geneseed 3.8.0 → 3.10.0

package/docs/web/harnesses.md

@@ -4,26 +4,26 @@ order: 4
 title: "Supported harnesses"
 kind: "concept"
 ---
-One source, **six emit targets** — each with a per-repo and a global (`-global`) variant, plus a portable `files` bundle any `AGENT.md`-aware tool can read. **OpenCode** runs its own engine (JS plugins, colour themes, LSP); **Claude Code**, **Bob**, **Copilot**, and **OpenClaude** share one Claude-shaped engine that diverges only by host dialect.
+One source, **five emit targets** — each with a per-repo and a global (`-global`) variant, plus a portable `files` bundle any `AGENT.md`-aware tool can read. **OpenCode** runs its own engine (JS plugins, colour themes, LSP); **Claude Code**, **Bob**, and **OpenClaude** share one Claude-shaped engine that diverges only by host dialect.
 
-The harness *content* — the constitution (Ethos, Rules, Doctrines), Agents, Skills, Memory, and the preamble voice — is **identical on every host**: one build renders the same text for all six targets. What differs is how much of it the host can *automate* (via plugins or hooks) versus carry as preamble discipline.
+The harness *content* — the constitution (Ethos, Rules, Doctrines), Agents, Skills, Memory, and the preamble voice — is **identical on every host**: one build renders the same text for all five targets. What differs is how much of it the host can *automate* (via plugins or hooks) versus carry as preamble discipline.
 
-| Capability | OpenCode | Claude | Bob | Copilot | OpenClaude |
-| --- | :---: | :---: | :---: | :---: | :---: |
-| Agents · Skills · Memory | ✅ | ✅ | ✅ | ✅ | ✅ |
-| Context injection | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 📄 preamble | 🪝 hook² |
-| Memory write-back (learn) | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 📄 preamble | 🪝 hook² |
-| Git-gate consent (Doctrine process 5) | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 📄 preamble | 🪝 hook² |
-| Sovereign-repo excludes | ⚙️ plugin | ✅ | ✅ | ➖ | ✅ |
-| MCP server wiring | ✅ | ✅ | ✅ | ✅ | ✅ |
-| Colour themes | ✅ | ➖ | ➖ | ➖ | ➖ |
-| LSP · workflows · primary-agent · `/`-commands | ✅ | ➖ | ➖ | ➖ | ➖ |
+| Capability | OpenCode | Claude | Bob | OpenClaude |
+| --- | :---: | :---: | :---: | :---: |
+| Agents · Skills · Memory | ✅ | ✅ | ✅ | ✅ |
+| Context injection | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 🪝 hook² |
+| Memory write-back (learn) | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 🪝 hook² |
+| Git-gate consent (Consent Before Push) | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 🪝 hook² |
+| Sovereign-repo excludes | ⚙️ plugin | ✅ | ✅ | ✅ |
+| MCP server wiring | ✅ | ✅ | ✅ | ✅ |
+| Colour themes | ✅ | ➖ | ➖ | ➖ |
+| LSP · workflows · primary-agent · `/`-commands | ✅ | ➖ | ➖ | ➖ |
 
 ✅ native · ⚙️ OpenCode plugin · 🪝 `settings.json` hook · 📄 preamble prose only · ➖ no host mechanism (harness discipline still applies). ¹ Bob honours Claude-dialect hooks best-effort — inert if unsupported, harness still holds via the preamble. ² OpenClaude is a Claude Code fork: Claude's hooks verbatim, under `~/.openclaude` or a repo's `.openclaude/`.
 
-**The git-gate row is the one capability that is not always present**, on any host. It implements **Doctrine process 5**, so it is wired only on an install that built the **process** [doctrine pack](#/docs/setup-choices) in — drop that pack and the boundary drops with it, because a gate that keeps asking for a rule the install never adopted is a gate arguing with its own harness. One asymmetry: on OpenCode that holds for a *fresh* install, but a pack-off rebuild of an install whose `opencode.json` already carries a `git commit*` entry leaves it in place and reports it — Geneseed cannot tell its own entry from one you typed, so it removes neither ([doctrine packs](#/docs/setup-choices)). The invariant-territory refusals in the same neighbourhood (`rm -rf`, a force-push) are the Rules' territory, not the pack's, and stay in every build.
+**The git-gate row is the one capability that is not always present**, on any host. It implements **Consent Before Push** (`process 5`), so it is wired only on an install that built the **process** [doctrine pack](#/docs/setup-choices) in — drop that pack and the boundary drops with it, because a gate that keeps asking for a rule the install never adopted is a gate arguing with its own harness. One asymmetry: on OpenCode that holds for a *fresh* install, but a pack-off rebuild of an install whose `opencode.json` already carries a `git commit*` entry leaves it in place and reports it — Geneseed cannot tell its own entry from one you typed, so it removes neither ([doctrine packs](#/docs/setup-choices)). The invariant-territory refusals in the same neighbourhood (`rm -rf`, a force-push) are the Rules' territory, not the pack's, and stay in every build.
 
