath, 'utf8');
+  const executeMd = fs.readFileSync(path.join(proseSourceDir, 'execute.md'), 'utf8');
+  const execJsRs = fs.readFileSync(execJsRsPath, 'utf8');
+
+  // Extract every backtick-quoted `<word>\n<expression>` / `<word>=` mode
+  // prefix from browser.md's "Body shapes" code block -- the exact syntax
+  // the served prose promises as a real body-shape prefix.
+  const bodyShapesMatch = browserMd.match(/## Body shapes[\s\S]*?```\r?\n([\s\S]*?)```/);
+  const promisedPrefixes = [];
+  if (bodyShapesMatch) {
+    for (const line of bodyShapesMatch[1].split(/\r?\n/)) {
+      const t = line.trim();
+      if (!t) continue;
+      // "session new" / "session list" / "session close <id>" -> session subcommands
+      const sessionMatch = t.match(/^session (\w+)/);
+      if (sessionMatch) { promisedPrefixes.push({ kind: 'session', name: sessionMatch[1] }); continue; }
+      // "<word>\n<expression>" or "<word> interval=...\n<expression>" -> bare mode word
+      const modeMatch = t.match(/^(\w+)(?:\s+\w+=<[^>]+>)*\\n/);
+      if (modeMatch && !['url', 'timeout', 'dom'].includes(modeMatch[1])) { promisedPrefixes.push({ kind: 'mode', name: modeMatch[1] }); continue; }
+      // "<word>=<...>" -> key= prefix (url=, timeout=, dom=)
+      const kvMatch = t.match(/^(\w+)=</);
+      if (kvMatch) { promisedPrefixes.push({ kind: 'kv', name: kvMatch[1] }); continue; }
+    }
+  }
+
+  const conformanceFindings = [];
+  for (const { kind, name } of promisedPrefixes) {
+    // Every promised prefix must appear as a real string literal in either
+    // the Rust prefix-stripping logic or the JS mode-dispatch logic -- one
+    // hit in either is sufficient (some prefixes are parsed Rust-side,
+    // others are only checked JS-side against the `mode` string agentplug
+    // passes through). `session <word>` prefixes are matched as the real
+    // "session <word>" literal parse_session_command uses, not the bare
+    // word alone (which would false-positive-pass on any incidental
+    // substring match).
+    let inRust, inJs;
+    if (kind === 'session') {
+      inRust = browserRs.includes(`"session ${name}`);
+      inJs = false;
+    } else if (kind === 'kv') {
+      inRust = browserRs.includes(`"${name}="`);
+      inJs = cdpEvalJs.includes(`${name}=`);
+    } else {
+      inRust = browserRs.includes(`"${name}\\n"`) || browserRs.includes(`"${name}"`);
+      inJs = cdpEvalJs.includes(`'${name}'`) || cdpEvalJs.includes(`"${name}"`);
+    }
+    if (!inRust && !inJs) {
+      conformanceFindings.push(`browser.md promises ${kind} prefix "${name}" with zero implementing-code reference in browser.rs or cdp_eval.js`);
+    }
+  }
+
+  // exec_js opts.* fields: extract every `opts.<fieldName>` token referenced
+  // in execute.md's prose and check exec_js.rs actually reads it via
+  // opts.get("<fieldName>").
+  const optsFieldRe = /opts\.([a-zA-Z][a-zA-Z0-9]*)/g;
+  const promisedOptsFields = new Set();
+  let m;
+  while ((m = optsFieldRe.exec(executeMd)) !== null) promisedOptsFields.add(m[1]);
+  for (const field of promisedOptsFields) {
+    if (field === 'true' || field === 'false') continue;
+    const needle = `opts.get("${field}")`;
+    if (!execJsRs.includes(needle)) {
+      conformanceFindings.push(`execute.md promises exec_js opts.${field} with no matching opts.get("${field}") in exec_js.rs`);
+    }
+  }
+
+  if (conformanceFindings.length) {
+    conformanceFailed = true;
+    console.error('prose-conformance FAILED -- prose promises capabilities with no confirmed implementing-code reference:');
+    for (const f of conformanceFindings) console.error(`  - ${f}`);
+  } else {
+    console.log(`prose-conformance: ${promisedPrefixes.length} browser mode-prefixes + ${promisedOptsFields.size} exec_js opts fields all have a matching implementing-code reference`);
+  }
+}
+
+if (bundleFailed || conformanceFailed) {
   process.exit(1);
 }
-console.log(`prose bundle complete: ${KEYS.length} keys present and non-empty`);