geneseed 3.11.0 → 3.13.0

package/js/web/actions.mjs

@@ -39,6 +39,8 @@ import {
 import { withStdoutSwallowed } from '../inspect/diff.mjs';
 import { excludeAdd, excludeRemove } from '../inspect/excludes.mjs';
 import { setupBuildArgs } from '../build/generate.mjs';
+import { DEFAULT_PRESET, PRESETS } from '../loop/score.mjs';
+import { setLoopPreset } from '../loop/registry.mjs';
 import { frontmatter, memoryDropIndex } from '../hosts/hooks.mjs';
 import {
   HOSTS, bobConfigDir, claudeConfigDir, expanduser, openclaudeConfigDir,
@@ -46,7 +48,7 @@ import {
 } from '../hosts/hosts.mjs';
 import {
   EMIT_HOST_SCOPE, doctrinesForBuild, excludedRulesOfDir, footprintOfDir, installState,
-  installTargets, modeOfDir, postureOfDir, readMaybe,
+  installTargets, modeOfDir, postureOfDir, readMaybe, trustOfDir,
 } from '../hosts/installs.mjs';
 import {
   MCP_PRESETS, isDict, mcpApply, mcpCommented, mcpInstallTargets, mcpKnownNames, mcpLoad,
@@ -576,6 +578,30 @@ export function apiExcludesMutate(state, body) {
   return action === 'add' ? excludeAdd(p) : excludeRemove(p);
 }
 
+// ---- loop preset picker ---------------------------------------------------------------------
+
+/**
+ * The Active tab's one write: rewrite a registered worktree's `LOOP.md` `preset` field.
+ * `setLoopPreset` throws for both refusals the brief requires `POST /api/loops/preset` to make —
+ * a `root` the registry does not know (no arbitrary path writes) and a `preset` outside
+ * `PRESETS` — and this is where those two throws are turned into the `NotFound` convention
+ * every other mutating route here already answers in, so the handler's catch (`4xx`, not the
+ * 500 a bare `Error` would fall to) covers this route the same way it covers `apiRulesMutate`'s
+ * unknown id. Anything else `setLoopPreset` throws — a corrupt `LOOP.md` that fails to
+ * parse, say — is not one of those two refusals and is rethrown as-is, so it falls through to
+ * the handler's 500 instead of being misreported as "not found".
+ */
+export function apiLoopsPresetMutate(state, body) {
+  const root = strOr(bget(body, 'root'));
+  const preset = strOr(bget(body, 'preset'));
+  try {
+    return { ok: true, loop: setLoopPreset(root, preset) };
+  } catch (e) {
+    if (e.message === 'unknown loop' || e.message.startsWith('unknown preset ')) throw new NotFound(e.message);
+    throw e;
+  }
+}
+
 // ---- MCP ----------------------------------------------------------------------------------
 
 export function apiMcp() {
@@ -777,6 +803,7 @@ export function apiRestore(state, files) {
       footprint: state.footprint,
       posture: state.posture,
       mode: state.mode,
+      trust: state.trust,
       // THE PACK SELECTION IS THE FIFTH, and it is the one that makes this verb a BOUNDARY
       // question rather than a cosmetic one. `expected` rendered at all four packs, and this
       // verb COPIES OUT OF IT: restoring AGENT.md onto an install built `--doctrines craft`
@@ -858,6 +885,8 @@ export function apiInstallCmd(state, body) {
   const bmode = bget(body, 'mode');
   const mode = discoverNames('modes', 'direct').includes(bmode)
     ? bmode : (modeOfDir(root) || 'direct');
+  const btrust = bget(body, 'trust');
+  const trust = Object.keys(PRESETS).includes(btrust) ? btrust : (trustOfDir(root) || DEFAULT_PRESET);
   // Unspecified means "keep what this install already has", exactly as theme, footprint,
   // posture and mode above do — a rebuild through the console is not a place to silently
   // re-decide the constitution. ⚠ AND A CARRIER WITH NO `Active packs:` MARKER (a pre-2.3
@@ -872,7 +901,7 @@ export function apiInstallCmd(state, body) {
   const excludeRules = bodyExcludeRules(body) ?? excludedRulesOfDir(root);
   const out = scope === 'global' ? null : String(root);
   const argv = setupBuildArgs(theme || 'neutral', emit, out, out, fp, pos, mode, doctrines,
-    PACK_ORDER, excludeRules);
+    PACK_ORDER, excludeRules, trust);
   return { cmd: [process.execPath, path.join(ROOT, 'bin', 'build-driver.mjs'), ...argv] };
 }
 
