geneseed 3.1.3 → 3.3.0

package/js/build/render.mjs

@@ -34,7 +34,7 @@ import { readText } from '../lib/fs.mjs';
 import { parseJson } from '../lib/json.mjs';
 import { normcase, comparePaths } from '../lib/paths.mjs';
 // `js/build/source.mjs` imports nothing but node builtins, so this direction cannot cycle.
-import { PACK_ORDER } from './source.mjs';
+import { PACK_ORDER, readPackText } from './source.mjs';
 
 /** Document STRUCTURE is theme-INDEPENDENT — mirrors `_build_render.STRUCTURE`. */
 export const STRUCTURE = {
@@ -69,6 +69,16 @@ const TOKEN_RE = /\{\{([A-Z_][A-Z0-9_]*)\}\}/g;
 const INCLUDE_RE = /^[ \t]*<!--[ \t]*INCLUDE:[ \t]*(?<path>[^ \t]+)[ \t]*-->[ \t]*$/gm;
 const CATALOG_BLOCK_RE =
   /[ \t]*<!-- CATALOG:begin -->\n(?<table>[\s\S]*?)[ \t]*<!-- CATALOG:else -->\n(?<pointer>[\s\S]*?)[ \t]*<!-- CATALOG:end -->\n/g;
+// The footprint twin of CATALOG. Before it existed, `lean` could only reach the two
+// include-driven corpora (`laws/universal.md` and the doctrine packs, both truncated
+// mechanically to heading + first sentence); every other section of the root template was
+// byte-identical across footprints, which is how ~1.5k tokens of §-level prose rode into
+// every lean install. A LEAN block ships a HAND-WRITTEN condensation instead of a
+// truncation — the objection `docs/token-footprint.md` raised against terse-ing the
+// Ontology ("four orphan sentences") is answered by authoring the short form, not
+// generating it. Same marker grammar as CATALOG so the two stay learnable as one idea.
+const LEAN_BLOCK_RE =
+  /[ \t]*<!-- LEAN:begin -->\n(?<full>[\s\S]*?)[ \t]*<!-- LEAN:else -->\n(?<lean>[\s\S]*?)[ \t]*<!-- LEAN:end -->\n/g;
 
 /**
  * `PurePath.suffix`. Not `path.extname`: Python returns '' for a name whose only dot is
@@ -81,17 +91,17 @@ function suffixOf(name) {
   return 0 < i && i < name.length - 1 ? name.slice(i) : '';
 }
 
-/** `Path.rglob("*")` restricted to files, then `sorted()`. */
+/**
+ * `Path.rglob("*")` restricted to files, then `sorted()`.
+ *
+ * `recursive: true, withFileTypes: true` replaces the hand-rolled walk — the order it
+ * yields is not the walk's order, but the explicit `.sort(comparePaths)` below is what
+ * every caller actually observes, so a different collection order changes nothing.
+ */
 function sortedSourceFiles(src) {
-  const out = [];
-  (function walk(dir) {
-    for (const name of readdirSync(dir)) {
-      const full = path.join(dir, name);
-      if (name === '__pycache__') continue;          // `"__pycache__" in path.parts`
-      if (statSync(full).isDirectory()) walk(full);  // rglob yields dirs; render_all skips them
-      else out.push(full);
-    }
-  })(src);
+  const out = readdirSync(src, { recursive: true, withFileTypes: true })
+    .filter((d) => d.isFile() && !d.parentPath.split(path.sep).includes('__pycache__'))
+    .map((d) => path.join(d.parentPath, d.name));
   return out.sort(comparePaths);   // `sorted()` — case-folded on Windows only
 }
 
@@ -126,7 +136,7 @@ export function loadTheme(cfg, name) {
 /** `_build_render.substitute`. */
 export function substitute(text, theme) {
   return text.replace(TOKEN_RE, (whole, key) => {
-    if (!Object.prototype.hasOwnProperty.call(theme, key)) return whole;  // visible for debugging
+    if (!Object.hasOwn(theme, key)) return whole;  // visible for debugging
     const v = theme[key];
     // Python renders `str(theme[key])`, which agrees with JS only for strings —
     // `str(True)`/`String(true)` and `str({...})`/`String({...})` do not. Every one of
@@ -143,10 +153,15 @@ export function substitute(text, theme) {
 }
 
