Release Monk plugin v0.1.50

Generated from monk-agent 3635c276716aafc308a6893b0c881aa50af29400.

Author: actions-user

.antigravity-plugin/hooks/ensure-monk-agent.ps1

@@ -18,7 +18,15 @@ if (Get-Command bash -ErrorAction SilentlyContinue) { exit 0 }
 
 $Port = if ($env:MONK_AGENT_PORT) { $env:MONK_AGENT_PORT } else { "7419" }
 $AgentHost = if ($env:MONK_AGENT_HOST) { $env:MONK_AGENT_HOST } else { "127.0.0.1" }
-$HealthUrl = "http://${AgentHost}:$Port/.well-known/oauth-protected-resource"
+# IPv6 loopback hosts (e.g. ::1, an explicit MONK_AGENT_HOST override) must be
+# bracketed in a URL authority or the port separator is ambiguous.
+$UrlHost = if ($AgentHost.Contains(":") -and -not ($AgentHost.StartsWith("[") -and $AgentHost.EndsWith("]"))) {
+  "[$AgentHost]"
+} else {
+  $AgentHost
+}
+$HealthUrl = "http://${UrlHost}:$Port/.well-known/oauth-protected-resource"
+$HealthResource = "http://${UrlHost}:$Port/mcp"
 
 function Write-Json {
   param([object]$Object)
@@ -27,8 +35,12 @@ function Write-Json {
 
 function Test-AgentRunning {
   try {
-    $Response = Invoke-WebRequest -Uri $HealthUrl -UseBasicParsing -TimeoutSec 2
-    return $Response.Content -match '"resource"'
+    $Response = Invoke-WebRequest -Uri $HealthUrl -UseBasicParsing -TimeoutSec 2 -NoProxy
+    # Require the resource field to equal our own MCP endpoint, not merely be
+    # present — an unrelated service on the same port could otherwise be
+    # mistaken for monk-agent.
+    $Document = $Response.Content | ConvertFrom-Json -ErrorAction Stop
+    return [string]$Document.resource -ceq $HealthResource
   } catch {
     return $false
   }
@@ -70,10 +82,16 @@ if (-not (Test-Path $AgentPath)) {
 
 # Binary present but not running - start it directly (do not wait).
 $MonkHome = if ($env:MONK_AGENT_HOME) { $env:MONK_AGENT_HOME } else { Join-Path $HOME ".monk" }
-$LogDir = Join-Path $MonkHome "agent\launcher\logs"
-New-Item -ItemType Directory -Force -Path $LogDir | Out-Null
+$AgentDataDir = Join-Path $MonkHome "agent\launcher"
+$LogDir = Join-Path $AgentDataDir "logs"
+$RunDir = Join-Path $AgentDataDir "run"
+New-Item -ItemType Directory -Force -Path $LogDir, $RunDir | Out-Null
 $LogOut = Join-Path $LogDir "monk-agent.out.log"
 $LogErr = Join-Path $LogDir "monk-agent.err.log"
+# Write the PID file the official uninstaller looks for (Stop-ManagedAgent in
+# scripts/uninstall-monk-agent.ps1) so a companion this hook starts in the
+# background is found and stopped on uninstall instead of surviving it.
+$PidFile = Join-Path $RunDir "monk-agent.pid"
 
 $env:MONK_AUTH_URL = if ($env:MONK_AUTH_URL) { $env:MONK_AUTH_URL } else { "https://auth.monk.io" }
 $env:MONK_AGENT_AUTH_CLIENT_ID = if ($env:MONK_AGENT_AUTH_CLIENT_ID) { $env:MONK_AGENT_AUTH_CLIENT_ID } else { "UW84YWcJME3buMSLfqLX8IbBsYdNWi47" }
@@ -92,6 +110,10 @@ try {
 } catch {
 }
 
+if ($Process) {
+  Set-Content -Path $PidFile -Value $Process.Id -NoNewline:$false -ErrorAction SilentlyContinue
+}
+
 # Wait briefly for the agent to become reachable. If the process exits early or
 # the health endpoint never responds, report an attempted start with a pointer
 # to the logs instead of a false "has been started".

.antigravity-plugin/hooks/ensure-monk-agent.sh

@@ -11,18 +11,30 @@ set -eu
 
 port="${MONK_AGENT_PORT:-7419}"
 host="${MONK_AGENT_HOST:-127.0.0.1}"
-health_url="http://$host:$port/.well-known/oauth-protected-resource"
+# IPv6 loopback hosts (e.g. ::1, an explicit MONK_AGENT_HOST override) must be
+# bracketed in a URL authority or the port separator is ambiguous.
+url_host="$host"
+case "$url_host" in
+  \[*\]) ;;
+  *:*) url_host="[$url_host]" ;;
+esac
+health_url="http://$url_host:$port/.well-known/oauth-protected-resource"
+health_resource="http://$url_host:$port/mcp"
 
