geneseed 3.8.0 → 3.10.0

package/js/hosts/hooks.mjs

@@ -8,11 +8,8 @@
  *
  * ONE VERB, TWO DIALECTS. `--host` names the host that will read the verdict. Claude Code
  * (the default) reads `hookSpecificOutput.permissionDecision: "ask"` and shows the user a
- * prompt. GitHub Copilot's `preToolUse` reads the same decision TOP-LEVEL —
- * `{"permissionDecision": "ask", "permissionDecisionReason": …}` — so `--host copilot` asks
- * exactly where Claude asks, in Copilot's envelope. `--host bob` is Bob's own
- * protocol: PreToolUse ignores stdout and refuses only on EXIT CODE 2, so the two Laws
- * exit 2 with the reason on stderr and the rest is a stderr line with exit 0; SessionStart
+ * prompt. `--host bob` is Bob's own protocol: PreToolUse ignores stdout and refuses only on
+ * EXIT CODE 2, so the two Laws exit 2 with the reason on stderr and the rest is a stderr line with exit 0; SessionStart
  * context is plain stdout, as on Claude. `--host openclaude` speaks Claude's dialect verbatim
  * (OpenClaude is a Claude Code fork); the flag only picks which root file counts as native. Since P5b they are also what the emitted hooks name: `bin/build-driver.mjs` bakes
  * `<node> <checkout>/bin/geneseed-hook.mjs` into the machine-wide shim, so an install this
@@ -47,6 +44,7 @@ import { existsSync, statSync, readFileSync, readdirSync, mkdirSync,
   from 'node:fs';
 import path from 'node:path';
 import { spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
 import { readText, writeText, printOut, printErr, withDiscardableStderr } from '../lib/fs.mjs';
 import { jsonDumpsCompact } from '../lib/json.mjs';
 import { normcase, comparePaths, toPlatformPath } from '../lib/paths.mjs';
@@ -227,7 +225,7 @@ const EXCLUDE_DIRS = new Set(['node_modules', '.git', 'dist', 'build', 'vendor',
 // OpenClaude's root file is AGENTS.md, or CLAUDE.md when AGENTS.md is absent — resolved
 // per repo in `discoverContext`, since which one it loads depends on what is on disk.
 const NATIVE_ROOT = {
-  claude: ['CLAUDE.md'], bob: ['AGENTS.md'], copilot: ['AGENTS.md'],
+  claude: ['CLAUDE.md'], bob: ['AGENTS.md'],
   openclaude: ['AGENTS.md', 'CLAUDE.md'],
 };
 
@@ -237,6 +235,49 @@ const NATIVE_ROOT = {
 const EAGER_FILE_BYTES = 16 * 1024;
 const EAGER_TOTAL_BYTES = 48 * 1024;
 
+// The files the root instruction file names for session start, relative to the HARNESS dir
+// (`--root`: `.claude/`, `.bob/`, a global config dir) — not to the repo root discovery walks,
+// which is why none of them reached a hooked host before 2026-10. Injected here so the read does
+// not depend on the model remembering it. `context.json` is not in the list: it is a manifest,
+// honoured by `resolveContextSets` (the harness dir is its last candidate). The OpenCode
+// context plugin carries the same list.
+const SESSION_FILES = ['user-rules.md', 'PROFILE.md', 'memory/MEMORY.md', 'anamnesis/MEMORY.md',
+  'notebook/NOTEBOOK.md', 'wiki.jsonc'];
+// SHA-256 of each seed body in `js/build/stubs.mjs` (`SESSION_SEEDS`), CRLF folded. A file still
+// byte-identical to its seed says nothing, so it is skipped rather than injected as noise.
+// Hashes, not an import: stubs.mjs pulls in the build's writers, and this module loads on every
+// tool call. tests/unit/claude.test.mjs gates this set, and the plugin's copy, against the seeds.
+const SEED_SHA256 = new Set([
+  '5c2e92fb1acde041e02d9ebf158460d8ff7a07cbc2b447859631604610130721', // user-rules.md
+  '29e012c3c4349ea62a9082cbd04bb25599a0ec280d62c33f6e10742809471816', // PROFILE.md
+  'cccc917c34e6b990e821620bdb4739090151885ab71b6e85046f30a3b71fa5e8', // wiki.jsonc
+  '99c786049c260f6baf7aec68a5c0f59907861afe9b867da009440613bdddb907', // MEMORY.md
+  '9acb5c9d9cb5dac572104480f05b48cc144e676869bd60e86d8a15b1f6308184', // NOTEBOOK.md
+]);
+export { SESSION_FILES, SEED_SHA256 };
+
+/**
+ * The session files present under `hookRoot` and changed from their seed, as `{ rel, abs, text }`
+ * (text CRLF-folded, trailing newlines trimmed). `$GENESEED_WIKI` overrides the wiki declaration,
+ * as it does on OpenCode. A missing or unreadable file is simply absent — this is best-effort
+ * context, never a gate.
+ */
+export function sessionFiles(hookRoot) {
+  const found = [];
+  for (const rel of SESSION_FILES) {
+    let abs = path.join(hookRoot, rel);
+    if (rel === 'wiki.jsonc' && process.env.GENESEED_WIKI && isFile(process.env.GENESEED_WIKI)) {
+      abs = process.env.GENESEED_WIKI;
+    }
+    if (!isFile(abs)) continue;
+    let text;
+    try { text = readFileSync(abs, 'utf8').replace(/\r\n/g, '\n'); } catch { continue; }
+    if (SEED_SHA256.has(createHash('sha256').update(text).digest('hex'))) continue;
+    found.push({ rel, abs, text: text.replace(/\n+$/, '') });
+  }
+  return found;
+}
+
 const CLAUDE_MARKERS = ['.claude', '.bob', '.openclaude'];
 const GENESEED_MANIFEST = '.geneseed-manifest.json';
 
