wkappbot-code 0.3.5 → 0.3.7

package/README.md

@@ -36,7 +36,7 @@ wkappbot-code uninstall         # undo it (see below)
 wkappbot-code --version
 ```
 
-Other roads to the CLI: `npm i -g https://kiexpert.github.io/wkappbot-kih/wkappbot-code/wkappbot-code.tgz` (the scrub-gated tgz with `SHA256SUMS` and `version.json` beside it), or `npm pack ./wkappbot-code && npm i -g ./wkappbot-code-0.3.5.tgz` from a checkout (`bash wkappbot-code/install.sh` wraps the same `install`). The old command name `wk-appbot-code` (0.2.x) still works.
+Other roads to the CLI: `npm i -g https://kiexpert.github.io/wkappbot-kih/wkappbot-code/wkappbot-code.tgz` (the scrub-gated tgz with `SHA256SUMS` and `version.json` beside it), or `npm pack ./wkappbot-code && npm i -g ./wkappbot-code-0.3.6.tgz` from a checkout (`bash wkappbot-code/install.sh` wraps the same `install`). The old command name `wk-appbot-code` (0.2.x) still works.
 
 | part | what `install` lays down | skip with |
 |---|---|---|

package/bin/postinstall.js

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+// wkappbot-code postinstall -- npm runs this after `npm install wkappbot-code` (local or -g).
+// Owner order 2026-11-06: the Default cloud environment's setup script is `npm install wkappbot-code`, and new cloud
+// ROOTs still started with no hooks, because the package had no install script and npm only copied files.
+// CONTRACT: (a) ALWAYS exits 0 and returns within a moment -- the real work runs DETACHED and logs to
+// ~/.wkappbot-code/postinstall.log, then writes ~/.wkappbot-code/postinstall.done; (b) on a Claude Code cloud VM
+// (CLAUDE_CODE_REMOTE set, or a Linux HOME of /root that holds .claude) it runs `wkappbot-code install --no-npm`,
+// which lays the web harness, wires ~/.claude/settings.json (PreToolUse, Stop, UserPromptSubmit, SessionStart through
+// the lite harness), the global git hooks, the wkskill/wk-verify shims and the public skills, keeping every user
+// setting; idempotent: a done marker of the same version skips it; (c) on any other machine it only prints the one
+// command to run. WKAPPBOT_CODE_NO_POSTINSTALL=1 skips it (the selftest sets it so npm-installs in its cases never
+// touch the machine running it). WKAPPBOT_CODE_DEV_SEAT=1 adds --dev-seat (the full pwsh harness instead of lite);
+// WKAPPBOT_CODE_INSTALL_ARGS adds install flags. A user install takes the lite harness: on a stranger's cloud VM the
+// owner's full fleet harness (busy-fleet, letter gates, emergency-edit) would be the wrong default.
+// Spec: wkappbot skill read agent-harness-landscape-2026-howto
+import { spawn } from "node:child_process";
+import { existsSync, mkdirSync, openSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const CLI = join(HERE, "wkappbot-code.js");
+const STATE = join(homedir(), ".wkappbot-code");
+const LOG = join(STATE, "postinstall.log");
+const DONE = join(STATE, "postinstall.done");
+
+function version() {
+  try { return JSON.parse(readFileSync(join(HERE, "..", "package.json"), "utf8")).version || "?"; } catch { return "?"; }
+}
+export function isCloudVm(env = process.env, home = homedir(), platform = process.platform) {
+  if (env.CLAUDE_CODE_REMOTE) return true;
+  return platform === "linux" && home === "/root" && existsSync(join(home, ".claude"));
+}
+function stamp(msg) { try { mkdirSync(STATE, { recursive: true }); writeFileSync(LOG, new Date().toISOString() + " " + msg + "\n", { flag: "a" }); } catch {} }
+
+// --run: the detached worker. Runs the installer to the end, then records the done marker with its exit code.