 /** `_build_render._resolve_catalogs`. */
-export function resolveCatalogs(text, nativeCatalog) {
+function resolveCatalogs(text, nativeCatalog) {
   return text.replace(CATALOG_BLOCK_RE, (_m, table, pointer) => (nativeCatalog ? pointer : table));
 }
 
+/** LEAN blocks — full text or the hand-written condensation, by footprint. */
+function resolveLean(text, footprint) {
+  return text.replace(LEAN_BLOCK_RE, (_m, full, lean) => (footprint === 'lean' ? lean : full));
+}
+
 /**
  * `re.split(r"(?m)^(?=### )", text)`.
  *
@@ -168,15 +183,15 @@ function splitAtLawHeadings(text) {
 }
 
 /**
- * `_terse_laws` minus its pointer paragraph — heading + first sentence, per `### ` block.
+ * Heading + first sentence, per `### ` block. DOCTRINES ONLY, now.
  *
- * Split out rather than parameterised. The pointer was baked into the function body, and
- * the doctrines axis needs the same truncation under a DIFFERENT closing paragraph (one
- * that names the pack catalogue, not `laws/universal.md`, and drops the
- * secrets/deletion/git-history clause, which is the invariants' domain and not a pack's).
- * An extraction leaves `terseLaws` byte-identical for the laws path — the recorded lean
- * AGENT.md does not move — where a fourth parameter would have put a branch inside the one
- * function every frozen lean render already goes through.
+ * The laws used to go through this too, and it made a law's lean footprint a function of its
+ * punctuation: Law II shipped as one 36-character sentence and lost its stop-and-ask
+ * mechanism, while a law written as one colon-chained run-on shipped nearly whole. The laws
+ * now carry authored LEAN blocks in `src/laws/universal.md`, the way the ontology already did,
+ * and `resolveLean` picks the half. Doctrine rules stay machine-cut: there are ~23 of them
+ * across four packs, and a pack is a practice catalogue whose first sentence is written to
+ * stand alone.
  */
 function terseBlocks(text) {
   const blocks = splitAtLawHeadings(text);
@@ -197,16 +212,14 @@ function terseBlocks(text) {
   return out.join('\n\n');
 }
 
-/** `_build_render._terse_laws`. */
-export function terseLaws(text, theme, lawsPrefix = '') {
+/** The pointer under §1 at lean. The laws' lean text itself is authored in LEAN blocks. */
+export function lawsPointer(theme, lawsPrefix = '') {
   const law = theme.LAW ?? 'Law';
   const lawsDir = theme.DIR_LAWS ?? 'laws';
-  const pointer =
-    `> Each ${law} above is given in brief — the rule, not its reasoning. The `
+  return `> Each ${law} above is given in brief — the rule, not its reasoning. The `
     + `complete, binding text of every ${law} is in \`${lawsPrefix}${lawsDir}/universal.md\`; `
     + `read it whenever a ${law}'s application is unclear, and before any act touching `
-    + `secrets, deletion, git history, scope, or untrusted content.`;
-  return terseBlocks(text) + '\n\n' + pointer;
+    + 'secrets, deletion, git history, scope, or untrusted content.';
 }
 
 /** `_build_render.render_file`. */
@@ -225,12 +238,13 @@ export function renderFile(cfg, filePath, theme, footprint = 'full', lawsPrefix
                           new Set(visiting).add(normcase(here)), nativeCatalog)
       .replace(/\n+$/, '');                              // `.rstrip("\n")`
     if (footprint === 'lean' && rel === 'laws/universal.md') {
-      inner = terseLaws(inner, theme, lawsPrefix);
+      inner = `${inner}\n\n${lawsPointer(theme, lawsPrefix)}`;
     }
     return inner;
   });
 
   text = resolveCatalogs(text, nativeCatalog);
+  text = resolveLean(text, footprint);
   return substitute(text, theme);
 }
 
