gm-skill 2.0.2472 → 2.0.2474

package/bin/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-ba510ea617f94976ae3d0e0626b63fed40f7cf348a2498507c52bf3e52257eee  plugkit-slim.wasm
+047e1215b8ce5220c9ba88df9f6a6659aca33cf78b18457a3bac3984157f5ded  plugkit-slim.wasm

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.1183
+0.1.1184

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-2f3aae188094a59e19b4eaf0f6d70b15d72f5839a55d0bd82737c09e6112d5da  plugkit.wasm
+ce96f1060a97ad00a1fa970bc3991dbc86cae454d55e83db60ded39ad3da91bc  plugkit.wasm

package/gm-plugkit/bootstrap.js

@@ -564,12 +564,6 @@ function discoverBundledSkillsAndSourcesLocal() {
   return found;
 }
 
-// Walks a (decompressed) POSIX tar stream's fixed 512-byte headers, yielding
-// each entry's name. `git archive --remote` was tried first and does NOT
-// work against GitHub (its git server returns HTTP 422 for upload-archive,
-// a documented GitHub limitation) -- codeload.github.com's tarball endpoint
-// is the real plain-HTTPS, non-api.github.com path that actually serves
-// repo content.
 function* tarEntryNames(buf) {
   let offset = 0;
   while (offset + 512 <= buf.length) {
@@ -596,12 +590,6 @@ async function discoverRemoteSkillNamesViaCodeload(timeoutMs) {
   return Array.from(names);
 }
 
-// The GitHub Contents API this normally uses already fails soft (caller
-// falls back to bundled local skills), but a fully API-scope-restricted
-// environment (a corporate proxy or org policy blocking api.github.com
-// specifically) loses fresh remote skill discovery entirely even though
-// the same repo is reachable over codeload.github.com's plain-HTTPS
-// tarball endpoint -- a different host, no API token or REST surface.
 async function discoverRemoteSkillNames(timeoutMs) {
   const url = `https://api.github.com/repos/${SKILL_MD_REMOTE_REPO}/contents/skills?ref=${SKILL_MD_REMOTE_BRANCH}`;
   try {
@@ -734,11 +722,6 @@ function compareDottedSemverAscending(a, b) {
   return 0;
 }
 
-// Fallback when the Releases-list API is unreachable: git ls-remote can
-// see every tag over plain git protocol without touching api.github.com,
-// but cannot see release ASSETS -- so a tag it finds is verified against
-// a HEAD probe on the raw release-download URL for plugkit.wasm before
-// being trusted, matching the API path's own hasPlugkitWasm check.
 async function resolveLatestRemoteVersionViaGit(timeoutMs) {
   const { execFileSync } = require('child_process');
   const out = execFileSync('git', ['ls-remote', '--tags', '--refs', 'https://github.com/AnEntrypoint/plugkit-bin.git'], {
@@ -945,12 +928,6 @@ function latestAgentplugRunnerTagViaGitLsRemote() {
   return tags[tags.length - 1];
 }
 
-// The sole loader has to exist before startSpoolDaemon can do anything --
-// a project that never ran `gm-skill install` (or whose install predates
-// agentplug-runner) hit a hard "not installed" failure here even though
-// the sha256-verified download this needs is the same one bin/install.js
-// already performs. Attempting it inline means a bare `spool` boot recovers
-// on its own instead of requiring a separate manual install step first.
 async function ensureAgentplugRunnerInstalled(destPath) {
   const assetName = agentplugRunnerAssetName();
   if (!assetName) return false;

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.2472",
+  "version": "2.0.2474",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform wasm, verifies SHA256, and launches agentplug-runner (the native wasm host) as the spool watcher daemon.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-ba510ea617f94976ae3d0e0626b63fed40f7cf348a2498507c52bf3e52257eee  plugkit-slim.wasm
+047e1215b8ce5220c9ba88df9f6a6659aca33cf78b18457a3bac3984157f5ded  plugkit-slim.wasm

package/gm-plugkit/plugkit.version

@@ -1 +1 @@
-0.1.1183
+0.1.1184

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.2472",
+  "version": "2.0.2474",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.1183"
+  "plugkitVersion": "0.1.1184"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.2472",
+  "version": "2.0.2474",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",