+async function runWorker() {
+  const args = [CLI, "install", "--no-npm"];
+  if (process.env.WKAPPBOT_CODE_DEV_SEAT === "1") args.push("--dev-seat");
+  // extra install flags, e.g. "--no-bin --no-skills" (the selftest; a seat without the SDK release assets)
+  args.push(...String(process.env.WKAPPBOT_CODE_INSTALL_ARGS || "").split(/\s+/).filter((a) => /^--[a-z-]+$/.test(a)));
+  stamp("worker start: node " + args.join(" "));
+  const out = openSync(LOG, "a");
+  const rc = await new Promise((res) => {
+    const c = spawn(process.execPath, args, { stdio: ["ignore", out, out], env: { ...process.env, WKAPPBOT_CODE_NO_UPDATE_CHECK: "1" } });
+    c.on("error", () => res(-1));
+    c.on("close", (code) => res(code ?? -1));
+  });
+  try { writeFileSync(DONE, JSON.stringify({ version: version(), rc, at: new Date().toISOString() }) + "\n"); } catch {}
+  stamp("worker done rc " + rc);
+}
+
+function main() {
+  if (process.argv[2] === "--run") return runWorker().catch(() => {}).finally(() => process.exit(0));
+  if (process.env.WKAPPBOT_CODE_NO_POSTINSTALL === "1") return;
+  if (!isCloudVm()) {
+    console.log("[wkappbot-code] installed. To wire the harness and OpenCode on this machine run: npx wkappbot-code install   (then: wkappbot-code doctor)");
+    return;
+  }
+  try {
+    const d = JSON.parse(readFileSync(DONE, "utf8"));
+    if (d.version === version() && d.rc === 0) { console.log("[wkappbot-code] cloud VM: harness already wired by " + d.version + " (" + DONE + ")"); return; }
+  } catch {}
+  mkdirSync(STATE, { recursive: true });
+  const out = openSync(LOG, "a");
+  const c = spawn(process.execPath, [fileURLToPath(import.meta.url), "--run"], { detached: true, stdio: ["ignore", out, out], env: process.env });
+  c.unref();
+  console.log("[wkappbot-code] cloud VM detected: wiring the Claude Code harness in the background (log: " + LOG + ", done marker: " + DONE + ")");
+}
+
+try { main(); } catch (e) { try { stamp("postinstall error: " + e); } catch {} }

package/bin/wkappbot-code.js

@@ -567,7 +567,9 @@ function doctor(o) {
       if (!printed) why = "  skill read on-load rc " + r.status;
       rmSync(cwd, { recursive: true, force: true });
     } else why = "  (no core to read with)";
-    add("skills", n > 0 && printed, n + " skills in " + hq + (printed ? "; wkappbot skill read on-load prints" : why), !!(st.skills && !st.skills.skipped));
+    // Without a core (--no-bin, or win-x64 where no single core asset exists yet) the skills cannot be read back:
+    // that is a WARN about the missing core, not a FAIL of the skills that did install (SDK all-OS QA 2026-11-06).
+    add("skills", n > 0 && printed, n + " skills in " + hq + (printed ? "; wkappbot skill read on-load prints" : why), !!(st.skills && !st.skills.skipped) && !!core);
   }
   // push-gate: the global core.hooksPath runs the push-owner gate (directly, or through the global dispatcher).
   const ghp = globalHooksPath() || "";

package/lib/wk-hook.js

@@ -109,7 +109,10 @@ export function runHook(arm, payload, opts = {}) {
       const W = process.platform === "win32";
       const sp = (p) => (W && /^[A-Za-z]:[\\/]/.test(p) ? "/" + p[0].toLowerCase() + p.slice(2).replace(/\\/g, "/") : p);
       child = spawn("bash", [sp(hook), arm], {
-        env: { ...process.env, ...(W ? { HOME: sp(homedir()) } : {}), ...(kih ? { CLAUDE_PROJECT_DIR: sp(kih) } : {}) },
+        // The plugin's harness wins: wkharness-run.sh prefers WKHARNESS_KIH_DIR over CLAUDE_PROJECT_DIR, so an ambient
+        // WKHARNESS_KIH_DIR (a dev seat's shell profile, a CI job) sent every arm to ANOTHER tree, whose lite and ledger
+        // then ran or did not run (SDK QA 2026-11-06: x8 null|null|null on Linux and macOS). Both point at kihDir.
+        env: { ...process.env, ...(W ? { HOME: sp(homedir()) } : {}), ...(kih ? { CLAUDE_PROJECT_DIR: sp(kih), WKHARNESS_KIH_DIR: sp(kih) } : {}) },
         stdio: ["pipe", "pipe", "pipe"],
       });
     } catch (e) {

package/package.json

@@ -1,8 +1,11 @@
 {
   "name": "wkappbot-code",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "description": "wkappbot-code -- Wisdom Kernel: the pinned OpenCode bridge plus the reflex harness plugin, the wkappbot core, the web harness and the latest public skills in one install",
   "type": "module",
+  "scripts": {
+    "postinstall": "node bin/postinstall.js"
+  },
   "bin": {
     "wkappbot-code": "bin/wkappbot-code.js",
     "wk-appbot-code": "bin/wkappbot-code.js"