-**No host drops an Agent, Skill, or the memory convention.** The asymmetry is otherwise entirely in *automation mechanism*: OpenCode's plugins and Claude/Bob/OpenClaude's hooks enforce a few of these rules for you at the tool boundary, where **Copilot** (no hook mechanism) enforces them through preamble discipline. The OpenCode-only extras (themes, LSP, workflow runner, primary-agent) have no analogue on a Claude-shaped host.
+**No host drops an Agent, Skill, or the memory convention.** The asymmetry is otherwise entirely in *automation mechanism*: OpenCode's plugins and Claude/Bob/OpenClaude's hooks enforce a few of these rules for you at the tool boundary; what no host can automate rides the preamble. The OpenCode-only extras (themes, LSP, workflow runner, primary-agent) have no analogue on a Claude-shaped host.
 
 ---
 

package/docs/web/install-quick.md

@@ -18,7 +18,7 @@ To keep the command around: `npm install -g geneseed`, then plain `geneseed …`
 
 ### 2. Open your agent
 
-Open OpenCode (or Claude Code, Bob, Copilot, OpenClaude, or any `AGENT.md`-aware tool) in any repo. The first reply opens with the readiness sigil (`✅` neutral / `🧬` imperial / your theme's equivalent) and your project's docs are already in context.
+Open OpenCode (or Claude Code, Bob, OpenClaude, or any `AGENT.md`-aware tool) in any repo. The first reply opens with the readiness sigil (`✅` neutral / `🧬` imperial / your theme's equivalent) and your project's docs are already in context.
 
 ### Prefer a clone?
 

package/docs/web/plugin-guard.md

@@ -6,9 +6,9 @@ kind: "concept"
 ---
 Enforces the safety Laws at the tool boundary (`tool.execute.before`) — the same *enforce by injection, don't just instruct* stance as the context plugin. The guard ships whole on every install, whatever [doctrine packs](#/docs/setup-choices) it built in — its blocking arms are **invariant** territory, and the speed-bump below is about which store a note belongs in, which is your call either way. The one boundary that does follow a pack is the commit/push consent gate, and that lives in the permission block rather than here. High-confidence patterns only, so legitimate work is never caught:
 
-- **Blocks** — writes to private-key / credential files (**Law I**), catastrophic shell like `rm -rf /` (**Law IV**), and any mutation under a declared wiki's `protected` folders (AGENT.md §8, from `wiki.jsonc`).
+- **Blocks** — writes to private-key / credential files (**Sealed Secrets**), catastrophic shell like `rm -rf /` (**Deletion Is Deliberate**), and any mutation under a declared wiki's `protected` folders (AGENT.md §8, from `wiki.jsonc`).
 - **Warns** (logged, allowed) — `.env` writes and force-push.
-- **Speed-bumps** — the *first* write to `user-rules.md` or a memory file is refused, naming **Doctrine process 1**: a standing rule or a durable fact is the user's call, settled through the rule skill. A re-issued write goes through, so a legitimate write is never trapped. (On Claude Code and Bob the same guard is a `geneseed-hook rule-gate` hook, which can *ask* the user instead of refusing — OpenCode's `tool.execute.before` has no ask tier.)
+- **Speed-bumps** — the *first* write to `user-rules.md` or a memory file is refused, naming **Persist Insight**: a standing rule or a durable fact is the user's call, settled through the rule skill. A re-issued write goes through, so a legitimate write is never trapped. (On Claude Code and Bob the same guard is a `geneseed-hook rule-gate` hook, which can *ask* the user instead of refusing — OpenCode's `tool.execute.before` has no ask tier.)
 
