geneseed 3.8.0 → 3.10.0

package/js/build/emit-claude.mjs

@@ -11,7 +11,7 @@ import { loadAgentOverrides, writeNativeLayer } from '../hosts/native.mjs';
 import { ensureAgentOverridesStub } from '../hosts/opencode.mjs';
 import {
   managedBlockRemove, managedBlockWrite, mergeClaudeSettings,
-  unwireClaudeExcludes, unwireClaudeSettings, unwireCopilotSettings, wireClaudeExcludes,
+  unwireClaudeExcludes, unwireClaudeSettings, wireClaudeExcludes,
 } from '../hosts/settings.mjs';
 import { writeText } from '../lib/fs.mjs';
 import { isTruthy } from '../lib/json.mjs';
@@ -21,7 +21,8 @@ import {
 } from './emit-common.mjs';
 import { renderAll, renderFile } from './render.mjs';
 import {
-  BOB_RULES_STUB, ensureExcludesStub, ensureMemoryIndex, ensureNotebookIndex, ensureProfileStub,
+  BOB_RULES_STUB, ensureContextStub, ensureExcludesStub, ensureMemoryIndex, ensureNotebookIndex,
+  ensureProfileStub,
   ensureRulesStub, ensureWikiStub,
 } from './stubs.mjs';
 import { writeVersion } from './version.mjs';
@@ -36,7 +37,7 @@ import { existsSync, mkdirSync } from 'node:fs';
  * `claudeWire` below for the CLAUDE.md managed-block merge and the settings file. PRUNE,
  * MANIFEST and VERIFY are the driver's, in `bin/build-driver.mjs`.
  *
- * Six emits route through here — claude, bob and copilot at both scopes — so this one
+ * Six emits route through here — claude, bob and openclaude at both scopes — so this one
  * job is what puts two thirds of the matrix on the seam.
  *
  * `claudeMdText` is the payload's one item that is not a file this process wrote. WIRE
@@ -76,9 +77,11 @@ export function emitClaudeRender(cfg, job) {
     // `themed_rel` and `lstripNewlines` are, so the two verdicts stay distinguishable.
     if (!prefix) return tmplItem.text;
     const ptheme = { ...theme };
-    for (const tok of ['DIR_LAWS', 'DIR_AGENTS', 'DIR_SKILLS', 'DIR_MEMORY', 'DIR_NOTEBOOK']) {
+    for (const tok of ['DIR_LAWS', 'DIR_AGENTS', 'DIR_SKILLS', 'DIR_MEMORY', 'DIR_NOTEBOOK',
+      'DIR_DOCTRINES']) {
       ptheme[tok] = prefix + (ptheme[tok] ?? tok.split('_').slice(1).join('_').toLowerCase());
     }
+    ptheme.AT_HARNESS = prefix;
     // Same catalogue decision as the renderAll above — a re-render that forgot it would
     // quietly put the stripped tables back.
     return renderFile(cfg, tmplItem.src, ptheme, footprint, '', new Set(), nativeCatalog);
@@ -87,7 +90,6 @@ export function emitClaudeRender(cfg, job) {
   const owned = [];
   const agentText = items.find((i) => i.rel === 'AGENT.md' && i.text !== null)?.text ?? null;
   const isBob = host === 'bob';
-  const isCopilot = host === 'copilot';
 
   // Bob's always-injected channel is the rules folder. At GLOBAL scope rules/geneseed.md
   // IS the preamble (a global ~/.bob/AGENTS.md is not auto-loaded), and its pointers need
@@ -102,19 +104,30 @@ export function emitClaudeRender(cfg, job) {
   }
 
   ensureAgentOverridesStub(cfg, cfgDir);
-  // Bob's agents/skills use the Claude dialect verbatim; Copilot has its own frontmatter.
+  // Bob gives the model a skill's text but not its directory, so a folder skill's
+  // `<this-skill-directory>` is resolved here. Per repo it is relative to the workspace root,
+  // where Bob runs commands, so a committed `.bob/` stays valid on a teammate's checkout;
+  // globally there is no workspace to be relative to, so it is absolute.
+  const skillDirOf = !isBob ? null
+    : scope === 'project' ? (name) => relPosix(path.dirname(cfgDir), path.join(cfgDir, 'skills', name))
+      : (name) => path.join(cfgDir, 'skills', name);
+  // Bob's and OpenClaude's agents/skills use the Claude dialect verbatim.
   // `manifestExisted` is deliberately not passed: the Python does not pass it either, so
   // the pre-manifest header line is unreachable from this emit on both sides.
   const { nAgents, nSkills, written } = writeNativeLayer(
     items, path.join(cfgDir, 'agents'), path.join(cfgDir, 'skills'),
     loadAgentOverrides(cfgDir),
-    { host: isCopilot ? 'copilot' : 'claude', oldOwned, cfg: cfgDir, src: cfg.src });
+    { host: 'claude', oldOwned, cfg: cfgDir, src: cfg.src, skillDirOf });
   for (const p of written) owned.push(relPosix(cfgDir, p));
 
