geneseed 3.9.0 → 3.10.0

package/js/hosts/native.mjs

@@ -3,7 +3,7 @@
  *
  * A faithful translation of `_build_emit._write_native_layer` and the frontmatter
  * builders it dispatches to. Capability specs become host-native subagents and skills:
- * one dialect per host (OpenCode / Claude Code / Copilot), vendored skill folders copied
+ * one dialect per host (OpenCode / Claude Code), vendored skill folders copied
  * through verbatim, authoring templates shipped flat.
  *
  * WHY THIS IS THE HARD HALF. `js/build/render.mjs` is a pure function of `src/` and `themes/`;
@@ -33,6 +33,9 @@ import path from 'node:path';
 import { writeText, copyFile, readText } from '../lib/fs.mjs';
 import { jsonDumps, parseJson, formatValue, formatRepr, isTruthy, isDict } from '../lib/json.mjs';
 
+/** What a folder skill writes where it needs its own directory — see `writeNativeLayer`. */
+export const SKILL_DIR_PLACEHOLDER = '<this-skill-directory>';
+
 /** Mirrors `_build_core.VENDORED_SKILL_DIRS`. */
 export const VENDORED_SKILL_DIRS = new Set(['react-view-transitions', 'daydream', 'token-report', 'explain-changes']);
 
@@ -58,7 +61,7 @@ export function isVendoredPath(rel) {
  * `build._validate_is_vendored` — the same question, tolerant of `skills` at ANY depth.
  *
  * The per-repo native layers nest one level deeper than a `files`/opencode-global bundle
- * (`.claude/skills/<name>/…`, `.bob/skills/<name>/…`, `.github/skills/<name>/…`), so
+ * (`.claude/skills/<name>/…`, `.bob/skills/<name>/…`, `.openclaude/skills/<name>/…`), so
  * `doctor`'s scan of those trees needs the loose form or every vendored folder's own
  * upstream cross-links read as dead links. Never the last segment — `parts[:-1]`, because a
  * FILE named `skills` is not a directory of them.
@@ -79,8 +82,6 @@ const AGENT_COLORS = {
 const VALID_AGENT_COLOR_SLOTS = new Set(
   ['primary', 'secondary', 'accent', 'success', 'warning', 'error', 'info']);
 
-/** `_build_emit._SIBLING_AGENT_LINK_RE` — a bare same-dir agent filename in a link. */
-const SIBLING_AGENT_LINK_RE = /\]\(([A-Za-z0-9_-]+)\.md\)/g;
 
 /**
  * `_build_emit._strip_skill_body_links`'s pattern: every RELATIVE markdown link to a
@@ -296,51 +297,23 @@ const BASH_MARKER = '<!-- bash: allow -->';
 const WEBFETCH_MARKER = '<!-- webfetch: allow -->';
 
 /**
- * The readonly-tool line `claudeAgentFrontmatter`/`copilotAgentFrontmatter` each emit — a
- * DENYLIST for Claude, an ALLOWLIST for Copilot — differing only in the key, the base list,
- * the gated entries the markers toggle, and whether the value is bracketed. Each `gated`
- * row is `[tool, marker, listedWhenMarked]`: `false` for Claude (the tool is denied UNLESS
- * the marker allows it) and `true` for Copilot (the tool is allowed ONLY IF the marker is
- * present) — the same marker, read in the opposite sense a denylist and an allowlist
- * require. Row order is emit order: WebFetch before Bash keeps the unmarked Claude line
- * byte-identical to what it was before the webfetch marker existed.
+ * `_build_emit._claude_agent_frontmatter`. A read-only spec gets a `disallowedTools` DENYLIST;
+ * each opt-in marker takes its tool back off the list. Order is emit order: WebFetch before
+ * Bash keeps the unmarked line byte-identical to what it was before the webfetch marker existed.
  */
-const READONLY_TOOLS = {
-  claude: {
-    key: 'disallowedTools', tools: ['Write', 'Edit', 'NotebookEdit'], brackets: false,
-    gated: [['WebFetch', WEBFETCH_MARKER, false], ['Bash', BASH_MARKER, false]],
-  },
-  copilot: {
-    key: 'tools', tools: ['read', 'search', 'todo', 'agent'], brackets: true,
-    gated: [['fetch', WEBFETCH_MARKER, true], ['execute', BASH_MARKER, true]],
-  },
-};
-
-/** `_build_emit._claude_agent_frontmatter` / `._copilot_agent_frontmatter`. */
-function claudeCopilotAgentFrontmatter(host, stem, text, overrides) {
+function claudeAgentFrontmatter(stem, text, overrides) {
   const fm = [`name: ${stem}`, `description: ${jsonDumps(descOf(text))}`];
   const ov = agentOverride(overrides, stem);
   if (isTruthy(ov.model)) fm.push(`model: ${formatValue(ov.model)}`);
   if (isReadonly(text)) {
-    const { key, tools, brackets, gated } = READONLY_TOOLS[host];
-    const list = [...tools];
-    for (const [tool, marker, listedWhenMarked] of gated) {
-      if (text.includes(marker) === listedWhenMarked) list.push(tool);
-    }
-    fm.push(`${key}: ${brackets ? `[${list.join(', ')}]` : list.join(', ')}`);
+    const list = ['Write', 'Edit', 'NotebookEdit'];
+    if (!text.includes(WEBFETCH_MARKER)) list.push('WebFetch');
+    if (!text.includes(BASH_MARKER)) list.push('Bash');
+    fm.push(`disallowedTools: ${list.join(', ')}`);
   }
   return fm;
 }
 
