geneseed 3.14.0 → 3.16.0

package/bin/geneseed-hook.mjs

@@ -7,7 +7,8 @@
  * and each alone would be enough:
  *
  *   * The generator driver is under a hard `child_process` ban
- *     (`test_the_driver_imports_no_child_process_module`), which is half of the proof that
+ *     (`tests/unit/hook_cli.test.mjs`'s 'the generator driver still reaches no child-process
+ *     module'), which is half of the proof that
  *     it is a real implementation rather than a passthrough to `build.py`. `learn` MUST
  *     spawn — the whole verb is "hand these notes to whatever `$GENESEED_LLM` names".
  *     Putting it in that file means either breaking the gate or weakening it.
@@ -15,7 +16,8 @@
  *     the Python side; a Node twin needs its own, invoked as `<node> <this> context
  *     --root "<cfg>"`.
  *   * `bin/build-driver.mjs` parses generator FLAGS (`--emit`, `--theme`, `--footprint`), and
- *     `test_the_node_driver_classifies_every_emit` asserts a partition over them. Verbs
+ *     'the driver classifies every emit' (`tests/unit/node_driver.test.mjs`) asserts a
+ *     partition over them. Verbs
  *     are a different shape and would sit awkwardly inside that.
  *
  * WHAT BAKES THIS FILE, SINCE P5b. `bin/build-driver.mjs` writes `<node> <checkout>/bin/
@@ -123,7 +125,8 @@ async function main(argv) {
   if (!spec) {
     // "elsewhere", not a file name: naming `bin/geneseed-cli.mjs` here would mean this entry
     // carrying a copy of its sibling's verb table — the one thing
-    // `test_the_two_entry_points_carry_disjoint_verb_sets` exists to keep from happening.
+    // 'the two entry points carry disjoint verb sets' (`tests/unit/hook_cli.test.mjs`) exists to
+    // keep from happening.
     // The COMMAND is not a table: `geneseed` is this package's `bin` entry for the CLI
     // (package.json), it answers every non-hook verb, and it survives the deletion of the
     // interpreter-plus-script invocation this line used to print.

package/docs/concepts/exclusions.md

@@ -4,18 +4,18 @@ order: 12
 title: "Exclusions"
 kind: "concept"
 section: "Configuration"
-description: "Two ways to switch things off: one rule, or every hook in a folder."
+description: "Three ways to switch things off: one rule, one skill, or every hook in a folder."
 link: {"hash": "#/harness", "label": "Manage in Harness →"}
 ---
-Geneseed has two different ways to switch something off, and they work at different scales:
+Geneseed has three ways to switch something off, and they work at different scales:
 
-| | Sovereign repo | Per-rule exclusion |
-| --- | --- | --- |
-| **Switches off** | the whole global install, inside one folder | one doctrine rule, everywhere the install applies |
-| **Scope** | a folder and everything under it | the install |
-| **Applies to** | **global** installs only | any install |
-| **Set with** | `geneseed exclude add <path>` | `--exclude-rules` at build time |
-| **Takes effect** | on the next tool call, no rebuild | on rebuild |
+| | Sovereign repo | Per-rule exclusion | Per-skill exclusion |
+| --- | --- | --- | --- |
+| **Switches off** | the whole global install, inside one folder | one doctrine rule, everywhere the install applies | one skill, everywhere the install applies |
+| **Scope** | a folder and everything under it | the install | the install |
+| **Applies to** | **global** installs only | any install | any install |
+| **Set with** | `geneseed exclude add <path>` | `--exclude-rules` at build time | `--exclude-skills` at build time |
+| **Takes effect** | on the next tool call, no rebuild | on rebuild | on rebuild |
 
 > **You already know this:** `.gitignore` versus disabling one lint rule. One makes a tool ignore a whole folder; the other keeps the tool running everywhere with one check turned off.
 