@@ -348,7 +389,7 @@ export function discoverContext(root, host = HOST) {
  * `recs` is a Map, not an object: JS reorders integer-like keys on a plain object, and
  * these keys are absolute paths whose iteration order becomes the printed order.
  */
-export function resolveContextSets(root) {
+export function resolveContextSets(root, hookRoot = null) {
   let manifest = null;
   const env = process.env.GENESEED_CONTEXT;
   if (env && isFile(env)) {
@@ -356,8 +397,9 @@ export function resolveContextSets(root) {
     // way `str(Path(...))` folds them, or the source line differs by every slash in it.
     manifest = toPlatformPath(env);
   } else {
+    // The harness dir last: a repo's own manifest outranks the one seeded beside the install.
     for (const cand of [path.join(root, '.harness', 'context.json'),
-      path.join(root, 'context.json')]) {
+      path.join(root, 'context.json'), ...(hookRoot ? [path.join(hookRoot, 'context.json')] : [])]) {
       if (isFile(cand)) { manifest = cand; break; }
     }
   }
@@ -460,18 +502,40 @@ export function cmdContext(args) {
   if (hookRoot && sovereignBypass(hookRoot)) return 0;
   if (hookRoot && !process.env.GENESEED_STACK_GLOBAL
       && globalHookStandingDown(hookRoot, root)) return 0;
-  const [eager, lazy, source] = resolveContextSets(root);
-  if (!eager.length && !lazy.length) {
+  const session = hookRoot ? sessionFiles(hookRoot) : [];
+  // A session file discovery would also pick up (a `user-rules.md` at the repo root of an
+  // install whose harness dir IS the repo root) is injected once, in the session block.
+  const seen = new Set(session.map((s) => normcase(path.resolve(s.abs))));
+  const fresh = (e) => !seen.has(normcase(path.resolve(path.isAbsolute(e.path)
+    ? e.path : path.join(root, e.path))));
+  let [eager, lazy, source] = resolveContextSets(root, hookRoot);
+  eager = eager.filter(fresh);
+  lazy = lazy.filter(fresh);
+  if (!session.length && !eager.length && !lazy.length) {
     err(`[context] nothing to load for ${root} `
       + '(no docs discovered, no manifest entries).\n');
     return 0;
   }
 
-  const lines = [
-    `=== PROJECT CONTEXT \u2014 binding for this repo (via ${source}) ===`,
-    '',
-  ];
+  const lines = [];
   let spent = 0;
+  if (session.length) {
+    lines.push('=== SESSION FILES \u2014 your harness files, injected at session start '
+      + '(untouched seeds skipped) ===', '');
+    for (const s of session) {
+      let text = s.text;
+      if (text.length > EAGER_FILE_BYTES) {
+        const nl = text.lastIndexOf('\n', EAGER_FILE_BYTES);
+        text = `${text.slice(0, nl > 0 ? nl : EAGER_FILE_BYTES)}\n`
+          + `[context] truncated at ${EAGER_FILE_BYTES / 1024} KB \u2014 read ${s.abs} on demand`;
+      }
+      spent += text.length;
+      lines.push(`----- ${s.rel} -----`, text, '');
+    }
+  }
+  if (eager.length || lazy.length) {
+    lines.push(`=== PROJECT CONTEXT \u2014 binding for this repo (via ${source}) ===`, '');
+  }
   const demoted = [];
   for (const entry of eager) {
     const p = entry.path === undefined ? '' : entry.path;
@@ -511,12 +575,8 @@ export function cmdContext(args) {
     lines.push('');
   }
 
