wkappbot-code 0.3.1 → 0.3.3

package/README.md

@@ -31,7 +31,7 @@ Get the CLI by one of three roads, then run `wkappbot-code install` once:
 ```bash
 npm i -g https://kiexpert.github.io/wkappbot-kih/wkappbot-code/wkappbot-code.tgz   # web: the scrub-gated tgz the SDK workflow ships daily (SHA256SUMS + version.json beside it)
 npm i -g wkappbot-code                                                        # registry (published only when the SDK has NPM_TOKEN)
-npm pack ./wkappbot-code && npm i -g ./wkappbot-code-0.3.1.tgz                  # from a checkout
+npm pack ./wkappbot-code && npm i -g ./wkappbot-code-0.3.3.tgz                  # from a checkout
 
 wkappbot-code install      # every part below, idempotent
 wkappbot-code doctor       # one PASS/WARN/FAIL/SKIP row per part

package/bin/wkappbot-code.js

@@ -44,6 +44,16 @@ const OWNER_LOGIN = "kiexpert";
 const HARNESS_BASE = () => (process.env.WK_HARNESS_BASE || "https://kiexpert.github.io/wkappbot-kih/webvm/x64/harness").replace(/\/+$/, "");
 const HARNESS_DIR = () => process.env.WK_HARNESS_DIR || join(homedir(), ".wk-harness");
 const IS_WIN = process.platform === "win32";
+// Windows: the sh and tar this CLI starts are Git Bash's (MSYS). They read "D:\a\x" as host "D" plus a remote path
+// ("tar: Cannot connect to C: resolve failed", SDK all-OS QA 2026-11-06), so a path handed to them is the MSYS form /d/a/x.
+const shPath = (p) => (IS_WIN && /^[A-Za-z]:[\\/]/.test(p) ? "/" + p[0].toLowerCase() + p.slice(2).replace(/\\/g, "/") : p);
+let _gnuTar = null;
+const tarArgs = (tgz, dir) => {
+  if (!IS_WIN) return ["-xzf", tgz, "-C", dir];
+  if (_gnuTar === null) _gnuTar = /GNU tar/.test(spawnSync("tar", ["--version"], { encoding: "utf8" }).stdout || "");
+  // GNU (MSYS) tar takes MSYS paths; Windows' own bsdtar takes D:/ paths.
+  return _gnuTar ? ["--force-local", "-xzf", shPath(tgz), "-C", shPath(dir)] : ["-xzf", tgz.replace(/\\/g, "/"), "-C", dir.replace(/\\/g, "/")];
+};
 
 function parseArgs(argv) {
   const o = { cmd: argv[0] || "help", npm: true, bin: true, harness: true, skills: true, webHarness: false,
@@ -92,7 +102,7 @@ function kihDir(o) {
 }
 
 function opencodeVersion() {
-  try { return execFileSync("opencode", ["--version"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim(); }
+  try { return execFileSync("opencode", ["--version"], { shell: process.platform === "win32",  encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim(); }
   catch { return ""; }
 }
 
@@ -141,7 +151,7 @@ function installBin(o) {
   const co = kihCheckout(o);
   const script = co && existsSync(join(co, "tools", "wk-bin-acquire.sh")) ? join(co, "tools", "wk-bin-acquire.sh") : join(PKG_DIR, "lib", "wk-bin-acquire.sh");
   log("bin: bash " + script + " acquire --dest " + dest);
-  const r = spawnSync("bash", [script, "acquire", "--dest", dest], { encoding: "utf8", env: process.env });
+  const r = spawnSync("bash", [shPath(script), "acquire", "--dest", shPath(dest)], { encoding: "utf8", env: process.env });
   for (const line of ((r.stdout || "") + (r.stderr || "")).split("\n").filter(Boolean)) log("  " + line);
   if (r.status !== 0) return { ok: false, dest, note: "wk-bin-acquire rc " + r.status };
   // Put `wkappbot` on PATH beside wkappbot-code itself, unless that name is already taken by someone else.