@@ -55,3 +55,15 @@ geneseed build --emit claude-global --exclude-rules "process 7"
 ```
 
 The install records it (`Excluded rules: process 7` beside its pack list) and every rebuild and upgrade keeps it. The always-on Rules and the Ethos cannot be excluded. Picking packs and rules is covered in [Doctrine packs and single rules](../guides/setup-doctrines.md); what the layers are is in [Rules](rules.md).
+
+### Per-skill exclusion — skills you never use
+
+Every installed skill costs a line in the host's skill listing, every session. Skills you never use can be left out of an install:
+
+```bash
+geneseed build --emit claude-global --exclude-skills "bruno-test-writer,bruno-collection-generator,react-view-transitions"
+```
+
+The skill's files are not written, its catalogue row goes, and an OpenCode `/command` that runs it goes too. The install records the list (`Excluded skills: …` under its skill section), and every rebuild and upgrade keeps it. `--exclude-skills none` puts them all back.
+
+A few skills cannot be excluded, because the harness itself links to them by path — `council`, `rule`, `skill-forge`, `workflow` and a handful more. The flag names them when it refuses one. Skills you installed yourself are not Geneseed's to exclude: remove those from the host's skills folder directly.

package/docs/guides/install-scripted.md

@@ -12,7 +12,7 @@ description: "The build command to run in a script, a CI job, or a shell with no
 geneseed build --emit opencode-global --theme neutral
 ```
 
-`geneseed build` takes the same flags as the generator `geneseed-build`. `--emit` picks the host and its scope: `files`, `opencode`, `opencode-global`, `claude`, `claude-global`, `bob`, `bob-global`, `openclaude` or `openclaude-global`. A `-global` emit writes into the tool's own config directory. A project emit writes into the repo you name with `--out <repo> --root <repo>`. All the other flags (`--theme`, `--footprint`, `--posture`, `--mode`, `--trust`, `--doctrines`, `--exclude-rules`) are covered in [Choose your setup](choose-your-setup.md) and the two pages after it.
+`geneseed build` takes the same flags as the generator `geneseed-build`. `--emit` picks the host and its scope: `files`, `opencode`, `opencode-global`, `claude`, `claude-global`, `bob`, `bob-global`, `openclaude` or `openclaude-global`. A `-global` emit writes into the tool's own config directory. A project emit writes into the repo you name with `--out <repo> --root <repo>`. All the other flags (`--theme`, `--footprint`, `--posture`, `--mode`, `--trust`, `--doctrines`, `--exclude-rules`) are covered in [Choose your setup](choose-your-setup.md) and the two pages after it. `--exclude-skills` leaves skills you never use out of the install; see [Exclusions](../concepts/exclusions.md).
 
 To test a build before writing anything, use `geneseed validate` with the same flags. See [Verify](verify.md).
 

package/docs/guides/project-context.md

@@ -25,7 +25,7 @@ With no configuration, the context step finds these files:
 - **Lazy:** `docs/`, `doc/`, `documentation/`, `architecture/`, `adr/` and `ADR/`, monorepo `packages/*/README.md` and `apps/*/README.md`, and any other root `*.md`.
 - **Never scanned:** `node_modules`, `.git`, `dist`, `build`, `vendor`, `.next`, `target`, `.venv`, `__pycache__`, `.opencode` and `.harness`.
 
-Eager files share a 48 KB budget per session. An eager file that would go over the budget is listed instead, to be read on demand.
+On Claude Code, Bob and OpenClaude the whole injection stays under 9,000 characters, because Claude Code hands the model only a short preview of a hook output past about 10,000 and keeps the rest in a file. Your session files come first, then eager files whole; an eager file that does not fit is listed instead, to be read on demand. On OpenCode eager files share a 48 KB budget. On every host, three or more docs in one folder are listed as that folder with a count (`docs/guides/ — 30 docs`), not file by file.
 
 On OpenCode the context plugin does this work. On Claude Code, Bob and OpenClaude, the session-start hook does it (`geneseed-hook context`). Both read the same override file, described next.
 