 is_running() {
+  response=""
   if command -v curl >/dev/null 2>&1; then
-    curl -fsS --max-time 2 "$health_url" 2>/dev/null | grep -q '"resource"'
-    return $?
+    response="$(curl -fsS --noproxy '*' --max-time 2 "$health_url" 2>/dev/null)" || return 1
+  elif command -v wget >/dev/null 2>&1; then
+    response="$(env -u http_proxy -u https_proxy -u all_proxy -u HTTP_PROXY -u HTTPS_PROXY -u ALL_PROXY wget -q -T 2 -O - "$health_url" 2>/dev/null)" || return 1
+  else
+    return 1
   fi
-  if command -v wget >/dev/null 2>&1; then
-    wget -q -T 2 -O - "$health_url" 2>/dev/null | grep -q '"resource"'
-    return $?
-  fi
-  return 1
+  # Require the resource field to equal our own MCP endpoint, not merely be
+  # present — an unrelated service on the same port could otherwise be
+  # mistaken for monk-agent.
+  resource="$(printf '%s\n' "$response" | sed -n 's/.*"resource"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n 1)"
+  [ "$resource" = "$health_resource" ]
 }
 
 # Emit an Antigravity injectSteps payload carrying a single ephemeral message.
@@ -63,9 +75,15 @@ if [ ! -x "$agent_path" ]; then
 fi
 
 # Binary present but not running — start it directly
-log_dir="${MONK_AGENT_HOME:-"$HOME/.monk"}/agent/launcher/logs"
-mkdir -p "$log_dir"
+agent_data_dir="${MONK_AGENT_HOME:-"$HOME/.monk"}/agent/launcher"
+log_dir="$agent_data_dir/logs"
+run_dir="$agent_data_dir/run"
+mkdir -p "$log_dir" "$run_dir"
 log_file="$log_dir/monk-agent.log"
+# Write the pid file the official uninstaller looks for (see stop_agent() in
+# scripts/uninstall-monk-agent.sh) so a companion this hook starts in the
+# background is found and stopped on uninstall instead of surviving it.
+pid_file="$run_dir/monk-agent.pid"
 
 export MONK_AUTH_URL="${MONK_AUTH_URL:-https://auth.monk.io}"
 export MONK_AGENT_AUTH_CLIENT_ID="${MONK_AGENT_AUTH_CLIENT_ID:-UW84YWcJME3buMSLfqLX8IbBsYdNWi47}"
@@ -80,6 +98,7 @@ else
   "$agent_path" serve --host "$host" --port "$port" >>"$log_file" 2>&1 </dev/null &
 fi
 agent_pid=$!
+printf '%s\n' "$agent_pid" >"$pid_file"
 
 # Wait briefly for the agent to become reachable. If the process exits early or
 # the health endpoint never responds, report an attempted start with a pointer

.antigravity-plugin/plugin.json

@@ -1,4 +1,4 @@
 {
   "name": "monk",
-  "version": "0.1.49"
+  "version": "0.1.50"
 }

.antigravity-plugin/scripts/ensure-monk-agent.ps1

@@ -115,7 +115,7 @@ Invoke-WebRequest -Uri $ChecksumUrl -OutFile $ChecksumTmp
 
 $Expected = ((Get-Content -Raw $ChecksumTmp).Trim() -split "\s+")[0].ToLowerInvariant()
 
-if ((Test-Path $Target) -and (Test-Path $ChecksumInstalled)) {
+if ((Test-Path $Target) -and (Get-Item $Target).Length -gt 0 -and (Test-Path $ChecksumInstalled)) {
   $Installed = ((Get-Content -Raw $ChecksumInstalled).Trim() -split "\s+")[0].ToLowerInvariant()
   if ($Installed -eq $Expected) {
     Remove-Item -Force $ChecksumTmp

.antigravity-plugin/scripts/ensure-monk-agent.sh

@@ -39,11 +39,29 @@ esac
 
 url="$download_base/$platform_path/$artifact"
 checksum_url="$url.sha256"
-archive_tmp="$install_dir/.monk-agent.tmp.tar.gz"
-checksum_tmp="$install_dir/.monk-agent.tmp.sha256"
-extract_dir="$install_dir/.monk-agent.extract"
+archive_tmp="$install_dir/.monk-agent.tmp.$$.tar.gz"
+checksum_tmp="$install_dir/.monk-agent.tmp.$$.sha256"
+extract_dir="$install_dir/.monk-agent.extract.$$"
+lock_file="$install_dir/.monk-agent.lock"
 mkdir -p "$install_dir"
 