   const memStatus = globalMemory(cfgDir, items, out, cfg.src);
   ensureMemoryIndex(path.join(cfgDir, 'memory'));
   const nbStatus = globalNotebook(cfgDir, items, out, cfg.src);
   ensureNotebookIndex(path.join(cfgDir, 'notebook'));
+  // context.json too: the root names it as the project's own manifest, and until 2026-10 this
+  // emit never seeded one — the bundle and OpenCode did — so §9 pointed at a file that was not
+  // there. The context hook reads it from this dir (`resolveContextSets`' last candidate).
+  ensureContextStub(cfgDir);
   ensureWikiStub(cfgDir);
   ensureRulesStub(cfgDir);
   ensureProfileStub(cfgDir);
@@ -128,7 +141,7 @@ export function emitClaudeRender(cfg, job) {
     const gi = path.join(cfgDir, '.gitignore');
     const giLines = (host === 'claude' || host === 'openclaude' ? ['settings.local.json']
       : host === 'bob' ? ['settings.json'] : [])
-      .concat(['wiki.jsonc', 'agent-overrides.json']);
+      .concat(['context.json', 'wiki.jsonc', 'agent-overrides.json']);
     if (!existsSync(gi)) {
       writeText(gi, `${giLines.join('\n')}\n`);
       owned.push('.gitignore');
@@ -194,7 +207,6 @@ function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRu
   const old = oldManaged && typeof oldManaged === 'object' && !Array.isArray(oldManaged)
     ? oldManaged : {};
   const isBob = host === 'bob';
-  const isCopilot = host === 'copilot';
   const managed = {};
 
