gm-skill 2.0.2241 → 2.0.2243

package/README.md

@@ -131,6 +131,16 @@ Every tool the agent uses is a dispatch verb. No direct shell, no direct file wr
 
 The gate graph itself is data, not hardcoded Rust: a project's `.gm/instructions/fsm/graph.json` (written by the `fsm-vendor` verb) can add states, rewire edges, or swap which gates guard which transition, including a `policy` block that externalizes previously-hardcoded behavior (status vocabularies, witness-requirement toggles, CAS retry attempts) as project-overridable JSON.
 
+### configuring gm from your own repo
+
+Any project using gm can override its instruction prose, gate-denial text, residual-scan messages, and the FSM graph itself from a git repo it controls, without forking rs-plugkit. Run the `fsm-vendor` verb to scaffold every overridable file (phase prose, gate text, an example gate hook, and an inert `.gm/instructions/source.json.example`), then rename that example to `.gm/instructions/source.json`:
+
+```json
+{ "repo": "https://github.com/your-org/your-gm-config", "branch": "main", "path": "" }
+```
+
+The daemon clones and re-syncs that repo on a poll interval (default 600s, `.gm/daemon-config-reference.md`'s `plugin_update_poll_interval_secs`), so a push to your config repo reaches every project pointing at it within that window -- not instant, eventually consistent. Resolution order per key is always: your project's own `.gm/instructions/<key>.md` file wins outright, then your config repo's synced copy, then gm's compiled default. Gate hooks (arbitrary JS) only ever run from the local file tier, never from a synced config repo, so a remote you don't control can restyle prose but never gain code execution on your machine. A malformed `source.json` or unreachable repo degrades to the compiled default and logs why -- it never crashes a dispatch.
+
 ### ground truth
 
 No mocks, no fakes, no test files or test suites on disk. Real services, real responses only -- verification is manual troubleshooting and debugging via live `exec_js`/`browser` execution, witnessed the same turn as the code it checks.

package/bin/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-b81e74453b9334a48576664728fb5f4a89fdacb643f1a65cdefd80f686d47d5b  plugkit-slim.wasm
+c1227c7319343a3a95cb553e2f89d4a1004c103399cd0ad3fbe78110c1c4373e  plugkit-slim.wasm

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.1056
+0.1.1057

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-aa6ea5b2a515cd745552a7990c7c6adde079180fc73de6c689d7bdb7ceed2448  plugkit.wasm
+1a3fbd21705b5bff6065a12ebb80ba987c469e50da2fb5896a160874b71548a0  plugkit.wasm

package/gm-plugkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-plugkit",
-  "version": "2.0.2241",
+  "version": "2.0.2243",
   "description": "Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform wasm, verifies SHA256, and launches agentplug-runner (the native wasm host) as the spool watcher daemon.",
   "main": "index.js",
   "bin": {

package/gm-plugkit/plugkit-slim.wasm.sha256

@@ -1 +1 @@
-b81e74453b9334a48576664728fb5f4a89fdacb643f1a65cdefd80f686d47d5b  plugkit-slim.wasm
+c1227c7319343a3a95cb553e2f89d4a1004c103399cd0ad3fbe78110c1c4373e  plugkit-slim.wasm

package/gm-plugkit/plugkit.version

@@ -1 +1 @@
-0.1.1056
+0.1.1057

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.2241",
+  "version": "2.0.2243",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.1056"
+  "plugkitVersion": "0.1.1057"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.2241",
+  "version": "2.0.2243",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",