-  // Claude Code takes a SessionStart hook's plain stdout as context. Copilot's `sessionStart`
-  // wants a JSON document and reads `additionalContext` out of it; plain text there would be
-  // parsed as nothing and silently dropped.
-  // Bob reads a SessionStart hook's stdout as context exactly as Claude does.
-  const text = `${lines.join('\n')}\n`;
-  out(HOST === 'copilot' ? `${jsonDumpsCompact({ additionalContext: text })}\n` : text);
+  // Claude Code takes a SessionStart hook's plain stdout as context; Bob reads it the same way.
+  out(`${lines.join('\n')}\n`);
   return 0;
 }
 
@@ -559,16 +619,6 @@ function askDecision(reason) {
 let HOST = 'claude';
 const setHost = (args) => { HOST = (args && args.host) || 'claude'; };
 
-/**
- * Copilot's `preToolUse` verdict: the same `ask` Claude reads, but top-level rather than under
- * `hookSpecificOutput` (docs.github.com/en/copilot/reference/hooks-configuration). An older
- * emit wired a `toolCall` event answered with `{"block": true}`; Copilot no longer has that
- * event, so those gates never ran.
- */
-function copilotAskDecision(reason) {
-  return `${jsonDumpsCompact({ permissionDecision: 'ask', permissionDecisionReason: reason })}\n`;
-}
-
 /**
  * Bob's PreToolUse protocol: stdout is ignored and EXIT CODE 2 is the one refusal. The
  * single exception to "every gate exits 0" in this file, confined to `--host bob` — on
@@ -636,7 +686,7 @@ function ask(args, verb, rule, reason) {
     return BOB_DENY_EXIT;
   }
   ledger(args && args.root, verb, rule);
-  out(HOST === 'copilot' ? copilotAskDecision(reason) : askDecision(reason));
+  out(askDecision(reason));
   return 0;
 }
 
@@ -663,12 +713,6 @@ export function guardGate(fn, verb = 'gate') {
 
 /**
  * The hook payload on stdin, or null for a well-formed absence. Not-JSON THROWS.
- *
- * Copilot spells the same payload in camelCase — `toolName`/`toolArgs` where Claude sends
- * `tool_name`/`tool_input` — and `toolArgs` may arrive as a JSON STRING rather than an object.
- * Both are folded to Claude's shape so every gate reads one. (`toolInput` and the `after`
- * phase are the retired `toolCall` event's spelling, kept so an install not yet re-emitted
- * still reads right.) A `toolArgs` string that is not JSON throws: fail closed.
  */
 function readPayload() {
   const raw = readStdin();
@@ -679,16 +723,7 @@ function readPayload() {
   } catch {
     throw new Error('the hook payload on stdin is not JSON');
   }
-  if (!payload || typeof payload !== 'object') return null;
-  if (payload.phase === 'after') return null;
-  if (payload.tool_input === undefined) {
-    let ta = payload.toolArgs !== undefined ? payload.toolArgs : payload.toolInput;
-    if (typeof ta === 'string') {
-      try { ta = JSON.parse(ta); } catch { throw new Error('the payload\'s toolArgs is not JSON'); }
-    }
-    if (ta !== undefined) payload.tool_input = ta;
-  }
-  return payload;
+  return payload && typeof payload === 'object' ? payload : null;
 }
 
 function gitGate(args) {
@@ -700,14 +735,14 @@ function gitDecide(args, payload) {
   const command = ((payload && payload.tool_input) || {}).command;
   if (typeof command !== 'string') return 0;
   if (DESTRUCTIVE_GIT_RE.test(command)) {
-    return ask(args, 'git-gate', 'law-4', 'Geneseed Law IV \u2014 a history-rewriting or '
+    return ask(args, 'git-gate', 'law-4', 'Geneseed (Deletion Is Deliberate) \u2014 a history-rewriting or '
       + 'discarding git act needs confirmation bound to this specific command');
   }
   // `--no-consent`: the process pack (or process 5 alone) is off, so the commit/push ask has
   // no rule behind it — but Law IV above is universal and has already run.
   if (args.noConsent || !GIT_GATE_RE.test(command)) return 0;
-  return ask(args, 'git-gate', 'process-5', 'Geneseed Doctrine process 5 \u2014 every git '
-    + 'commit/push needs explicit approval');
+  return ask(args, 'git-gate', 'process-5', 'Geneseed (Consent Before Push) \u2014 every git '
+    + 'commit/push needs explicit approval; to see the change first, use the explain-changes skill');
 }
 export const cmdGitGate = guardGate(gitGate, 'git-gate');
 