   // CLAUDE.md — Claude auto-loads it by location; merge as a delimited block so any user
@@ -228,80 +240,63 @@ function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRu
   // settings.local.json — the personal, untracked file — never the team-shared
   // settings.json, which would hand every teammate failing hooks pointing at this machine's
   // node and this machine's checkout. (Bob documents no local variant, so it keeps
-  // settings.json.) Copilot's settings are a different shape entirely (one command per
-  // event, no matcher groups) and take the `else` branch below; its PROJECT scope wires
-  // nothing, because the CLI documents hooks in `~/.copilot/settings.json` only and a
-  // machine-absolute hook committed into `.github/` would fail on every teammate's machine.
-  if (!isCopilot) {
-    // Bob GLOBAL: its hooks doc puts the global file at `~/.bob/settings/settings.json`
-    // (nested), where an older emit wrote `~/.bob/settings.json`; the `oldSf !==
-    // settingsName` branch below unwires the old file, so a re-emit migrates. Bob's project
-    // file stays `.bob/settings.json`.
-    const settingsName = scope === 'project' && !isBob ? 'settings.local.json'
-      : isBob && scope === 'global' ? path.join('settings', 'settings.json') : 'settings.json';
-    const settingsPath = path.join(cfgDir, settingsName);
-    mkdirSync(path.dirname(settingsPath), { recursive: true });
-    managed.settings_file = settingsName;
-    // Migration: an older install wired hooks/excludes into a different file — unwire the
-    // recorded claims there, or they linger (and run) forever.
-    const oldSf = get(old, 'settings_file') || 'settings.json';
-    if (oldSf !== settingsName) {
-      unwireClaudeSettings(path.join(cfgDir, oldSf), get(old, 'settings_hooks') || []);
-      unwireClaudeExcludes(path.join(cfgDir, oldSf), get(old, 'settings_excludes') || []);
-    }
-    // The merge prunes recorded groups that are no longer canonical and returns the
-    // COMPLETE current claim set — store it as-is; unioning with prior would resurrect the
-    // stale claims.
-    // `doctrines` decides whether the git-gate group is part of the canonical claim set. It
-    // travels from `cfg` rather than being re-read off the deployment: this is the emit that
-    // DECIDES the install's packs, so the marker on disk is still the previous build's.
-    const [, managedHooks] = mergeClaudeSettings(
-      settingsPath, scope, oldSf === settingsName ? get(old, 'settings_hooks') : null, hookOpts,
-      doctrines, excludeRules, host, cfgDir,
-    );
-    managed.settings_hooks = managedHooks;
+  // settings.json.)
+  // Bob GLOBAL: its hooks doc puts the global file at `~/.bob/settings/settings.json`
+  // (nested), where an older emit wrote `~/.bob/settings.json`; the `oldSf !==
+  // settingsName` branch below unwires the old file, so a re-emit migrates. Bob's project
+  // file stays `.bob/settings.json`.
+  const settingsName = scope === 'project' && !isBob ? 'settings.local.json'
+    : isBob && scope === 'global' ? path.join('settings', 'settings.json') : 'settings.json';
+  const settingsPath = path.join(cfgDir, settingsName);
+  mkdirSync(path.dirname(settingsPath), { recursive: true });
+  managed.settings_file = settingsName;
+  // Migration: an older install wired hooks/excludes into a different file — unwire the
+  // recorded claims there, or they linger (and run) forever.
+  const oldSf = get(old, 'settings_file') || 'settings.json';
+  if (oldSf !== settingsName) {
+    unwireClaudeSettings(path.join(cfgDir, oldSf), get(old, 'settings_hooks') || []);
+    unwireClaudeExcludes(path.join(cfgDir, oldSf), get(old, 'settings_excludes') || []);
+  }
+  // The merge prunes recorded groups that are no longer canonical and returns the
+  // COMPLETE current claim set — store it as-is; unioning with prior would resurrect the
+  // stale claims.
+  // `doctrines` decides whether the git-gate group is part of the canonical claim set. It
+  // travels from `cfg` rather than being re-read off the deployment: this is the emit that
+  // DECIDES the install's packs, so the marker on disk is still the previous build's.
+  const [, managedHooks] = mergeClaudeSettings(
+    settingsPath, scope, oldSf === settingsName ? get(old, 'settings_hooks') : null, hookOpts,
+    doctrines, excludeRules, host, cfgDir,
+  );
+  managed.settings_hooks = managedHooks;
 