package/docs/token-footprint.md

@@ -35,11 +35,13 @@ pointer to the host's own inventory instead, ~1.9k tokens lighter. A session fil
 byte-identical to its seed is skipped — it says nothing — so a fresh install injects none
 of them; until 2026-10 the hook read them from the repo root, where a Claude-shaped install
 never puts them, and none reached the session at all. The
-eager-injection path is budget-capped identically everywhere — 16 KB per file
-(cut at a line break, with a marker saying so) and 48 KB per session (files past
-the budget are listed lazy with the reason) — so a 40k-character README no
-longer leaves whole every session, and growing Memory degrades every host the
-same way instead of one silently falling behind. The hook also **never injects
+eager-injection path is budget-capped on every host. The SessionStart hook (Claude Code,
+Bob, OpenClaude) keeps its whole payload under 9,000 characters: Claude Code persists a
+hook output past ~10k to a file and shows the model a 2 KB preview, so until 2026-10 a
+doc-heavy repo's context was cut off unannounced. Session files come first, eager docs
+are injected whole or listed lazy with the reason. The OpenCode plugin has no such cap
+and keeps 16 KB per file / 48 KB per session. Both fold a lazy listing: three or more
+docs in one folder become one `dir/ — N docs` line. The hook also **never injects
 the root file the host loads by itself** (`CLAUDE.md` on Claude Code,
 `AGENTS.md` on Bob, `AGENT.md`/`AGENTS.md`/`CLAUDE.md` on OpenCode):
 until 2026-09 it did, and the whole harness was paid twice per session.
@@ -106,11 +108,12 @@ token counter also includes, none of which Geneseed controls:
 2. **Your repo's docs, injected eagerly** — the context delivery
    (plugin on OpenCode, SessionStart hook on Claude Code / Bob / OpenClaude) discovers and
    injects `README.md`, `CONTRIBUTING.md`, and files under `docs/`, up to the
-   48 KB budget (≈12k tokens). A doc-heavy repo fills it.
+   budget: 9,000 characters for the whole hook payload (≈2.3k tokens), 48 KB on
+   OpenCode (≈12k tokens).
 3. **Wiki eager entries** plus the lazy listing of the rest, if a wiki is
    configured.
 4. **Grown Memory/Notebook** — the emitted starter set is ~1.2k, but both
-   accumulate with use (same 48 KB shared budget).
+   accumulate with use (same shared budget).
 5. **Other instruction files the host also loads** — a global install plus a
    per-repo install, a personal `~/.claude/CLAUDE.md`, or MCP servers each add
    their own share.

package/harness.config.json

@@ -2,5 +2,5 @@
   "_comment": "version is a human-readable release label only; the canonical identity of an installed harness is the source fingerprint stamped in .geneseed-version (see `harness version`), not this string.",
   "theme": "neutral",
   "product": "Geneseed",
-  "version": "3.14.0"
+  "version": "3.16.0"
 }

package/js/README.md

@@ -129,6 +129,7 @@ into files users have committed, so change the test that states it in the same c
 | `text.mjs` | String primitives: `codePointLength`, `WHITESPACE`, `parseIntStrict`, `percentDecode` |
 | `udiff.mjs` | `geneseed diff`'s own difflib clone — the alignment IS the printed hunks — plus `splitLines` |
 | `proc.mjs` | One constant: the `windowsHide` flag every spawn in `js/` must reuse |
+| `prompt.mjs` | The line-mode stdin readers — `ask`, `promptLine`, `confirm`, `askChoice` — read a byte at a time so they stop where Enter stops. Shared by `setup`, `uninstall` and `web` without dragging in the wizard |
 | `node-floor.mjs` | The first import of all three binaries: below Node 22.3, one sentence on stderr and exit 1 (0 in the hook) instead of a stack trace |
 
 **Before editing:** parse with `parseJson`, never `JSON.parse` — the latter collapses int `1` and
@@ -202,10 +203,13 @@ the deployed harness as JSON.
 | module | owns |
 |---|---|
 | `server.mjs` | `serve()`/`cmdWeb`: UI-build precheck, socket bind, token mint, daemon record wiring |
-| `routes.mjs` | Route DECLARATION only: the `POST_ROUTES` table and the ported/unported/declined sets |
-| `handler.mjs` | One function per request: dispatch, gzip, Host/CSRF guards, static SPA fallback |
-| `api.mjs` | `WebState` plus every GET read endpoint; owns `STATE_ROUTES`, `PREFIX_ROUTES`, `NotFound` |
-| `actions.mjs` | The mutating endpoints — rules, profile, memory, MCP, excludes — plus install/deploy argv |
+| `routes.mjs` | The route tables — `STATE_ROUTES`, `PREFIX_ROUTES`, `POST_ROUTES` (+ its 409 column) — and the inline lists |
+| `handler.mjs` | One function per request: dispatch, gzip, Host/CSRF guards and body cap (before the body is read), static SPA fallback |
+| `state.mjs` | `webState` — the resolved install view every endpoint reads, with its cached inventory and doctor |
+| `catalog.mjs` | The Library read model: inventory, constitution tiers, memory/notebook/wiki/config items, `apiCatalog`/`apiItem`, `NotFound` |
+| `api.mjs` | The dashboard and settings reads: overview, recent, themes, setup, doctor, diff, installs, excludes, loops |
+| `user-files.mjs` | The fingerprint-guarded editors for `user-rules.md` (incl. memory promotion) and `PROFILE.md`, read and write |
+| `actions.mjs` | The other mutating endpoints — memory delete, MCP, excludes, installs, view, restore — plus install/deploy argv |
 | `daemon.mjs` | Detached web start/stop/status/restart, the `.geneseed-web.json` record, and `openUrl` |
 | `jobs.mjs` | `JobManager` and the action→argv table. The only module here that spawns job children |
 | `docs.mjs` | The Docs tab: the `docs/<folder>/` page registry, `?harness=` filtering, link rewriting, the six page kinds |
@@ -232,4 +236,4 @@ and inline lists are held against a surface list written out in
 | a hook verb | `js/hosts/hooks.mjs` (a gate) or its own `js/hosts/hooks-<verb>.mjs` | `claudeHookGroups` in `settings.mjs`, the `VERBS` row (with its `load`) in `bin/geneseed-hook.mjs`. Keep the import graph tiny |
 | a console doc page | `docs/<understand|guides|concepts|reference>/<id>.md` — the stem is the id | `docs/extending.md` §4c. Only `kind: "concept"` gets `{N_*}` substitution |
 | an OpenCode plugin | `adapters/opencode/plugins/geneseed-<name>.js` | `docs/extending.md` §4a — the `geneseed-` prefix is mechanically load-bearing |
-| to change a `js/lib/` primitive | `tests/fixtures/pure_probe.mjs` **first** | the docblock says which Node default it deliberately departs from — change that sentence too, or the next reader restores the default |
+| to change a `js/lib/` primitive | `tests/unit/lib_primitives.test.mjs` **first** | the docblock says which Node default it deliberately departs from — change that sentence too, or the next reader restores the default |

