gm-skill 2.0.1555 → 2.0.1556

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.1555",
+  "version": "2.0.1556",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.",
   "main": "index.js",
   "bin": {

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1555",
+  "version": "2.0.1556",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/lib/spool-dispatch.js

@@ -230,6 +230,23 @@ function isSpoolPollCommand(command) {
   return null;
 }
 
+const NATIVE_SEARCH_PATTERNS = [
+  /\bgrep\s+-(?!-)[A-Za-z]*[rR][A-Za-z]*(?:[=\s]|$)/,
+  /\bgrep\s+--recursive\b/,
+  /(?:^|[\n;&|]|&&)\s*rg\s+(?!-{1,2}(?:version|help)\b)/,
+];
+
+const NATIVE_SEARCH_REASON = 'native code/file/symbol search (grep -r / rg over the tree) is forbidden -- route the lookup through the codesearch verb so it hits the committed code-search index and stays in the spool ledger. Write .gm/exec-spool/in/codesearch/<N>.txt with {"query":"..."} and Read the response; use the recall verb for prior knowledge. A pipe-filter on command output (cmd | grep X) and grep on a single named file are fine; what this gate denies is searching the tree natively (grep -r/-R/-rl/-rn, ripgrep), which bypasses the index and is non-portable across harnesses.';
+
+function isNativeSearchCommand(command) {
+  if (!command) return null;
+  const stripped = stripHeredocsAndStringLiterals(command);
+  for (const re of NATIVE_SEARCH_PATTERNS) {
+    if (re.test(stripped)) return re.source;
+  }
+  return null;
+}
+
 const DEFER_MARKERS = [
   'next pass', 'next session', 'next turn',
   'defer to later', 'deferred to later', 'deferred for later',
@@ -377,6 +394,11 @@ function checkDispatchGates(sessionId, operation, extra) {
       logDeviation('deviation.spool-poll', { operation, pattern, command_excerpt: String(extra.command).slice(0, 200) });
       return { allowed: false, reason: SPOOL_POLL_REASON };
     }
+    const searchPattern = isNativeSearchCommand(extra.command);
+    if (searchPattern) {
+      logDeviation('deviation.native-search-bash', { operation, pattern: searchPattern, command_excerpt: String(extra.command).slice(0, 200) });
+      return { allowed: false, reason: NATIVE_SEARCH_REASON };
+    }
   }
 
   if (operation === 'mutable-resolve' && extra && (!extra.witness_evidence || String(extra.witness_evidence).trim() === '')) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1555",
+  "version": "2.0.1556",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",