-    // Project-bypasses-global (Claude only): a PROJECT install suppresses the GLOBAL
-    // ~/.claude/CLAUDE.md while cwd is this repo, via Claude's native claudeMdExcludes.
-    // Written only when this run actually emitted the project's own preamble (never
-    // suppress with no replacement); GENESEED_STACK_GLOBAL=1 opts out, and a re-emit with
-    // it set strips a prior exclude. Bob never gets one: its bypass is the same-named
-    // workspace rules file.
-    const priorRaw = get(old, 'settings_excludes');
-    const priorExcl = Array.isArray(priorRaw) ? priorRaw : [];
-    if (scope === 'project' && hasAgentText && preambleExclude) {
-      const wantExcl = [preambleExclude];
-      if (process.env.GENESEED_STACK_GLOBAL) {
-        unwireClaudeExcludes(settingsPath, wantExcl);
-        managed.settings_excludes = [];
-      } else {
-        const addedExcl = wireClaudeExcludes(settingsPath, wantExcl);
-        // Claim only what Geneseed itself wired (prior + newly added) — folding `wantExcl`
-        // in unconditionally would claim a user's own pre-existing exclude, and uninstall
-        // would then strip it. `sorted(set(a) | set(b))` — Python sorts strings by code
-        // point and so does the default `Array.sort`, which is why no comparator is passed.
-        managed.settings_excludes = [...new Set([...priorExcl, ...addedExcl])].sort();
-      }
-    } else if (priorExcl.length && isBob) {
-      // Self-heal older Bob installs: earlier versions wrote the global AGENTS.md into
-      // claudeMdExcludes here. The key is Claude-only and its Bob semantics are unknown, so
-      // a re-emit removes it instead of carrying it forward.
-      unwireClaudeExcludes(settingsPath, priorExcl);
-    } else if (priorExcl.length) {
-      managed.settings_excludes = priorExcl;
+  // Project-bypasses-global (Claude only): a PROJECT install suppresses the GLOBAL
+  // ~/.claude/CLAUDE.md while cwd is this repo, via Claude's native claudeMdExcludes.
+  // Written only when this run actually emitted the project's own preamble (never
+  // suppress with no replacement); GENESEED_STACK_GLOBAL=1 opts out, and a re-emit with
+  // it set strips a prior exclude. Bob never gets one: its bypass is the same-named
+  // workspace rules file.
+  const priorRaw = get(old, 'settings_excludes');
+  const priorExcl = Array.isArray(priorRaw) ? priorRaw : [];
+  if (scope === 'project' && hasAgentText && preambleExclude) {
+    const wantExcl = [preambleExclude];
+    if (process.env.GENESEED_STACK_GLOBAL) {
+      unwireClaudeExcludes(settingsPath, wantExcl);
+      managed.settings_excludes = [];
+    } else {
+      const addedExcl = wireClaudeExcludes(settingsPath, wantExcl);
+      // Claim only what Geneseed itself wired (prior + newly added) — folding `wantExcl`
+      // in unconditionally would claim a user's own pre-existing exclude, and uninstall
+      // would then strip it. `sorted(set(a) | set(b))` — Python sorts strings by code
+      // point and so does the default `Array.sort`, which is why no comparator is passed.
+      managed.settings_excludes = [...new Set([...priorExcl, ...addedExcl])].sort();
     }
-  } else if (scope === 'global') {
-    // Copilot's hooks are event → array now, so the Claude merge (append/prune by deep
-    // equality) is the Copilot merge too, recorded under `settings_hooks`. An install from
-    // before that recorded single-slot `copilot_hooks` (the dead `toolCall` event): unwire
-    // those claims first, or they linger in the file forever.
-    const settingsPath = path.join(cfgDir, 'settings.json');
-    managed.settings_file = 'settings.json';
-    const legacy = get(old, 'copilot_hooks');
-    if (Array.isArray(legacy) && legacy.length) unwireCopilotSettings(settingsPath, legacy);
-    const [, managedHooks] = mergeClaudeSettings(settingsPath, scope,
-      Array.isArray(legacy) ? null : get(old, 'settings_hooks'), hookOpts, null, [], host, cfgDir);
-    managed.settings_hooks = managedHooks;
+  } else if (priorExcl.length && isBob) {
+    // Self-heal older Bob installs: earlier versions wrote the global AGENTS.md into
+    // claudeMdExcludes here. The key is Claude-only and its Bob semantics are unknown, so
+    // a re-emit removes it instead of carrying it forward.
+    unwireClaudeExcludes(settingsPath, priorExcl);
+  } else if (priorExcl.length) {
+    managed.settings_excludes = priorExcl;
   }
   return managed;
 }

package/js/build/generate.mjs

@@ -173,7 +173,6 @@ export const DEFAULT_EMIT = new Map([
   ['opencode global', 'opencode-global'], ['opencode project', 'opencode'],
   ['claude global', 'claude-global'], ['claude project', 'claude'],
   ['bob global', 'bob-global'], ['bob project', 'bob'],
-  ['copilot global', 'copilot-global'], ['copilot project', 'copilot'],
   ['openclaude global', 'openclaude-global'], ['openclaude project', 'openclaude'],
 ]);
 

package/js/build/render.mjs

@@ -34,7 +34,7 @@ import { readText } from '../lib/fs.mjs';
 import { parseJson } from '../lib/json.mjs';
 import { normcase, comparePaths } from '../lib/paths.mjs';
 // `js/build/source.mjs` imports nothing but node builtins, so this direction cannot cycle.
-import { PACK_ORDER, readPackText } from './source.mjs';
+import { PACK_ORDER, readPackText, resolveRuleIds } from './source.mjs';
 
