gm-skill 2.0.2177 → 2.0.2179

package/bin/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-6aa343337008b72713fe60660a3f460345117dcece30e8491c8d28d62f1e40ef  plugkit-slim.wasm
+c5ff416bf78105a38943ee6be617dd1052101428eae97dd1b1173f54ddf22afe  plugkit-slim.wasm

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.1031
+0.1.1034

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-1afa52f433634994009112e196294de48c81e9a22c2f7aff28456aa4118477d0  plugkit.wasm
+34a675417d9c56f0a5eea64d21e7811f44427219d9f4427213c8b9cb87d28022  plugkit.wasm

package/gm-plugkit/bootstrap.js

@@ -220,6 +220,17 @@ function readShaManifest() {
   return out;
 }
 
+async function fetchRemoteSha(version, artifactName) {
+  const base = `https://github.com/AnEntrypoint/plugkit-bin/releases/download/v${version}`;
+  try {
+    const shaBuf = await httpGetBuffer(`${base}/${artifactName}.sha256`, 10000);
+    return shaBuf.toString('utf-8').trim().split(/\s+/)[0].toLowerCase();
+  } catch (e) {
+    log(`remote sha fetch failed for ${artifactName}@${version}: ${e.message}`);
+    return null;
+  }
+}
+
 async function extractNpmPackageWasm(destPath, version) {
   const tempDir = path.join(path.dirname(destPath), '.npm-extract-' + Date.now());
   try {
@@ -394,11 +405,19 @@ function killStaleDaemonIfVersionChanged() {
 async function bootstrap(opts) {
   opts = opts || {};
   const version = readVersionFile();
-  const shaManifest = readShaManifest();
   const useSlim = hasNativeEmbedRunner();
   const remoteArtifact = useSlim ? 'plugkit-slim.wasm' : 'plugkit.wasm';
   const wasmName = 'plugkit.wasm';
-  const expectedSha = shaManifest ? (shaManifest[remoteArtifact] || (useSlim ? null : shaManifest[wasmName])) : null;
+
+  let expectedSha = await fetchRemoteSha(version, remoteArtifact);
+  if (!expectedSha) {
+    const shaManifest = readShaManifest();
+    const localManifestVersion = (() => { try { return readVersionFile(); } catch (_) { return null; } })();
+    if (shaManifest && localManifestVersion === version) {
+      expectedSha = shaManifest[remoteArtifact] || (useSlim ? null : shaManifest[wasmName]) || null;
+      if (expectedSha) log(`remote sha unreachable, falling back to committed manifest for matching version ${version}`);
+    }
+  }
 
   let root = cacheRoot();
   try { ensureDir(root); }

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.2177",
+  "version": "2.0.2179",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform wasm, verifies SHA256, and launches agentplug-runner (the native wasm host) as the spool watcher daemon.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-6aa343337008b72713fe60660a3f460345117dcece30e8491c8d28d62f1e40ef  plugkit-slim.wasm
+c5ff416bf78105a38943ee6be617dd1052101428eae97dd1b1173f54ddf22afe  plugkit-slim.wasm

package/gm-plugkit/plugkit.version

@@ -1 +1 @@
-0.1.1031
+0.1.1034

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.2177",
+  "version": "2.0.2179",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.1031"
+  "plugkitVersion": "0.1.1034"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.2177",
+  "version": "2.0.2179",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",