@@ -969,6 +998,8 @@ export function apiDeployCmd(state, body) {
   const pos = discoverNames('postures', 'peer').includes(bpos) ? bpos : 'peer';
   const bmode = bget(body, 'mode');
   const mode = discoverNames('modes', 'direct').includes(bmode) ? bmode : 'direct';
+  const btrust = bget(body, 'trust');
+  const trust = Object.keys(PRESETS).includes(btrust) ? btrust : DEFAULT_PRESET;
   // Same resolution as `apiInstallCmd` above, and for the same reason: the console's Deploy
   // form sends host/path/theme/footprint/posture/mode and NO pack selection, and nothing stops
   // it landing on a directory that already holds an install. Taking `bodyDoctrines` alone left
@@ -979,6 +1010,6 @@ export function apiDeployCmd(state, body) {
   const excludeRules = bodyExcludeRules(body) ?? excludedRulesOfDir(root);
   // project-scope emit name == host name (opencode / claude / bob / openclaude)
   const argv = setupBuildArgs(theme || 'neutral', host, root, root, fp, pos, mode, doctrines,
-    PACK_ORDER, excludeRules);
+    PACK_ORDER, excludeRules, trust);
   return { cmd: [process.execPath, path.join(ROOT, 'bin', 'build-driver.mjs'), ...argv] };
 }

package/js/web/api.mjs

@@ -21,10 +21,13 @@ import { excludesSnapshot } from '../inspect/excludes.mjs';
 import { GLOBAL_MANIFEST, HOSTS, opencodeConfigDir, resolvePath } from '../hosts/hosts.mjs';
 import {
   doctrinesForBuild, excludedRulesOfDir, footprintOfDir, installState, installTargets,
-  installedDefaults, modeOfDir,
+  installedDefaults, modeOfDir, trustOfDir,
   postureOfDir, readJsonMaybe, readMaybe, themeOfDir,
 } from '../hosts/installs.mjs';
 import { frontmatter } from '../hosts/hooks.mjs';
+import { DEFAULT_PRESET, PRESETS } from '../loop/score.mjs';
+import { loadCatalog, catalogProblems } from '../loop/catalog.mjs';
+import { activeLoops } from '../loop/registry.mjs';
 import {
   SKILL_CLASS, entityStatus, loadRegistry, tuiInventory,
 } from '../inspect/inventory.mjs';
@@ -87,6 +90,7 @@ export function webState(theme = null, target = null) {
     footprint: null,
     posture: null,
     mode: null,
+    trust: null,
     _inv: null,
     _doctor: null,
   };
@@ -98,6 +102,7 @@ export function webState(theme = null, target = null) {
   st.footprint = footprintOfDir(st.target);      // 'full' when no marker
   st.posture = postureOfDir(st.target) || 'peer';
   st.mode = modeOfDir(st.target) || 'direct';
+  st.trust = trustOfDir(st.target) || DEFAULT_PRESET;
 
   Object.defineProperty(st, 'inventory', {
     get() {
@@ -154,6 +159,7 @@ export function webState(theme = null, target = null) {
     st.footprint = footprintOfDir(st.root);
     st.posture = postureOfDir(st.root) || 'peer';
     st.mode = modeOfDir(st.root) || 'direct';
+    st.trust = trustOfDir(st.root) || DEFAULT_PRESET;
     st._inv = null;
     st._doctor = null;
   };
@@ -165,6 +171,7 @@ export function webState(theme = null, target = null) {
     st.footprint = footprintOfDir(st.root);
     st.posture = postureOfDir(st.root) || 'peer';
     st.mode = modeOfDir(st.root) || 'direct';
+    st.trust = trustOfDir(st.root) || DEFAULT_PRESET;
   };
   return st;
 }
@@ -741,11 +748,12 @@ export function apiInstalls(state) {
       footprint: footprintOfDir(root),
       posture: postureOfDir(root),
       mode: modeOfDir(root),
+      trust: trustOfDir(root),
       selected: samePath(viewCfg(host, scope, root), state.target),
     });
   }
   return { installs: out, postures: discoverNames('postures', 'peer'),
-    modes: discoverNames('modes', 'direct') };
+    modes: discoverNames('modes', 'direct'), trusts: Object.keys(PRESETS) };
 }
 
