gm-skill 2.0.1409 → 2.0.1411

package/AGENTS.md

@@ -34,7 +34,9 @@ Agents dispatch verbs by writing to `.gm/exec-spool/in/<verb>/<N>.txt` (request
 
 **Orchestrator verbs**: `instruction`, `transition`, `phase-status`, `mutable-resolve`, `memorize-fire`, `residual-scan`, `auto-recall`.
 
-**Wasm-direct verbs**: `fs_read`, `fs_write`, `fs_stat`, `fs_readdir`, `kv_get`, `kv_put`, `kv_query`, `fetch`, `exec_js`, `env_get`, `recall`, `codesearch`, `memorize`, `health`, `filter`, `git_status`, `branch_status`, `git_push`.
+**Wasm-direct verbs**: `fs_read`, `fs_write`, `fs_stat`, `fs_readdir`, `kv_get`, `kv_put`, `kv_query`, `fetch`, `exec_js`, `env_get`, `recall`, `codesearch`, `memorize`, `memorize-prune`, `health`, `filter`, `git_status`, `branch_status`, `git_push`.
+
+**memorize-prune verb**: deletes bad/superseded memories — pruning bad memory matters more than preserving good memory, since a wrong recall hit is worse than a miss. Two modes: explicit `{key}`/`{keys:[...]}` deletes exactly those mem keys (text + `-vec` embedding sibling) via the `host_kv_delete` host import; `{query}` returns review-only candidates (vector_top_k hits with keys) for the agent to judge, then re-dispatch with the stale `{keys:[...]}`. Query mode never auto-deletes by similarity — a blind similarity-delete is itself a bad-memory generator; the destructive step stays under agent judgment. Emits `memory.pruned` per deletion.
 
 **git verbs**: `git_status` returns `{dirty, modified, untracked, deleted, staged}` from `git status --porcelain`. `branch_status` returns `{branch, ahead, behind, remote}` — the `remote-pushed` witness. `git_push` is the ONLY admissible push surface — it gates on `git_porcelain()` non-empty (refuses dirty), emits `deviation.push-dirty` on attempt, and shells the push only when clean. A raw `git push` via Bash bypasses the gate and is itself a deviation; ccsniff `--git-discipline` flags it.
 

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1409",
+  "version": "2.0.1411",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-wasm-wrapper.js

@@ -1505,6 +1505,26 @@ function makeHostFunctions(instanceRef) {
       }
     },
 