 ### Install
 

package/docs/web/rules.md

@@ -13,7 +13,7 @@ The agent's standing rules come in **three tiers**, and the tier decides how a r
 
 ### Invariants — always on
 
-{N_LAWS} rules in `src/laws/universal.md`, numbered in Roman from `I`: sealed secrets, one intent per act, verify before asserting, deliberate deletion, surface failures, data not orders, least privilege, cure the cause, and the external gate. They hold in every task and every repository, they are never traded away, and no install can switch one off. Cited by numeral — `Rule IV`.
+{N_LAWS} rules in `src/laws/universal.md`, numbered in Roman from `I`: sealed secrets, one intent per act, verify before asserting, deliberate deletion, surface failures, data not orders, least privilege, cure the cause, and echo the intent. They hold in every task and every repository, they are never traded away, and no install can switch one off. Cited by name — *Deletion Is Deliberate* — never by numeral: the numeral is only the rule's position, and it moves when a rule before it is removed.
 
 ### Doctrines — chosen at build time
 

package/docs/web/themes-author.md

@@ -11,8 +11,8 @@ A theme is one JSON file under `themes/` declaring voice tokens only: `BANNER`,
 
 Every rule in the constitution gets its title from a theme key, and a theme that omits one ships a rule with a blank heading:
 
-- `LEX_I`…`LEX_IX` — one title per invariant. `doctor` holds this to an **equality**, not mere presence: a `LEX_*` outside `I`–`IX` is a title for a rule that does not exist and fails the check too.
-- `DOC_*` — one title per doctrine rule, named after its address (`DOC_CRAFT_1`, `DOC_PROCESS_5`, …). `doctor` reads the pack files under `src/doctrines/` and requires exactly the set they name — a missing one is a blank heading, an extra one is a dead key.
+- `LEX_<ID>` — one title per invariant, keyed by the law's permanent id (`LEX_VERIFY_BEFORE_ASSERTING`), never by its number. `doctor` holds this to an **equality**, not mere presence: a `LEX_*` no law declares is a title for a rule that does not exist and fails the check too.
+- `DOC_<ID>` — one title per doctrine rule, keyed by its id (`DOC_AUTOMATE_REPETITION`, `DOC_CONSENT_BEFORE_PUSH`, …). `doctor` reads the pack files under `src/doctrines/` and requires exactly the set they declare — a missing one is a blank heading, an extra one is a dead key. A title is the rule's heading only: a citation of the rule renders as its English principle name in every voice.
 - `PACK_*` — one name per pack (`PACK_CRAFT`, `PACK_RIGOR`, `PACK_OPS`, `PACK_PROCESS`, `PACK_COMMS`), used for the pack's own sub-heading.
 
 The Ethos section names are **not** theme keys: a citation reads `({{ONTOLOGY}}: {{ONT_TELOS}})`, token on both sides, so heading and reference always move together. They live in the build's fixed structure table and you neither declare nor rename them.

package/docs/web-ui.md

@@ -120,7 +120,7 @@ streams the output of background jobs and keeps their history across reloads.
 - **Docs** (`#/docs`) — rendered documentation: markdown pages, concept pages, a CLI
   reference (generated from the harness argument parser), and a glossary, grouped into
   Get started / Core concepts / How-to / MCP servers / Plugins / Reference / Deeper. Filtered
-  for one host family (OpenCode, or Claude Code — which Bob, Copilot and OpenClaude share); with no
+  for one host family (OpenCode, or Claude Code — which Bob and OpenClaude share); with no
   choice stored it follows the deployed install.
 
 ### 🩺 Care
@@ -160,7 +160,7 @@ streams the output of background jobs and keeps their history across reloads.
     global harness goes dormant (hooks stay silent, the global preamble never loads);
     add or remove one here, the web mirror of `harness exclude add|remove|list`.
 - **Settings** (`#/settings`) — a **Console direction** picker (the visual flavour of the
-  console) with a **Dashboard layout** control (Auto follows each theme's designed Status
+  console: Cultivar, Operator, Matrix or Atlas) with a **Dashboard layout** control (Auto follows each theme's designed Status
   lens; Cultivar / Greenhouse / Operator / Journal force one regardless of skin), the
   install snapshot (deployed/target/theme/version/memory store), a Maintenance card (PATH
   link/unlink, uninstall), an offline package download, server controls (Stop), and the

package/harness.config.json

@@ -2,5 +2,5 @@
   "_comment": "version is a human-readable release label only; the canonical identity of an installed harness is the source fingerprint stamped in .geneseed-version (see `harness version`), not this string.",
   "theme": "neutral",
   "product": "Geneseed",
-  "version": "3.8.0"
+  "version": "3.10.0"
 }

package/js/README.md

@@ -37,15 +37,15 @@ as a per-host install at project or global scope.
 