 /** Beside the deployed AGENT.md. */
@@ -848,6 +856,9 @@ export function apiOverview(state) {
       notebook: notebookItems(state).length,
       wiki: wikiItems(state).length,
       config: configItems(state).length,
+      // The rail's Loops badge: templates only, from the same catalogue `/api/loops` reads —
+      // a brick is a part, the template is what a person runs.
+      loops: loadCatalog({ projectRoot: state.root }).templates.size,
     },
     doctor: state.doctor,
     diff,
@@ -933,6 +944,42 @@ export function apiRecent(state) {
   return { items: items.slice(0, RECENT_LIMIT), skipped, limit: RECENT_LIMIT };
 }
 
+/**
+ * The Loops page: the brick and template catalogue the `geneseed loop` CLI reads, resolved from
+ * the install ROOT — for a project install that is the repo, where `<repo>/.geneseed/` lives; for
+ * a global one it is the config dir, which has no `.geneseed/` and so adds nothing. Read-only:
+ * the page draws templates and lists bricks, it never writes one.
+ *
+ * A template's graph is passed whole (`graph`) rather than flattened, because the page's ring
+ * layout needs `nodes`, `edges` and `loops` exactly as the engine reads them.
+ */
+export function apiLoops(state) {
+  const { bricks, templates, overridden } = loadCatalog({ projectRoot: state.root });
+  const byName = ([a], [b]) => (a < b ? -1 : 1);
+  return {
+    templates: [...templates].sort(byName).map(([name, { origin, ...graph }]) => ({
+      name, description: graph.description || '', origin, graph,
+    })),
+    bricks: [...bricks].sort(byName).map(([, b]) => ({ reason: null, ...b })),
+    overridden,
+    // A brick or template the catalogue skipped (bad frontmatter, not JSON, misnamed), and a
+    // template that fails the graph rules: the page says so — the same list `loop check`
+    // prints — or a team's broken override would just silently not be there.
+    problems: catalogProblems({ projectRoot: state.root }),
+  };
+}
+
+/**
+ * The Active tab's read: every worktree `geneseed loop init` has registered, with its live
+ * `LOOP.md` state re-read on every call (`activeLoops` itself, not a cached copy — the registry
+ * stores identity only, see `js/loop/registry.mjs`). Takes no `state`-derived filtering: the
+ * registry is machine-wide, not scoped to this install's root, so a loop launched from a
+ * different project still shows up here.
+ */
+export function apiLoopsActive() {
+  return { loops: activeLoops() };
+}
+
 /** The source's release label, or null when it cannot be read. */
 function releaseLabel() {
   const v = sourceReleaseVersion({ config: CONFIG });
@@ -982,4 +1029,6 @@ export const STATE_ROUTES = {
   // answers — a daemon whose POST worked and whose GET 501'd would have no way to obtain one.
   '/api/rules': apiRules,
   '/api/mcp': apiMcp,
+  '/api/loops': apiLoops,
+  '/api/loops/active': apiLoopsActive,
 };

package/js/web/daemon.mjs

@@ -267,9 +267,42 @@ export async function startDaemon(theme, port, openBrowser = true) {
   return 1;
 }
 
-export async function stopDaemon(theme = null) {
+/**
+ * `--port` NAMES WHICH DAEMON, and the record holds only one. With no `--port` (`port` null)
+ * the verbs act on whatever the record names, as they always have. With one, they act only if
+ * the record is on that port: `stop --port 4791` once POSTed shutdown to the recorded url and
+ * stopped the console on 4747. So a record on another port is refused — no request sent, record
+ * left in place — and a server answering on the named port that is NOT the record is explained,
+ * because its token is not on record and there is nothing to guess it from.
+ *
+ * Null when the verb may go ahead; otherwise the exit code, already explained on stdout.
+ */
+async function portRefusal(st, port, verb) {
+  if (port === null || port === undefined) return null;
+  const recorded = isTruthy(st) && isTruthy(st.url) ? Number(st.port) : null;
+  if (recorded === port) return null;
+  if (recorded !== null) {
+    if (verb === 'status') {
+      printOut(`[web] not running on port ${port} (the recorded daemon is on port ${recorded}).\n`);
+    } else {
+      printOut(`[web] the recorded daemon is on port ${recorded}, not ${port} — not touching it.\n`);
+      printOut(`      \`geneseed web ${verb} --port ${recorded}\` (or no --port) ${verb}s that one.\n`);
+    }
+  }
+  if (await probe(`http://127.0.0.1:${port}`)) {
+    printOut(`[web] a server answers on port ${port} but is not the recorded daemon, so its `
+      + 'token is unknown — stop it from its own page (Stop) or end its process.\n');
+    return 1;
+  }
+  // Nothing recorded and nothing on the named port: the verb's own no-daemon arm says so.
+  return recorded === null ? null : 1;
+}
+
+export async function stopDaemon(theme = null, port = null) {
   const { target } = webState(theme);
   const st = readDaemon(target);
+  const refused = await portRefusal(st, port, 'stop');
+  if (refused !== null) return refused;
   if (!isTruthy(st) || !isTruthy(st.url)) {
     // NO `clearDaemon` HERE — deliberately asymmetric with `liveDaemon`/`statusDaemon`,
     // which DO delete a record naming no url. Unifying the two would delete a file this
@@ -287,8 +320,10 @@ export async function stopDaemon(theme = null) {
   return 0;
 }
 