@@ -291,7 +305,7 @@ function activeDoctrines(cfg) {
   // `Active packs:` marker a later reader parses back — agrees with what was rendered.
   const excluded = new Set(cfg.excludeRules ?? []);
   const survives = (pack) => {
-    const ids = [...readText(path.join(dir, `${pack}.md`))
+    const ids = [...readPackText(path.join(dir, `${pack}.md`))
       .matchAll(/^### \{\{DOCTRINE\}\} ([a-z]+) (\d+)\b/gm)]
       .map((m) => `${m[1]}.${Number(m[2])}`);
     return ids.some((id) => !excluded.has(id));
@@ -340,7 +354,7 @@ function doctrinesBody(cfg, theme, active, footprint, lawsPrefix) {
   if (!active.length) return '';
   const excluded = new Set(cfg.excludeRules ?? []);
   const parts = active.map((name) => {
-    const raw = dropExcludedRules(readText(path.join(cfg.src, 'doctrines', `${name}.md`)),
+    const raw = dropExcludedRules(readPackText(path.join(cfg.src, 'doctrines', `${name}.md`)),
       name, excluded);
     const body = substitute(raw, theme).trim();
     return footprint === 'lean' ? terseBlocks(body) : body;
@@ -397,7 +411,7 @@ export function effectiveTheme(cfg, themeName, { footprint = 'full', lawsPrefix
 /** `_build_render.themed_rel` — rename the top-level folder of an output path per theme. */
 export function themedRel(rel, theme) {
   const parts = rel.split(path.sep);
-  if (parts.length && Object.prototype.hasOwnProperty.call(SRC_DIR_TOKENS, parts[0])) {
+  if (parts.length && Object.hasOwn(SRC_DIR_TOKENS, parts[0])) {
     parts[0] = theme[SRC_DIR_TOKENS[parts[0]]] ?? parts[0];
   }
   return parts.join(path.sep);
@@ -440,8 +454,12 @@ export function renderAll(cfg, themeName, {
   for (const file of sortedSourceFiles(cfg.src)) {
     const rel = path.relative(cfg.src, file);
     const outRel = destRel(themedRel(rel, theme)).split(path.sep).join('/');  // as_posix()
+    // The on-disk `laws/` and `ontology/` are the "complete, binding text" the lean pointer
+    // promises. They render at full whatever the footprint; only what AGENT.md INLINES leans.
+    // Keyed on the SOURCE rel, not the themed one, so a DIR_* rename cannot un-exempt them.
+    const fp = /^(?:laws|ontology)[\\/]/.test(rel) ? 'full' : footprint;
     items.push(TEXT_SUFFIXES.has(suffixOf(path.basename(file)))
-      ? { rel: outRel, text: renderFile(cfg, file, theme, footprint, lawsPrefix, new Set(), nativeCatalog), src: file }
+      ? { rel: outRel, text: renderFile(cfg, file, theme, fp, lawsPrefix, new Set(), nativeCatalog), src: file }
       : { rel: outRel, text: null, src: file });
   }
   return { theme, items };