 /** Document STRUCTURE is theme-INDEPENDENT — mirrors `_build_render.STRUCTURE`. */
 export const STRUCTURE = {
@@ -42,6 +42,10 @@ export const STRUCTURE = {
   SCRIPT: 'Script', SCRIPTS: 'Scripts',
   DIR_LAWS: 'laws', DIR_AGENTS: 'agents', DIR_SKILLS: 'skills', DIR_MEMORY: 'memory',
   DIR_NOTEBOOK: 'notebook', DIR_ONTOLOGY: 'ontology', DIR_DOCTRINES: 'doctrines',
+  // Where the harness's own files sit, as seen from the root instruction file: empty when they
+  // are its siblings (`files`, OpenCode), `.claude/`-style when the root sits a level above them —
+  // set per emit by `prefixedAgentText` in js/build/emit-claude.mjs, like the DIR_* prefixes.
+  AT_HARNESS: '',
   // Ontology section names. Theme-INDEPENDENT on purpose: a citation reads
   // `({{ONTOLOGY}}: {{ONT_TELOS}})` — token on both sides, so the heading and every
   // reference to it move together and a rename can never desync them.
@@ -216,7 +220,8 @@ function readSource(cfg, p) {
   let seen = SRC_TEXT.get(cfg);
   if (!seen) SRC_TEXT.set(cfg, (seen = new Map()));
   let text = seen.get(p);
-  if (text === undefined) seen.set(p, (text = readText(p)));
+  // Rule ids resolve here, once per file, so every stage after sees the addressed form.
+  if (text === undefined) seen.set(p, (text = resolveRuleIds(readText(p), cfg.src)));
   return text;
 }
 
@@ -250,7 +255,9 @@ export function renderFile(cfg, filePath, theme, footprint = 'full', lawsPrefix
 function registerBody(cfg, theme, dir, selected, fallback) {
   for (const name of [selected, fallback]) {
     const p = path.join(cfg.src, dir, `${name}.md`);
-    if (existsSync(p) && statSync(p).isFile()) return substitute(readText(p), theme).trim();
+    if (existsSync(p) && statSync(p).isFile()) {
+      return substitute(resolveRuleIds(readText(p), cfg.src), theme).trim();
+    }
   }
   return '';
 }

package/js/build/source.mjs

@@ -37,7 +37,7 @@ import path from 'node:path';
  * on raw or folded text, so one behaviour serves both.
  */
 const _packTexts = new Map();
-export function readPackText(file) {
+export function readRawText(file) {
   const key = path.resolve(file);
   const mtime = statSync(file).mtimeMs;
   const hit = _packTexts.get(key);
@@ -47,6 +47,110 @@ export function readPackText(file) {
   return text;
 }
 
