geneseed 3.1.2 → 3.2.0

package/bin/geneseed-cli.mjs

@@ -56,6 +56,7 @@ import { cmdExclude } from '../js/inspect/excludes.mjs';
 import { cmdBuild, cmdPrompt, cmdRebuildAll, cmdTheme } from '../js/build/generate.mjs';
 import { cmdMigrate } from '../js/maintain/migrate.mjs';
 import { parseIntStrict } from '../js/lib/text.mjs';
+import { printErr } from '../js/lib/fs.mjs';
 import { cmdLink, cmdUnlink } from '../js/hosts/link.mjs';
 import { cmdMcp } from '../js/hosts/mcp.mjs';
 import { cmdMemory } from '../js/maintain/memory.mjs';
@@ -83,56 +84,31 @@ import { cmdWeb } from '../js/web/server.mjs';
  * `tests/test_hook_cli_parity.py` scrapes `const VERBS = {` for its three matrix gates, and
  * `main`'s refusal lists `Object.keys(VERBS)` IN THIS ORDER, which `harness_golden` cells
  * assert verbatim — the order is the old table's and is not alphabetical.
+ *
+ * FLATTENED TO `verb: fn` since Task 5: every row was a single-field `{ fn: cmdX }` object,
+ * the one field this table has left after `positionals`/`options`/`flags`/etc moved to
+ * `js/cli-table.json` above. `main` reads `VERBS[verb]` directly rather than
+ * `VERBS[verb].fn` now; the scraping regexes in `tests/unit/{cli_table,hook_cli,docs}.test.mjs`
+ * match on the KEY and the colon only; the literal string `const VERBS = {` and the key
+ * order neither changed.
  */
 const VERBS = {
-  exclude: {
-    fn: cmdExclude,
-  },
-  status: {
-    fn: cmdStatus,
-  },
-  version: {
-    fn: cmdVersion,
-  },
-  build: {
-    fn: cmdBuild,
-  },
-  prompt: {
-    fn: cmdPrompt,
-  },
-  theme: {
-    fn: cmdTheme,
-  },
-  diff: {
-    fn: cmdDiff,
-  },
-  'rebuild-all': {
-    fn: cmdRebuildAll,
-  },
-  migrate: {
-    fn: cmdMigrate,
-  },
-  doctor: {
-    fn: cmdDoctor,
-  },
-  uninstall: {
-    fn: cmdUninstall,
-  },
-  link: {
-    fn: cmdLink,
-  },
-  unlink: {
-    fn: cmdUnlink,
-  },
-  setup: {
-    fn: cmdSetup,
-  },
-  web: {
-    fn: cmdWeb,
-  },
-  upgrade: {
-    fn: cmdUpgrade,
-  },
+  exclude: cmdExclude,
+  status: cmdStatus,
+  version: cmdVersion,
+  build: cmdBuild,
+  prompt: cmdPrompt,
+  theme: cmdTheme,
+  diff: cmdDiff,
+  'rebuild-all': cmdRebuildAll,
+  migrate: cmdMigrate,
+  doctor: cmdDoctor,
+  uninstall: cmdUninstall,
+  link: cmdLink,
+  unlink: cmdUnlink,
+  setup: cmdSetup,
+  web: cmdWeb,
+  upgrade: cmdUpgrade,
   // `up.add_parser(..., aliases=["update"])`, reproduced in P8c as a ROW OF ITS OWN rather than
   // as an `aliases` field on the row above — because a field would be a DECLARATION and the
   // three matrix gates read this table as the DISPATCH (rule 7, and M23 is where it was
@@ -144,28 +120,18 @@ const VERBS = {
   //