+    host_kv_delete: (nsPtr, nsLen, keyPtr, keyLen) => {
+      try {
+        const ns = readWasmStr(instanceRef.value, nsPtr, nsLen);
+        const key = readWasmStr(instanceRef.value, keyPtr, keyLen);
+        if (!ns || !key) return 0;
+        let removed = 0;
+        // Delete the key from the namespace AND its -vec sibling across every enabled discipline dir,
+        // so a pruned memory leaves no orphan embedding that host_vec_search would still surface.
+        for (const baseNs of [ns, `${ns}-vec`]) {
+          for (const dir of kvNamespaceDirs(baseNs)) {
+            const fp = path.join(dir, safeName(key) + '.json');
+            try { if (fs.existsSync(fp)) { fs.rmSync(fp, { force: true }); removed++; } } catch (_) {}
+          }
+        }
+        return removed > 0 ? 1 : 0;
+      } catch (e) {
+        return 0;
+      }
+    },
+
     host_kv_query: (nsPtr, nsLen, qPtr, qLen) => {
       try {
         const ns = readWasmStr(instanceRef.value, nsPtr, nsLen);
@@ -2862,7 +2882,6 @@ async function runSpoolWatcher(instance, spoolDir) {
   const UPDATE_CHECK_SHARED_CACHE = path.join(GM_TOOLS_ROOT, '.update-check-cache.json');
   const UPDATE_CHECK_CACHE_TTL_MS = 4 * 60 * 1000;
   let _lastKnownDrift = null;
-  let _autoUpdateArmedFor = null;
   function readSharedUpdateCache() {
     try {
       const content = fs.readFileSync(UPDATE_CHECK_SHARED_CACHE, 'utf-8');
@@ -2964,18 +2983,9 @@ async function runSpoolWatcher(instance, spoolDir) {
       logEvent('plugkit', 'update.available', { installed, latest });
       _lastKnownDrift = latest;
     }
-    // Auto-update from the shared-cache path too, so any watcher (not only the one that hit the
-    // network) arms the self-respawn. The cache entry is only written after a 200 from
-    // /releases/latest, and the respawn's ensureReady re-verifies the wasm asset before downloading,
-    // so a bump here is safe even without per-asset confirmation in this branch.
-    if (isDrift && _autoUpdateArmedFor !== latest) {
-      try {
-        _autoUpdateArmedFor = latest;
-        const verFile = path.join(GM_TOOLS_ROOT, 'plugkit.version');
-        fs.writeFileSync(verFile, latest + '\n');
-        logEvent('plugkit', 'update.auto-armed', { installed, latest, source: 'shared-cache', action: 'bumped-version-file-for-drift-respawn' });
-      } catch (_) {}
-    }
+    // NOTE: no version-file bump here either — see the network-path comment above. Bumping the version
+    // file ahead of a verified binary download poisons installedVersionAtTools() and causes an infinite
+    // drift-respawn thrash. Auto-update is notify-only until a sha-verified force-download path exists.
   }
   function checkForUpdate() {
     const installed = resolveVersion(instance);
@@ -3018,7 +3028,7 @@ async function runSpoolWatcher(instance, spoolDir) {
             installed,
             latest,
             checked_at_ms: Date.now(),
-            instruction: 'plugkit is out of date. The watcher auto-updates: on the next drift-check tick it bumps the disk version file and self-respawns into the fresh wasm. No manual action needed.',
+            instruction: 'plugkit is out of date. Update with: bun x gm-plugkit@latest --kill-stale-watchers; bun x gm-plugkit@latest spool. A fresh boot downloads the new wasm and respawns; an in-place running watcher does not self-download.',
             update_url,
           }, null, 2));
           console.log(`[update] available: installed=${installed} latest=${latest} → wrote ${UPDATE_AVAILABLE_PATH}`);
@@ -3026,27 +3036,14 @@ async function runSpoolWatcher(instance, spoolDir) {
             logEvent('plugkit', 'update.available', { installed, latest, update_url });
             _lastKnownDrift = latest;
           }
-          // Auto-update: a running healthy watcher otherwise never self-updates — checkForUpdate
-          // only NOTIFIED, and the version-drift self-respawn compares instance-vs-disk-file, but
-          // the disk file only moved on a fresh boot that never ran while the watcher held the lock.
-          // Close the loop: once the release is fully published (wasm asset present, confirmed by
-          // this /releases/latest response carrying it), bump the disk version file to `latest`.
-          // The existing drift-check tick then sees instance != file and self-respawns; the respawn's
-          // ensureReady downloads the wasm matching the bumped version file. Guard against partial
-          // releases and respawn thrash: require the wasm asset, and write the file at most once per
-          // detected version (dedupe via _autoUpdateArmedFor).
-          try {
-            const hasWasmAsset = Array.isArray(rel.assets) && rel.assets.some(a => a && a.name === 'plugkit.wasm');
-            if (hasWasmAsset && latest !== installed && _autoUpdateArmedFor !== latest) {
-              _autoUpdateArmedFor = latest;
-              const verFile = path.join(GM_TOOLS_ROOT, 'plugkit.version');
-              fs.writeFileSync(verFile, latest + '\n');
-              logEvent('plugkit', 'update.auto-armed', { installed, latest, action: 'bumped-version-file-for-drift-respawn' });
-              console.log(`[update] auto-armed: bumped ${verFile} ${installed} -> ${latest}; drift-check will self-respawn into fresh wasm`);
-            }
-          } catch (e) {
-            logUpdateCheckError({ error: `auto-arm failed: ${String(e && e.message || e)}` });
-          }
+          // NOTE: do NOT bump the disk version file here to "arm" a drift-respawn. installedVersionAtTools()
+          // reads that file as the source of truth for the installed version; bumping it ahead of the actual
+          // wasm download makes ensureReady compute versionDrift=false (file==target) and isReady()=true, so it
+          // returns already-ready WITHOUT downloading the new binary — while the running instance is still the
+          // old version. The drift-check then sees instance(old) != file(new) forever and self-respawns in an
+          // infinite loop, each respawn reloading the same old wasm. The version file must only advance AFTER
+          // a verified binary download (bootstrap's job). Auto-update stays notify-only until ensureReady gains
+          // a sha-verified force-download path; see PRD watcher-autoupdate-thrash-fix.
         } catch (e) {
           logUpdateCheckError({ error: String(e && e.message || e) });
         }

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1409",
+  "version": "2.0.1411",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1409",
+  "version": "2.0.1411",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",