feat(runtime): pin gentle-ai v3.6.1 for gentle-pi 3.6.0

[Alan-TheGentleman]

Closes #1362

Summary

• Pin published Gentle AI v3.6.1 with independently verified signed archive and extracted binary digests plus the Windows Go Sum.
• Add the explicit v3.6.1 native capability row (same negotiated v2.6 contract), regenerate its runtime module, and update pin tests and documentation.
• Keep gentle-pi at the prepared v3.6.0 version for release after merge.

Type

• Maintenance/tooling (type:chore)

Changes

Area	Change
scripts/gentle-ai-installer.mjs	Published release URL, four asset/binary hashes, Windows source checksum.
lib/native-review-cli.ts, runtime/native-review-cli.mjs	Grounded v3.6.1 capability row and generated runtime.
tests/, docs/, openspec/specs/review-transaction/spec.md	Pin assertions and release-facing documentation.
odd/tasks/pin-gentle-ai-3.6.1-release.md	Work-unit evidence and remaining publication step.

Test plan

• Signed checksum verified against the repository Actions Minisign key; four archives and extracted binary hashes verified; Windows Go SumDB checksum verified.
• Strict TDD: pin and capability assertions RED before implementation, GREEN after.
• Focused tests: 135 passed; independent final spot check: 65 passed.
• pnpm test: 3,346 passed, 38 skipped (platform-specific), zero failed.
• pnpm run check:runtime-modules and node scripts/verify-package-files.mjs passed.
• node scripts/test-packed-runner.mjs passed with the published v3.6.1 binary.
• No shell scripts changed, so shellcheck is not applicable.
• Native review approved and acknowledged for pin commit bc2b1e0a; the subsequent task-progress-only commit is passive documentation.

Contributor checklist

• Approved issue linked; exactly one type label requested.
• Tests and docs accompany the behavior; conventional commits with no co-author trailers.
• Skills not modified; skill-load check not applicable.

Summary by CodeRabbit

• Updates
  • Updated the pinned Gentle AI runtime to version 3.6.1 across the installation process and related documentation.
  • Maintained the existing native CLI capabilities for the new version.
• Verification
  • Updated checks and tests to validate the 3.6.1 runtime and its release artifacts.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 35ed15b4-fc81-4bbe-be7e-bdcbcbef7196

📥 Commits

Reviewing files that changed from the base of the PR and between 5df9590 and 24bdbe4.

📒 Files selected for processing (12)

• docs/gentle-shell.md
• docs/readme-reference.md
• lib/native-review-cli.ts
• odd/tasks/pin-gentle-ai-3.6.1-release.md
• openspec/specs/review-transaction/spec.md
• runtime/native-review-cli.mjs
• scripts/gentle-ai-installer.mjs
• scripts/verify-package-files.mjs
• tests/gentle-ai-binary.test.ts
• tests/gentle-ai-installer.test.ts
• tests/native-review-capability-contract.test.ts
• tests/package-manifest.test.ts

Included review availability: Your plan provides up to 4 included reviews per hour; 3 remain after this review.

---

📝 Walkthrough

Walkthrough

The Gentle AI pin changes from v3.6.0 to v3.6.1. Installer assets and checksums, native capability entries, tests, specifications, and documentation now reference the updated version.

Changes

Gentle AI runtime pin

Layer / File(s)	Summary
Installer assets and verification scripts/gentle-ai-installer.mjs, scripts/verify-package-files.mjs, tests/gentle-ai-binary.test.ts, tests/gentle-ai-installer.test.ts, tests/package-manifest.test.ts	Installer version, release assets, and checksums change to v3.6.1. Verification messages and version-bound fixtures and tests are updated.
Native capability pin lib/native-review-cli.ts, runtime/native-review-cli.mjs, tests/native-review-capability-contract.test.ts, openspec/specs/review-transaction/spec.md	The capability tables add a v3.6.1 row that repeats the v3.6.0 capability set. Tests and review-transaction scenarios refer to v3.6.1.
Documentation and release record docs/gentle-shell.md, docs/readme-reference.md, odd/tasks/pin-gentle-ai-3.6.1-release.md	Documentation updates the runtime pin. The release task records verification results, delivery constraints, and the planned next step.

Priority: ➖ Normal

Estimated code review effort: 3 (Moderate) | ~20 minutes

Change: Other

Possibly related PRs

• Gentleman-Programming/gentle-shell#1153: Updates installer metadata, native capability entries, documentation, and version-bound tests for a later Gentle AI pin.
• Gentleman-Programming/gentle-shell#1118: Updates Gentle AI pin metadata, capability entries, specifications, and release-specific tests.
• Gentleman-Programming/gentle-shell#989: Updates release checksums, native capability entries, documentation, specifications, and version-bound tests.

Merge Risk: ⚪ Minimal · up to 24bdb

No actionable issue is established for the v3.6.1 pin; the change is mergeable after normal checks.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 10.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 10 functions across 8 files. (4 skipped: …	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: pinning Gentle AI v3.6.1 for the gentle-pi 3.6.0 release.
Linked Issues check	✅ Passed	Issue #1362 requires the Gentle AI v3.6.1 pin for gentle-pi 3.6.0. The installer updates the release assets, archive hashes, binary hashes, and Windows source module checksum. The native contract tabl…
Out of Scope Changes check	✅ Passed	The changed files support Issue #1362. Installer metadata, runtime contract data, generated runtime output, tests, documentation, and the release task all implement or verify the v3.6.1 pin. The task …

Full details: Docstring Coverage

Explanation

Docstring coverage is 10.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 10 functions across 8 files. (4 skipped: 4 unsupported.)

• Fix all pre-merge checks with AI

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}