   // It is NOT what the web console's `update` ACTION needs: that row's argv names `upgrade`,
   // the subparser, and always did. The two were coupled only in a handoff's note.
-  update: {
-    fn: cmdUpgrade,
-  },
-  'sync-self': {
-    // Points at `cmdSyncSelf` rather than at `cmdUpgrade`, and that is not tidiness:
-    // `sync-self` DROPS its `ref` before `upgrade` ever sees it, where `upgrade` both WARNS
-    // about one and re-reads it as a theme — so the two verbs answer `sync-self cyberpunk`
-    // and `sync-self v1.2.3` differently. See `js/maintain/update.mjs`'s `syncSelf` for both halves.
-    fn: cmdSyncSelf,
-  },
-  bootstrap: {
-    fn: cmdBootstrap,
-  },
+  update: cmdUpgrade,
+  // Points at `cmdSyncSelf` rather than at `cmdUpgrade`, and that is not tidiness:
+  // `sync-self` DROPS its `ref` before `upgrade` ever sees it, where `upgrade` both WARNS
+  // about one and re-reads it as a theme — so the two verbs answer `sync-self cyberpunk`
+  // and `sync-self v1.2.3` differently. See `js/maintain/update.mjs`'s `syncSelf` for both halves.
+  'sync-self': cmdSyncSelf,
+  bootstrap: cmdBootstrap,
   // P7a. Both are DISPATCHERS whose off-TTY arm is the whole of what a cell can reach, and
   // `menu`'s on-TTY arm falls back rather than opening a panel — `js/ui/menu.mjs`'s header
   // argues both.
-  menu: {
-    fn: cmdMenu,
-  },
-  home: {
-    fn: cmdHome,
-  },
+  menu: cmdMenu,
+  home: cmdHome,
   // P7b, and it is the twenty-fifth and last. `cmd_tui`'s FIRST arm is `if not sys.stdin.
   // isatty()`, so off a TTY — which is every cell there is — the verb is one line and an
   // exit code, and that arm crosses byte for byte. The panel behind it is P7c's;
@@ -173,9 +139,7 @@ const VERBS = {
   // panel-unavailable line rather than inventing a second full-screen UI, and
   // `tests/test_tui_boundary.py` asserts that the arm it declares is genuinely unreachable
   // here rather than merely untested.
-  tui: {
-    fn: cmdTui,
-  },
+  tui: cmdTui,
   // THE THREE THAT NEVER HAD A PYTHON ORIGINAL, and they are last for that reason rather
   // than by alphabet: every row above is the twin of a subparser, and these three are not.
   // The information behind them existed only behind the web console — the catalog endpoint,
@@ -190,21 +154,15 @@ const VERBS = {
   // ABSOLUTE — `tests/snapshot/cli_help.test.mjs` splits the two populations by name and refuses a
   // verb that falls into neither, and each has its own unit gate stating what it does rather
   // than that it agrees.
-  catalog: {
-    fn: cmdCatalog,
-  },
-  mcp: {
-    fn: cmdMcp,
-  },
-  memory: {
-    fn: cmdMemory,
-  },
+  catalog: cmdCatalog,
+  mcp: cmdMcp,
+  memory: cmdMemory,
 };
 