@@ -180,8 +190,8 @@ function installHarness(o) {
     const err = curl(HARNESS_BASE() + "/install.sh", join(tmp, "install.sh"));
     if (err) return { ok: false, mode: "web", dir: HARNESS_DIR(), note: err };
     log("harness: sh " + HARNESS_BASE() + "/install.sh  (to " + HARNESS_DIR() + ")");
-    const r = spawnSync("sh", [join(tmp, "install.sh")], { encoding: "utf8",
-      env: { ...process.env, WK_HARNESS_BASE: HARNESS_BASE(), WK_HARNESS_DIR: HARNESS_DIR() } });
+    const r = spawnSync("sh", [shPath(join(tmp, "install.sh"))], { encoding: "utf8",
+      env: { ...process.env, WK_HARNESS_BASE: HARNESS_BASE(), WK_HARNESS_DIR: shPath(HARNESS_DIR()) } });
     for (const line of ((r.stdout || "") + (r.stderr || "")).split("\n").filter(Boolean)) log("  " + line);
     const ok = r.status === 0 && hasHook(HARNESS_DIR());
     return { ok, mode: "web", dir: HARNESS_DIR(), note: ok ? "" : "harness install rc " + r.status };
@@ -252,7 +262,7 @@ function installSkills(o, dest) {
       const got = sha256File(tgz);
       if (got !== want) return { ok: false, hq, note: "sha256 MISMATCH for wk-harness-min.tar.gz: expected " + want + ", got " + got + "; no skill was copied" };
       mkdirSync(join(tmp, "x"));
-      const r = spawnSync("tar", ["-xzf", tgz, "-C", join(tmp, "x")], { encoding: "utf8" });
+      const r = spawnSync("tar", tarArgs(tgz, join(tmp, "x")), { encoding: "utf8" });
       if (r.status !== 0 || !existsSync(join(tmp, "x", "skills"))) return { ok: false, hq, note: "unpack failed or no skills/ in the tarball: " + (r.stderr || "") };
       src = join(tmp, "x", "skills"); from = base + "/wk-harness-min.tar.gz (sha256 ok, version " + (vj.version || "?") + ")";
     }
@@ -321,7 +331,7 @@ function install(o) {
     if (have === OPENCODE_VERSION) log("opencode " + have + " already installed");
     else {
       log("npm install -g opencode-ai@" + OPENCODE_VERSION + " (was: " + (have || "none") + ")");
-      execFileSync("npm", ["install", "-g", "opencode-ai@" + OPENCODE_VERSION, "--no-audit", "--no-fund"], { stdio: "inherit" });
+      execFileSync("npm", ["install", "-g", "opencode-ai@" + OPENCODE_VERSION, "--no-audit", "--no-fund"], { shell: process.platform === "win32",  stdio: "inherit" });
     }
   }
   const dest = binDest(o);
@@ -335,7 +345,7 @@ function install(o) {
   // A user's own absolute global core.hooksPath is kept (the script WARNs). Skipped with --no-harness.
   st.pushGate = { skipped: true };
   if (o.harness && kih && existsSync(join(kih, "tools", "wk-global-hooks.sh"))) {
-    const r = spawnSync("bash", [join(kih, "tools", "wk-global-hooks.sh"), "install", "--gate-dir", join(kih, ".githooks", "lib")], { encoding: "utf8" });
+    const r = spawnSync("bash", [shPath(join(kih, "tools", "wk-global-hooks.sh")), "install", "--gate-dir", shPath(join(kih, ".githooks", "lib"))], { encoding: "utf8" });
     for (const line of ((r.stdout || "") + (r.stderr || "")).split("\n").filter(Boolean)) log("push-gate: " + line);
     st.pushGate = { ok: r.status === 0, kih };
   }

package/lib/update.js

@@ -57,7 +57,7 @@ export function readRemote(secs = 20) {
 // WKAPPBOT_CODE_NO_REGISTRY=1 skips it (tests).
 export function readRegistry(secs = 15) {
   if (process.env.WKAPPBOT_CODE_NO_REGISTRY === "1") return { ok: false, err: "registry check off" };
-  const r = spawnSync("npm", ["view", "wkappbot-code", "version"], { encoding: "utf8", timeout: secs * 1000 });
+  const r = spawnSync("npm", ["view", "wkappbot-code", "version"], { shell: process.platform === "win32",  encoding: "utf8", timeout: secs * 1000 });
   const v = (r.stdout || "").trim().split("\n").pop();
   return r.status === 0 && /^\d+\.\d+\.\d+/.test(v) ? { ok: true, version: v, source: "registry" } : { ok: false, err: "npm view rc " + r.status };
 }
@@ -73,7 +73,7 @@ export function runUpdate({ current, cliPath, installArgs = [], log = console.lo
   if (r.source === "registry") {
     // npm verifies the registry tarball's own integrity hash.
     log("PASS update: " + r.version + " available (installed " + current + ") on the npm registry");
-    const g = spawnSync("npm", ["install", "-g", "wkappbot-code@" + r.version, "--no-audit", "--no-fund", "--silent"], { encoding: "utf8" });
+    const g = spawnSync("npm", ["install", "-g", "wkappbot-code@" + r.version, "--no-audit", "--no-fund", "--silent"], { shell: process.platform === "win32",  encoding: "utf8" });
     if (g.status !== 0) { log("FAIL update: npm install -g wkappbot-code@" + r.version + " rc " + g.status); return 1; }
     log("PASS update: npm install -g wkappbot-code " + r.version);
     return reinstall(cliPath, installArgs, log);
@@ -88,7 +88,7 @@ export function runUpdate({ current, cliPath, installArgs = [], log = console.lo
     const got = createHash("sha256").update(readFileSync(tgz)).digest("hex");
     if (got !== r.sha256) { log("FAIL update: sha256 MISMATCH (expected " + r.sha256 + ", got " + got + "); nothing changed"); return 1; }
     log("PASS update: sha256 ok " + got);
-    const n = spawnSync("npm", ["install", "-g", tgz, "--no-audit", "--no-fund", "--silent"], { encoding: "utf8" });
+    const n = spawnSync("npm", ["install", "-g", tgz, "--no-audit", "--no-fund", "--silent"], { shell: process.platform === "win32",  encoding: "utf8" });
     if (n.status !== 0) { log("FAIL update: npm install -g rc " + n.status + " " + (n.stderr || "").trim()); return 1; }
     log("PASS update: npm install -g wkappbot-code " + r.version);
   } finally { rmSync(tmp, { recursive: true, force: true }); }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wkappbot-code",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "wkappbot-code -- Wisdom Kernel: the pinned OpenCode bridge plus the reflex harness plugin, the wkappbot core, the web harness and the latest public skills in one install",
   "type": "module",
   "bin": {