geneseed 3.9.0 → 3.11.0

package/js/build/emit-claude.mjs

@@ -11,7 +11,7 @@ import { loadAgentOverrides, writeNativeLayer } from '../hosts/native.mjs';
 import { ensureAgentOverridesStub } from '../hosts/opencode.mjs';
 import {
   managedBlockRemove, managedBlockWrite, mergeClaudeSettings,
-  unwireClaudeExcludes, unwireClaudeSettings, unwireCopilotSettings, wireClaudeExcludes,
+  unwireClaudeExcludes, unwireClaudeSettings, wireClaudeExcludes,
 } from '../hosts/settings.mjs';
 import { writeText } from '../lib/fs.mjs';
 import { isTruthy } from '../lib/json.mjs';
@@ -21,7 +21,8 @@ import {
 } from './emit-common.mjs';
 import { renderAll, renderFile } from './render.mjs';
 import {
-  BOB_RULES_STUB, ensureExcludesStub, ensureMemoryIndex, ensureNotebookIndex, ensureProfileStub,
+  BOB_RULES_STUB, ensureContextStub, ensureExcludesStub, ensureMemoryIndex, ensureNotebookIndex,
+  ensureProfileStub,
   ensureRulesStub, ensureWikiStub,
 } from './stubs.mjs';
 import { writeVersion } from './version.mjs';
@@ -36,7 +37,7 @@ import { existsSync, mkdirSync } from 'node:fs';
  * `claudeWire` below for the CLAUDE.md managed-block merge and the settings file. PRUNE,
  * MANIFEST and VERIFY are the driver's, in `bin/build-driver.mjs`.
  *
- * Six emits route through here — claude, bob and copilot at both scopes — so this one
+ * Six emits route through here — claude, bob and openclaude at both scopes — so this one
  * job is what puts two thirds of the matrix on the seam.
  *
  * `claudeMdText` is the payload's one item that is not a file this process wrote. WIRE
@@ -76,9 +77,11 @@ export function emitClaudeRender(cfg, job) {
     // `themed_rel` and `lstripNewlines` are, so the two verdicts stay distinguishable.
     if (!prefix) return tmplItem.text;
     const ptheme = { ...theme };
-    for (const tok of ['DIR_LAWS', 'DIR_AGENTS', 'DIR_SKILLS', 'DIR_MEMORY', 'DIR_NOTEBOOK']) {
+    for (const tok of ['DIR_LAWS', 'DIR_AGENTS', 'DIR_SKILLS', 'DIR_MEMORY', 'DIR_NOTEBOOK',
+      'DIR_DOCTRINES']) {
       ptheme[tok] = prefix + (ptheme[tok] ?? tok.split('_').slice(1).join('_').toLowerCase());
     }
+    ptheme.AT_HARNESS = prefix;
     // Same catalogue decision as the renderAll above — a re-render that forgot it would
     // quietly put the stripped tables back.
     return renderFile(cfg, tmplItem.src, ptheme, footprint, '', new Set(), nativeCatalog);
@@ -87,7 +90,6 @@ export function emitClaudeRender(cfg, job) {
   const owned = [];
   const agentText = items.find((i) => i.rel === 'AGENT.md' && i.text !== null)?.text ?? null;
   const isBob = host === 'bob';
-  const isCopilot = host === 'copilot';
 
   // Bob's always-injected channel is the rules folder. At GLOBAL scope rules/geneseed.md
   // IS the preamble (a global ~/.bob/AGENTS.md is not auto-loaded), and its pointers need
@@ -102,19 +104,30 @@ export function emitClaudeRender(cfg, job) {
   }
 
   ensureAgentOverridesStub(cfg, cfgDir);
-  // Bob's agents/skills use the Claude dialect verbatim; Copilot has its own frontmatter.
+  // Bob gives the model a skill's text but not its directory, so a folder skill's
+  // `<this-skill-directory>` is resolved here. Per repo it is relative to the workspace root,
+  // where Bob runs commands, so a committed `.bob/` stays valid on a teammate's checkout;
+  // globally there is no workspace to be relative to, so it is absolute.
+  const skillDirOf = !isBob ? null
+    : scope === 'project' ? (name) => relPosix(path.dirname(cfgDir), path.join(cfgDir, 'skills', name))
+      : (name) => path.join(cfgDir, 'skills', name);
+  // Bob's and OpenClaude's agents/skills use the Claude dialect verbatim.
   // `manifestExisted` is deliberately not passed: the Python does not pass it either, so
   // the pre-manifest header line is unreachable from this emit on both sides.
   const { nAgents, nSkills, written } = writeNativeLayer(
     items, path.join(cfgDir, 'agents'), path.join(cfgDir, 'skills'),
     loadAgentOverrides(cfgDir),
-    { host: isCopilot ? 'copilot' : 'claude', oldOwned, cfg: cfgDir, src: cfg.src });
+    { host: 'claude', oldOwned, cfg: cfgDir, src: cfg.src, skillDirOf });
   for (const p of written) owned.push(relPosix(cfgDir, p));
 