package/js/build/args.mjs

@@ -10,7 +10,9 @@ import { existsSync, readFileSync } from 'node:fs';
 import { parseArgs as nodeParseArgs } from 'node:util';
 import { withPlatformNewlines } from '../lib/fs.mjs';
 import path from 'node:path';
-import { CONFIG, discoverNames, PACK_ORDER, knownRuleIds } from './source.mjs';
+import {
+  CONFIG, discoverNames, PACK_ORDER, knownRuleIds, knownSkillIds, linkedSkillIds,
+} from './source.mjs';
 // The loop engine's trust presets — the `--trust` choices. `score.mjs` imports nothing, which is
 // what lets it sit inside this module's `child_process` ban.
 import { DEFAULT_PRESET, PRESETS } from '../loop/score.mjs';
@@ -24,13 +26,13 @@ const EMITS = ['files', 'opencode', 'opencode-global', 'claude', 'claude-global'
  *
  * The corrupt-file branch is reproduced including its imprecision: the warning says only
  * "using theme 'neutral'", but the branch also resets posture and mode. Matching the
- * Python text matters more than fixing it here, because the two CLIs' stderr is compared
- * byte-for-byte by `tests/golden.py` (:316).
+ * Python text mattered more than fixing it here, because the two CLIs' stderr was compared
+ * byte-for-byte by the former Python golden harness; nothing pins the wording now.
  */
 export function configDefaults() {
   const d = {
     theme: 'neutral', posture: 'peer', mode: 'direct', trust: DEFAULT_PRESET,
-    doctrines: [...PACK_ORDER], excludeRules: [],
+    doctrines: [...PACK_ORDER], excludeRules: [], excludeSkills: [],
   };
   if (!existsSync(CONFIG)) return d;
   try {
@@ -93,7 +95,7 @@ export function configDefaults() {
  */
 const VALUED = {
   '--theme': 'theme', '--posture': 'posture', '--mode': 'mode', '--trust': 'trust',
-  '--doctrines': 'doctrines', '--exclude-rules': 'excludeRules',
+  '--doctrines': 'doctrines', '--exclude-rules': 'excludeRules', '--exclude-skills': 'excludeSkills',
   '--out': 'out', '--target': 'out', '--emit': 'emit',
   '--footprint': 'footprint', '--root': 'root', '--config-dir': 'cfgDir',
 };
@@ -177,6 +179,33 @@ function parseExcludeRules(value) {
   return [...new Set(out)].sort();
 }
 