-export async function statusDaemon(theme = null) {
+export async function statusDaemon(theme = null, port = null) {
   const { target } = webState(theme);
+  const refused = await portRefusal(readDaemon(target), port, 'status');
+  if (refused !== null) return refused;
   const st = await liveDaemon(target);
   if (st) {
     printOut(`[web] running on ${st.url}  (theme: ${none(st.theme)}, pid ${none(st.pid)})\n`);
@@ -322,19 +357,22 @@ export async function bounceDaemonIfRunning(theme, log, { onlyIfStale = false }
     return;
   }
   try {
-    await restartDaemon(theme, 4747, false, true);
+    await restartDaemon(theme, null, false, true);
   } catch (e) {
     log(`[geneseed] ⚠️  could not refresh the web daemon (${e && e.message ? e.message : e}) — \`geneseed web restart\` manually if it was running.`);
   }
 }
 
-export async function restartDaemon(theme = null, port = 4747, openBrowser = true,
+/** `port` null keeps the recorded daemon's port (4747 if none); see `portRefusal`. */
+export async function restartDaemon(theme = null, port = null, openBrowser = true,
   onlyIfRunning = false) {
   const { target } = webState(theme);
   const st = readDaemon(target);
+  const refused = await portRefusal(st, port, 'restart');
+  if (refused !== null) return refused;
   const live = (await liveDaemon(target)) !== null;
   if (onlyIfRunning && !live) return 0;
-  const usePort = (st && isTruthy(st.port) ? st.port : null) || port;
+  const usePort = port ?? ((st && isTruthy(st.port) ? st.port : null) || 4747);
   let open = openBrowser;
   if (live) {
     // A live daemon means a tab is already open on this (preserved) port and will

package/js/web/docs.mjs

@@ -13,7 +13,7 @@
  *
  * THE `?harness=` QUERY PARAM IS the Docs selector, and it is the ONLY input to these
  * endpoints that is not the checkout itself — the one thing a test can vary. Every
- * filtering rule below is exercised by sending both values over one page.
+ * filtering rule below is exercised by sending each host over one page.
  */
 import { readdirSync } from 'node:fs';
 import path from 'node:path';
@@ -105,7 +105,7 @@ export function docGroups() {
     if (group === undefined) continue;
     const order = Object.hasOwn(meta, 'order') ? meta.order : 0;
     delete meta.order;
-    const page = { id, rel, ...meta };
+    const page = { id, rel, ...meta, section: sectionOf(meta) };
     if (body.trim()) page.body = body.replace(/\n+$/, '');
     group.pages.push([order, page]);
   }
@@ -113,15 +113,44 @@ export function docGroups() {
   for (const g of groups) {
     const entry = byId.get(g.id);
     // STABLE sort: equal orders keep filename order.
-    entry.pages = entry.pages
+    entry.pages = bySection(entry.pages
       .map((pair, i) => [pair[0], i, pair[1]])
       .sort((a, b) => (a[0] - b[0]) || (a[1] - b[1]))
-      .map((t) => t[2]);
+      .map((t) => t[2]));
     out.push(entry);
   }
   return out;
 }
 