package/js/build/source.mjs

@@ -12,19 +12,40 @@
  * `build.render_all(theme)`. So the CLI has to build the same `cfg` the driver builds, and
  * until this move only the driver could.
  *
- * THE TWO ABSENT KEYS ARE STILL ABSENT, and the reason is bin/build-driver.mjs's, unchanged:
- * `_build_core.js_cfg()` always sends `structure` and `capabilityLinkRe` because the Python
- * originals are module-level names TESTS MUTATE (`_OWNED` membership asked one level out).
- * A Node process has no Python module to mutate, so it sends neither and
+ * THE ABSENT KEY IS STILL ABSENT, and the reason is bin/build-driver.mjs's, unchanged:
+ * `_build_core.js_cfg()` always sent `structure` and `capabilityLinkRe` because the Python
+ * originals were module-level names TESTS MUTATE (`_OWNED` membership asked one level out).
+ * A Node process has no Python module to mutate, so it sends no `structure`, and
  * `js/build/render.mjs`'s `cfg.structure ?? STRUCTURE` takes its right-hand branch.
+ * `capabilityLinkRe`'s equivalent override in `stripCapabilityLinks` had no producer either
+ * and was deleted outright in the over-engineering cleanup, `cfg` param and all.
  *
  * The move is safe for the reason P5c's was: `tests/golden.py` drives `bin/build-driver.mjs`
  * over 259 cells and compares the tree byte-for-byte, and every one of them builds a cfg
  * from these paths. A depth error or a renamed key fails 259 cells, not zero.
  */
-import { readdirSync, readFileSync } from 'node:fs';
+import { readdirSync, readFileSync, statSync } from 'node:fs';
 import path from 'node:path';
-import { fileURLToPath } from 'node:url';
+
+/**
+ * One doctrine pack file used to be read three times per render — the survives gate and the
+ * body in `js/build/render.mjs`, plus `knownRuleIds` below — and the golden matrix multiplies
+ * that by 261 cells. Keyed on mtime, not just path, because the one long-lived process (the
+ * web daemon) renders previews of a `src/` the user may be editing between requests; a
+ * path-only memo would serve yesterday's pack forever. Newlines come back folded to LF, the
+ * same normalisation `readText` gave the render callers — `knownRuleIds` matched identically
+ * on raw or folded text, so one behaviour serves both.
+ */
+const _packTexts = new Map();
+export function readPackText(file) {
+  const key = path.resolve(file);
+  const mtime = statSync(file).mtimeMs;
+  const hit = _packTexts.get(key);
+  if (hit && hit.mtime === mtime) return hit.text;
+  const text = readFileSync(file, 'utf8').replace(/\r\n?/g, '\n');
+  _packTexts.set(key, { mtime, text });
+  return text;
+}
 
 /**
  * `_build_core.ROOT` — the checkout, from this file's own location (`js/..`).
@@ -37,7 +58,7 @@ import { fileURLToPath } from 'node:url';
  * which is what makes them comparable and what makes them unfenceable. See the
  * status/version section of `tests/harness_golden.py`.
  */
-export const ROOT = path.dirname(path.dirname(path.dirname(fileURLToPath(import.meta.url))));
+export const ROOT = path.resolve(import.meta.dirname, '../..');
 export const SRC = path.join(ROOT, 'src');
 export const CONFIG = path.join(ROOT, 'harness.config.json');
 export const THEMES = path.join(ROOT, 'themes');
@@ -103,7 +124,7 @@ export function knownRuleIds() {
   for (const pack of PACK_ORDER) {
     const file = path.join(SRC, 'doctrines', `${pack}.md`);
     let text = '';
-    try { text = readFileSync(file, 'utf8'); } catch { continue; }
+    try { text = readPackText(file); } catch { continue; }
     for (const m of text.matchAll(/^### \{\{DOCTRINE\}\} ([a-z]+) (\d+)\b/gm)) {
       if (m[1] === pack) out.push(`${pack}.${Number(m[2])}`);
     }

package/js/build/stubs.mjs

@@ -198,59 +198,51 @@ agent-overrides.json
 // Seeded stubs — write-once, never overwrite
 // ---------------------------------------------------------------------------
 