+/**
+ * `--exclude-skills "bruno-test-writer,openscad"` -> the cfg's skill exclusion array.
+ *
+ * Refused, by name: a skill this checkout does not ship (a typo would exclude nothing in
+ * silence), and a skill the constitution or another skill links to by path — excluding it
+ * would ship that link dead (`linkedSkillIds`). Sorted and deduped for marker stability.
+ */
+function parseExcludeSkills(value) {
+  const s = value.trim();
+  if (s === 'none' || s === '') return [];
+  const known = knownSkillIds();
+  const linked = linkedSkillIds();
+  const out = [];
+  for (const name of s.split(',').map((x) => x.trim()).filter(Boolean)) {
+    if (!known.includes(name)) {
+      die(2, `argument --exclude-skills: unknown skill '${name}' (choose from `
+        + `${known.filter((k) => !linked.includes(k)).join(', ')}, or 'none')`);
+    }
+    if (linked.includes(name)) {
+      die(2, `argument --exclude-skills: '${name}' cannot be excluded — the harness links to it `
+        + `by path (protected: ${linked.join(', ')})`);
+    }
+    out.push(name);
+  }
+  return [...new Set(out)].sort();
+}
+
 /**
  * `--doctrines craft,rigor` / `--doctrines none` -> the cfg's pack array.
  *
@@ -271,6 +300,7 @@ export function parseArgs(argv, defaults) {
     trust: defaults.trust,
     doctrines: defaults.doctrines,
     excludeRules: defaults.excludeRules,
+    excludeSkills: defaults.excludeSkills ?? [],
     out: 'Harness', emit: 'files', footprint: 'lean', root: null,
     syncThemes: false, validateOnly: false, verbose: false,
   };
@@ -314,6 +344,7 @@ export function parseArgs(argv, defaults) {
   // already the array `configDefaults` built, and re-parsing an array would stringify it.
   if (typeof args.doctrines === 'string') args.doctrines = parseDoctrines(args.doctrines);
   if (typeof args.excludeRules === 'string') args.excludeRules = parseExcludeRules(args.excludeRules);
+  if (typeof args.excludeSkills === 'string') args.excludeSkills = parseExcludeSkills(args.excludeSkills);
   return args;
 }
 
@@ -325,7 +356,8 @@ export function parseArgs(argv, defaults) {
  * `--validate-only` reads exactly the flags `build.py`'s parser already produced, so the port
  * hands the CLI this parser rather than a second one beside it. That is not tidiness: a
  * hand-rolled copy would have its own `--target` alias, its own `choices` lists and its own
- * `-h`, and `test_the_help_text_names_every_flag_the_reference_takes` gates only this one.
+ * `-h`, and `tests/unit/node_driver.test.mjs`'s '--help names every flag the parser takes' gates only
+ * this one.
  *
  * `withPlatformNewlines` because the refusal and `-h` paths WRITE: called from `bin/build-driver.mjs`
  * they sit inside `main`'s funnel, and called from the CLI binary they would not.

package/js/build/bundle.mjs

@@ -12,9 +12,9 @@
  */
 import path from 'node:path';
 import { VERSION_MARKER } from '../hosts/hosts.mjs';
-import { copyFile, readText, writeText } from '../lib/fs.mjs';
+import { copyFile, isDir, isFile, readText, writeText } from '../lib/fs.mjs';
 import { jsonDumpsIndent, parseJson, formatReprAscii, isTruthy } from '../lib/json.mjs';
-import { OWNED_SRC_DIRS, SRC_DIRS_MARKER, TMPL_SPEC_RE, isDir, isFile } from './emit-common.mjs';
+import { OWNED_SRC_DIRS, SRC_DIRS_MARKER, TMPL_SPEC_RE } from './emit-common.mjs';
 import { SRC_DIR_TOKENS, renderAll } from './render.mjs';
 import {
   ensureBundleGitignore, ensureContextStub, ensureMemoryIndex, ensureNotebookIndex,
@@ -114,16 +114,9 @@ function safePriorDirName(out, priorName) {
 // build
 // ---------------------------------------------------------------------------
 
-/**
- * `_build_render.build` — render the bundle into `out`.
- *
- * `out` arrives as the STRING Python already resolved, and is echoed into the progress
- * lines verbatim: Python interpolates `str(Path)`, which is backslash-separated on
- * Windows, and re-deriving it here would differ by separator in every message.
- */
 /**
  * THE PHASE BOUNDARY MARKER — T8, and the whole of what this port owes
- * `tests/test_emit_phase_order.py`.
+ * `tests/unit/emit_phase_order.test.mjs`.
  *
  * Every emit runs its stages in one order: RENDER* → WIRE* → PRUNE → MANIFEST → VERIFY. RENDER
  * writes files Geneseed owns wholesale; WIRE reconciles files the USER co-owns (the
@@ -156,6 +149,13 @@ export function phaseLog(phase) {
   process.stderr.write(`[geneseed:phase] ${phase}\n`);
 }
 