+/** The heading a page without a `section:` is listed under, inside its part. */
+export const GENERAL_SECTION = 'General';
+
+/**
+ * A page's `section:` frontmatter, or `General`. Anything but a non-empty string falls back
+ * rather than throwing — `tests/unit/docs_tree.test.mjs` is where a bad value goes red.
+ */
+export function sectionOf(meta) {
+  const s = meta.section;
+  return typeof s === 'string' && s.trim() ? s.trim() : GENERAL_SECTION;
+}
+
+/**
+ * Pages already in `order:` order, regrouped so each section's pages sit together.
+ *
+ * SECTION ORDER IS THE SMALLEST `order:` AMONG ITS PAGES — which, on a list already sorted by
+ * order, is simply the order in which sections first appear. Within a section the pages keep
+ * their `order:` order. One rule for the list, the breadcrumb and prev/next alike, so the
+ * console never shows two orders for one part.
+ */
+export function bySection(pages) {
+  const runs = new Map();
+  for (const p of pages) {
+    if (!runs.has(p.section)) runs.set(p.section, []);
+    runs.get(p.section).push(p);
+  }
+  return [...runs.values()].flat();
+}
+
 // ---- markdown tables as data ------------------------------------------------------------
 
 /** One table row's cells; a `\|` inside a cell is kept as a literal bar. */
@@ -259,8 +288,27 @@ function subCounts(state, body) {
 
 // ---- harness filtering -----------------------------------------------------------------
 
-const HARNESSES = ['opencode', 'claude'];
-const HARNESS_OPEN_RE = /^\s*<!--\s*harness:(opencode|claude)\s*-->\s*$/;
+/**
+ * The Docs selector names a HOST; a tag names a host or a FAMILY. Bob and OpenClaude emit
+ * through the Claude engine, so a `claude` tag (page or block) is the Claude family and shows
+ * to all three of them, while `bob` / `openclaude` narrow to the one host. The same mapping as
+ * the console's host table (`web/src/lib/hosts.js`, its `docs` column).
+ */
+export const HOST_FAMILY = { opencode: 'opencode', claude: 'claude', openclaude: 'claude', bob: 'claude' };
+export const HARNESSES = Object.keys(HOST_FAMILY);
+/**
+ * A page or block tagged `tag` shows to `host`. Untagged content shows to every host. One tag
+ * names a host or a family; a LIST names hosts exactly, no family widening, because picking
+ * some hosts of a family is the only thing a list says that one tag cannot:
+ * `["claude", "openclaude"]` is Claude Code and OpenClaude, not Bob.
+ */
+export const harnessShows = (tag, host) => (Array.isArray(tag)
+  ? tag.includes(host)
+  : !tag || tag === host || tag === HOST_FAMILY[host]);
+/** A block's tag: `claude` alone, or `claude,openclaude` — the list, read as above. */
+const harnessTag = (raw) => (raw.includes(',') ? raw.split(/\s*,\s*/) : raw);
+const HOST_ID = '(?:opencode|claude|openclaude|bob)';
+const HARNESS_OPEN_RE = new RegExp(String.raw`^\s*<!--\s*harness:(${HOST_ID}(?:\s*,\s*${HOST_ID})*)\s*-->\s*$`);
 const HARNESS_CLOSE_RE = /^\s*<!--\s*\/harness\s*-->\s*$/;
 /**
  * The cheap presence test for the early-out. It must never be NARROWER than the open
@@ -272,7 +320,9 @@ const HARNESS_HINT_RE = /<!--\s*harness:/;
 export function normHarness(value, state) {
   const v = (value || '').trim().toLowerCase();
   if (HARNESSES.includes(v)) return v;
-  return /^(claude|openclaude)/.test(String(state.emit || '')) ? 'claude' : 'opencode';
+  // Emit names start with their host id (`claude-global`, `bob`, …); `files` reads OpenCode's.
+  const emit = String(state.emit || '');
+  return HARNESSES.find((h) => emit.startsWith(h)) || 'opencode';
 }
 
 /**
@@ -309,7 +359,8 @@ export function harnessBlocksBalanced(lines) {
  * the marker; the console has already filtered the block to the reader's host, so there the
  * label only repeats what the host selector says, and it goes with the marker.
  */
-const HOST_LABEL_RE = /^\s*\*\((OpenCode|Claude Code) only\)\*\s*$/;
+const HOST_NAME = '(?:OpenCode|Claude Code|OpenClaude|IBM Bob)';
+const HOST_LABEL_RE = new RegExp(String.raw`^\s*\*\(${HOST_NAME}(?: and ${HOST_NAME})* only\)\*\s*$`);
 
