[decode2]

Raises the bundled Engram core pin from 3.7.0 to 3.7.1, the latest Engram release.

Refs #3015

Why

3.7.1 ships 19 commits on top of 3.7.0. The ones that matter for Shell users:

• fix(cli): report unmanaged listeners before lifecycle actions engram#2351: the CLI reports unmanaged listeners before lifecycle actions. This covers a plain engram serve left running by an older Shell, which engram stop cannot manage.
• fix(store): admit complete v3.4.0 migration catalog engram#2338, bug(installer): Windows 11 PNPM_HOME recovery, preflight side effects, and stale PATH detection #2350, bug(agents): jd-judge-a/b system prompt prescribes the legacy rows result while the bundled judgment-day skill requests findings/evidence #2354: migration admits the complete v3.4.0 and pre-org catalogs and SQLite-quoted sync_chunks headers. This matters for users upgrading stores created by the 3.5.2 core that v4.7.0 bundles.
• fix(build): use Go 1.26.11 security patch consistently engram#2353: built with the Go 1.26.11 security patch.

The runtime contract digest is unchanged from 3.7.0 (0af9af17…810f), so gentle-engram 0.5.1 and later stay compatible.

Changes

File	Change
scripts/installer-downloads.mjs	Engram version 3.7.1 and the six archive sha256/size tuples
lib/gentle-shell-bundled.ts	BUNDLED_ENGRAM_SCHEMA and the runtime-contract table gain 3.7.1; 3.7.0 entries kept
runtime/gentle-shell-bundled.mjs	Regenerated mirror
tests/engram-safety.test.ts	Schema and contract tables cover 3.7.1
tests/bundled-install.test.ts, tests/installer-posix-bootstrap.test.ts	Pinned version, tuples and URL
docs/bundled-install.md	Runtime path, pin, schema provenance

Verification

• Archives: all six sha256 digests and sizes match three sources byte for byte: the release checksums.txt, the GitHub API asset digest/size, and a local sha256sum of fresh downloads. Separately, the values artifactFor("engram", …) returns match the API for all six targets.

  Archive	sha256	Size
  darwin_arm64	d1979720dd2f0f240c2ce1544051866155d709b58b30575f617ea4ea5b8f49ca	8001806
  darwin_amd64	7dfa0ddcf8ede0ad7be53913ee7bf83a4f6e89a419db8c02559fa3e3df848579	8488279
  linux_amd64	bc1acef625f16923b2ba548e0c911996b30d65c7c7cf15e949ecbc58136b127b	8365897
  linux_arm64	d5023e786af7cefe07a5d46f8064851d5f89be73bdb10af4a148358ed0605583	7712793
  windows_amd64	715b6ba35013c853e3607afefdf211923a5d3bef5894b77a55fe2a306b2b05e9	8583038
  windows_arm64	ab78c9dabeb0438d9a4712926b40b5354e014b13867f3f3a08d7983087a96114	7780331

• Schema: v3.7.1:internal/store/store.go:1270 declares const schemaVersion = 1.

• Real binary (linux amd64, isolated HOME, data dir and port): engram version printed engram 3.7.1. engram run -d returned exit 0. GET /runtime-contract returned engram.pi-http-runtime/v1, revision 1, digest 0af9af176928e98562ab1396d3196efe582dd5d1c5d2c5f8f546ab4ed609810f. /health reported version 3.7.1. engram stop returned exit 0, and the port then refused connections. engram help lists migrate-copy.

• node --experimental-strip-types --test tests/engram-safety.test.ts tests/bundled-install.test.ts tests/gentle-shell-bundled.test.ts tests/installer-posix-bootstrap.test.ts: 281 passed, 0 failed, 1 skipped (a Windows-only test, skipped on Linux).

• pnpm check:runtime-modules: runtime matches sources. pnpm typecheck: 0 diagnostics. git diff --check: clean.

This PR does not cut a release.

Summary by CodeRabbit

• Updates
  • Updated the bundled Engram version to 3.7.1 across supported platform downloads and runtime compatibility checks.
  • Refreshed installation and recovery documentation to reflect the new version.
  • Updated installation and compatibility checks for version 3.7.1; version 3.7.2 remains unsupported.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The bundled Engram pin advances from 3.7.0 to 3.7.1. Schema and runtime-contract tables, archive metadata, documentation, and tests are updated to recognize the new version.

Changes: Engram bundle update

Layer / File(s)	Summary
Pin and verify Engram 3.7.1 lib/gentle-shell-bundled.ts, runtime/gentle-shell-bundled.mjs, scripts/installer-downloads.mjs, tests/*, docs/bundled-install.md	The schema tables map 3.7.1 to schema version 1, and the runtime-contract tables give it the 3.7.0 digest. The installer pin and six platform archive records change to 3.7.1. Documentation and tests are updated; the documented daemon-start threshold remains 3.7.0.

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Possibly related issues

• bug(bundle): gentle-engram 0.7.0 rejects the bundled Engram 3.5.2 runtime contract, so memory is blocked after a package update #3015: The issue reports a mismatch between the bundled Engram runtime and the client’s required contract; this PR updates the pin to a release with the recorded 3.7.0 contract digest.
• Shell 4.7.0 pins Engram 3.5.2 but ships a client that requires the 3.7.0 runtime contract #3193: The issue identifies the Engram pin as needing an update; this PR advances it to 3.7.1.
• engramPinVersion pins Engram core 3.5.2, which the gentle-engram 0.7.0 companion rejects #3116: The issue proposes updating the pinned core; this PR updates that pin and its archive metadata.

Possibly related PRs

• Gentleman-Programming/gentle-shell#3118: This PR introduced the 3.7.0 pin and schema entry that this change advances.
• Gentleman-Programming/gentle-shell#3121: This PR introduced the runtime-contract digest tables that this change extends for 3.7.1.

Suggested reviewers: alan-thegentleman

Merge Risk: Minimal · up to e970b

This updates the bundled Engram pin to 3.7.1 together with its compatibility metadata, tests, and docs. No actionable merge-blocking risk is evident.

Pre-merge checks: 4

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title "chore(engram): pin bundled core 3.7.1" matches the main change. The PR updates the bundled Engram core pin from 3.7.0 to 3.7.1. The change touches the version pin, archive sizes and SHA-256…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title "chore(engram): pin bundled core 3.7.1" matches the main change. The PR updates the bundled Engram core pin from 3.7.0 to 3.7.1. The change touches the version pin, archive sizes and SHA-256 hashes, the schema and runtime-contract tables, the tests, and the install docs. The title names the scope and the version, so a reviewer scanning history can identify the change.

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 5361f7c2-c515-49e5-b57f-9f68c737f891

Commits

Reviewing files that changed from the base of the PR and between b1af8a4 and e970b31.

Files selected for processing: 7

• docs/bundled-install.md
• lib/gentle-shell-bundled.ts
• runtime/gentle-shell-bundled.mjs
• scripts/installer-downloads.mjs
• tests/bundled-install.test.ts
• tests/engram-safety.test.ts
• tests/installer-posix-bootstrap.test.ts

Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 5 remain after this review.