wkappbot-code 0.3.13 → 0.3.16

package/bin/wkappbot-code.js

@@ -236,7 +236,7 @@ function isSymlink(p) { try { return lstatSync(p).isSymbolicLink(); } catch { re
 
 // ---- part: harness --------------------------------------------------------------------------------
 function curl(url, out) {
-  const r = spawnSync("curl", ["-fsSL", "-m", "300", url, "-o", out], { encoding: "utf8" });
+  const r = spawnSync("curl", ["-fsSL", "--retry", "4", "-m", "300", url, "-o", out], { encoding: "utf8" });
   return r.status === 0 ? "" : ("curl " + url + " rc " + r.status + " " + (r.stderr || "").trim());
 }
 function installHarness(o) {

package/lib/update.js

@@ -23,7 +23,7 @@ export function cmpVer(a, b) {
 }
 
 function curl(url, out, secs) {
-  const r = spawnSync("curl", ["-fsSL", "-m", String(secs), url, "-o", out], { encoding: "utf8" });
+  const r = spawnSync("curl", ["-fsSL", "--retry", "4", "-m", String(secs), url, "-o", out], { encoding: "utf8" });
   return r.status === 0 ? "" : "curl " + url + " rc " + r.status + (r.stderr ? " " + r.stderr.trim() : "");
 }
 const rel = (base, p) => { try { return new URL(p, base).href; } catch { return p; } };

package/lib/wk-bin-acquire.sh

@@ -111,8 +111,8 @@ sdk_fetch_asset() {
   command -v wk_stopwatch_lap >/dev/null 2>&1 && wk_stopwatch_lap "sdk_fetch_asset" || true
   local asset="$1" dir="$2" base want got
   base="${WK_BIN_BASE:-https://github.com/kiexpert/wkappbot-sdk/releases/latest/download}"
-  curl -fsSL -m "${WK_BIN_TIMEOUT:-120}" "$base/$asset" -o "$dir/$asset" || return 3
-  curl -fsSL -m "${WK_BIN_TIMEOUT:-120}" "$base/SHA256SUMS" -o "$dir/SHA256SUMS" || return 3
+  curl -fsSL --retry 4 -m "${WK_BIN_TIMEOUT:-120}" "$base/$asset" -o "$dir/$asset" || return 3
+  curl -fsSL --retry 4 -m "${WK_BIN_TIMEOUT:-120}" "$base/SHA256SUMS" -o "$dir/SHA256SUMS" || return 3
   want="$(awk -v f="$asset" '{ n = $2; sub(/^\*/, "", n); if (n == f) { print $1; exit } }' "$dir/SHA256SUMS")"
   [ -n "$want" ] || return 4
   got="$(sha_of "$dir/$asset" || true)"

package/lib/wk-hook.js

@@ -150,13 +150,19 @@ export function hasVerdict(r) {
 }
 
 // A stdout deny JSON names its own reason; stderr then may hold only warn lines (wkharness-run.sh wk_pre_emit).
+// THE DOOR LINE RIDES EITHER STREAM (owner 2026-11-09: the emergency-edit door must open on every road): the lite floor
+// prints "[emergency-edit] GRANTED: ..." on stderr, the JS hub run through wkharness-run.sh --js-only prints it on stdout,
+// and a stdout JSON reason used to drop stderr's line. Every door line of either stream is kept beside the reason.
 export function refusalReason(r) {
+  const so = String(r.stdout || ""), se = String(r.stderr || "").trim();
+  const door = (so + "\n" + se).split(/\r?\n/).filter((l) => l.startsWith("[emergency-edit]"));
+  const withDoor = (why) => [why, ...door.filter((l) => !why.includes(l))].join("\n");
   try {
-    const j = JSON.parse(r.stdout);
+    const j = JSON.parse(so);
     const why = (j.hookSpecificOutput && j.hookSpecificOutput.permissionDecisionReason) || j.reason;
-    if (why) return why;
+    if (why) return withDoor(why);
   } catch {}
-  return (r.stderr || "").trim() || (r.stdout || "").trim() || "refused by the kih harness";
+  return withDoor(se || so.trim() || "refused by the kih harness");
 }
 
 // ---- fail-closed risk classes ----------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wkappbot-code",
-  "version": "0.3.13",
+  "version": "0.3.16",
   "description": "wkappbot-code -- Wisdom Kernel: the pinned OpenCode bridge plus the reflex harness plugin, the wkappbot core, the web harness and the latest public skills in one install",
   "type": "module",
   "scripts": {