 export function stripHarnessBlocks(body, harnessName) {
   if (!HARNESS_HINT_RE.test(body)) return body;
@@ -329,7 +380,7 @@ export function stripHarnessBlocks(body, harnessName) {
     }
     if (!inFence) {
       const m = HARNESS_OPEN_RE.exec(line);
-      if (m) { keep = m[1] === harnessName; afterOpen = true; continue; }
+      if (m) { keep = harnessShows(harnessTag(m[1]), harnessName); afterOpen = true; continue; }
       if (HARNESS_CLOSE_RE.test(line)) { keep = true; continue; }
       if (labelSlot && HOST_LABEL_RE.test(line)) continue;
     }
@@ -353,8 +404,8 @@ function splitLines(s) {
 function visibleGroups(harnessName) {
   const groups = [];
   for (const g of docGroups()) {
-    if (g.harness && g.harness !== harnessName) continue;
-    const pages = g.pages.filter((p) => !p.harness || p.harness === harnessName);
+    if (!harnessShows(g.harness, harnessName)) continue;
+    const pages = g.pages.filter((p) => harnessShows(p.harness, harnessName));
     if (pages.length) groups.push({ ...g, pages });
   }
   return groups;
@@ -510,7 +561,8 @@ export function apiDocs(state, harnessName = null) {
   const groups = visibleGroups(hn).map((g) => ({
     id: g.id,
     label: g.label,
-    pages: g.pages.map((p) => ({ id: p.id, title: p.title, kind: p.kind })),
+    pages: g.pages.map((p) => ({ id: p.id, title: p.title, kind: p.kind, section: p.section,
+      ...(typeof p.description === 'string' ? { description: p.description } : {}) })),
   }));
   return { groups, harness: hn };
 }

package/js/web/handler.mjs

@@ -295,6 +295,7 @@ export function makeHandler(state, jm, token, dist, holder = null) {
     // packs — never to `harness.config.json`, which would drop the consent gate.
     const cmds = actionCommands(action, {
       theme, emit, footprint: state.footprint, posture: state.posture, mode: state.mode,
+      trust: state.trust,
       doctrines: doctrinesForBuild(state.target),
     });
     if (!isTruthy(cmds)) {

package/js/web/jobs.mjs

@@ -88,6 +88,7 @@ import path from 'node:path';
 
 import { ROOT, PACK_ORDER } from '../build/source.mjs';
 import { setupBuildArgs } from '../build/generate.mjs';
+import { DEFAULT_PRESET } from '../loop/score.mjs';
 import { isDict } from '../hosts/mcp.mjs';
 import { readText, writeText, isFile } from '../lib/fs.mjs';
 import { jsonDumpsCompact, parseJson, isTruthy } from '../lib/json.mjs';
@@ -402,9 +403,10 @@ export const INLINE_ACTIONS = ['restore', 'install', 'deploy'];
 function actionTable({
   theme = 'neutral', emit = 'opencode-global', footprint = 'full',
   posture = 'peer', mode = 'direct', doctrines = [...PACK_ORDER], excludeRules = [],
+  trust = DEFAULT_PRESET,
 } = {}) {
   const buildArgv = setupBuildArgs(theme, emit, null, null, footprint, posture, mode,
-    doctrines, PACK_ORDER, excludeRules);
+    doctrines, PACK_ORDER, excludeRules, trust);
   return {
     doctor: [[NODE(), CLI(), 'doctor']],
     build: [[NODE(), GEN(), ...buildArgv]],

package/js/web/routes.mjs

@@ -15,7 +15,7 @@
  * expose X?", which has nothing to do with sockets, daemons or gzip.
  */
 import { formatValue, isTruthy, parseJson } from '../lib/json.mjs';
-import { apiExcludesMutate, apiInstallToggle, apiMcpToggle, apiMemoryDelete, apiProfileSave, apiRulesMutate, apiRulesPromote, apiSelectView } from './actions.mjs';
+import { apiExcludesMutate, apiInstallToggle, apiLoopsPresetMutate, apiMcpToggle, apiMemoryDelete, apiProfileSave, apiRulesMutate, apiRulesPromote, apiSelectView } from './actions.mjs';
 import { apiActivityToggle } from './activity.mjs';
 