+/**
+ * A doctrine pack as the render sees it: ids resolved, so the heading reads
+ * `### {{DOCTRINE}} process 5 — {{DOC_CONSENT_BEFORE_PUSH}}` again. Every reader that keys on the
+ * `<pack> <n>` address (`knownRuleIds`, the exclusion filter, the survives gate) goes through
+ * here and keeps working unchanged — the address is computed, only the source stopped typing it.
+ */
+export function readPackText(file) {
+  return resolveRuleIds(readRawText(file), path.dirname(path.dirname(file)));
+}
+
+/**
+ * STABLE RULE IDS. Every law and doctrine rule is DECLARED by its heading —
+ * `### {{LAW:verify-before-asserting}} Verify Before Asserting` — and CITED by its id —
+ * `{{LAW:verify-before-asserting}}`. The id is permanent; the number is not stored anywhere. It
+ * is the rule's position (Roman in `laws/universal.md`, Arabic within its pack), computed here
+ * at render time, so removing or reordering a rule renumbers every heading after it and rewires
+ * nothing: no citation ever named the number.
+ *
+ * WHY CITATIONS RENDER AS THE NAME, NOT THE NUMBER. A citation is the one place a number would
+ * leak into text that outlives the build — an agent reads "Law III", writes "Law III" into its
+ * memory, and the memory is wrong the day the canon moves. The rendered harness models what it
+ * asks of the agent: a rule is cited by its principle, in English, identical in every voice. The
+ * number survives only where it is structural — the rule's own heading.
+ *
+ * Retired ids live in `RETIRED_RULE_IDS` so the doctor can refuse their reuse: an id that meant
+ * one thing in someone's notes must never come back meaning another.
+ */
+const DECL_RE = /^### \{\{(LAW|DOCTRINE):([a-z0-9]+(?:-[a-z0-9]+)*)\}\}[ \t]+(\S[^\n]*?)[ \t]*$/gm;
+const CITE_RE = /\{\{(LAW|DOCTRINE):([a-z0-9-]+)\}\}/g;
+export const RULE_ID_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+
+/**
+ * Ids that no longer name a live rule, and must never be declared again. `liveAs` names the one
+ * tier that may still declare it — `external-gate` was Law IX before it became a rigor rule, so
+ * the doctrine keeps it and `{{LAW:external-gate}}` is refused; `null` means gone for good.
+ */
+export const RETIRED_RULE_IDS = {
+  'external-gate': { was: 'Law IX', liveAs: 'DOCTRINE', note: 'moved to the rigor pack' },
+  'absence-is-a-claim': { was: 'Law XI', liveAs: null, note: 'folded into verify-before-asserting' },
+};
+
+const ROMAN = [[1000, 'M'], [900, 'CM'], [500, 'D'], [400, 'CD'], [100, 'C'], [90, 'XC'],
+  [50, 'L'], [40, 'XL'], [10, 'X'], [9, 'IX'], [5, 'V'], [4, 'IV'], [1, 'I']];
+export function toRoman(n) {
+  let out = '';
+  for (const [v, r] of ROMAN) while (n >= v) { out += r; n -= v; }
+  return out;
+}
+
+/** `sealed-secrets` -> `LEX_SEALED_SECRETS`; a doctrine rule's title key is `DOC_<ID>`. */
+export const titleKey = (kind, id) =>
+  `${kind === 'LAW' ? 'LEX' : 'DOC'}_${id.toUpperCase().replaceAll('-', '_')}`;
+
+/** The files that may declare rules, in canon order: `[kind, pack|null, file]`. */
+export function canonFiles(src = SRC) {
+  return [['LAW', null, path.join(src, 'laws', 'universal.md')],
+    ...PACK_ORDER.map((p) => ['DOCTRINE', p, path.join(src, 'doctrines', `${p}.md`)])];
+}
+
+const _canons = new Map();
+/**
+ * Every declared rule, in render order: `{ kind, pack, id, name, n, label }`, where `label` is
+ * the address the heading renders (`III`, `process 5`). Memoised on the raw texts' identity —
+ * `readRawText` hands back the same string until a file's mtime moves.
+ */
+export function ruleCanon(src = SRC) {
+  const files = canonFiles(src);
+  const texts = files.map(([, , f]) => { try { return readRawText(f); } catch { return ''; } });
+  const key = path.resolve(src);
+  const hit = _canons.get(key);
+  if (hit && hit.texts.every((t, i) => t === texts[i])) return hit.canon;
+  const rules = [];
+  files.forEach(([kind, pack], i) => {
+    let n = 0;
+    for (const m of texts[i].matchAll(DECL_RE)) {
+      if (m[1] !== kind) continue;             // a wrong-tier declaration is the doctor's to name
+      n += 1;
+      rules.push({ kind, pack, id: m[2], name: m[3], n, label: kind === 'LAW' ? toRoman(n) : `${pack} ${n}` });
+    }
+  });
+  const byId = new Map();
+  for (const r of rules) if (!byId.has(r.id)) byId.set(r.id, r);
+  const canon = { rules, byId };
+  _canons.set(key, { texts, canon });
+  return canon;
+}
+
+/**
+ * Resolve every declaration and citation in `text` against the canon under `src`. An unknown id
+ * is left exactly as written — visible in the output, and named by the doctor — rather than
+ * guessed at.
+ */
+export function resolveRuleIds(text, src = SRC) {
+  if (!text.includes('{{LAW:') && !text.includes('{{DOCTRINE:')) return text;
+  const { byId } = ruleCanon(src);
+  const known = (kind, id) => { const r = byId.get(id); return r && r.kind === kind ? r : null; };
+  return text
+    .replace(DECL_RE, (whole, kind, id) => {
+      const r = known(kind, id);
+      return r ? `### {{${kind}}} ${r.label} — {{${titleKey(kind, id)}}}` : whole;
+    })
+    .replace(CITE_RE, (whole, kind, id) => { const r = known(kind, id); return r ? `*${r.name}*` : whole; });
+}
+
 /**
  * `_build_core.ROOT` — the checkout, from this file's own location (`js/..`).
  *

package/js/build/stubs.mjs

@@ -137,8 +137,13 @@ the project's own. Follow the root \`AGENTS.md\`.
 /** `_build_render.PROFILE_FILE`. */
 const PROFILE_FILE = 'PROFILE.md';
 
-/** `_build_render.PROFILE_STUB`. */
-const PROFILE_STUB = `\
+/**
+ * `_build_render.PROFILE_STUB`.
+ *
+ * Exported for the web console: `/api/profile` answers `seeded: true` while PROFILE.md is
+ * still byte-for-byte this text, which is how the Overview knows to ask for it to be filled in.
+ */
+export const PROFILE_STUB = `\
 # Your profile
 