 | module | owns |
 |---|---|
-| `source.mjs` | Where the SOURCE is: `ROOT`/`SRC`/`THEMES`/`CONFIG`, `PACK_ORDER`, rule ids, the cfg object |
+| `source.mjs` | Where the SOURCE is: `ROOT`/`SRC`/`THEMES`/`CONFIG`, `PACK_ORDER`, the rule canon (stable ids → positional numbers, citations → names), the cfg object |
 | `render.mjs` | The pure text pipeline: theme load, `INCLUDE` inlining, CATALOG blocks, `{{TOKENS}}`, dest paths |
 | `bundle.mjs` | `build` — render a theme into a bundle dir, plus the source-completeness refusal. Sits UNDER both emits |
-| `emit-claude.mjs` | The Claude/Bob/Copilot/OpenClaude emit — the render half plus the settings + CLAUDE.md managed-block wire |
+| `emit-claude.mjs` | The Claude/Bob/OpenClaude emit — the render half plus the settings + CLAUDE.md managed-block wire |
 | `emit-opencode.mjs` | The OpenCode emits — a project's `.opencode/` and the global config dir. Deliberate twin of the above |
 | `emit-common.mjs` | Constants, tree walkers, and the three writers BOTH global emits share. Decides no host |
 | `stubs.mjs` | Write-once seed files: context, wiki, rules, excludes, profile, `.gitignore`, memory/notebook indexes |
 | `version.mjs` | The release marker: fingerprint the sources, read/compare/write an install's version, warn on downgrade |
-| `driver.mjs` | The generator driver: `--emit`/`--theme`/`--footprint` flag parsing, the eleven emit targets, per-host emit orchestration, the prune and the manifest. `bin/build-driver.mjs` is only its entry |
+| `driver.mjs` | The generator driver: `--emit`/`--theme`/`--footprint` flag parsing, the nine emit targets, per-host emit orchestration, the prune and the manifest. `bin/build-driver.mjs` is only its entry |
 | `generate.mjs` | CLI verbs `build`, `prompt`, `theme`, `rebuild-all` — the thin face over `driver.mjs` |
 | `catalog.mjs` | `geneseed catalog` — prints the shipped roster. Classifies nothing itself |
 | `themes.mjs` | Maintainer-only `--sync-themes`: inserts `_TEMPLATE.json`'s missing keys into the committed themes |
@@ -66,8 +66,8 @@ user co-owns, and the hook verbs those emitted configs then run.
 
 | module | owns |
 |---|---|
-| `hosts.mjs` | The five host config dirs (opencode/claude/bob/copilot/openclaude), plus `resolvePath`/`expanduser` |
-| `hooks.mjs` | The verbs the emitted hooks run every session: `context`, `git-gate`, `rule-gate`, `tool-gate` (the two gates fused, for Copilot), `learn`. `--host` picks the verdict dialect |
+| `hosts.mjs` | The four host config dirs (opencode/claude/bob/openclaude), plus `resolvePath`/`expanduser` |
+| `hooks.mjs` | The verbs the emitted hooks run every session: `context`, `git-gate`, `rule-gate`, `tool-gate` (the two gates fused, for Bob), `learn`. `--host` picks the verdict dialect |
 | `settings.mjs` | Merges into user-owned `settings.json`/`opencode.json`; owns the hook shim and the managed blocks |
 | `native.mjs` | Capability specs → host-native subagents and skills. The impure half of the emit |
 | `opencode.mjs` | OpenCode-only extras: colour themes, primary agent, `/commands`, plugins, overrides stub |
@@ -182,8 +182,9 @@ and inline lists are held against a surface list written out in
 