 /**
@@ -45,6 +45,10 @@ export const POST_ROUTES = new Map([
   ['/api/rules', [apiRulesMutate, true]],
   ['/api/rules/promote', [apiRulesPromote, true]],
   ['/api/profile', [apiProfileSave, true]],
+  // No `ok: false` arm: success returns `{ok: true, loop}`, and both refusals (unknown root,
+  // unknown preset) throw `NotFound`, which `doPost`'s catch answers 404 before this column is
+  // ever consulted — the same shape as `/api/memory/delete` and `/api/activity` above.
+  ['/api/loops/preset', [apiLoopsPresetMutate, false]],
 ]);
 
 /**

package/js/web/server.mjs

@@ -200,9 +200,11 @@ export async function cmdWeb(args) {
   const port = args.port === null ? 4747 : parseIntStrict(args.port);
   const openBrowser = !args.noBrowser;
   if (args.action === 'start') return startDaemon(args.theme, port, openBrowser);
-  if (args.action === 'stop') return stopDaemon(args.theme);
-  if (args.action === 'restart') return restartDaemon(args.theme, port, openBrowser);
-  if (args.action === 'status') return statusDaemon(args.theme);
+  // Only an EXPLICIT --port scopes these three to one daemon; absent, they act on the record.
+  const named = args.port === null ? null : port;
+  if (args.action === 'stop') return stopDaemon(args.theme, named);
+  if (args.action === 'restart') return restartDaemon(args.theme, named, openBrowser);
+  if (args.action === 'status') return statusDaemon(args.theme, named);
   return serve({ theme: args.theme, port, openBrowser, daemon: args.daemonInternal });
 }
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "Every field here is argued and gated in tests/unit/package_manifest.test.mjs. `files`, `bin` and `engines` each have a test that fails when reality drifts from this file; `version` mirrors harness.config.json and is gated too. Read that docblock before editing this one.",
   "name": "geneseed",
-  "version": "3.11.0",
+  "version": "3.13.0",
   "description": "A portable, theme-able harness you implant once and use everywhere to grow a disciplined AI coding agent.",
   "keywords": [
     "ai",

package/registry.json

@@ -134,6 +134,13 @@
       "added": "2026-06-03",
       "last_verified": "2026-09-06"
     },
+    "skills/brick-forge": {
+      "status": "experimental",
+      "version": "0.1.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-03",
+      "last_verified": ""
+    },
     "skills/bruno-collection-generator": {
       "status": "experimental",
       "version": "1.0.0",
@@ -302,6 +309,13 @@
       "added": "2026-10-02",
       "last_verified": ""
     },
+    "skills/loop": {
+      "status": "experimental",
+      "version": "0.1.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-03",
+      "last_verified": ""
+    },
     "skills/migrate": {
       "status": "approved",
       "version": "1.0.0",

package/src/AGENT.md.tmpl

@@ -266,6 +266,8 @@ the ten council seats are convened by the [council {{SKILL}}]({{DIR_SKILLS}}/cou
 | [council]({{DIR_SKILLS}}/council.md) | a decision, change, or discussion needs debating from several points of view before committing |
 | [workflow]({{DIR_SKILLS}}/workflow.md) | deterministic, code-driven orchestration of subagents (fan-out, find→verify, phased handoff) and the host exposes a workflow tool |
 | [pipeline]({{DIR_SKILLS}}/pipeline.md) | foreman mode triages a substantial task, or the user asks to run a crew (analyst → developer → tester) on one, isolated in its own worktree and merged on mechanical proof |
+| [loop]({{DIR_SKILLS}}/loop.md) | the user asks to run a loop |
+| [brick-forge]({{DIR_SKILLS}}/brick-forge.md) | a new or adapted loop brick |
 | [wiki]({{DIR_SKILLS}}/wiki.md) | consulting or growing the user's machine-wide knowledge base declared in `wiki.jsonc` (§8) |
 | [herdr]({{DIR_SKILLS}}/herdr.md) | running inside a [herdr](https://herdr.dev) pane (`HERDR_ENV=1`) and a task needs another pane — a sibling server, a watched build, a spawned agent |
 | [rule]({{DIR_SKILLS}}/rule.md) | anything the user wants to outlive this session — a standing rule of their own (§1) or a durable fact to remember (§5); also a recurring {{MEMORY}} lesson due for promotion |

package/src/agents/explorer.md

@@ -3,8 +3,8 @@
 > {{DESC_EXPLORER}}
 
 ## When to dispatch
-- A question needs sweeping many files or directories, but you only want the
-  conclusion — not the file contents in your context.
+- A question needs sweeping many files or directories, but only the conclusion
+  belongs in the main context — not the file contents.
 - Locating where something lives, how a subsystem fits together, or gathering
   facts scattered across the repo.
 - Your main context is small and the expensive reading should happen elsewhere.