@@ -759,18 +794,17 @@ function ruleDecide(args, payload) {
   const ti = (payload && payload.tool_input) || {};
   const p = ti.file_path || ti.path || '';
   if (typeof p !== 'string' || !p) return 0;
-  // Write carries `content`, Edit carries `new_string` (Copilot: `file_text`, `new_str`);
-  // any of them can plant a credential.
-  const body = [ti.content, ti.new_string, ti.file_text, ti.new_str]
+  // Write carries `content`, Edit carries `new_string`; either can plant a credential.
+  const body = [ti.content, ti.new_string]
     .find((v) => typeof v === 'string') || '';
   if (body && !DOTENV_RE.test(p) && SECRET_RE.test(body)) {
-    return ask(args, 'rule-gate', 'law-1', `Geneseed Law I — ${p} would carry a `
+    return ask(args, 'rule-gate', 'law-1', `Geneseed (Sealed Secrets) — ${p} would carry a `
       + 'credential-shaped string. Secrets live in .env or a secret manager, never in a '
       + 'tracked file.');
   }
   const target = ruleGateTarget(p, args.root);
   if (!target) return 0;
-  return ask(args, 'rule-gate', 'process-1', `Geneseed Doctrine process 1 \u2014 writing to `
+  return ask(args, 'rule-gate', 'process-1', `Geneseed (Persist Insight) \u2014 writing to `
     + `${target}: a standing rule, or a fact to remember? That choice is the user's. Run the `
     + 'rule skill first.');
 }
@@ -781,8 +815,7 @@ export const cmdRuleGate = guardGate(ruleGate, 'rule-gate');
 // ======================================================================================
 
 /**
- * Copilot's and Bob's PreToolUse entries carry no matcher over documented tool names, so
- * neither can name `git-gate` for Bash and `rule-gate` for Write the way Claude's
+ * Bob's PreToolUse entry carries no matcher over documented tool names, so it cannot name `git-gate` for Bash and `rule-gate` for Write the way Claude's
  * `PreToolUse` does. This verb is the two fused, dispatched on the payload rather
  * than on a matcher: a `command` field is a shell call and gets the git checks, a path
  * field is a write and gets the rule checks. Nothing here decides anything the two named
@@ -926,8 +959,7 @@ export function readNotes(raw) {
   if (s[0] === '{') {
     let payload;
     try { payload = JSON.parse(s); } catch { return raw; }
-    // Copilot's agentStop/preCompact spell it `transcriptPath`.
-    const tp = payload && (payload.transcript_path || payload.transcriptPath);
+    const tp = payload && payload.transcript_path;
     if (tp) return flattenTranscript(tp);
     return raw;
   }

package/js/hosts/hosts.mjs

@@ -1,5 +1,5 @@
 /**
- * The five host config dirs, and the two path primitives they are built on.
+ * The four host config dirs, and the two path primitives they are built on.
  *
  * EXTRACTED IN P5c, and the reason is arithmetic rather than taste. `bin/build-driver.mjs`
  * owned these; `bin/geneseed-cli.mjs` needs the same four to find a global install, and a
@@ -172,20 +172,6 @@ export function opencodeConfigDir() {
   return resolvePath(path.join(base, 'opencode'));
 }
 
-/**
- * `_build_core._copilot_config_dir` — `~/.copilot`, relocatable via `$COPILOT_CONFIG_DIR`.
- *
- * Geneseed's own knob, mirroring `$BOB_CONFIG_DIR`: Copilot documents no such variable, but
- * tests, doctor and locked-down setups still need to re-point the target. Like every
- * relocation variable it is CLEARED by `golden.cell_env`, so no cell can observe whether
- * a driver honours it — see `test_the_relocation_var_moves_the_global_target`.
- */
-export function copilotConfigDir() {
-  const env = process.env.COPILOT_CONFIG_DIR;
-  if (env) return resolvePath(env);
-  return resolvePath(path.join(os.homedir(), '.copilot'));
-}
-
 /**
  * `_build_core._claude_config_dir` — `~/.claude`, and there is NO env branch BY DESIGN.
  *
@@ -223,7 +209,7 @@ export function openclaudeConfigDir() {
 