 | I want to | open first | then |
 |---|---|---|
-| a doctrine rule | `src/doctrines/<pack>.md` — APPEND, ids run contiguously | `docs/extending.md` §2a — five files, `--sync-themes`, restyle 14 voices by hand. Author BOTH LEAN halves |
-| a law (invariant) | `src/laws/universal.md` — **APPEND, never insert** | `docs/extending.md` §2c. Author both LEAN halves: the lean footprint ships nothing else |
+| a doctrine rule | `src/doctrines/<pack>.md` — `### {{DOCTRINE:<id>}} <Principle>`; the number is its position | `docs/extending.md` §2a — five files, `--sync-themes`, restyle 14 voices by hand. Author BOTH LEAN halves |
+| a law (invariant) | `src/laws/universal.md` — `### {{LAW:<id>}} <Principle>`; cite by id, never by number | `docs/extending.md` §2c. Author both LEAN halves: the lean footprint ships nothing else |
+| to remove or retire a rule | `docs/extending.md` §2e | `RETIRED_RULE_IDS` in `js/build/source.mjs` — a retired id is never reused |
 | a skill or an agent | `src/skills/<name>.md` or `src/agents/<name>.md` | `docs/extending.md` §3 — eight steps. Write the FILE before the table row or the build aborts |
 | a doctor check | `js/inspect/checks-{build,repo,authoring}.mjs` | register with `ran(...)` in `doctor.mjs`, then a PLANTED FAULT in `tests/unit/harness.test.mjs` |
 | a web endpoint | GET → `js/web/api.mjs`; POST → `js/web/actions.mjs` | declare it in `js/web/routes.mjs`; the partition test probes the real handler |

package/js/build/driver.mjs

@@ -1,5 +1,5 @@
 /**
- * The generator driver — flag parsing, the eleven emit targets, and the per-host emit orchestration.
+ * The generator driver — flag parsing, the nine emit targets, and the per-host emit orchestration.
  * `bin/build-driver.mjs` (`geneseed-build`) is only its entry; this module is what the CLI verbs
  * (`build`, `setup`, `migrate`, `doctor`, `diff`, `validate`, the web console) import. It lived in
  * `bin/` until 2026-09, which made nine `js/` modules import upward from a binary.
@@ -51,7 +51,7 @@ import { parseJson, jsonDumpsIndent } from '../lib/json.mjs';
 // that should exist twice. golden.py's 259 cells are what made the move safe to attempt.
 import {
   GLOBAL_MANIFEST, resolvePath, opencodeConfigDir, claudeConfigDir, bobConfigDir,
-  copilotConfigDir, openclaudeConfigDir, hostCatalogsNatively,
+  openclaudeConfigDir, hostCatalogsNatively,
 } from '../hosts/hosts.mjs';
 
 // P5d moved these out of this file for the reason P5c moved the host resolvers: `harness
@@ -71,9 +71,9 @@ import { registryRecord, registryRoots } from '../inspect/registry.mjs';
 // maintainer pair that needs nothing this driver is banned from having.
 import { syncThemes } from './themes.mjs';
 
-/** The eleven `--emit` choices: build.py:337-338's nine, then OpenClaude's pair. */
+/** The nine `--emit` choices: a plain bundle, then a project and a global emit per host. */
 const EMITS = ['files', 'opencode', 'opencode-global', 'claude', 'claude-global',
-  'bob', 'bob-global', 'copilot', 'copilot-global', 'openclaude', 'openclaude-global'];
+  'bob', 'bob-global', 'openclaude', 'openclaude-global'];
 
 /** `_build_emit.PRIMARY_AGENT_SRC`. */
 const PRIMARY_AGENT_SRC = path.join(ROOT, 'adapters', 'opencode', 'agents', 'orchestrator.md');
@@ -497,7 +497,7 @@ export function hookRunnerEntry() {
  * to suppress the GLOBAL preamble of the same host, or null for a host that gets none.
  *
  * `_PREAMBLE_CONFIG_DIR` has exactly one key, so only a `CLAUDE.md` carrier resolves to a
- * value: Bob's and Copilot's `AGENTS.md`, and Copilot's `copilot-instructions.md`, get null.
+ * value: Bob's `AGENTS.md` gets null.
  *
  * Computed HERE and not in the render child, and that is the inverted boundary rule doing
  * real work rather than being restated. P3b's note on the Python original: it resolves
@@ -519,10 +519,8 @@ function preambleExclude(claudeMd, host) {
 /**
  * `_build_global._warn_bob_global_over_project` — informational, never auto-removes.
  *
- * Same shape as `warnCopilotGlobalOverProject` and a DIFFERENT message, because the two
- * hosts differ in what they can promise: Copilot simply stacks both preambles, while Bob's
- * workspace rules may or may not shadow the global copy depending on precedence nothing can
- * verify at emit time — so this text hedges where Copilot's asserts.
+ * The text hedges on purpose: Bob's workspace rules may or may not shadow the global copy,
+ * depending on a precedence nothing can verify at emit time.
  */
 function warnBobGlobalOverProject() {
   const survivors = projectSurvivors('bob');
@@ -646,27 +644,6 @@ function projectSurvivors(emitName) {
   return out;
 }
 