 function die(code, msg) {
   // CRLF on Windows, for the same reason `js/hosts/hooks.mjs`'s funnels translate: argparse writes
-  // this line through `sys.stderr`, which does.
-  process.stderr.write(`geneseed: error: ${msg}${process.platform === 'win32' ? '\r\n' : '\n'}`);
+  // this line through `sys.stderr`, which does. `printErr` owns the `\n`-to-`os.linesep` rule.
+  printErr(`geneseed: error: ${msg}\n`);
   return code;
 }
 
@@ -358,8 +316,8 @@ async function main(argv) {
       throw e;
     }
   }
-  const spec = VERBS[verb];
-  if (!spec) {
+  const fn = VERBS[verb];
+  if (!fn) {
     // "and every other harness subcommand is still Python — run the interpreter against the
     // old harness script" is GONE, and its removal is not cosmetic: with the four hook verbs
     // named, the two entry points now cover every subcommand there is, so the clause was not
@@ -395,7 +353,7 @@ async function main(argv) {
     // it `process.exitCode` would be assigned a PENDING PROMISE, which Node coerces to 0
     // and prints nothing about. `web status` would then report "not running" and exit 0.
     // Awaiting a number is a no-op for the ten synchronous verbs.
-    return await spec.fn(parsed.args);
+    return await fn(parsed.args);
   } catch (e) {
     // `e.exitCode` is the generator's existing marker for a DELIBERATE refusal that has
     // already explained itself on stderr — `js/build/emit-claude.mjs` reads the same flag, and it is

package/bin/geneseed-hook.mjs

@@ -39,6 +39,9 @@
  */
 import { cmdContext, cmdGitGate, cmdRuleGate, cmdLearn } from '../js/hosts/hooks.mjs';
 import { printHelp } from '../js/ui/cli.mjs';
+// Not a new module on the hot path: `js/hosts/hooks.mjs` above already imports
+// `js/lib/fs.mjs`, so this edge names a file the process has already loaded.
+import { printErr } from '../js/lib/fs.mjs';
 
 const VERBS = {
   context: { fn: cmdContext, flags: { '--root': 'root' } },
@@ -54,8 +57,8 @@ const VERBS = {
 
 function die(code, msg) {
   // CRLF on Windows, for the same reason `js/hosts/hooks.mjs`'s funnels translate: argparse
-  // writes this line through `sys.stderr`, which does.
-  process.stderr.write(`geneseed-hook: error: ${msg}${process.platform === 'win32' ? '\r\n' : '\n'}`);
+  // writes this line through `sys.stderr`, which does. `printErr` owns the `\n`-to-`os.linesep` rule.
+  printErr(`geneseed-hook: error: ${msg}\n`);
   return code;
 }
 

package/docs/web/exclusions.md

@@ -3,7 +3,7 @@ group: concepts
 order: 9
 title: "Sovereign repos (exclusions)"
 kind: "concept"
-link: {"hash": "#/harnesses", "label": "Manage in Harnesses →"}
+link: {"hash": "#/harness", "label": "Manage in Harness →"}
 ---
 A **sovereign repo** is a folder where every GLOBAL harness install goes fully dormant: hooks stay silent and the global preamble (`AGENT.md`/`CLAUDE.md`) is never loaded there. A repo that ships its own agent config you don't want a global harness layered onto is the usual case.
 

package/docs/web/footprint.md

@@ -29,7 +29,7 @@ Neither setting hides text from the agent; they hide it from *every turn*.
 It's set-and-forget — stored in the `.geneseed-footprint` marker, preserved across every rebuild, identical on every host (OpenCode, Claude Code, Bob, Copilot). Changing it re-emits the install.
 
 - **Settings** — the **Footprint** toggle flips the current install (full ⇄ lean) and rebuilds it in place.
-- **Harnesses tab** — a per-harness dropdown sets it for any one install independently, then **Apply**.
+- **Harness tab** — on an active install, a per-harness dropdown sets it for that install independently, then **Apply**. On a host that is not installed yet, it is step 2 of **Install…**.
 - **Setup / re-theme wizard** — asks for footprint alongside voice, posture, mode, and doctrine packs.
 - **CLI** — `geneseed-build --footprint lean` (with any `--emit`).
 

package/docs/web/foreman-mode.md

@@ -3,7 +3,7 @@ group: concepts
 order: 12
 title: "Foreman mode"
 kind: "concept"
-link: {"hash": "#/harnesses", "label": "Set the mode in Harnesses →"}
+link: {"hash": "#/harness", "label": "Set the mode in Harness →"}
 ---
 **Mode** is the session's *operating* register — how work gets executed — one of four build-time dials, beside posture (the *relationship* register), [doctrine packs](#/docs/setup-choices) (which practice rules bind) and footprint (how much of the constitution loads inline). Two modes ship, set at build time so the choice holds steady instead of drifting mid-session, and preserved across every rebuild and re-theme.
 