-function claudeAgentFrontmatter(stem, text, overrides) {
-  return claudeCopilotAgentFrontmatter('claude', stem, text, overrides);
-}
-
-/** `tools:` is an ALLOWLIST, not a denylist. */
-function copilotAgentFrontmatter(stem, text, overrides) {
-  return claudeCopilotAgentFrontmatter('copilot', stem, text, overrides);
-}
-
 /** `_build_emit._opencode_agent_frontmatter`. */
 function opencodeAgentFrontmatter(stem, text, overrides, theme = null) {
   const fm = [`description: ${jsonDumps(descOf(text))}`, 'mode: subagent'];
@@ -387,6 +360,14 @@ function relPosix(base, target) {
  * source root it is relativised against (Python reads `_build_core.SRC` directly, which
  * is the module-level single owner; here it travels explicitly, as in `js/build/render.mjs`).
  *
+ * `opts.skillDirOf(name)` — set for a host that hands the model a skill's TEXT but not where
+ * the skill lives (Bob). A folder skill names its scripts and prompts
+ * `<this-skill-directory>/…`; Claude Code resolves that because it announces each skill's
+ * base directory on load, while on Bob the model got the text with a hole in it and went
+ * hunting through the filesystem. With the option, every rendered `.md` of a vendored folder
+ * has the placeholder replaced by the answer. Only vendored folders carry the placeholder — a
+ * flat skill has no siblings to point at.
+ *
  * Returns `{ nAgents, nSkills, written }` — Python's 3-tuple, with `written` as absolute
  * paths in write order.
  *
@@ -400,7 +381,7 @@ function relPosix(base, target) {
  */
 export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null, {
   host = 'opencode', oldOwned = null, cfg = null, manifestExisted = true,
-  theme = null, src,
+  theme = null, src, skillDirOf = null,
 } = {}) {
   const ov = overrides || {};
   const oldSet = oldOwned !== null && oldOwned !== undefined ? new Set(oldOwned) : null;
@@ -445,8 +426,10 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
       mkdirSync(path.dirname(dest), { recursive: true });
       // The same vendored folder mixes both writers: a rendered `.md` goes through
       // writeText (and picks up CRLF on Windows), a binary through copy2 (and keeps LF).
-      if (text !== null) writeText(dest, text);
-      else copyFile(source, dest);
+      if (text !== null) {
+        writeText(dest, skillDirOf === null ? text
+          : text.replaceAll(SKILL_DIR_PLACEHOLDER, skillDirOf(sparts[1])));
+      } else copyFile(source, dest);
       written.push(dest);
       continue;
     }
@@ -480,12 +463,6 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
       if (host === 'claude') {
         fm = claudeAgentFrontmatter(stem, text, ov);
         dest = path.join(agentsDir, `${stem}.md`);
-      } else if (host === 'copilot') {
-        fm = copilotAgentFrontmatter(stem, text, ov);
-        dest = path.join(agentsDir, `${stem}.agent.md`);
-        // The filename change drags the links with it: a sibling `](skeptic.md)` would
-        // point at a file this dialect never writes.
-        body = body.replace(SIBLING_AGENT_LINK_RE, ']($1.agent.md)');
       } else {
         fm = opencodeAgentFrontmatter(stem, text, ov, theme);
         dest = path.join(agentsDir, `${stem}.md`);
@@ -494,7 +471,7 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
     } else {
       // Skills are BYTE-IDENTICAL across hosts: name + description, body link-stripped.
       // The user-only key is emitted for every host too — Claude Code and Bob honour it,
-      // OpenCode and Copilot ignore an unknown key — so the identity holds.
+      // OpenCode ignores an unknown key — so the identity holds.
       fm = [`name: ${stem}`, `description: ${jsonDumps(skillDescription(text))}`];
       if (isUserInvokedOnly(text)) fm.push('disable-model-invocation: true');
       body = stripSkillBodyLinks(body);

package/js/hosts/opencode.mjs

@@ -84,7 +84,7 @@ const AGENT_OVERRIDES_STUB = {
   _recommended: {
     _comment: (
       'Cheap-tier seats: copy the ones you want into "agents" with your host\'s cheap '
-      + 'model id (OpenCode: "anthropic/claude-haiku-4-5"; Claude Code / Copilot: "haiku"). '
+      + 'model id (OpenCode: "anthropic/claude-haiku-4-5"; Claude Code: "haiku"). '
       + 'Read-and-summarise work — a council convenes several at once, so this is where '
       + 'the savings compound. Nothing applies until you copy it.'
     ),