-/** `_build_render.ensure_context_stub`. */
+/**
+ * `_build_render`'s eight `ensure_*_stub` functions all wrote this same guard out by hand:
+ * write `t` to `p` only when nothing is there yet. The STUB BODIES above are what a recorded
+ * corpus compares byte for byte — this only touches the write-once CHECK every one of them
+ * repeated, never the text.
+ */
+const seed = (p, t) => { if (!existsSync(p)) writeText(p, t); };
+
+/** A stub whose destination is a fixed `out`-relative name and a fixed body. */
+const stubWriter = (file, stub) => (out) => seed(path.join(out, file), stub);
+
+/** `_build_render.ensure_context_stub` — the one stub whose body is computed, not literal. */
 export function ensureContextStub(out) {
-  const dest = path.join(out, 'context.json');
-  if (!existsSync(dest)) {
-    writeText(dest, `${jsonDumpsIndent(CONTEXT_STUB, { ensureAscii: false })}\n`);
-  }
+  seed(path.join(out, 'context.json'), `${jsonDumpsIndent(CONTEXT_STUB, { ensureAscii: false })}\n`);
 }
 
 /** `_build_render.ensure_wiki_stub` — a legacy `wiki.json` counts as present. */
 export function ensureWikiStub(out) {
-  const dest = path.join(out, 'wiki.jsonc');
-  if (!existsSync(dest) && !existsSync(path.join(out, 'wiki.json'))) writeText(dest, WIKI_STUB);
+  if (!existsSync(path.join(out, 'wiki.json'))) seed(path.join(out, 'wiki.jsonc'), WIKI_STUB);
 }
 
 /** `_build_render.ensure_rules_stub`. */
-export function ensureRulesStub(out) {
-  const dest = path.join(out, RULES_FILE);
-  if (!existsSync(dest)) writeText(dest, RULES_STUB);
-}
+export const ensureRulesStub = stubWriter(RULES_FILE, RULES_STUB);
 
 /** `_build_render.ensure_profile_stub`. */
-export function ensureProfileStub(out) {
-  const dest = path.join(out, PROFILE_FILE);
-  if (!existsSync(dest)) writeText(dest, PROFILE_STUB);
-}
+export const ensureProfileStub = stubWriter(PROFILE_FILE, PROFILE_STUB);
 
 /**
  * `_build_render.ensure_excludes_stub` — the sovereign-repo list, seeded once and NEVER
  * overwritten. Reachable only from the Claude-shaped emits, which is why it arrived with
  * `emitClaudeRender` rather than with the bundle stubs beside it.
  */
-export function ensureExcludesStub(out) {
-  const dest = path.join(out, EXCLUDES_FILE);
-  if (!existsSync(dest)) writeText(dest, EXCLUDES_STUB);
-}
+export const ensureExcludesStub = stubWriter(EXCLUDES_FILE, EXCLUDES_STUB);
 
 /** `_build_render.ensure_bundle_gitignore`. */
-export function ensureBundleGitignore(out) {
-  const dest = path.join(out, '.gitignore');
-  if (!existsSync(dest)) writeText(dest, BUNDLE_GITIGNORE);
-}
+export const ensureBundleGitignore = stubWriter('.gitignore', BUNDLE_GITIGNORE);
+
+/** A stub INSIDE an already-existing store dir — a memory/notebook index, only ever seeded
+ * once the store itself exists (`ensureMemoryIndex`/`ensureNotebookIndex` are both called
+ * right after the store dir is created, but never invent the dir themselves). */
+const storeIndexWriter = (file, header) => (dir) => { if (isDir(dir)) seed(path.join(dir, file), header); };
 
 /** `_build_render.ensure_memory_index` — only inside an EXISTING store dir. */
-export function ensureMemoryIndex(memDir) {
-  if (!isDir(memDir)) return;
-  const idx = path.join(memDir, 'MEMORY.md');
-  if (!existsSync(idx)) writeText(idx, '# Memory Index\n');
-}
+export const ensureMemoryIndex = storeIndexWriter('MEMORY.md', '# Memory Index\n');
 
