wkappbot-code 0.3.2 → 0.3.3

package/README.md

@@ -31,7 +31,7 @@ Get the CLI by one of three roads, then run `wkappbot-code install` once:
 ```bash
 npm i -g https://kiexpert.github.io/wkappbot-kih/wkappbot-code/wkappbot-code.tgz   # web: the scrub-gated tgz the SDK workflow ships daily (SHA256SUMS + version.json beside it)
 npm i -g wkappbot-code                                                        # registry (published only when the SDK has NPM_TOKEN)
-npm pack ./wkappbot-code && npm i -g ./wkappbot-code-0.3.2.tgz                  # from a checkout
+npm pack ./wkappbot-code && npm i -g ./wkappbot-code-0.3.3.tgz                  # from a checkout
 
 wkappbot-code install      # every part below, idempotent
 wkappbot-code doctor       # one PASS/WARN/FAIL/SKIP row per part

package/bin/wkappbot-code.js

@@ -44,6 +44,16 @@ const OWNER_LOGIN = "kiexpert";
 const HARNESS_BASE = () => (process.env.WK_HARNESS_BASE || "https://kiexpert.github.io/wkappbot-kih/webvm/x64/harness").replace(/\/+$/, "");
 const HARNESS_DIR = () => process.env.WK_HARNESS_DIR || join(homedir(), ".wk-harness");
 const IS_WIN = process.platform === "win32";
+// Windows: the sh and tar this CLI starts are Git Bash's (MSYS). They read "D:\a\x" as host "D" plus a remote path
+// ("tar: Cannot connect to C: resolve failed", SDK all-OS QA 2026-11-06), so a path handed to them is the MSYS form /d/a/x.
+const shPath = (p) => (IS_WIN && /^[A-Za-z]:[\\/]/.test(p) ? "/" + p[0].toLowerCase() + p.slice(2).replace(/\\/g, "/") : p);
+let _gnuTar = null;
+const tarArgs = (tgz, dir) => {
+  if (!IS_WIN) return ["-xzf", tgz, "-C", dir];
+  if (_gnuTar === null) _gnuTar = /GNU tar/.test(spawnSync("tar", ["--version"], { encoding: "utf8" }).stdout || "");
+  // GNU (MSYS) tar takes MSYS paths; Windows' own bsdtar takes D:/ paths.
+  return _gnuTar ? ["--force-local", "-xzf", shPath(tgz), "-C", shPath(dir)] : ["-xzf", tgz.replace(/\\/g, "/"), "-C", dir.replace(/\\/g, "/")];
+};
 
 function parseArgs(argv) {
   const o = { cmd: argv[0] || "help", npm: true, bin: true, harness: true, skills: true, webHarness: false,
@@ -141,7 +151,7 @@ function installBin(o) {
   const co = kihCheckout(o);
   const script = co && existsSync(join(co, "tools", "wk-bin-acquire.sh")) ? join(co, "tools", "wk-bin-acquire.sh") : join(PKG_DIR, "lib", "wk-bin-acquire.sh");
   log("bin: bash " + script + " acquire --dest " + dest);
-  const r = spawnSync("bash", [script, "acquire", "--dest", dest], { encoding: "utf8", env: process.env });
+  const r = spawnSync("bash", [shPath(script), "acquire", "--dest", shPath(dest)], { encoding: "utf8", env: process.env });
   for (const line of ((r.stdout || "") + (r.stderr || "")).split("\n").filter(Boolean)) log("  " + line);
   if (r.status !== 0) return { ok: false, dest, note: "wk-bin-acquire rc " + r.status };
   // Put `wkappbot` on PATH beside wkappbot-code itself, unless that name is already taken by someone else.
@@ -180,8 +190,8 @@ function installHarness(o) {
     const err = curl(HARNESS_BASE() + "/install.sh", join(tmp, "install.sh"));
     if (err) return { ok: false, mode: "web", dir: HARNESS_DIR(), note: err };
     log("harness: sh " + HARNESS_BASE() + "/install.sh  (to " + HARNESS_DIR() + ")");
-    const r = spawnSync("sh", [join(tmp, "install.sh")], { encoding: "utf8",
-      env: { ...process.env, WK_HARNESS_BASE: HARNESS_BASE(), WK_HARNESS_DIR: HARNESS_DIR() } });
+    const r = spawnSync("sh", [shPath(join(tmp, "install.sh"))], { encoding: "utf8",
+      env: { ...process.env, WK_HARNESS_BASE: HARNESS_BASE(), WK_HARNESS_DIR: shPath(HARNESS_DIR()) } });
     for (const line of ((r.stdout || "") + (r.stderr || "")).split("\n").filter(Boolean)) log("  " + line);
     const ok = r.status === 0 && hasHook(HARNESS_DIR());
     return { ok, mode: "web", dir: HARNESS_DIR(), note: ok ? "" : "harness install rc " + r.status };
@@ -252,7 +262,7 @@ function installSkills(o, dest) {
       const got = sha256File(tgz);
       if (got !== want) return { ok: false, hq, note: "sha256 MISMATCH for wk-harness-min.tar.gz: expected " + want + ", got " + got + "; no skill was copied" };
       mkdirSync(join(tmp, "x"));
-      const r = spawnSync("tar", ["-xzf", tgz, "-C", join(tmp, "x")], { encoding: "utf8" });
+      const r = spawnSync("tar", tarArgs(tgz, join(tmp, "x")), { encoding: "utf8" });
       if (r.status !== 0 || !existsSync(join(tmp, "x", "skills"))) return { ok: false, hq, note: "unpack failed or no skills/ in the tarball: " + (r.stderr || "") };
       src = join(tmp, "x", "skills"); from = base + "/wk-harness-min.tar.gz (sha256 ok, version " + (vj.version || "?") + ")";
     }
@@ -335,7 +345,7 @@ function install(o) {
   // A user's own absolute global core.hooksPath is kept (the script WARNs). Skipped with --no-harness.
   st.pushGate = { skipped: true };
   if (o.harness && kih && existsSync(join(kih, "tools", "wk-global-hooks.sh"))) {
-    const r = spawnSync("bash", [join(kih, "tools", "wk-global-hooks.sh"), "install", "--gate-dir", join(kih, ".githooks", "lib")], { encoding: "utf8" });
+    const r = spawnSync("bash", [shPath(join(kih, "tools", "wk-global-hooks.sh")), "install", "--gate-dir", shPath(join(kih, ".githooks", "lib"))], { encoding: "utf8" });
     for (const line of ((r.stdout || "") + (r.stderr || "")).split("\n").filter(Boolean)) log("push-gate: " + line);
     st.pushGate = { ok: r.status === 0, kih };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wkappbot-code",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "wkappbot-code -- Wisdom Kernel: the pinned OpenCode bridge plus the reflex harness plugin, the wkappbot core, the web harness and the latest public skills in one install",
   "type": "module",
   "bin": {