package/js/hosts/settings.mjs

@@ -649,7 +649,7 @@ export function hookPrefix({ runner, entry, platform = process.platform } = {})
  * rule is no longer BINDING — so a gate that stopped every commit to ask for consent to a rule
  * the install did not adopt is the disagreement the three-tier split forbids. The group stays
  * and gains `--no-consent`, which skips only the process-5 branch. It once DROPPED the whole
- * group instead, and Law IV went with it — on Claude only, since Bob and Copilot carry it
+ * group instead, and Law IV went with it — on Claude only, since Bob carries it
  * through `tool-gate`. The command changing is also what re-wires an existing install:
  * `mergeClaudeSettings` prunes every previously-managed group that is not in this return
  * value.
@@ -700,22 +700,6 @@ export function claudeHookGroups(cfg, hookOpts, doctrines = null, excluded = [],
       Stop: [{ hooks: [{ type: 'command', command: `${run} learn ${mem} || exit 0` }] }],
     };
   }
-  if (host === 'copilot') {
-    // COPILOT'S OWN SCHEMA (docs.github.com/en/copilot/reference/hooks-configuration): camelCase
-    // events, each an ARRAY of `{type: "command", command}` entries — no matcher groups, so the
-    // array elements ARE the groups this merge appends and prunes. `preToolUse` answers with
-    // a top-level `permissionDecision` (`--host copilot`), and `agentStop`/`preCompact` carry
-    // `transcriptPath`, so `learn` runs here as on Claude. No matcher, so `tool-gate` reads
-    // the payload's shape. Unverified live: no Copilot CLI on the authoring machine.
-    const c = ' --host copilot';
-    const entry = (command) => [{ type: 'command', command }];
-    return {
-      sessionStart: entry(`${run} context --root "${cfg}"${c} || exit 0`),
-      preToolUse: entry(`${run} tool-gate --root "${cfg}"${c}`),
-      agentStop: entry(`${run} learn ${mem} || exit 0`),
-      preCompact: entry(`${run} learn ${mem} || exit 0`),
-    };
-  }
   // OpenClaude takes Claude's whole group set and verdicts unchanged; only `context` needs
   // the host, to know which root file OpenClaude already loads by itself.
   const h = host === 'openclaude' ? ' --host openclaude' : '';
@@ -753,63 +737,6 @@ export function claudeHookGroups(cfg, hookOpts, doctrines = null, excluded = [],
   };
 }
 
-/**
- * LEGACY: the single-slot Copilot shape (`hooks.<event>` = ONE object, events `sessionStart` /
- * `toolCall`) an emit wrote before Copilot's hooks became event → array. Copilot has no
- * `toolCall` event any more, so those gates never ran. Nothing writes this shape now; these
- * two only take an older install's recorded `copilot_hooks` claims back out.
- */
-/** Remove exactly the recorded Copilot hooks from `p`. True when the file was rewritten. */
-export function unwireCopilotSettings(p, recorded) {
-  if (!existsSync(p) || !recorded || !recorded.length) return false;
-  let loaded;
-  let hadComments;
-  try {
-    [loaded, hadComments] = readJsonc(readText(p));
-  } catch (e) {
-    if (!isOsError(e)) throw e;
-    return false;
-  }
-  if (hadComments || !isDict(loaded)) return false;
-  const hooks = get(loaded, 'hooks');
-  if (!isDict(hooks)) return false;
-  for (const rec of recorded) {
-    const event = get(rec, 'event');
-    if (deepEquals(get(hooks, event), get(rec, 'hook'))) delete hooks[event];
-  }
-  if (!Object.keys(hooks).length) delete loaded.hooks;
-  try {
-    atomicWriteJson(p, loaded);
-  } catch (e) {
-    if (!isOsError(e)) throw e;
-    return false;
-  }
-  return true;
-}
-
-/**
- * The Copilot twin of `settingsIntegrityCheck`: every recorded hook present (or absent) in
- * the file it was claimed against. Same contract — problems as strings, each also WARNed on
- * stderr, empty when clean — so a merge that did not stick is loud at emit time rather than
- * a hook that quietly never fires.
- */
-export function copilotIntegrityCheck(p, recorded, expect = 'present') {
-  const problems = [];
-  const hooks = existsSync(p) ? (() => {
-    try { return get(readJsonc(readText(p))[0], 'hooks'); } catch { return null; }
-  })() : null;
-  for (const rec of (recorded || []).filter(isDict)) {
-    const hit = deepEquals(get(hooks, rec.event), rec.hook);
-    if (expect === 'present' && !hit) {
-      problems.push(`${p}: recorded Copilot hook missing — event=${rec.event}`);
-    } else if (expect === 'absent' && hit) {
-      problems.push(`${p}: recorded Copilot hook still present after unwire — event=${rec.event}`);
-    }
-  }
-  for (const x of problems) process.stderr.write(`[geneseed] WARN: ${x}\n`);
-  return problems;
-}
-
 /**
  * `_build_settings._merge_claude_settings` — returns `[target, managed]`.
  *
@@ -1045,8 +972,8 @@ const SHIM_ENTRY_MARK = 'geneseed-hook.mjs';
  *
  * PURE — and currently reached only END TO END, by the `migrate/a-node-baked-shim-reads-as-current`
  * cell. No unit corpus drives it directly, which is worth knowing before trusting it.
- * 'none' is not a fault: a Copilot install wires no hooks, and a user's own
- * settings.json may carry three hand-written hooks and no Geneseed entry. Both must read as
+ * 'none' is not a fault: a user's own settings.json may carry three hand-written hooks
+ * and no Geneseed entry. That must read as
  * "nothing to migrate" rather than "unrecognised", or `migrate` refuses on the commonest
  * config on any machine.
  */
@@ -1181,8 +1108,7 @@ export function settingsIntegrityCheck(p, managed, expect = 'present') {
   for (const [event, group] of presentGroups) {
     const key = `${formatRepr(event)}\u0000${jsonDumpsCompact(group, { sortKeys: true })}`;
     if (recordedSet.has(key)) continue;
-    // A Claude group nests its commands under `hooks`; a Copilot entry IS the command.
-    const cmds = [...(get(group, 'hooks') || []).filter(isDict), group]
+    const cmds = (get(group, 'hooks') || []).filter(isDict)
       .map((h) => (has(h, 'command') ? h.command : ''));
     if (cmds.some((c) => typeof c === 'string'
       && GENESEED_HOOK_SNIFF.some((mk) => c.includes(mk)))) {