package/src/agents/researcher.md

@@ -3,9 +3,9 @@
 > {{DESC_RESEARCHER}}
 
 ## When to dispatch
-- A question needs answers from *outside* the repository — the open web, a
-  vendor's docs, an upgrade guide, a specification — and you want the verified
-  findings, not the pages, in your context ({{DOCTRINE:context-economy}}).
+- A question needs verified answers from *outside* the repository. The open web, a
+  vendor's docs, an upgrade guide, a specification: the main context gets the verified
+  findings, not the pages ({{DOCTRINE:context-economy}}).
 - The research {{SKILL}} is running and the host can run subagents: this seat
   does the fetching and cross-checking so the main context stays small.
 - A migrate, forge-mcp, or ingest run needs a spec or changelog read before

package/src/bricks/README.md

@@ -0,0 +1,34 @@
+# Bricks
+
+A brick is one node of a loop graph: a single prompt, handed to one agent or skill, that reports
+back one of a declared set of outcomes. `geneseed loop next` reads the current node's brick and
+hands its body to the model verbatim — the model never sees this file as a file, only as the
+instructions inside it.
+
+A brick is a markdown file, `<name>.md`, with flat YAML-ish frontmatter (`name`, `description`,
+`effect`, exactly one of `agent` or `skill`, `outcomes`) and a plain-prose body. See
+`_template.md` for the field-by-field shape.
+
+## The three origins
+
+A brick's name is looked up across three levels, each one able to override the level before it
+by name:
+
+| origin | path | who writes it |
+|---|---|---|
+| shipped | `src/bricks/` (this directory) | Geneseed itself |
+| global | `$XDG_CONFIG_HOME/geneseed/bricks/` | the user, for every project on this machine |
+| project | `<repo>/.geneseed/bricks/` | a team, committed and shared |
+
+A global or project brick named `apply` replaces the shipped `apply` everywhere a loop template
+references it — the template does not have to change, and `geneseed loop check` reports the
+override rather than hiding it.
+
+## Writing one
+
+Start from `_template.md`, or ask the `brick-forge` skill to draft one for an agent or skill you
+already have. Keep the body to 4-10 lines of direct instruction, and end it with how the model
+should choose among the outcomes you declared — that sentence is what turns a vague brief into a
+loop that actually terminates. If the brick finds something the next brick needs, write it to a
+file in the OS temp directory and report that file's path with the outcome — the loop skill
+records it as a note.

package/src/bricks/_template.md

@@ -0,0 +1,32 @@
+<!--
+  A brick template — copy this file to `<name>.md` (kebab-case, matching the `name:` field
+  below) under `bricks/` at whichever level you are authoring for: shipped (this package's
+  `src/bricks/`), global ($XDG_CONFIG_HOME/geneseed/bricks/), or project (<repo>/.geneseed/bricks/).
+  A later level overrides an earlier one BY NAME. Leading-underscore files (like this one) and
+  README.md are never loaded as bricks.
+
+  Everything below the closing `---` is the brick's BODY: the prompt `geneseed loop next` hands
+  the agent, verbatim, plus the card fields it receives. No double-brace substitution tokens in
+  the body — the loop CLI reads this file raw and hands it straight to the model, unrendered.
+-->
+---
+name: my-brick
+# One line, shown wherever the catalogue is listed. Not the instructions themselves.
+description: One line describing what this brick does.
+# `read` never touches a file — the engine does not score or diff its iteration.
+# `mutate` may change files — its diff is scored against the declared card before commit.
+effect: read
+# Exactly one of agent OR skill (never both, never neither) — who carries out the body below.
+# `agent: <name>` names a spec under `src/agents/`.
+agent: tester
+# `skill: <name>` names a spec under `src/skills/` instead of an agent — delete `agent:` above
+# if you use this.
+# skill: some-skill
+# Every outcome the body can report, comma-separated — these become the edge labels a loop
+# template routes on (`{from, on: "<outcome>", to}`). A loop template's graph check requires
+# exactly one edge per outcome declared here.
+outcomes: pass, fail
+---
+Say, in direct instructions, what the agent or skill should do with the card it receives — 4 to
+10 lines, no more. End with exactly how to choose between the declared outcomes, so the model's
+last read is the decision it has to make.