-/**
- * `_build_global._warn_copilot_global_over_project` — purely informational.
- *
- * Copilot documents no exclude or shadow mechanism, so a global preamble and a project
- * one simply stack. UNREACHABLE from every golden cell: each emits into a fresh sandbox
- * whose registry is empty, so `projectSurvivors` is always `[]` and this never prints.
- * Reaching it needs a project emit registered BEFORE a global one in the same sandbox.
- */
-function warnCopilotGlobalOverProject() {
-  const survivors = projectSurvivors('copilot');
-  if (!survivors.length) return;
-  process.stderr.write(
-    `[geneseed] WARN: ${survivors.length} project Copilot install(s) already exist — `
-    + 'emitting GLOBAL now means BOTH preambles load together in those repos '
-    + '(doubled context): Copilot stacks ~/.copilot/copilot-instructions.md on top '
-    + "of a repo's own AGENTS.md. Review and remove what you don't want:\n");
-  for (const root of survivors) {
-    process.stderr.write(`  - ${root}  ->  geneseed uninstall --target "${root}"\n`);
-  }
-}
-
 /**
  * `_build_emit.emit_opencode` — the driver body, which is what this phase actually ports.
  *
@@ -776,22 +753,14 @@ function emitOpencodeGlobal(cfg, args, out) {
 }
 
 /**
- * `_build_global._emit_claude_core` — the shared engine behind six emits.
- *
- * Only the two Copilot ones run through it so far, and that is a deliberate split rather
- * than an arbitrary stopping point: `js/build/emit-claude.mjs's wire` gates the entire settings/hook path
- * behind `if (!isCopilot)`, so a Copilot emit never reaches `hookPrefix` and therefore never
- * needs `hookOpts` — the pair of machine-absolute values (`sys.executable` and the harness
- * entry point) that a Node driver has no way to produce. Copilot crossing first isolates
- * this driver body from that question entirely.
+ * `_build_global._emit_claude_core` — the shared engine behind six emits (Claude, Bob and
+ * OpenClaude, each per-repo and global).
  *
- * `hookOpts` is OMITTED for a host that does not wire hooks, rather than passed as `{}` or
- * `null`. If a future change ever routed a Copilot emit into the hook path, `hookPrefix()`
- * would receive `undefined`, hit its own default and throw the error it was built to throw
- * — where `null` would raise an unrelated TypeError and `{}` would bake the literal string
- * `"undefined"` into the shim and silently kill every hook in the install. Fail loud, on
- * purpose. The four hook-writing hosts pass a real pair from `hookRunnerEntry()`, which
- * cannot fail to produce one — `process.execPath` is the node already running.
+ * Every caller passes a real `hookOpts` pair from `hookRunnerEntry()`, which cannot fail to
+ * produce one — `process.execPath` is the node already running. Were it ever omitted,
+ * `hookPrefix()` would receive `undefined`, hit its own default and throw the error it was
+ * built to throw — where `null` would raise an unrelated TypeError and `{}` would bake the
+ * literal string `"undefined"` into the shim and silently kill every hook in the install.
  */
 function emitClaudeCore(cfg, args, { cfgDir, claudeMd, scope, host, out, hookOpts }) {
   const manifestPath = path.join(cfgDir, GLOBAL_MANIFEST);
@@ -799,12 +768,10 @@ function emitClaudeCore(cfg, args, { cfgDir, claudeMd, scope, host, out, hookOpt
   const oldOwned = (doc && doc.owned) || [];
   const oldManaged = (doc && doc.managed && typeof doc.managed === 'object'
     && !Array.isArray(doc.managed)) ? doc.managed : {};
-  const isCopilot = host === 'copilot';
 