+/**
+ * `_build_render.build` — render the bundle into `out`.
+ *
+ * `out` arrives as the STRING Python already resolved, and is echoed into the progress
+ * lines verbatim: Python interpolates `str(Path)`, which is backslash-separated on
+ * Windows, and re-deriving it here would differ by separator in every message.
+ */
 export function build(cfg, themeName, out, { footprint = 'full', nativeCatalog = false } = {}) {
   phaseLog('RENDER');
   const { theme, items } = renderAll(cfg, themeName, { footprint, nativeCatalog });

package/js/build/driver.mjs

@@ -42,6 +42,7 @@ import { settingsIntegrityCheck } from '../hosts/settings.mjs';
 import { hookRunnerEntry } from '../hosts/shim.mjs';
 import { writeText, withPlatformNewlines, isFile } from '../lib/fs.mjs';
 import { parseJson, jsonDumpsIndent } from '../lib/json.mjs';
+import { relPosix } from '../lib/text.mjs';
 // P5c moved these out of this file: `bin/geneseed-cli.mjs` needs the same four resolvers to
 // find a global install, and a resolver that decides WHERE a driver writes is the last thing
 // that should exist twice. golden.py's 259 cells are what made the move safe to attempt.
@@ -90,7 +91,8 @@ const PRIMARY_AGENT_SRC = path.join(ROOT, 'adapters', 'opencode', 'agents', 'orc
  *  It is invisible on a machine whose paths are already canonical, which is every machine
  *  this ran on until GitHub's Windows runner handed it a `C:\\Users\\RUNNER~1\\...` and the
  *  two CLIs printed the same directory under two different names — a 70-byte difference in a
- *  line compared BYTE for byte by `test_the_two_entry_points_agree_on_stdout_BYTES`. The
+ *  line the former Python suite compared BYTE for byte; `tests/unit/resolve_out.test.mjs` pins
+ *  it now. The
  *  argument to `resolvePath` is made absolute first so its `expanduser` cannot fire: the
  *  reference does not expand `~` here, and a bare `~` is a legal directory name. */
 export function resolveOut(raw) {
@@ -149,10 +151,10 @@ function warnBobGlobalOverProject() {
  * would be written into `opencode.json`'s instruction path.
  */
 function relUnder(out, root) {
-  const rel = path.relative(root, out);
+  const rel = relPosix(root, out);
   if (rel === '' || rel === '.') return '';
   if (rel.startsWith('..') || path.isAbsolute(rel)) return '';
-  return rel.split(path.sep).join('/');
+  return rel;
 }
 
 /**
@@ -255,7 +257,7 @@ function projectSurvivors(emitName) {
  * RENDER and WIRE already ran in Node before P4; what lived only in Python was the stage
  * either side of them: reading the previous manifest (PRE), pruning what this layer no
  * longer owns, writing the manifest atomically, and the summary line. All five stages now
- * run in one process, in the order `test_emit_phase_order.py` pins for the Python twin:
+ * run in one process, in the order `tests/unit/emit_phase_order.test.mjs` pins:
  * RENDER -> WIRE -> PRUNE -> MANIFEST -> VERIFY (opencode has no VERIFY; it writes no
  * settings file of its own).
  */
@@ -511,9 +513,8 @@ const claudeShaped = (name) => (cfg, args, out) => {
 
 /**
  * build.py:437-466 — the POST stage, which writes markers and records the install and
- * wires NOTHING. `test_the_post_emit_stage_wires_nothing` classifies that stage on the
- * Python side; this is the same stage on this side, and it stays after the dispatch for
- * the same reason.
+ * wires NOTHING. `tests/unit/emit_phase_order.test.mjs`'s 'the post-emit marker stage wires
+ * nothing' classifies it, and that is why it stays after the dispatch.
  *
  * `writeText`, never `writeFileSync`: Python's `Path.write_text` opens in text mode with
  * `newline=None` and translates the trailing `\n` to CRLF on Windows. A marker written
@@ -595,16 +596,17 @@ const PROJECT_EMITS = {
  * mode readers return `null` for "undetectable" too, which an explicit `posture: null` would
  * carry straight past the parameter default.
  */
-function axesCfg({ posture, mode, trust, doctrines, excludeRules }) {
+function axesCfg({ posture, mode, trust, doctrines, excludeRules, excludeSkills }) {
   return makeCfg({
     ...(posture ? { posture } : {}), ...(mode ? { mode } : {}), ...(trust ? { trust } : {}),
     ...(doctrines ? { doctrines } : {}), ...(excludeRules ? { excludeRules } : {}),
+    ...(excludeSkills ? { excludeSkills } : {}),
   });
 }
 