package/js/inspect/checks-authoring.mjs

@@ -22,7 +22,9 @@ import { readText } from '../lib/fs.mjs';
 import { parseJson, formatRepr } from '../lib/json.mjs';
 import { which } from '../lib/paths.mjs';
 import { NO_WINDOW } from '../lib/proc.mjs';
-import { registryProblems, secretProblems, vendorPinProblems } from './checks-repo.mjs';
+import {
+  folderSkillProblems, registryProblems, secretProblems, vendorPinProblems,
+} from './checks-repo.mjs';
 import { LAW_CLASS, LAW_CLASSES, SKILL_CLASS } from './inventory.mjs';
 import { NOTE, globSorted, has, isDir, isFile, rglob, srcStems } from './scan.mjs';
 import { spawnSync } from 'node:child_process';
@@ -901,6 +903,7 @@ export function authoringProblems() {
   problems.push(...registryProblems());
   problems.push(...secretProblems());
   problems.push(...vendorPinProblems());
+  problems.push(...folderSkillProblems());
   problems.push(...constitutionProblems());
   problems.push(...leanBlockProblems());
   problems.push(...countTableProblems());

package/js/inspect/checks-repo.mjs

@@ -1,6 +1,6 @@
 /**
  * The checks over the REPO's own records — the registry, committed secrets, the hook shim
- * and the vendored-skill pins.
+ * and the vendored skill folders (their pins and their SKILL.md frontmatter).
  *
  * Same contract as `checks-build.mjs`: an array of problem strings, empty when clean, one
  * planted fault per check in the gate. This is the group that reads what the repo SAYS about
@@ -240,6 +240,50 @@ export function vendorPinProblems() {
   return problems;
 }
 
+const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;
+
+/**
+ * Every vendored skill folder's `SKILL.md` opens with a frontmatter whose `name` IS the
+ * folder and which carries a `description`.
+ *
+ * A flat skill gets that frontmatter from `writeNativeLayer`; a folder is copied through as
+ * written, so its own SKILL.md is all a host has to register it from. Two shipped broken:
+ * daydream had no frontmatter at all and react-view-transitions named itself after its
+ * upstream repo — the Agent Skills format requires the name to match the folder. Claude Code
+ * tolerated both, so nothing showed; a stricter host is free not to register them. Only the
+ * two keys every host reads are checked, at the top level of the block (an indented
+ * `name:` under `metadata:` does not count).
+ */
+export function folderSkillProblems() {
+  const problems = [];
+  for (const name of VENDORED_SKILL_DIRS) {
+    const folder = path.join(SRC, 'skills', name);
+    if (!isDir(folder)) continue;   // vendorPinProblems reports the missing folder
+    let text;
+    try { text = readText(path.join(folder, 'SKILL.md')); } catch {
+      problems.push(`[authoring] skills/${name}/ has no SKILL.md — no host can load it`);
+      continue;
+    }
+    const fm = FRONTMATTER_RE.exec(text);
+    if (!fm) {
+      problems.push(`[authoring] skills/${name}/SKILL.md opens with no frontmatter — a host `
+        + 'registers a skill from its name and description');
+      continue;
+    }
+    const declared = /^name:[ \t]*["']?([^"'\r\n]*?)["']?[ \t]*$/m.exec(fm[1]);
+    if (!declared) {
+      problems.push(`[authoring] skills/${name}/SKILL.md frontmatter has no 'name'`);
+    } else if (declared[1] !== name) {
+      problems.push(`[authoring] skills/${name}/SKILL.md is named '${declared[1]}' — the name `
+        + 'must match the folder');
+    }
+    if (!/^description:[ \t]*\S/m.test(fm[1])) {
+      problems.push(`[authoring] skills/${name}/SKILL.md frontmatter has no 'description'`);
+    }
+  }
+  return problems;
+}
+
 