 /** `_build_render.ensure_notebook_index`. */
-export function ensureNotebookIndex(nbDir) {
-  if (!isDir(nbDir)) return;
-  const idx = path.join(nbDir, 'NOTEBOOK.md');
-  if (!existsSync(idx)) writeText(idx, '# Notebook Index\n');
-}
+export const ensureNotebookIndex = storeIndexWriter('NOTEBOOK.md', '# Notebook Index\n');
 

package/js/build/themes.mjs

@@ -66,7 +66,7 @@ import { stripWhitespaceStart, stripWhitespaceEnd, stripWhitespace } from '../li
  *     for containers — a `===` here would return `null` every time and silently route every
  *     theme through the re-dump fallback, i.e. rewrite all 14 files in full.
  */
-export function insertThemeKeys(raw, theme, tmpl, tmplKeys, missing) {
+function insertThemeKeys(raw, theme, tmpl, tmplKeys, missing) {
   const lines = splitLines(raw);
   if (!lines.length || stripWhitespace(lines[0]) !== '{') return null;
 

package/js/build/version.mjs

@@ -145,9 +145,7 @@ export function writeVersion(cfg, out) {
   // Mutating it away stays green here for a reason no cell can remove — freezing the
   // clock across a process boundary is not something the harness can do — which is
   // exactly why the choice is spelled out instead of relying on the comparison.
-  const d = new Date();
-  const today = `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, '0')}-`
-    + `${String(d.getDate()).padStart(2, '0')}`;
+  const today = new Date().toLocaleDateString('sv-SE');
   writeText(path.join(out, VERSION_MARKER),
     `${fp} (built ${today}) [release ${release}]\n`);
   return fp;

package/js/cli-table.json

@@ -155,6 +155,21 @@
           "is_flag": false,
           "type": null,
           "hidden": false
+        },
+        {
+          "names": [
+            "--host"
+          ],
+          "dest": "host",
+          "metavar": null,
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'copilot' has no ask tier, so Laws I/IV block and everything else is a stderr warning",
+          "choices": null,
+          "default": null,
+          "required": false,
+          "nargs": null,
+          "is_flag": false,
+          "type": null,
+          "hidden": false
         }
       ],
       "mutex": []
@@ -356,6 +371,21 @@
           "is_flag": false,
           "type": null,
           "hidden": false
+        },
+        {
+          "names": [
+            "--host"
+          ],
+          "dest": "host",
+          "metavar": null,
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'copilot' has no ask tier, so Laws I/IV block and everything else is a stderr warning",
+          "choices": null,
+          "default": null,
+          "required": false,
+          "nargs": null,
+          "is_flag": false,
+          "type": null,
+          "hidden": false
         }
       ],
       "mutex": []
@@ -604,6 +634,21 @@
           "is_flag": false,
           "type": null,
           "hidden": false
+        },
+        {
+          "names": [
+            "--host"
+          ],
+          "dest": "host",
+          "metavar": null,
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'copilot' has no ask tier, so Laws I/IV block and everything else is a stderr warning",
+          "choices": null,
+          "default": null,
+          "required": false,
+          "nargs": null,
+          "is_flag": false,
+          "type": null,
+          "hidden": false
         }
       ],
       "mutex": []
@@ -764,6 +809,45 @@
         ]
       ]
     },
+    {
+      "name": "tool-gate",
+      "help": "toolCall hook (Copilot): git-gate and rule-gate fused behind one command, dispatched on the payload",
+      "description": "",
+      "positionals": [],
+      "options": [
+        {
+          "names": [
+            "--root"
+          ],
+          "dest": "root",
+          "metavar": null,
+          "help": "the install's own dir (set by the emitted hook); enables the sovereign-repo bypass from <root>/excludes.json",
+          "choices": null,
+          "default": null,
+          "required": false,
+          "nargs": null,
+          "is_flag": false,
+          "type": null,
+          "hidden": false
+        },
+        {
+          "names": [
+            "--host"
+          ],
+          "dest": "host",
+          "metavar": null,
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'copilot' has no ask tier, so Laws I/IV block and everything else is a stderr warning",
+          "choices": null,
+          "default": null,
+          "required": false,
+          "nargs": null,
+          "is_flag": false,
+          "type": null,
+          "hidden": false
+        }
+      ],
+      "mutex": []
+    },
     {
       "name": "tui",
       "help": "print the harness at a glance (interactive terminals only)",