-  // RENDER + WIRE in one child's worth of work. `preambleExclude` is null for every host
-  // but Claude — `_PREAMBLE_CONFIG_DIR` has exactly one key, `CLAUDE.md` — so neither
-  // Copilot carrier filename (copilot-instructions.md, AGENTS.md) resolves to one, and
-  // neither does Bob's. Spelling it as a call rather than a literal is what makes that a
+  // RENDER + WIRE in one child's worth of work. `preambleExclude` is null for every
+  // carrier but `CLAUDE.md` — `_PREAMBLE_CONFIG_DIR` has exactly one key — so Bob's
+  // `AGENTS.md` does not resolve to one. Spelling it as a call rather than a literal is what makes that a
   // measured `null` instead of an assumed one.
   const rendered = emitClaudeRender(cfg, {
     theme: args.theme, cfgDir, claudeMd, scope, host,
@@ -832,8 +799,7 @@ function emitClaudeCore(cfg, args, { cfgDir, claudeMd, scope, host, out, hookOpt
   // VERIFY — re-read the settings file just written and match it against the claims just
   // recorded, so a merge that silently did not stick (a commented file, a mid-flight
   // external edit, a bug in the merge) is loud now instead of surfacing as hooks that
-  // quietly never fire. Copilot's settings have their own shape and their own check; a
-  // Copilot PROJECT emit records no hooks and so checks nothing.
+  // quietly never fire.
   //
   // On the Python driver this stage runs in Python AFTER a Node child did the wiring, which
   // makes it a live cross-implementation check on every build. Here both halves are Node, so
@@ -845,10 +811,8 @@ function emitClaudeCore(cfg, args, { cfgDir, claudeMd, scope, host, out, hookOpt
   // deleting this call is byte-identical in all 259 cells. `test_verify_reports_an_orphaned
   // _geneseed_hook` plants the fault that makes it speak.
   phaseLog('VERIFY');
-  if (!isCopilot || managed.settings_hooks) {
-    settingsIntegrityCheck(
-      path.join(cfgDir, managed.settings_file || 'settings.json'), managed, 'present');
-  }
+  settingsIntegrityCheck(
+    path.join(cfgDir, managed.settings_file || 'settings.json'), managed, 'present');
   return {
     nAgents: stats.nAgents,
     nSkills: stats.nSkills,
@@ -858,38 +822,6 @@ function emitClaudeCore(cfg, args, { cfgDir, claudeMd, scope, host, out, hookOpt
   };
 }
 
-/** `_build_global.emit_copilot` — per-repo: AGENTS.md at the repo root + a `.github/` layer. */
-function emitCopilot(cfg, args, out) {
-  const root = args.root ? resolveOut(args.root) : out;
-  const cfgDir = path.join(root, '.github');
-  const r = emitClaudeCore(cfg, args, {
-    cfgDir, claudeMd: path.join(root, 'AGENTS.md'), scope: 'project', host: 'copilot', out,
-  });
-  process.stdout.write(`[geneseed] copilot (folder) -> ${root}: AGENTS.md + .github/ `
-    + `(${r.nAgents} agents (.agent.md), ${r.nSkills} skills), ${r.memStatus}, `
-    + `${r.nbStatus}. No hooks at project scope (Copilot reads hooks from `
-    + '~/.copilot/settings.json only — the global emit wires them).\n');
-  return cfgDir;
-}
-
-/** `_build_global.emit_copilot_global` — into Copilot's personal config dir (~/.copilot). */
-function emitCopilotGlobal(cfg, args, out) {
-  const cfgDir = args.cfgDir ?? copilotConfigDir();
-  warnCopilotGlobalOverProject();
-  // The hook runner pair, as for Claude and Bob: the global emit is the one Copilot scope
-  // that wires hooks (`~/.copilot/settings.json`), and the shim it bakes is machine-wide.
-  const hookOpts = hookRunnerEntry();
-  const r = emitClaudeCore(cfg, args, {
-    cfgDir, claudeMd: path.join(cfgDir, 'copilot-instructions.md'),
-    scope: 'global', host: 'copilot', out, hookOpts,
-  });
-  process.stdout.write(`[geneseed] copilot-global -> ${cfgDir}: ${r.nAgents} agents (.agent.md), `
-    + `${r.nSkills} skills, copilot-instructions.md, ${r.memStatus}, ${r.nbStatus}, `
-    + `${r.nHooks} hooks (settings.json: sessionStart context, preToolUse gate, agentStop + `
-    + 'preCompact learn); MCP servers go in mcp-config.json.\n');
-  return cfgDir;
-}
-
 /**
  * `_build_global.emit_claude_global` — into Claude Code's global config dir (~/.claude).
  *
@@ -1018,7 +950,7 @@ function writeMarkers(markerDir, emit, footprint) {
     mkdirSync(markerDir, { recursive: true });
     writeText(path.join(markerDir, '.geneseed-emit'), `${emit}\n`);
     // Written for EVERY emit (build.py:443, unconditional), unlike the theme marker:
-    // the claude/bob/copilot PROJECT installs never call build(), so this is their only
+    // the claude/bob/openclaude PROJECT installs never call build(), so this is their only
     // footprint record. Read by harness._footprint_of_dir, which defaults to 'full'.
     writeText(path.join(markerDir, '.geneseed-footprint'), `${footprint}\n`);
   } catch { /* best-effort, exactly as build.py:444-445 — a marker hiccup never fails a build */ }
@@ -1049,14 +981,13 @@ const GLOBAL_EMITS = {
   opencode: emitOpencodeGlobal,
   claude: emitClaudeGlobal,
   bob: emitBobGlobal,
-  copilot: emitCopilotGlobal,
   openclaude: emitOpenclaudeGlobal,
 };
 