 Who you are and how you like to work — so the agent can meet you where you are
@@ -240,9 +245,25 @@ export const ensureBundleGitignore = stubWriter('.gitignore', BUNDLE_GITIGNORE);
  * right after the store dir is created, but never invent the dir themselves). */
 const storeIndexWriter = (file, header) => (dir) => { if (isDir(dir)) seed(path.join(dir, file), header); };
 
+const MEMORY_INDEX = '# Memory Index\n';
+const NOTEBOOK_INDEX = '# Notebook Index\n';
+
 /** `_build_render.ensure_memory_index` — only inside an EXISTING store dir. */
-export const ensureMemoryIndex = storeIndexWriter('MEMORY.md', '# Memory Index\n');
+export const ensureMemoryIndex = storeIndexWriter('MEMORY.md', MEMORY_INDEX);
 
 /** `_build_render.ensure_notebook_index`. */
-export const ensureNotebookIndex = storeIndexWriter('NOTEBOOK.md', '# Notebook Index\n');
+export const ensureNotebookIndex = storeIndexWriter('NOTEBOOK.md', NOTEBOOK_INDEX);
+
+/**
+ * The seeds of the files the session-start injection reads (`SESSION_FILES` in
+ * `js/hosts/hooks.mjs`, and its twin in the OpenCode context plugin). Both carry the SHA-256
+ * of these bodies rather than importing them — the hook path pays for every import, and the
+ * plugin is deployed on its own — so an untouched seed is skipped instead of injected as
+ * noise. `tests/unit/claude.test.mjs` gates both hash lists against this map: edit a stub and
+ * the two copies must move with it.
+ */
+export const SESSION_SEEDS = {
+  'user-rules.md': RULES_STUB, 'PROFILE.md': PROFILE_STUB, 'wiki.jsonc': WIKI_STUB,
+  'MEMORY.md': MEMORY_INDEX, 'NOTEBOOK.md': NOTEBOOK_INDEX,
+};
 

package/js/cli-table.json

@@ -297,7 +297,7 @@
           ],
           "dest": "host",
           "metavar": null,
-          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) and 'copilot' ask, each in its own envelope; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
           "choices": null,
           "default": null,
           "required": false,
@@ -488,7 +488,7 @@
     },
     {
       "name": "git-gate",
-      "help": "PreToolUse hook: ASK before a history-discarding git act (Law IV) and before every git commit/push (process 5 backstop)",
+      "help": "PreToolUse hook: ASK before a history-discarding git act (Deletion Is Deliberate) and before every git commit/push (Consent Before Push backstop)",
       "description": "",
       "positionals": [],
       "options": [
@@ -513,7 +513,7 @@
           ],
           "dest": "host",
           "metavar": null,
-          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) and 'copilot' ask, each in its own envelope; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
           "choices": null,
           "default": null,
           "required": false,
@@ -528,7 +528,7 @@
           ],
           "dest": "no_consent",
           "metavar": null,
-          "help": "skip the process-5 commit/push ask (set by the emit when the process pack or process 5 is off); Law IV still asks",
+          "help": "skip the Consent Before Push commit/push ask (set by the emit when the process pack or that rule is off); Deletion Is Deliberate still asks",
           "choices": null,
           "default": false,
           "required": false,
@@ -766,7 +766,7 @@
     },
     {
       "name": "rule-gate",
-      "help": "PreToolUse hook: force an ASK before any write to user-rules.md or memory (process 1 backstop)",
+      "help": "PreToolUse hook: force an ASK before any write to user-rules.md or memory (Persist Insight backstop)",
       "description": "",
       "positionals": [],
       "options": [
@@ -791,7 +791,7 @@
           ],
           "dest": "host",
           "metavar": null,
-          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) and 'copilot' ask, each in its own envelope; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
           "choices": null,
           "default": null,
           "required": false,
@@ -975,7 +975,7 @@
     },
     {
       "name": "tool-gate",
-      "help": "PreToolUse hook for hosts with no tool matcher (Copilot, Bob): git-gate and rule-gate fused behind one command, dispatched on the payload",
+      "help": "PreToolUse hook for hosts with no tool matcher (Bob): git-gate and rule-gate fused behind one command, dispatched on the payload",
       "description": "",
       "positionals": [],
       "options": [
@@ -1000,7 +1000,7 @@
           ],
           "dest": "host",
           "metavar": null,
-          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) and 'copilot' ask, each in its own envelope; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
           "choices": null,
           "default": null,
           "required": false,