 /**
  * `_build_global.HOSTS`, reduced to the two columns a non-emitting caller needs, and IN ITS
- * ORDER — opencode, claude, bob, copilot, openclaude.
+ * ORDER — opencode, claude, bob, openclaude.
  *
  * An array rather than an object because the order is observable output, not an
  * implementation detail: `harness exclude add` walks it and prints one message per host, so
@@ -233,21 +219,20 @@ export function openclaudeConfigDir() {
  *
  * `projectMarker` joined in P5f. `_install_targets` asks "does this cwd carry a project
  * install of host H", and `_claude_cfg` asks "which subdir holds a project install's
- * manifest" — both are the same `.opencode`/`.claude`/`.bob`/`.github` value the Python reads
+ * manifest" — both are the same `.opencode`/`.claude`/`.bob`/`.openclaude` value the Python reads
  * out of `build.HOSTS[host]["project_marker"]`, so it belongs beside the config dir rather
  * than in a second table in `js/hosts/installs.mjs`.
  *
  * `agentFile` joined in P5h, and for one caller: `cmd_uninstall` names the managed block's
  * carrier in its "removes:" preamble (`the CLAUDE.md managed block`, `the AGENTS.md managed
  * block`). It is a column and not a literal in the message for the reason every other column
- * here is one — Bob and Copilot both answer `AGENTS.md` while Claude answers `CLAUDE.md`, and
+ * here is one — Bob answers `AGENTS.md` while Claude answers `CLAUDE.md`, and
  * a host added later must not need the message edited to stay true.
  */
 export const HOSTS = [
   { host: 'opencode', configDir: opencodeConfigDir, projectMarker: '.opencode', agentFile: 'AGENT.md' },
   { host: 'claude', configDir: claudeConfigDir, projectMarker: '.claude', agentFile: 'CLAUDE.md' },
   { host: 'bob', configDir: bobConfigDir, projectMarker: '.bob', agentFile: 'AGENTS.md' },
-  { host: 'copilot', configDir: copilotConfigDir, projectMarker: '.github', agentFile: 'AGENTS.md' },
   { host: 'openclaude', configDir: openclaudeConfigDir, projectMarker: '.openclaude', agentFile: 'CLAUDE.md' },
 ];
 
@@ -271,14 +256,13 @@ export const HOSTS = [
  * single boolean was wrong both ways: `false` shipped the §4 Skills table on top of a
  * catalogue Bob already had (~1.7k tokens twice), `true` would have stripped the §3 Agents
  * table that is Bob's ONLY agent catalogue. Each CATALOG block in AGENT.md names its kind and
- * resolves against its own flag. Copilot stays unverified and keeps both tables. Mirrored in
+ * resolves against its own flag. Mirrored in
  * `bin/build-driver.mjs` (which cannot import this module's spawning neighbours).
  */
 const NATIVE_CATALOG = {
   opencode: { skills: true, agents: true },
   claude: { skills: true, agents: true },
   bob: { skills: true, agents: false },
-  copilot: { skills: false, agents: false },
   openclaude: { skills: true, agents: true },
 };
 

package/js/hosts/installs.mjs

@@ -137,15 +137,14 @@ function themeFromAgent(agentMd) {
 }
 
 /**
- * `_harness_setup.CARRIERS` — the five instruction carriers, in the Python's order.
+ * `_harness_setup.CARRIERS` — the four instruction carriers, in the Python's order.
  *
  * A shared table rather than three copies of the same list: `_theme_of_dir`,
  * `_posture_of_dir` and `_mode_of_dir` each walk it, and the order is observable (the first
  * carrier that answers wins). `rules/geneseed.md` is spelled with `path.join` at each use
  * because the Python writes `d / "rules" / "geneseed.md"` for that one entry.
  */
-const CARRIERS = ['AGENT.md', 'CLAUDE.md', path.join('rules', 'geneseed.md'),
-  'copilot-instructions.md', 'AGENTS.md'];
+const CARRIERS = ['AGENT.md', 'CLAUDE.md', path.join('rules', 'geneseed.md'), 'AGENTS.md'];
 
 /**
  * The scan `themeOfDir`, `leadOfDir`, `doctrinesOfDir` and `excludedRulesOfDir` each wrote
@@ -392,7 +391,6 @@ export const EMIT_HOST_SCOPE = new Map([
   ['opencode', ['opencode', 'project']], ['opencode-global', ['opencode', 'global']],
   ['claude', ['claude', 'project']], ['claude-global', ['claude', 'global']],
   ['bob', ['bob', 'project']], ['bob-global', ['bob', 'global']],
-  ['copilot', ['copilot', 'project']], ['copilot-global', ['copilot', 'global']],
   ['openclaude', ['openclaude', 'project']], ['openclaude-global', ['openclaude', 'global']],
 ]);
 
@@ -410,7 +408,7 @@ export const DISABLED_STASH = '.geneseed-disabled';
  * `_harness_mcp._claude_cfg` — where a Claude-STYLE install keeps its manifest.
  *
  * The config dir itself for a global install; `<repo>/<project_marker>` for a project one.
- * Host-aware so Bob and Copilot ride the whole Claude lifecycle with only the subdir
+ * Host-aware so Bob and OpenClaude ride the whole Claude lifecycle with only the subdir
  * differing, and the marker comes from `HOSTS` rather than a literal for that reason.
  */
 export function claudeCfg(root, scope, host = 'claude') {
@@ -435,7 +433,7 @@ export function installKind(root) {
 