+cleanup() {
+  rm -rf "$extract_dir" "$archive_tmp" "$checksum_tmp"
+}
+trap cleanup EXIT
+
+# Serialize concurrent installs so they don't race on the shared install dir.
+# flock is standard on Linux; macOS lacks it by default, so skip locking there
+# rather than fail -- per-PID scratch paths below still keep each invocation's
+# download/extract isolated even without the lock.
+if command -v flock >/dev/null 2>&1; then
+  exec 3>"$lock_file"
+  if ! flock -n 3; then
+    echo "Another monk-agent install is in progress; waiting..." >&2
+    flock 3
+  fi
+fi
+
 if [ "$auto_update" = "0" ] || [ "$auto_update" = "false" ]; then
   if command -v monk-agent >/dev/null 2>&1; then
     command -v monk-agent
@@ -66,7 +84,7 @@ fi
 
 expected="$(awk '{print $1}' "$checksum_tmp")"
 
-if [ -x "$target" ] && [ -f "$checksum_installed" ]; then
+if [ -x "$target" ] && [ -s "$target" ] && [ -f "$checksum_installed" ]; then
   installed="$(awk '{print $1}' "$checksum_installed")"
   if [ "$installed" = "$expected" ]; then
     rm -f "$checksum_tmp"
@@ -102,5 +120,4 @@ tar -xzf "$archive_tmp" -C "$extract_dir"
 chmod 0755 "$extract_dir/monk-agent"
 mv "$extract_dir/monk-agent" "$target"
 printf '%s  %s\n' "$expected" "$artifact" >"$checksum_installed"
-rm -rf "$extract_dir" "$archive_tmp" "$checksum_tmp"
 printf '%s\n' "$target"

.antigravity-plugin/scripts/plugin-version.ps1

@@ -3,4 +3,4 @@
 # in telemetry (MONK_PLUGIN_VERSION). Sets the process env var so the value both
 # is readable here and is inherited by the spawned agent — the PowerShell
 # counterpart of plugin-version.sh.
-$env:MONK_PLUGIN_VERSION = "0.1.49"
+$env:MONK_PLUGIN_VERSION = "0.1.50"

.antigravity-plugin/scripts/plugin-version.sh

@@ -1,4 +1,4 @@
 #!/bin/sh
 # Generated at plugin render time. Sourced by start-monk-agent.sh so the agent
 # can report the real plugin version in telemetry (MONK_PLUGIN_VERSION).
-MONK_PLUGIN_VERSION="0.1.49"
+MONK_PLUGIN_VERSION="0.1.50"

.antigravity-plugin/scripts/run-powershell.cmd

@@ -1,14 +1,30 @@
+:; exit 0
 @echo off
+rem The first line is a POSIX guard, not decoration. To cmd.exe it is a label -
+rem skipped, and never echoed, since label lines are not echoed even with ECHO ON
+rem - while /bin/sh reads it as a no-op followed by "exit 0". It is needed because
+rem Claude Code runs EVERY hook entry in a hooks.json array on every platform: it
+rem has no commandWindows support at all, verified against the 2.1.220 binary, so
+rem the Windows entry - this shim - is also spawned on macOS and Linux. Before the
+rem guard, /bin/sh there failed with 126 "Permission denied" on a non-executable
+rem .cmd and Claude Code printed a "PreToolUse:Bash hook error" banner on every
+rem single Bash tool call. The shim now ships executable, so sh runs it as a
+rem script and it exits 0 in silence; the sibling .sh hook entry does the real
+rem work on those platforms. Keep the rest of this file sh-parseable as well - no
+rem parentheses, no backticks, no unbalanced quotes - so a shell that reads ahead
+rem past the exit cannot trip over the batch body. plugin/src/check.ts enforces
+rem the guard line, the executable bit, and sh -n. ENG-441 follow-up.
+rem
 rem ENG-441 shim: launch Windows PowerShell from an absolute, OS-controlled path.
 rem
-rem Host hook runners do NOT reliably expand %SystemRoot% (or ${SystemRoot} /
-rem $SystemRoot) inside the hook JSON command string - Claude Code, verified,
-rem leaves it literal - so an inline "%SystemRoot%\...\powershell.exe" fails to
-rem resolve and the hook silently no-ops. This .cmd is instead executed by
-rem cmd.exe, where %SystemRoot% DOES expand to a non-writable location, so the pin
-rem stays correct AND robust to a non-standard system root. A bare `powershell.exe`
-rem would be resolved via the current directory before PATH, letting a planted
-rem binary hijack the hook; an absolute path defeats that.
+rem Host hook runners do NOT reliably expand %SystemRoot% - or the shell-style
+rem SystemRoot variants - inside the hook JSON command string. Claude Code,
+rem verified, leaves it literal, so an inline "%SystemRoot%\...\powershell.exe"
+rem fails to resolve and the hook silently no-ops. This .cmd is instead executed
+rem by cmd.exe, where %SystemRoot% DOES expand to a non-writable location, so the
+rem pin stays correct AND robust to a non-standard system root. A bare
+rem powershell.exe would be resolved via the current directory before PATH,
+rem letting a planted binary hijack the hook; an absolute path defeats that.
 rem
 rem The first argument is the .ps1 to run; any remaining arguments are forwarded.
 "%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File %*