@@ -24,7 +24,7 @@ Because the crew runs apart from the conversation, the session stays responsive
 
 Set-and-forget, stored beside the install and preserved across rebuilds and re-themes:
 
-- **Harnesses tab** — the per-install **Mode** dropdown (beside Voice, Footprint, and Posture), then **Apply**.
+- **Harness tab** — on an active install, the per-install **Mode** dropdown (beside Voice, Footprint, and Posture), then **Apply**. On a host that is not installed yet, the same four choices are steps inside **Install…**.
 - **Setup / re-theme wizard** — asks for mode alongside voice, posture, doctrine packs, and footprint.
 - **CLI** — `geneseed-build --mode foreman`; switch back with `--mode direct`.
 

package/docs/web/themes-author.md

@@ -3,7 +3,7 @@ group: extend
 order: 1
 title: "Write a new theme"
 kind: "concept"
-link: {"hash": "#/themes", "label": "Open the theme gallery →"}
+link: {"hash": "#/harness", "label": "Open the voice gallery →"}
 ---
 A theme is one JSON file under `themes/` declaring voice tokens only: `BANNER`, `TAGLINE`, `LOADED_SIGIL`, `VOICE`, the core nouns (`ONTOLOGY`/`LAW(S)`/`DOCTRINE(S)`/`AGENT(S)`/`SKILL(S)`/`MEMORY`/`NOTEBOOK`/`WIKI`), the section intros `INTRO_*`, the epigraphs `EPI_*`, the `BENEDICTION`, the `ROAST_PERSONA`, and `DESC_*` blurbs. Copy `themes/neutral.json` and edit. `geneseed build --theme yours` renders it; `doctor` checks for missing tokens.
 

package/docs/web-ui.md

@@ -50,12 +50,17 @@ The left rail mirrors the harness's own shape:
 
 | Group | Views |
 | --- | --- |
-| **🧬 Harness** | Dashboard · Activity · Constitution · Rules · Profile · Skills · Agents · Library · Docs · Graph |
-| **🔧 Maintain** | Changes · Doctor |
-| **🎨 Configure** | Harnesses · Themes · Settings |
-| **ℹ️ About** | About |
+| *(ungrouped)* | Dashboard |
+| **📖 Codex** | Constitution · Rules · Profile · Skills · Agents · Library · Docs · Graph |
+| **🩺 Care** | Activity · Changes · Doctor |
+| **🎨 Setup** | Harness · Settings |
 
-A global **Spotlight** search lives in the topbar — press <kbd>/</kbd> to focus it, type
+Above the index sits a **vitals** card — the germination ring, drift, the doctor's verdict
+and how long ago the harness was built — so those four facts are on screen from every page.
+It is hidden where the rail collapses to icons (≤960px) and returns with the phone drawer.
+
+A global **Spotlight** search lives in the topbar — press <kbd>/</kbd> to focus it (or
+<kbd>Ctrl</kbd>/<kbd>⌘</kbd>+<kbd>K</kbd>, which also works from inside a text field), type
 to jump to any agent, skill, doc, spec, MCP server, or constitutional rule — the `laws`
 catalog it indexes is the whole constitution, so an ontology section, an invariant and a
 doctrine rule are all reachable by name; <kbd>↑</kbd>/<kbd>↓</kbd> to
@@ -129,32 +134,39 @@ streams the output of background jobs and keeps their history across reloads.
   theme, parity, links, authoring gates, drift), grouping any problems per check. Re-run
   on demand.
 