 /** `_harness_mcp._install_state` — 'active' | 'disabled' | 'absent'. */
 export function installState(root, host = 'opencode', scope = 'global') {
-  if (['claude', 'bob', 'copilot', 'openclaude'].includes(host)) return claudeState(root, scope, host);
+  if (['claude', 'bob', 'openclaude'].includes(host)) return claudeState(root, scope, host);
   if (isDir(path.join(root, DISABLED_STASH))) return 'disabled';
   return installKind(root) !== null ? 'active' : 'absent';
 }

package/js/hosts/mcp.mjs

@@ -32,7 +32,7 @@ import { existsSync, mkdirSync, renameSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 
-import { bobConfigDir, copilotConfigDir, resolvePath } from './hosts.mjs';
+import { bobConfigDir, resolvePath } from './hosts.mjs';
 import { installState, installTargets } from './installs.mjs';
 import { printOut, printErr, readText, writeText } from '../lib/fs.mjs';
 import { isDict, jsonDumpsIndent, parseJson } from '../lib/json.mjs';
@@ -44,7 +44,7 @@ import { opencodeTarget, readJsonc } from './settings.mjs';
 const dget = (obj, key, dflt) => (isDict(obj) && Object.hasOwn(obj, key) ? obj[key] : dflt);
 
 /** The hosts whose MCP config is strict JSON under `mcpServers`, with no `enabled` flag. */
-const FLAGLESS = ['claude', 'bob', 'copilot', 'openclaude'];
+const FLAGLESS = ['claude', 'bob', 'openclaude'];
 
 /**
  * `_harness_mcp._MCP_PRESETS` — the ready-to-wire servers the MCP screen can toggle.
@@ -105,8 +105,7 @@ const serversOf = (config, host) => {
  * `_mcp_preset_block` — the block to WRITE for a preset, shaped for `host`.
  *
  * OpenCode takes it verbatim. The flagless three split the command list into `command`
- * (head) + `args` (tail) and rename `environment` to `env`; Copilot additionally requires
- * `type` and a `tools` allowlist.
+ * (head) + `args` (tail) and rename `environment` to `env`.
  */
 export function mcpPresetBlock(name, host = 'opencode') {
   const block = { ...MCP_PRESETS[name].block };
@@ -115,10 +114,6 @@ export function mcpPresetBlock(name, host = 'opencode') {
   const out = { command: cmd.length ? cmd[0] : '', args: cmd.slice(1) };
   const env = block.environment;
   if (env) out.env = { ...env };
-  if (host === 'copilot') {
-    out.type = 'local';
-    out.tools = ['*'];
-  }
   return out;
 }
 
@@ -243,11 +238,6 @@ export function mcpConfigFor(host, scope, root) {
     return scope === 'project' ? path.join(root, '.bob', 'mcp.json')
       : path.join(bobConfigDir(), 'settings', 'mcp.json');
   }
-  if (host === 'copilot') {
-    // The Copilot CLI reads MCP servers from ~/.copilot/mcp-config.json only — no per-repo
-    // file is documented, so a project install carries no MCP wiring.
-    return scope === 'global' ? path.join(copilotConfigDir(), 'mcp-config.json') : null;
-  }
   if (host === 'openclaude') {
     // Claude's `.mcp.json` per repo; globally `.openclaude.json` beside the home dir, or
     // INSIDE `$OPENCLAUDE_CONFIG_DIR` when set — OpenClaude's own `getGlobalClaudeFile` rule.

package/js/hosts/native.mjs

@@ -3,7 +3,7 @@
  *
  * A faithful translation of `_build_emit._write_native_layer` and the frontmatter
  * builders it dispatches to. Capability specs become host-native subagents and skills:
- * one dialect per host (OpenCode / Claude Code / Copilot), vendored skill folders copied
+ * one dialect per host (OpenCode / Claude Code), vendored skill folders copied
  * through verbatim, authoring templates shipped flat.
  *
  * WHY THIS IS THE HARD HALF. `js/build/render.mjs` is a pure function of `src/` and `themes/`;
@@ -33,8 +33,11 @@ import path from 'node:path';
 import { writeText, copyFile, readText } from '../lib/fs.mjs';
 import { jsonDumps, parseJson, formatValue, formatRepr, isTruthy, isDict } from '../lib/json.mjs';
 