 /**
  * `js/README.md` describes every module under `js/`, and only modules that exist.

package/js/inspect/diff.mjs

@@ -41,7 +41,9 @@ import os from 'node:os';
 import path from 'node:path';
 
 import { emitGlobalInto } from '../build/driver.mjs';
-import { GLOBAL_MANIFEST, VERSION_MARKER, expanduser, opencodeConfigDir } from '../hosts/hosts.mjs';
+import {
+  GLOBAL_MANIFEST, VERSION_MARKER, expanduser, opencodeConfigDir, resolvePath,
+} from '../hosts/hosts.mjs';
 import {
   EMIT_HOST_SCOPE, defaultTheme, doctrinesForBuild, footprintOfDir, modeOfDir, postureOfDir,
   readJsonMaybe, readMaybe, themeOfDir,
@@ -174,6 +176,12 @@ export function diffCollect({ target = null, theme = null, emit = null, footprin
       // makes explicit rather than leaving to `makeCfg`'s parameter default two layers down.
       posture: postureOfDir(dir), mode: modeOfDir(dir), doctrines: doctrinesForBuild(dir),
     }));
+    // The one place a render depends on WHERE it is installed: a global Bob emit writes each
+    // folder skill's absolute directory into its SKILL.md (see `writeNativeLayer`), so the
+    // reference render names the temp tree. Mapped back to the deployed dir before comparing,
+    // or every such skill reads as edited. A deployment that has since MOVED still differs,
+    // and that is real drift — its skills point at a directory that is no longer theirs.
+    const deployedDir = resolvePath(dir);
     const rels = [...new Set([...ownedSet(dir), ...ownedSet(expected)])].sort();
     for (const rel of rels) {
       const a = path.join(dir, rel);
@@ -182,7 +190,7 @@ export function diffCollect({ target = null, theme = null, emit = null, footprin
         // `read_text(errors="replace")` — Node's utf8 decoder substitutes U+FFFD for the
         // same bytes, and `readText` folds the line endings the way `Path.read_text` does.
         const ta = readText(a);
-        const tb = readText(b);
+        const tb = readText(b).split(expected).join(deployedDir);
         if (cmpKey(rel, ta) !== cmpKey(rel, tb)) {
           const diff = unifiedDiff(splitLines(tb), splitLines(ta), {
             fromfile: `source/${rel}`, tofile: `deployed/${rel}`, lineterm: '',
@@ -349,7 +357,7 @@ export function cmdDiff(args) {
         + 'installs against a fresh render (a project layer is diffed against '
         + 'its own repo, which this command does not do). Pass --target at a '
         + 'global config dir (opencode-global/claude-global/bob-global/'
-        + 'copilot-global/openclaude-global), or omit '
+        + 'openclaude-global), or omit '
         + '--target to use the default.\n');
     } else {
       printErr(`[diff] no global Geneseed install at ${target} (no ${GLOBAL_MANIFEST}). `

package/js/inspect/doctor.mjs

@@ -134,7 +134,7 @@ export function globalEmitProblems(themeName) {
 }
 
 /**
- * `_harness_build._claude_bob_emit_problems` — validate the claude/bob/copilot/openclaude PER-REPO
+ * `_harness_build._claude_bob_emit_problems` — validate the claude/bob/openclaude PER-REPO
  * emits, which were never checked before.
  *
  * That is exactly why the CLAUDE.md/AGENTS.md skill-table dead links shipped unnoticed: the
@@ -143,7 +143,7 @@ export function globalEmitProblems(themeName) {
  * skills one level deeper than a bundle does.
  */
 export function claudeBobEmitProblems(themeName) {
-  return emitProblemsOver(['claude', 'bob', 'copilot', 'openclaude'], (tmp, label) => {
+  return emitProblemsOver(['claude', 'bob', 'openclaude'], (tmp, label) => {
     const root = path.join(tmp, 'root');
     return {
       label: `${themeName} ${label}`,
@@ -211,7 +211,7 @@ export function doctorCollect({
       problems = problems.concat(ran('global', `Global install (${themeName})`,
         globalEmitProblems(themeName)));
       problems = problems.concat(ran('claude_bob',
-        `Claude/Bob/Copilot/OpenClaude per-repo emit (${themeName})`, claudeBobEmitProblems(themeName)));
+        `Claude/Bob/OpenClaude per-repo emit (${themeName})`, claudeBobEmitProblems(themeName)));
     }
   });
   problems = problems.concat(ran('parity', 'Theme parity', themeParityProblems()));