 export function emitProjectInto(host, {
   theme, out, root, footprint = 'full', posture = null, mode = null, trust = null,
-  doctrines = null, excludeRules = null,
+  doctrines = null, excludeRules = null, excludeSkills = null,
 }) {
   const emit = PROJECT_EMITS[host];
   // The axes ride the same rail into every `*Into`, and for the same reason: a drift reader
@@ -612,7 +614,7 @@ export function emitProjectInto(host, {
   // edited on every narrowed install, and `validate --doctrines craft` that ignored its flag
   // checked an all-packs render nobody asked for.
   return withPlatformNewlines(() => emit(
-    axesCfg({ posture, mode, trust, doctrines, excludeRules }), { theme, footprint, root }, out,
+    axesCfg({ posture, mode, trust, doctrines, excludeRules, excludeSkills }), { theme, footprint, root }, out,
   ));
 }
 
@@ -626,15 +628,15 @@ export function emitProjectInto(host, {
  */
 export function buildInto({
   theme, out, footprint = 'lean', posture = null, mode = null, trust = null, doctrines = null,
-  excludeRules = null,
+  excludeRules = null, excludeSkills = null,
 }) {
-  return withPlatformNewlines(() => build(axesCfg({ posture, mode, trust, doctrines, excludeRules }),
+  return withPlatformNewlines(() => build(axesCfg({ posture, mode, trust, doctrines, excludeRules, excludeSkills }),
     theme, out, { footprint, nativeCatalog: false }));
 }
 
 export function emitGlobalInto(host, {
   theme, out, cfgDir, footprint, posture = null, mode = null, doctrines = null, trust = null,
-  excludeRules = null,
+  excludeRules = null, excludeSkills = null,
 }) {
   // `build.HOSTS.get(host, build.HOSTS["opencode"])` — an unknown host falls back rather than
   // raising, because the host comes from a marker file a user can edit.
@@ -650,7 +652,7 @@ export function emitGlobalInto(host, {
   // edited on every install that chose a register, narrowed its packs or excluded a rule —
   // the same scar the footprint left in `diffCollect`, one axis over each time.
   return withPlatformNewlines(() => emit(
-    axesCfg({ posture, mode, trust, doctrines, excludeRules }),
+    axesCfg({ posture, mode, trust, doctrines, excludeRules, excludeSkills }),
     { theme, footprint, root: null, cfgDir }, out,
   ));
 }

package/js/build/emit-claude.mjs

@@ -14,10 +14,11 @@ import {
   unwireClaudeExcludes, unwireClaudeSettings, wireClaudeExcludes,
 } from '../hosts/settings.mjs';
 import { writeText } from '../lib/fs.mjs';
-import { isTruthy } from '../lib/json.mjs';
+import { get, isDict, isTruthy } from '../lib/json.mjs';
+import { relPosix } from '../lib/text.mjs';
 import { assertSourceComplete, phaseLog } from './bundle.mjs';
 import {
-  get, globalMemory, globalNotebook, isDict, relPosix, shipLeanLaws, stripCapabilityLinks,
+  globalMemory, globalNotebook, shipLeanLaws, stripCapabilityLinks,
 } from './emit-common.mjs';
 import { renderAll, renderFile } from './render.mjs';
 import {

package/js/build/emit-common.mjs

@@ -10,18 +10,11 @@
  * `emit-claude.mjs` do that; `bundle.mjs` renders the bundle they read from.
  */
 import path from 'node:path';
-import { copyFile, writeText, isFile, isDir } from '../lib/fs.mjs';
-import { get, isDict } from '../lib/json.mjs';
+import { copyFile, writeText, isDir } from '../lib/fs.mjs';
+import { relPosix } from '../lib/text.mjs';
 import { SRC_DIR_TOKENS, destRel } from './render.mjs';
 import { mkdirSync, readdirSync, cpSync } from 'node:fs';
 