+/** What a folder skill writes where it needs its own directory — see `writeNativeLayer`. */
+export const SKILL_DIR_PLACEHOLDER = '<this-skill-directory>';
+
 /** Mirrors `_build_core.VENDORED_SKILL_DIRS`. */
-export const VENDORED_SKILL_DIRS = new Set(['react-view-transitions', 'daydream', 'token-report']);
+export const VENDORED_SKILL_DIRS = new Set(['react-view-transitions', 'daydream', 'token-report', 'explain-changes']);
 
 /**
  * `PurePath(rel).parts` — split on EITHER separator, empties dropped.
@@ -58,7 +61,7 @@ export function isVendoredPath(rel) {
  * `build._validate_is_vendored` — the same question, tolerant of `skills` at ANY depth.
  *
  * The per-repo native layers nest one level deeper than a `files`/opencode-global bundle
- * (`.claude/skills/<name>/…`, `.bob/skills/<name>/…`, `.github/skills/<name>/…`), so
+ * (`.claude/skills/<name>/…`, `.bob/skills/<name>/…`, `.openclaude/skills/<name>/…`), so
  * `doctor`'s scan of those trees needs the loose form or every vendored folder's own
  * upstream cross-links read as dead links. Never the last segment — `parts[:-1]`, because a
  * FILE named `skills` is not a directory of them.
@@ -79,8 +82,6 @@ const AGENT_COLORS = {
 const VALID_AGENT_COLOR_SLOTS = new Set(
   ['primary', 'secondary', 'accent', 'success', 'warning', 'error', 'info']);
 
-/** `_build_emit._SIBLING_AGENT_LINK_RE` — a bare same-dir agent filename in a link. */
-const SIBLING_AGENT_LINK_RE = /\]\(([A-Za-z0-9_-]+)\.md\)/g;
 
 /**
  * `_build_emit._strip_skill_body_links`'s pattern: every RELATIVE markdown link to a
@@ -296,51 +297,23 @@ const BASH_MARKER = '<!-- bash: allow -->';
 const WEBFETCH_MARKER = '<!-- webfetch: allow -->';
 
 /**
- * The readonly-tool line `claudeAgentFrontmatter`/`copilotAgentFrontmatter` each emit — a
- * DENYLIST for Claude, an ALLOWLIST for Copilot — differing only in the key, the base list,
- * the gated entries the markers toggle, and whether the value is bracketed. Each `gated`
- * row is `[tool, marker, listedWhenMarked]`: `false` for Claude (the tool is denied UNLESS
- * the marker allows it) and `true` for Copilot (the tool is allowed ONLY IF the marker is
- * present) — the same marker, read in the opposite sense a denylist and an allowlist
- * require. Row order is emit order: WebFetch before Bash keeps the unmarked Claude line
- * byte-identical to what it was before the webfetch marker existed.
+ * `_build_emit._claude_agent_frontmatter`. A read-only spec gets a `disallowedTools` DENYLIST;
+ * each opt-in marker takes its tool back off the list. Order is emit order: WebFetch before
+ * Bash keeps the unmarked line byte-identical to what it was before the webfetch marker existed.
  */
-const READONLY_TOOLS = {
-  claude: {
-    key: 'disallowedTools', tools: ['Write', 'Edit', 'NotebookEdit'], brackets: false,
-    gated: [['WebFetch', WEBFETCH_MARKER, false], ['Bash', BASH_MARKER, false]],
-  },
-  copilot: {
-    key: 'tools', tools: ['read', 'search', 'todo', 'agent'], brackets: true,
-    gated: [['fetch', WEBFETCH_MARKER, true], ['execute', BASH_MARKER, true]],
-  },
-};
-
-/** `_build_emit._claude_agent_frontmatter` / `._copilot_agent_frontmatter`. */
-function claudeCopilotAgentFrontmatter(host, stem, text, overrides) {
+function claudeAgentFrontmatter(stem, text, overrides) {
   const fm = [`name: ${stem}`, `description: ${jsonDumps(descOf(text))}`];
   const ov = agentOverride(overrides, stem);
   if (isTruthy(ov.model)) fm.push(`model: ${formatValue(ov.model)}`);
   if (isReadonly(text)) {
-    const { key, tools, brackets, gated } = READONLY_TOOLS[host];
-    const list = [...tools];
-    for (const [tool, marker, listedWhenMarked] of gated) {
-      if (text.includes(marker) === listedWhenMarked) list.push(tool);
-    }
-    fm.push(`${key}: ${brackets ? `[${list.join(', ')}]` : list.join(', ')}`);
+    const list = ['Write', 'Edit', 'NotebookEdit'];
+    if (!text.includes(WEBFETCH_MARKER)) list.push('WebFetch');
+    if (!text.includes(BASH_MARKER)) list.push('Bash');
+    fm.push(`disallowedTools: ${list.join(', ')}`);
   }
   return fm;
 }
 
