gm-skill 2.0.2563 → 2.0.2565

package/AGENTS.md

@@ -47,9 +47,9 @@ Wasm host-import link-module rule (`#[link(wasm_import_module="env")]` on every
 Dispatch = Write `.gm/exec-spool/in/<verb>/<N>.txt`, Read `.gm/exec-spool/out/<verb>-<N>.json` (nested) or `out/<N>.json` (root). `<N>` is session-id-prefixed (`<session_id>-<local-counter>`), never a bare small integer -- the shared daemon claims and answers in-files by the literal `(verb, N)` pair with no per-session partition, so unprefixed sequential ids collide across concurrent sessions on the same project (recall: `gm spool dispatch id collision cross-session crosstalk`). Wasm orchestrator services every verb; harness never executes side effects directly.
 
 - **Orchestrator verbs**: `instruction`, `transition`, `phase-status`, `mutable-resolve`, `mutable-add`, `mutable-list`, `memorize-fire`, `memorize-continue`, `discipline-note`, `residual-scan`, `auto-recall`, `prd-add`, `prd-resolve`, `prd-list`, `task-spawn`, `task-list`, `task-stop`, `task-output`, `fsm-vendor`, `fsm-validate`, `claim-audit`, `submodule-check`.
-- **Wasm-direct verbs**: fs/kv/exec/fetch/env, recall, codesearch, memorize(+prune), health, filter, full git verb family. Enumeration in the recall store (`recall: wasm-direct plugkit verbs full list`).
+- **Wasm-direct verbs**: fs/kv/exec/fetch/env, recall, codesearch, memorize, memorize-prune, memorize-vacuum, memorize-retention, health, filter, full git verb family. Enumeration in the recall store (`recall: wasm-direct plugkit verbs full list`).
 - **Host-native verb**: `background-convert` (`{verb, task}`) detaches an already-in-flight dispatch so the daemon worker stops waiting on it -- agent-initiated only, never routed to gm.wasm. Detail: `.gm/daemon-config-reference.md`.
-- **memorize-prune**: prune bad/superseded memories; two-mode spec (key-remove vs query-review) in the recall store (`recall: memorize-prune verb two-mode spec`).
+- **memorize-prune**: prune bad/superseded memories; two-mode spec (key-remove vs query-review) in the recall store (`recall: memorize-prune verb two-mode spec`). **memorize-vacuum**/**memorize-retention**: compaction and retention-policy enforcement over the same memory store; both also accept underscore-form aliases (`memorize_vacuum`/`memorize_retention`), matching every `memorize-*` verb's hyphen/underscore dual registration.
 - **git verbs**: git is a first-class spool surface, never a shell command; `git_finalize {message}` is the bundled COMPLETE-phase push surface, `git_push` the only admissible raw push (porcelain-gated, rebase-retry). A git-dominant `bash`/`powershell` body is gated (`deviation.bash-git-bypass`). Per-verb shapes + host_git `.exe` resolution in the recall store (`recall: git verbs rs-plugkit spool surface`). `git_finalize` also runs `ci-status` inline right after push and auto-writes `.gm/exec-spool/.ci-validated` on a green result -- no separate poll-then-marker dispatch needed. The `ci-validated-fresh` COMPLETE gate compares that marker's `head_sha` against current HEAD and names `ci-status` as its `next_dispatch` on denial. An async git host (one that answers host_git with `{pending,token}` and parks the terminal result in kv ns `outbox`) is served by the `git_poll {token}` verb: `git_status`/`git_add`/`git_commit`/`git_log`/`git_diff` return pending envelopes there, and the caller repeats `git_poll` until a non-pending envelope comes back -- that envelope is the verb's terminal result, plan-resumed across dispatches for compound verbs.
 - **filter**: pure stdout -> compact-stdout transform, in-wasm. Spec + usage (pipe raw command output through it before context) in the recall store (`recall: filter verb rs-plugkit spool spec`).
 

package/bin/bootstrap.js

@@ -25,6 +25,7 @@ const {
 const {
   readVersionFile,
   readShaManifest,
+  failClosedMissingSha,
   resolveCacheWasmPath,
   extractNpmPackageWithRetry: extractNpmPackageWithRetryCore,
   writeBootstrapError,
@@ -215,7 +216,8 @@ async function bootstrap(opts) {
       throw extractErr;
     }
 
-    if (wasmExpectedSha) {
+    if (!wasmExpectedSha) throw failClosedMissingSha(version, wasmName, wasmPartialPath);
+    {
       const got = await require('../gm-plugkit/gm-process').sha256OfFile(wasmPartialPath);
       if (got !== wasmExpectedSha) {
         try { fs.unlinkSync(wasmPartialPath); } catch (_) {}
@@ -228,8 +230,6 @@ async function bootstrap(opts) {
         throw new Error(`sha256 mismatch for ${wasmName}: expected ${wasmExpectedSha}, got ${got}`);
       }
       log('sha256 verified');
-    } else {
-      log('no sha256 manifest -- skipping verify');
     }
 
     try { fs.renameSync(wasmPartialPath, wasmFinalPath); }

package/gm-plugkit/bootstrap-wasm-core.js

@@ -52,6 +52,18 @@ function clearBootstrapError() {
   } catch (_) {}
 }
 
+function failClosedMissingSha(version, artifactName, partialPath) {
+  try { fs.unlinkSync(partialPath); } catch (_) {}
+  const message = `no sha256 manifest entry for ${artifactName}: refusing to trust unverified download`;
+  writeBootstrapError({
+    expected_version: version,
+    cached_version: null,
+    error_phase: 'sha256-manifest-missing',
+    error_message: message,
+  });
+  return new Error(message);
+}
+
 function readVersionFile(wrapperDir) {
   const p = path.join(wrapperDir, 'plugkit.version');
   if (!fs.existsSync(p)) throw new Error(`plugkit.version not found at ${p}`);
@@ -226,6 +238,7 @@ module.exports = {
   resolveProjectRoot,
   writeBootstrapError,
   clearBootstrapError,
+  failClosedMissingSha,
   readVersionFile,
   readShaManifest,
   copyWasmToGmTools,

package/gm-plugkit/bootstrap.js

@@ -31,6 +31,7 @@ const {
   writeBootstrapError,
   clearBootstrapError,
   resolveInstalledWasmPath,
+  failClosedMissingSha,
 } = core;
 
 const LOCK_STALE_MS = 30 * 60 * 1000;
@@ -416,7 +417,8 @@ async function bootstrap(opts) {
       }
     }
 
-    if (expectedSha) {
+    if (!expectedSha) throw failClosedMissingSha(version, wasmName, partialPath);
+    {
       const got = await sha256OfFile(partialPath);
       if (got !== expectedSha) {
         try { fs.unlinkSync(partialPath); } catch (_) {}
@@ -428,8 +430,6 @@ async function bootstrap(opts) {
         throw new Error(`sha256 mismatch for ${wasmName}: expected ${expectedSha}, got ${got}`);
       }
       log('sha256 verified');
-    } else {
-      log('no sha256 manifest -- skipping verify');
     }
 
     try { fs.renameSync(partialPath, finalPath); }

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.2563",
+  "version": "2.0.2565",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform wasm, verifies SHA256, and launches agentplug-runner (the native wasm host) as the spool watcher daemon.",
   "main": "index.js",
   "bin": {

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.2563",
+  "version": "2.0.2565",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.2563",
+  "version": "2.0.2565",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",