package/js/inspect/excludes.mjs

@@ -143,10 +143,6 @@ export function excludeAdd(target) {
         wired.bob_rules_stub = true;
       }
     }
-    if (host === 'copilot') {
-      messages.push('copilot: no native suppression exists — the global '
-        + 'copilot-instructions.md still loads there (documented limitation)');
-    }
     const entries = data.excludes.filter((e) => !(isDict(e) && same(get(e, 'path'), repo)));
     entries.push({ path: repo.split(path.sep).join('/'), wired });
     data.excludes = entries;

package/js/inspect/status.mjs

@@ -61,7 +61,7 @@ import { THEMES, ROOT, makeCfg } from '../build/source.mjs';
 import { tuiInventory } from './inventory.mjs';
 import { readVersion, sourceFingerprint } from '../build/version.mjs';
 import {
-  claudeConfigDir, bobConfigDir, copilotConfigDir, openclaudeConfigDir, opencodeConfigDir,
+  claudeConfigDir, bobConfigDir, openclaudeConfigDir, opencodeConfigDir,
   resolvePath, resolveMemoryDir, sovereignBypass, GATE_LEDGER,
 } from '../hosts/hosts.mjs';
 // P5f moved the install DETECTORS out of this file — `diff` renders its expected copy in the
@@ -99,9 +99,9 @@ export function cmdVersion(args) {
   let target = args.target ? resolvePath(args.target) : opencodeConfigDir();
   let installed = readVersion(target);
   if (installed === null) {
-    // A claude/bob/copilot-only machine must not report "no install detected". The bundle
+    // A claude/bob/openclaude-only machine must not report "no install detected". The bundle
     // candidates are cwd-relative only — see the Python for why `ROOT / "Harness"` left.
-    for (const base of [claudeConfigDir(), bobConfigDir(), copilotConfigDir(), openclaudeConfigDir(),
+    for (const base of [claudeConfigDir(), bobConfigDir(), openclaudeConfigDir(),
       path.join(process.cwd(), 'Harness'), process.cwd()]) {
       const v = readVersion(base);
       if (v) { installed = v; target = base; break; }
@@ -226,7 +226,7 @@ export function statusData() {
   let installedFp = null;
   let verTarget = null;
   const otherCfg = [];
-  for (const fn of [claudeConfigDir, bobConfigDir, copilotConfigDir, openclaudeConfigDir]) {
+  for (const fn of [claudeConfigDir, bobConfigDir, openclaudeConfigDir]) {
     try { otherCfg.push(fn()); } catch { /* a missing host dir must not sink status */ }
   }
   // Same walk as `cmdVersion`'s fallback, and cwd-relative for the same reason.

package/js/maintain/migrate.mjs

@@ -52,11 +52,11 @@ const KNOWN_EMITS = new Set(EMIT_HOST_SCOPE.keys());
 /**
  * The settings file a host wires hooks into, or null for a host that has none.
  *
- * Only Claude and Bob carry hook commands. OpenCode's hooks are a PLUGIN (`js/hosts/opencode.mjs`
- * emits JS that runs in the host's own process and names neither the shim nor `harness.py`),
- * and Copilot has no hook mechanism at all. So those two classify as `none` and their whole
- * migration is the re-emit — which is the same re-emit, in the same change, on all three
- * hosts, which is what the project's host-parity rule asks for.
+ * Only the Claude-style hosts carry hook commands. OpenCode's hooks are a PLUGIN
+ * (`js/hosts/opencode.mjs` emits JS that runs in the host's own process and names neither the
+ * shim nor `harness.py`), so it classifies as `none` and its whole migration is the re-emit —
+ * the same re-emit, in the same change, on every host, which is what the project's
+ * host-parity rule asks for.
  */
 function hookSettingsFile(root, host, scope) {
   if (!['claude', 'bob', 'openclaude'].includes(host)) return null;