-function claudeAgentFrontmatter(stem, text, overrides) {
-  return claudeCopilotAgentFrontmatter('claude', stem, text, overrides);
-}
-
-/** `tools:` is an ALLOWLIST, not a denylist. */
-function copilotAgentFrontmatter(stem, text, overrides) {
-  return claudeCopilotAgentFrontmatter('copilot', stem, text, overrides);
-}
-
 /** `_build_emit._opencode_agent_frontmatter`. */
 function opencodeAgentFrontmatter(stem, text, overrides, theme = null) {
   const fm = [`description: ${jsonDumps(descOf(text))}`, 'mode: subagent'];
@@ -387,6 +360,14 @@ function relPosix(base, target) {
  * source root it is relativised against (Python reads `_build_core.SRC` directly, which
  * is the module-level single owner; here it travels explicitly, as in `js/build/render.mjs`).
  *
+ * `opts.skillDirOf(name)` — set for a host that hands the model a skill's TEXT but not where
+ * the skill lives (Bob). A folder skill names its scripts and prompts
+ * `<this-skill-directory>/…`; Claude Code resolves that because it announces each skill's
+ * base directory on load, while on Bob the model got the text with a hole in it and went
+ * hunting through the filesystem. With the option, every rendered `.md` of a vendored folder
+ * has the placeholder replaced by the answer. Only vendored folders carry the placeholder — a
+ * flat skill has no siblings to point at.
+ *
  * Returns `{ nAgents, nSkills, written }` — Python's 3-tuple, with `written` as absolute
  * paths in write order.
  *
@@ -400,7 +381,7 @@ function relPosix(base, target) {
  */
 export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null, {
   host = 'opencode', oldOwned = null, cfg = null, manifestExisted = true,
-  theme = null, src,
+  theme = null, src, skillDirOf = null,
 } = {}) {
   const ov = overrides || {};
   const oldSet = oldOwned !== null && oldOwned !== undefined ? new Set(oldOwned) : null;
@@ -445,8 +426,10 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
       mkdirSync(path.dirname(dest), { recursive: true });
       // The same vendored folder mixes both writers: a rendered `.md` goes through
       // writeText (and picks up CRLF on Windows), a binary through copy2 (and keeps LF).
-      if (text !== null) writeText(dest, text);
-      else copyFile(source, dest);
+      if (text !== null) {
+        writeText(dest, skillDirOf === null ? text
+          : text.replaceAll(SKILL_DIR_PLACEHOLDER, skillDirOf(sparts[1])));
+      } else copyFile(source, dest);
       written.push(dest);
       continue;
     }
@@ -480,12 +463,6 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
       if (host === 'claude') {
         fm = claudeAgentFrontmatter(stem, text, ov);
         dest = path.join(agentsDir, `${stem}.md`);
-      } else if (host === 'copilot') {
-        fm = copilotAgentFrontmatter(stem, text, ov);
-        dest = path.join(agentsDir, `${stem}.agent.md`);
-        // The filename change drags the links with it: a sibling `](skeptic.md)` would
-        // point at a file this dialect never writes.
-        body = body.replace(SIBLING_AGENT_LINK_RE, ']($1.agent.md)');
       } else {
         fm = opencodeAgentFrontmatter(stem, text, ov, theme);
         dest = path.join(agentsDir, `${stem}.md`);
@@ -494,7 +471,7 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
     } else {
       // Skills are BYTE-IDENTICAL across hosts: name + description, body link-stripped.
       // The user-only key is emitted for every host too — Claude Code and Bob honour it,
-      // OpenCode and Copilot ignore an unknown key — so the identity holds.
+      // OpenCode ignores an unknown key — so the identity holds.
       fm = [`name: ${stem}`, `description: ${jsonDumps(skillDescription(text))}`];
       if (isUserInvokedOnly(text)) fm.push('disable-model-invocation: true');
       body = stripSkillBodyLinks(body);

package/js/hosts/opencode.mjs

@@ -84,7 +84,7 @@ const AGENT_OVERRIDES_STUB = {
   _recommended: {
     _comment: (
       'Cheap-tier seats: copy the ones you want into "agents" with your host\'s cheap '
-      + 'model id (OpenCode: "anthropic/claude-haiku-4-5"; Claude Code / Copilot: "haiku"). '
+      + 'model id (OpenCode: "anthropic/claude-haiku-4-5"; Claude Code: "haiku"). '
       + 'Read-and-summarise work — a council convenes several at once, so this is where '
       + 'the savings compound. Nothing applies until you copy it.'
     ),