-### 🎨 Configure
-
-- **Harnesses** (`#/harnesses`) — every detected install (host × scope), one row each,
-  with per-row **Voice**, **Footprint**, **Posture**, and **Mode** pickers plus
-  Install/Apply, an on/off switch, and remove. **Posture** is the relationship register
-  (peer/mentor/expert/assistant/artisan — default **peer**); **Mode** is the operating
-  register (direct/foreman — default **direct**; foreman triages tasks into isolated
-  pipelines instead of working every one itself). Both are orthogonal to voice and to
-  each other, picked here or via the setup wizard, and preserved across every rebuild.
-  "Deploy to folder…" and "Rebuild all" apply to the whole set. An **Excluded folders**
-  card (shown once a global install exists) manages sovereign repos — folders where every
-  global harness goes dormant (hooks stay silent, the global preamble never loads);
-  add or remove one here, the web mirror of `harness exclude add|remove|list`.
-- **Themes** (`#/themes`) — a gallery of the shipped voices (name, tagline, sigil, accent
-  glow). **Apply** a voice to rebuild the deployed harness in that theme; the current one
-  is marked.
+### 🎨 Setup
+
+- **Harness** (`#/harness`) — this machine's own install first (path, voice, footprint,
+  and when it was built), then the **Voice** reference, then every detected install.
+  `#/harnesses` and `#/themes` both still resolve here, so old links and bookmarks keep
+  working.
+  - The **Voice** card is the former Themes tab, kept as a REFERENCE rather than a second
+    control: a collapsed row that opens to every shipped voice with its tagline, the
+    deployed one pinned first and marked. It is the one place you can read what a voice
+    sounds like — the per-install picker below is a list of bare names. Applying happens
+    there, per install, beside that install's own footprint, posture and mode; a gallery at
+    the top of the page could only ever act on one of them.
+  - **Every install** lists each detected install (host × scope), one row each. An
+    ACTIVE row carries per-row **Voice**, **Footprint**, **Posture** and **Mode**
+    pickers plus **Apply**, an on/off switch, and remove; a host that is NOT installed
+    yet shows a single **Install…** that discloses the same four choices as steps.
+    **Posture** is the relationship register (peer/mentor/expert/assistant/artisan —
+    default **peer**); **Mode** is the operating register (direct/foreman — default
+    **direct**; foreman triages tasks into isolated pipelines instead of working every
+    one itself). Both are orthogonal to voice and to each other, picked here or via the
+    setup wizard, and preserved across every rebuild.
+  - "Deploy to folder…" and "Rebuild all" apply to the whole set. An **Excluded folders**
+    card (shown once a global install exists) manages sovereign repos — folders where every
+    global harness goes dormant (hooks stay silent, the global preamble never loads);
+    add or remove one here, the web mirror of `harness exclude add|remove|list`.
 - **Settings** (`#/settings`) — a **Console direction** picker (the visual flavour of the
   console) with a **Dashboard layout** control (Auto follows each theme's designed Status
-  lens; Cultivar / Greenhouse / Operator force one regardless of skin), the install snapshot
-  (deployed/target/theme/version/memory store), a Maintenance card (PATH link/unlink,
-  uninstall), an offline package download, and server controls (Stop). Build, update, and MCP
-  wiring live in the Harnesses tab.
-
-### ℹ️ About
-
-- **About** (`#/about`) — project + creator credits and the source link.
+  lens; Cultivar / Greenhouse / Operator / Journal force one regardless of skin), the
+  install snapshot (deployed/target/theme/version/memory store), a Maintenance card (PATH
+  link/unlink, uninstall), an offline package download, server controls (Stop), and the
+  **About** colophon — project + creator credits and the source link, folded in from the
+  retired `#/about` tab (which still resolves here). Build, update, and MCP wiring live in
+  the Harness tab.
 
 ## Rebuilding the UI
 

package/harness.config.json

@@ -2,5 +2,5 @@
   "_comment": "version is a human-readable release label only; the canonical identity of an installed harness is the source fingerprint stamped in .geneseed-version (see `harness version`), not this string.",
   "theme": "neutral",
   "product": "Geneseed",
-  "version": "3.1.2"
+  "version": "3.2.0"
 }

package/js/README.md

@@ -172,7 +172,7 @@ the deployed harness as JSON.
 | `activity.mjs` | The `activity/` session files: pid-liveness prune, list, detail, and the on/off flag |
 
 **Before editing:** `makeHandler(state, jm, token, dist, holder)`'s arity is load-bearing — three
-test call sites construct one directly and drive it without a socket. Four of `routes.mjs`'s
+test call sites construct one directly and drive it without a socket. Five of `routes.mjs`'s
 exported sets are deliberately EMPTY and must stay declared: each is half of a partition test.
 `graph.mjs` contains a literal NUL byte, so `grep`/`ripgrep` treat it as binary and skip it.
 