   const memStatus = globalMemory(cfgDir, items, out, cfg.src);
   ensureMemoryIndex(path.join(cfgDir, 'memory'));
   const nbStatus = globalNotebook(cfgDir, items, out, cfg.src);
   ensureNotebookIndex(path.join(cfgDir, 'notebook'));
+  // context.json too: the root names it as the project's own manifest, and until 2026-10 this
+  // emit never seeded one — the bundle and OpenCode did — so §9 pointed at a file that was not
+  // there. The context hook reads it from this dir (`resolveContextSets`' last candidate).
+  ensureContextStub(cfgDir);
   ensureWikiStub(cfgDir);
   ensureRulesStub(cfgDir);
   ensureProfileStub(cfgDir);
@@ -128,7 +141,7 @@ export function emitClaudeRender(cfg, job) {
     const gi = path.join(cfgDir, '.gitignore');
     const giLines = (host === 'claude' || host === 'openclaude' ? ['settings.local.json']
       : host === 'bob' ? ['settings.json'] : [])
-      .concat(['wiki.jsonc', 'agent-overrides.json']);
+      .concat(['context.json', 'wiki.jsonc', 'agent-overrides.json']);
     if (!existsSync(gi)) {
       writeText(gi, `${giLines.join('\n')}\n`);
       owned.push('.gitignore');
@@ -194,7 +207,6 @@ function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRu
   const old = oldManaged && typeof oldManaged === 'object' && !Array.isArray(oldManaged)
     ? oldManaged : {};
   const isBob = host === 'bob';
-  const isCopilot = host === 'copilot';
   const managed = {};
 
   // CLAUDE.md — Claude auto-loads it by location; merge as a delimited block so any user
@@ -228,80 +240,63 @@ function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRu
   // settings.local.json — the personal, untracked file — never the team-shared
   // settings.json, which would hand every teammate failing hooks pointing at this machine's
   // node and this machine's checkout. (Bob documents no local variant, so it keeps
-  // settings.json.) Copilot's settings are a different shape entirely (one command per
-  // event, no matcher groups) and take the `else` branch below; its PROJECT scope wires
-  // nothing, because the CLI documents hooks in `~/.copilot/settings.json` only and a
-  // machine-absolute hook committed into `.github/` would fail on every teammate's machine.
-  if (!isCopilot) {
-    // Bob GLOBAL: its hooks doc puts the global file at `~/.bob/settings/settings.json`
-    // (nested), where an older emit wrote `~/.bob/settings.json`; the `oldSf !==
-    // settingsName` branch below unwires the old file, so a re-emit migrates. Bob's project
-    // file stays `.bob/settings.json`.
-    const settingsName = scope === 'project' && !isBob ? 'settings.local.json'
-      : isBob && scope === 'global' ? path.join('settings', 'settings.json') : 'settings.json';
-    const settingsPath = path.join(cfgDir, settingsName);
-    mkdirSync(path.dirname(settingsPath), { recursive: true });
-    managed.settings_file = settingsName;
-    // Migration: an older install wired hooks/excludes into a different file — unwire the
-    // recorded claims there, or they linger (and run) forever.
-    const oldSf = get(old, 'settings_file') || 'settings.json';
-    if (oldSf !== settingsName) {
-      unwireClaudeSettings(path.join(cfgDir, oldSf), get(old, 'settings_hooks') || []);
-      unwireClaudeExcludes(path.join(cfgDir, oldSf), get(old, 'settings_excludes') || []);
-    }
-    // The merge prunes recorded groups that are no longer canonical and returns the
-    // COMPLETE current claim set — store it as-is; unioning with prior would resurrect the
-    // stale claims.
-    // `doctrines` decides whether the git-gate group is part of the canonical claim set. It
-    // travels from `cfg` rather than being re-read off the deployment: this is the emit that
-    // DECIDES the install's packs, so the marker on disk is still the previous build's.
-    const [, managedHooks] = mergeClaudeSettings(
-      settingsPath, scope, oldSf === settingsName ? get(old, 'settings_hooks') : null, hookOpts,
-      doctrines, excludeRules, host, cfgDir,
-    );
-    managed.settings_hooks = managedHooks;
+  // settings.json.)
+  // Bob GLOBAL: its hooks doc puts the global file at `~/.bob/settings/settings.json`
+  // (nested), where an older emit wrote `~/.bob/settings.json`; the `oldSf !==
+  // settingsName` branch below unwires the old file, so a re-emit migrates. Bob's project
+  // file stays `.bob/settings.json`.
+  const settingsName = scope === 'project' && !isBob ? 'settings.local.json'
+    : isBob && scope === 'global' ? path.join('settings', 'settings.json') : 'settings.json';
+  const settingsPath = path.join(cfgDir, settingsName);
+  mkdirSync(path.dirname(settingsPath), { recursive: true });
+  managed.settings_file = settingsName;
+  // Migration: an older install wired hooks/excludes into a different file — unwire the
+  // recorded claims there, or they linger (and run) forever.
+  const oldSf = get(old, 'settings_file') || 'settings.json';
+  if (oldSf !== settingsName) {
+    unwireClaudeSettings(path.join(cfgDir, oldSf), get(old, 'settings_hooks') || []);
+    unwireClaudeExcludes(path.join(cfgDir, oldSf), get(old, 'settings_excludes') || []);
+  }
+  // The merge prunes recorded groups that are no longer canonical and returns the
+  // COMPLETE current claim set — store it as-is; unioning with prior would resurrect the
+  // stale claims.
+  // `doctrines` decides whether the git-gate group is part of the canonical claim set. It
+  // travels from `cfg` rather than being re-read off the deployment: this is the emit that
+  // DECIDES the install's packs, so the marker on disk is still the previous build's.
+  const [, managedHooks] = mergeClaudeSettings(
+    settingsPath, scope, oldSf === settingsName ? get(old, 'settings_hooks') : null, hookOpts,
+    doctrines, excludeRules, host, cfgDir,
+  );
+  managed.settings_hooks = managedHooks;
 