package/js/maintain/setup.mjs

@@ -280,7 +280,7 @@ export function doctrineOptions() {
 /**
  * `_harness_setup.EMIT_OPTIONS`.
  *
- * Exported since P6b: `/api/themes` returns the same eleven as its `emits` list, and a copy
+ * Exported since P6b: `/api/themes` returns the same nine as its `emits` list, and a copy
  * of a table under test silently stops being the table under test.
  */
 export const EMIT_OPTIONS = [
@@ -290,8 +290,6 @@ export const EMIT_OPTIONS = [
   ['claude', 'Per-repo CLAUDE.md + .claude/ committed into one repository.'],
   ['bob-global', 'IBM Bob global config dir (~/.bob) — rules/geneseed.md, agents, skills, settings.json.'],
   ['bob', 'Per-repo AGENTS.md + .bob/ for IBM Bob, committed into one repository.'],
-  ['copilot-global', 'GitHub Copilot personal config dir (~/.copilot) — copilot-instructions.md, agents, skills.'],
-  ['copilot', 'Per-repo AGENTS.md + .github/ for GitHub Copilot, committed into one repository.'],
   ['files', 'Plain bundle for any AGENT.md tool.'],
   // Appended AFTER `files`, not beside the other hosts: the menu is answered by number, and a
   // scripted `setup` that pipes its answers must keep meaning what it meant.
@@ -377,10 +375,10 @@ export function collectSetupLines() {
     inst.footprint || 'lean');
   let out = null;
   let root = null;
-  // Every PROJECT emit needs the repo root — claude/bob/copilot included: without `--out`
+  // Every PROJECT emit needs the repo root — claude/bob/openclaude included: without `--out`
   // their CLAUDE.md/.claude land in the generator's default ./Harness, where the host never
   // looks.
-  if (['opencode', 'claude', 'bob', 'copilot', 'openclaude'].includes(emit)) {
+  if (['opencode', 'claude', 'bob', 'openclaude'].includes(emit)) {
     root = ask('Repo root to install into', '.');
     out = root;
   } else if (emit === 'files') {

package/js/maintain/uninstall.mjs

@@ -59,10 +59,9 @@ import {
 } from '../hosts/hosts.mjs';
 import { mcpCommented } from '../hosts/mcp.mjs';
 import {
-  copilotIntegrityCheck, managedBlockRead, managedBlockRemove, managedBlockWrite,
+  managedBlockRead, managedBlockRemove, managedBlockWrite,
   mergeClaudeSettings, opencodeTarget, readJsonc,
   settingsIntegrityCheck, wireClaudeExcludes, unwireClaudeExcludes, unwireClaudeSettings,
-  unwireCopilotSettings,
 } from '../hosts/settings.mjs';
 import { printOut, printErr, readText, writeText, isFile, isDir, isOsError } from '../lib/fs.mjs';
 import { indexOfDeepEqual, jsonDumps, jsonDumpsIndent, deepEquals } from '../lib/json.mjs';
@@ -71,7 +70,7 @@ import { comparePaths, isAbsolutePath, within } from '../lib/paths.mjs';
 const hostSpec = (host) => HOSTS.find((h) => h.host === host);
 
 /** The Claude-STYLE hosts — one manifest shape, one reversal. Spelled once. */
-const CLAUDE_STYLE = ['claude', 'bob', 'copilot', 'openclaude'];
+const CLAUDE_STYLE = ['claude', 'bob', 'openclaude'];
 
 /**
  * `shutil.rmtree(p, ignore_errors=True)`.
@@ -295,12 +294,8 @@ export function claudeUninstall(cfg, archiveMemory) {
   if (failed.length) warnSurvivors(failed);
   const hooks = managed.settings_hooks || [];
   const sf = settingsFile(cfg, managed);
-  // Two shapes, two unwires: a Copilot install records `copilot_hooks` (event → one hook)
-  // and never `settings_hooks`, so exactly one of these does anything.
-  const unwired = unwireClaudeSettings(sf, hooks)
-    | unwireCopilotSettings(sf, managed.copilot_hooks || []);
+  const unwired = unwireClaudeSettings(sf, hooks);
   unwireClaudeExcludes(sf, managed.settings_excludes || []);
-  copilotIntegrityCheck(sf, managed.copilot_hooks || [], 'absent');
   // The unwire is VERIFIED, not assumed: a commented settings file is never rewritten, so a
   // supposedly-uninstalled repo could keep firing Geneseed's hooks. Loud, never fatal.
   settingsIntegrityCheck(sf, managed, 'absent');
@@ -320,7 +315,7 @@ export function claudeUninstall(cfg, archiveMemory) {
 /**
  * `_harness_mcp._uninstall_global` — reverse a global install at `target` via its manifest.
  *
- * Host-aware at the top, and that dispatch is the whole reason a Claude/Bob/Copilot global
+ * Host-aware at the top, and that dispatch is the whole reason a Claude/Bob/OpenClaude global
  * install and an OpenCode one can share one entry point: the Claude family has no
  * opencode.json to unmerge and a settings.json plus a managed block instead.
  */
@@ -681,7 +676,7 @@ export function cmdUninstall(args) {
     const targetDesc = resolvePath(expanduser(args.target));
     printErr(`[uninstall] no Geneseed install detected at ${targetDesc}.\n`
       + '[uninstall] pass --target <repo> for a project install (.opencode/.claude/'
-      + '.bob/.github/.openclaude) or --target <config dir> for a global one.\n');
+      + '.bob/.openclaude) or --target <config dir> for a global one.\n');
     return 1;
   }
   const [host, scope, root] = hit;
@@ -695,12 +690,7 @@ export function cmdUninstall(args) {
   const data = installDataDir(root, host, scope);
   const stores = ['memory', 'notebook'].filter((n) => isDir(path.join(data, n)));
   printOut(`[uninstall] target: ${root} (${host}:${scope})\n`);
-  if (host === 'copilot') {
-    printOut('[uninstall] removes: agents/, skills/, markers, the '
-      + `${hostSpec(host).agentFile} managed block, and Geneseed's `
-      + '~/.copilot/settings.json hooks on a global install (your own keys/hooks and '
-      + '.github files are kept).\n');
-  } else if (['claude', 'bob', 'openclaude'].includes(host)) {
+  if (['claude', 'bob', 'openclaude'].includes(host)) {
     printOut('[uninstall] removes: agents/, skills/, markers, the '
       + `${hostSpec(host).agentFile} managed block, and Geneseed's `
       + 'settings.json hooks/excludes (your own keys/hooks are kept).\n');
@@ -1024,7 +1014,7 @@ export function installReactivate(root, host = 'opencode', scope = 'global') {
   return { ok: true, kind, moved };
 }
 
