gm-skill 2.0.2336 → 2.0.2338

package/AGENTS.md

@@ -50,7 +50,7 @@ Dispatch = Write `.gm/exec-spool/in/<verb>/<N>.txt`, Read `.gm/exec-spool/out/<v
 - **Wasm-direct verbs**: fs/kv/exec/fetch/env, recall, codesearch, memorize(+prune), health, filter, full git verb family. Enumeration in the recall store (`recall: wasm-direct plugkit verbs full list`).
 - **Host-native verb**: `background-convert` (`{verb, task}`) detaches an already-in-flight dispatch so the daemon worker stops waiting on it -- agent-initiated only, never routed to gm.wasm. Detail: `.gm/daemon-config-reference.md`.
 - **memorize-prune**: prune bad/superseded memories; two-mode spec (key-remove vs query-review) in the recall store (`recall: memorize-prune verb two-mode spec`).
-- **git verbs**: git is a first-class spool surface, never a shell command; `git_finalize {message}` is the bundled COMPLETE-phase push surface, `git_push` the only admissible raw push (porcelain-gated, rebase-retry). A git-dominant `bash`/`powershell` body is gated (`deviation.bash-git-bypass`). Per-verb shapes + host_git `.exe` resolution in the recall store (`recall: git verbs rs-plugkit spool surface`).
+- **git verbs**: git is a first-class spool surface, never a shell command; `git_finalize {message}` is the bundled COMPLETE-phase push surface, `git_push` the only admissible raw push (porcelain-gated, rebase-retry). A git-dominant `bash`/`powershell` body is gated (`deviation.bash-git-bypass`). Per-verb shapes + host_git `.exe` resolution in the recall store (`recall: git verbs rs-plugkit spool surface`). `git_finalize` also runs `ci-status` inline right after push and auto-writes `.gm/exec-spool/.ci-validated` on a green result -- no separate poll-then-marker dispatch needed. The `ci-validated-fresh` COMPLETE gate compares that marker's `head_sha` against current HEAD and names `ci-status` as its `next_dispatch` on denial.
 - **filter**: pure stdout -> compact-stdout transform, in-wasm. Spec + usage (pipe raw command output through it before context) in the recall store (`recall: filter verb rs-plugkit spool spec`).
 
 ## Documentation Policy

package/README.md

@@ -27,7 +27,7 @@ npx gm-skill install
 
 **The COMPLETE gate is code, not a prompt.** Nine conditions guard the last transition -- PRD closed, mutables resolved, worktree clean, residual scan fired, CI green against the current HEAD sha, browser witness coverage, submodules in sync, every claimed commit hash resolves against real git log, no hedge language in the diff. They are a `Vec<String>` on an edge in `fsm.rs`, evaluated in Rust. A failed gate refuses the transition. The agent cannot narrate its way to done.
 
-**A refused transition tells the agent what to do next.** Gate denials carry the recovery verb: `worktree-clean` returns `git_finalize`, `ci-validated-fresh` returns `exec_js`. You get an instruction, not an error.
+**A refused transition tells the agent what to do next.** Gate denials carry the recovery verb: `worktree-clean` returns `git_finalize`, `ci-validated-fresh` returns `ci-status`. You get an instruction, not an error.
 
 **Repeat the same failure and it stops you.** After the same denial fires repeatedly, the response stops restating the refusal and instructs the agent to record the stuck state and switch to a bounded-retry discipline. Loops end.
 

package/gm-plugkit/AGENTS.md

@@ -0,0 +1,43 @@
+# AGENTS.md
+
+`gm-plugkit` is the thin launcher-edge npm package (`npx gm-plugkit@latest spool` /
+`bun x gm-plugkit@latest spool`). It downloads the sha256-verified
+`plugkit.wasm`/`plugkit-slim.wasm` for the host platform, then re-execs into
+the staged `agentplug-runner` native binary at `~/.gm-tools/agentplug-runner`
+(`cli.js::tryDelegateToRunner`) and exits -- `agentplug-runner` is the sole
+spool loader; this package never loads the wasm itself.
+
+## Files
+
+- `cli.js` -- entry point, delegates to the staged runner
+- `bootstrap.js` / `bootstrap-shared.js` / `bootstrap-wasm-core.js` -- wasm
+  download, sha256 verification, version resolution
+- `index.js` -- programmatic entry point
+- `gm-log.js` / `gm-process.js` -- shared logging/process helpers
+- `plugkit.version` / `plugkit.sha256` / `plugkit-slim.wasm.sha256` -- pinned
+  version + sha sidecars, always re-verified against the freshly-resolved
+  remote release rather than trusted as a standing pin (see gm's own
+  `AGENTS.md`, cascade pin-toil design)
+
+## Runtime state, two separate directories
+
+`~/.gm-tools/` is this package's own launcher-edge install/staging directory
+(where the downloaded wasm and the staged `agentplug-runner` executable
+land). `~/.agentplug/` is `agentplug-runner`'s own runtime-state directory
+(daemon status, logs, plugin content hashes). Check
+`~/.agentplug/plugins/gm.version` for what is actually being served -- never
+`~/.gm-tools/` -- since the two directories track different things.
+
+## Code style
+
+Same discipline as gm's own `AGENTS.md` (parent repo): no comments unless
+the WHY is genuinely non-obvious, no synthetic test files or frameworks,
+no decorative Unicode/emoji, no UTF-8 BOM. Verification is a real
+`bun x gm-plugkit@latest spool` invocation against a live project, reading
+the actual `.gm/exec-spool/.status.json` it produces -- never a mock.
+
+## Pull requests
+
+No branches or PRs -- every change pushes straight to `main` (gm's own
+`AGENTS.md`, direct-push-to-main rule). This package ships as part of the
+same `publish.yml` run that ships `gm-skill` from the gm repo root.

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.2336",
+  "version": "2.0.2338",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform wasm, verifies SHA256, and launches agentplug-runner (the native wasm host) as the spool watcher daemon.",
   "main": "index.js",
   "bin": {

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.2336",
+  "version": "2.0.2338",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.2336",
+  "version": "2.0.2338",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",