 /**
  * The PER-REPO half of the same idea, and `doctor` is its only caller.
  *
- * `_claude_bob_emit_problems` renders `emit_claude`, `emit_bob` and `emit_copilot` into
+ * `_claude_bob_emit_problems` renders `emit_claude`, `emit_bob` and `emit_openclaude` into
  * throwaway sandboxes and scans each — the three emits that write CLAUDE.md/AGENTS.md
  * straight into a repo, and the ones outside doctor's sweep when the skill-table dead links
  * shipped.
@@ -1072,7 +1003,7 @@ const GLOBAL_EMITS = {
  * three-positional call leaves in place, inherited here rather than re-decided.
  */
 const PROJECT_EMITS = {
-  claude: emitClaude, bob: emitBob, copilot: emitCopilot, openclaude: emitOpenclaude,
+  claude: emitClaude, bob: emitBob, openclaude: emitOpenclaude,
   // P2. `opencode` joins the three for `cmdValidate`, which has to be able to render EVERY
   // `--emit` choice into its sandbox and not only the three doctor already scans. Its call
   // shape is `emitClaude`'s exactly — `(cfg, args, out)` — so the row is the whole change.
@@ -1210,7 +1141,7 @@ function run(argv) {
     markerDir = GLOBAL_EMITS[args.emit.slice(0, -'-global'.length)](cfg, args, out);
   } else if (args.emit !== 'files') {
     // The PROJECT emits keep their markers in `out`, not in the host config dir the emit
-    // wrote to (build.py:435-436) — `.github/` is the layer, `out` is the install.
+    // wrote to (build.py:435-436) — `.claude/` is the layer, `out` is the install.
     PROJECT_EMITS[args.emit](cfg, args, out);
   } else {
     // The ninth choice, a plain bundle: `nativeCatalog: false` is build.py:421's
@@ -1223,7 +1154,7 @@ function run(argv) {
   writeMarkers(markerDir, args.emit, args.footprint);
   // build() drops a .geneseed-theme in `out` for the emits that call it; the global emits
   // render into the config dir WITHOUT calling build(), so the theme is recorded here.
-  // Deliberately not written for the claude/bob/copilot PROJECT emits — they carry none,
+  // Deliberately not written for the claude/bob/openclaude PROJECT emits — they carry none,
   // and `_harness_setup._installed_defaults` detects those by an AGENT.md sigil scan
   // instead. Writing one for them would change the emitted tree.
   if (args.emit.endsWith('-global')) {
@@ -1234,7 +1165,7 @@ function run(argv) {
   // An ALLOW-LIST, not "everything that is not global": a plain `--emit files` dev build —
   // the default — must never pollute the registry, and only the four per-repo host emits
   // are ones `_EMIT_HOST_SCOPE` can map back to a row. Records `out`, where the marker is.
-  if (['opencode', 'claude', 'bob', 'copilot', 'openclaude'].includes(args.emit)) {
+  if (['opencode', 'claude', 'bob', 'openclaude'].includes(args.emit)) {
     registryRecord(markerDir);
   }
   return 0;