@@ -192,12 +192,3 @@ exported sets are deliberately EMPTY and must stay declared: each is half of a p
 | a console doc page | `docs/web/<id>.md` — the stem is the id | `docs/extending.md` §4c. Only `kind: "concept"` gets `{N_*}` substitution |
 | an OpenCode plugin | `adapters/opencode/plugins/geneseed-<name>.js` | `docs/extending.md` §4a — the `geneseed-` prefix is mechanically load-bearing |
 | to change a `js/lib/` primitive | `tests/fixtures/pure_probe.mjs` **first** | the docblock says which Node default it deliberately departs from — change that sentence too, or the next reader restores the default |
-
----
-
-## Known debris
-
-* **`js/hosts/settings.mjs` carries a private second copy of Python's whitespace class**, duplicating
-  `WHITESPACE` in `js/lib/text.mjs`. `text.mjs` is the owner.
-* **`web/src/pages/Skills.jsx`'s `SKILL_CATS` is a fourth, ungated copy of the skill taxonomy** —
-  nothing compares it to `SKILL_CLASS`, and an unknown category renders as Build with no warning.

package/js/build/emit-claude.mjs

@@ -54,8 +54,7 @@ export function emitClaudeRender(cfg, job) {
 
   // `os.path.relpath(cfg, claude_md.parent)` — note the reversed argument order, and
   // that Python answers '.' for an identical pair where `path.relative` answers ''.
-  const relCfg = path.relative(path.dirname(claudeMd), cfgDir).split(path.sep).join('/')
-    || '.';
+  const relCfg = relPosix(path.dirname(claudeMd), cfgDir) || '.';
   const lawsPrefix = relCfg === '.' ? '' : `${relCfg}/`;
   const { theme, items } = renderAll(cfg, themeName, { footprint, lawsPrefix, nativeCatalog });
   assertSourceComplete(cfg, `claude-${scope}`);
@@ -98,7 +97,7 @@ export function emitClaudeRender(cfg, job) {
     const rulesMd = path.join(cfgDir, 'rules', 'geneseed.md');
     mkdirSync(path.dirname(rulesMd), { recursive: true });
     writeText(rulesMd, scope === 'project' ? BOB_RULES_STUB
-      : stripCapabilityLinks(cfg, prefixedAgentText('../') || agentText));
+      : stripCapabilityLinks(prefixedAgentText('../') || agentText));
     owned.push('rules/geneseed.md');
   }
 
@@ -146,7 +145,7 @@ export function emitClaudeRender(cfg, job) {
   // consumes and no more.
   let claudeMdText = null;
   if (agentText !== null && !(isBob && scope === 'global')) {
-    claudeMdText = stripCapabilityLinks(cfg, prefixedAgentText(lawsPrefix) || agentText);
+    claudeMdText = stripCapabilityLinks(prefixedAgentText(lawsPrefix) || agentText);
   }
 
   // WIRE — see `claudeWire` below. One child per emit, so the two halves are two
@@ -212,7 +211,7 @@ function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRu
     // above — unreachable here (CLAUDE.md is a file, cfgDir a directory, so the pair is
     // never identical) and spelled anyway, because the two call sites are 400 lines apart
     // and only one of them is obviously safe.
-    const rel = path.relative(cfgDir, claudeMd).split(path.sep).join('/') || '.';
+    const rel = relPosix(cfgDir, claudeMd) || '.';
     managed.claude_md = { rel };
   } else if (isBob && scope === 'global' && isTruthy(get(old, 'claude_md'))) {
     const oldCm = isDict(get(old, 'claude_md')) ? get(old, 'claude_md') : {};