-// ---- the Claude-style fork (Claude · IBM Bob · GitHub Copilot) ---------------------------
+// ---- the Claude-style fork (Claude · IBM Bob · OpenClaude) ---------------------------
 //
 // A Claude-style install has NO `instructions` array — the harness reaches the host through
 // the CLAUDE.md managed block and the settings.json hooks. So the reversal is three moving
@@ -1057,27 +1047,6 @@ function cleanHostStash(cfg, host = 'claude') {
 function remergeClaudeHooks(cfg, root = cfg, host = 'claude') {
   const data = claudeReadManifest(cfg);
   const managed = managedOf(data);
-  // A LEGACY Copilot install (single-slot `copilot_hooks`, the dead `toolCall` event):
-  // reactivating it re-wires the CURRENT Copilot shape — event → array, recorded under
-  // `settings_hooks` — rather than restoring hooks Copilot no longer reads. None of the
-  // pack/exclude axes below apply: the Copilot gate is not pack-conditional.
-  if (Array.isArray(managed.copilot_hooks)) {
-    const sf = settingsFile(cfg, managed);
-    unwireCopilotSettings(sf, managed.copilot_hooks);
-    const [, claims] = mergeClaudeSettings(sf, 'global', null, hookRunnerEntry(), null, [],
-      'copilot', cfg);
-    if (Object.keys(data).length > 0) {
-      delete managed.copilot_hooks;
-      managed.settings_hooks = claims;
-      data.managed = managed;
-      const tmp = path.join(cfg, `${GLOBAL_MANIFEST}.tmp`);
-      try {
-        writeText(tmp, `${jsonDumpsIndent(data)}\n`);
-        renameSync(tmp, path.join(cfg, GLOBAL_MANIFEST));
-      } catch { /* except OSError: pass */ }
-    }
-    return;
-  }
   // `hookOpts` is the one argument `mergeClaudeSettings` will not default, and it is right
   // not to: there is no computable fallback for the runner/entry the shim bakes. The
   // emitter's own originator is imported rather than restated — a reactivate that wired a
@@ -1090,8 +1059,7 @@ function remergeClaudeHooks(cfg, root = cfg, host = 'claude') {
   // PROJECT install `cfg` is `<repo>/.claude` and the carrier is `<repo>/CLAUDE.md`, so
   // reading `cfg` alone answered `null` for every project reactivate and re-wired the gate
   // unconditionally (fail-closed, so not a hole — but wrong, and it made the toggle one-way
-  // for project installs). `root` first, `cfg` second: copilot keeps its carrier INSIDE the
-  // config dir (`.github/copilot-instructions.md`), and on a global install the two are the
+  // for project installs). `root` first, `cfg` second: on a global install the two are the
   // same directory anyway. Both silent ⇒ `null` ⇒ the gate stays.
   const doctrines = doctrinesOfDir(root) ?? doctrinesOfDir(cfg);
   // Same two-carrier read for the second axis, and its own default: an absent line means
@@ -1134,12 +1102,10 @@ function claudeDeactivate(root, scope = 'global', host = 'claude') {
     return { ok: false, failed, rolled_back: done.length };
   }
   unwireClaudeSettings(settingsFile(cfg, managed), managed.settings_hooks || []);
-  unwireCopilotSettings(settingsFile(cfg, managed), managed.copilot_hooks || []);
   unwireClaudeExcludes(settingsFile(cfg, managed), managed.settings_excludes || []);
   // The same integrity check the uninstall path runs: a deactivate that silently failed to
   // unwire would leave hooks firing in a repo the user believes is off.
   settingsIntegrityCheck(settingsFile(cfg, managed), managed, 'absent');
-  copilotIntegrityCheck(settingsFile(cfg, managed), managed.copilot_hooks || [], 'absent');
   const cm = claudeMdPath(cfg, managed);
   const block = managedBlockRead(cm);
   mkdirSync(stash, { recursive: true });   // presence == disabled, even if nothing moved