-// `isFile`/`isDir`/`get`/`isDict` are owned by `js/lib` now (single owner across `hosts/`,
-// `build/`, `inspect/` and `web/` — layering forbids `build/` reaching into `inspect/scan.mjs`
-// for them, so `js/lib` is the one home both sides can reach). Re-exported here so this
-// module's own existing callers (`emit-claude.mjs`, `emit-opencode.mjs`, `version.mjs`,
-// `bundle.mjs`) keep importing them from `./emit-common.mjs` unchanged.
-export { isFile, isDir, get, isDict };
-
 /** `_build_render.SRC_DIRS_MARKER`. */
 export const SRC_DIRS_MARKER = '.geneseed-srcdirs.json';
 /**
@@ -79,11 +72,6 @@ export function rglobFiles(root) {
     .map((d) => path.join(d.parentPath, d.name));
 }
 
-/** `p.relative_to(base).as_posix()`. */
-export function relPosix(base, p) {
-  return path.relative(base, p).split(path.sep).join('/');
-}
-
 /**
  * `_build_emit._strip_capability_links` — `re.sub(r"\1")`, so the pattern needs `g`.
  *

package/js/build/emit-opencode.mjs

@@ -8,16 +8,17 @@
  */
 import path from 'node:path';
 import { VERSION_MARKER } from '../hosts/hosts.mjs';
-import { loadAgentOverrides, writeNativeLayer } from '../hosts/native.mjs';
+import { claimer, loadAgentOverrides, writeNativeLayer } from '../hosts/native.mjs';
 import {
   copyPlugins, copyWorkflows, ensureAgentOverridesStub, writeColorThemes, writeCommandLayer,
   writePonytailCommand, writePrimaryAgent, writeTheme,
 } from '../hosts/opencode.mjs';
 import { mergeOpencodeJson } from '../hosts/settings.mjs';
-import { readText, writeText } from '../lib/fs.mjs';
+import { isFile, readText, writeText } from '../lib/fs.mjs';
+import { relPosix } from '../lib/text.mjs';
 import { assertSourceComplete, build, phaseLog } from './bundle.mjs';
 import {
-  globalMemory, globalNotebook, isFile, relPosix, shipLeanLaws, stripCapabilityLinks,
+  globalMemory, globalNotebook, shipLeanLaws, stripCapabilityLinks,
 } from './emit-common.mjs';
 import { renderAll } from './render.mjs';
 import {
@@ -56,17 +57,20 @@ function opencodeLayer(cfg, items, themeName, theme, dir, owned, opts) {
   } = opts;
   ensureAgentOverridesStub(cfg, overridesDir);
   const overrides = loadAgentOverrides(overridesDir);
+  // One claim for every writer below whose path lands in `owned` — see `claimer`.
+  const claim = claimer(oldOwned, dir, manifestExisted);
 
   const { nAgents, nSkills, written } = writeNativeLayer(
     items, path.join(dir, 'agents'), path.join(dir, 'skills'), overrides,
-    { host: 'opencode', oldOwned, cfg: dir, manifestExisted, theme, src: cfg.src });
+    { host: 'opencode', theme, src: cfg.src, claim });
   for (const p of written) owned.push(relPosix(dir, p));
 
-  const primary = writePrimaryAgent(cfg, path.join(dir, 'agents'), overrides);
+  const primary = writePrimaryAgent(cfg, path.join(dir, 'agents'), overrides, claim);
   if (primary) owned.push(relPosix(dir, primary));
 
-  const commands = writeCommandLayer(cfg, items, path.join(dir, 'command'));
-  commands.push(writePonytailCommand(path.join(dir, 'command')));   // always-on /ponytail
+  const commands = writeCommandLayer(cfg, items, path.join(dir, 'command'), claim);
+  const ponytail = writePonytailCommand(path.join(dir, 'command'), claim);   // always-on /ponytail
+  if (ponytail) commands.push(ponytail);
   for (const p of commands) owned.push(relPosix(dir, p));
 
   owned.push(relPosix(dir, writeTheme(path.join(dir, 'themes'), themeName, theme)));
@@ -97,7 +101,7 @@ function opencodeLayer(cfg, items, themeName, theme, dir, owned, opts) {
  * manifest is the DRIVER's stage: it reads the file, hands the prior claim in, and prunes
  * and rewrites it after this returns. One owner of the file, and this function is not it.
  *
- * `nativeCatalog` likewise arrives decided. It is `HOSTS['opencode']['native_catalog']` from
+ * `nativeCatalog` likewise arrives decided. It is `hostCatalogsNatively('opencode')` from
  * `js/hosts/hosts.mjs`, resolved by the driver before the call; passing the decision rather
  * than re-reading the registry keeps one owner of it.
  */