-    // Project-bypasses-global (Claude only): a PROJECT install suppresses the GLOBAL
-    // ~/.claude/CLAUDE.md while cwd is this repo, via Claude's native claudeMdExcludes.
-    // Written only when this run actually emitted the project's own preamble (never
-    // suppress with no replacement); GENESEED_STACK_GLOBAL=1 opts out, and a re-emit with
-    // it set strips a prior exclude. Bob never gets one: its bypass is the same-named
-    // workspace rules file.
-    const priorRaw = get(old, 'settings_excludes');
-    const priorExcl = Array.isArray(priorRaw) ? priorRaw : [];
-    if (scope === 'project' && hasAgentText && preambleExclude) {
-      const wantExcl = [preambleExclude];
-      if (process.env.GENESEED_STACK_GLOBAL) {
-        unwireClaudeExcludes(settingsPath, wantExcl);
-        managed.settings_excludes = [];
-      } else {
-        const addedExcl = wireClaudeExcludes(settingsPath, wantExcl);
-        // Claim only what Geneseed itself wired (prior + newly added) — folding `wantExcl`
-        // in unconditionally would claim a user's own pre-existing exclude, and uninstall
-        // would then strip it. `sorted(set(a) | set(b))` — Python sorts strings by code
-        // point and so does the default `Array.sort`, which is why no comparator is passed.
-        managed.settings_excludes = [...new Set([...priorExcl, ...addedExcl])].sort();
-      }
-    } else if (priorExcl.length && isBob) {
-      // Self-heal older Bob installs: earlier versions wrote the global AGENTS.md into
-      // claudeMdExcludes here. The key is Claude-only and its Bob semantics are unknown, so
-      // a re-emit removes it instead of carrying it forward.
-      unwireClaudeExcludes(settingsPath, priorExcl);
-    } else if (priorExcl.length) {
-      managed.settings_excludes = priorExcl;
+  // Project-bypasses-global (Claude only): a PROJECT install suppresses the GLOBAL
+  // ~/.claude/CLAUDE.md while cwd is this repo, via Claude's native claudeMdExcludes.
+  // Written only when this run actually emitted the project's own preamble (never
+  // suppress with no replacement); GENESEED_STACK_GLOBAL=1 opts out, and a re-emit with
+  // it set strips a prior exclude. Bob never gets one: its bypass is the same-named
+  // workspace rules file.
+  const priorRaw = get(old, 'settings_excludes');
+  const priorExcl = Array.isArray(priorRaw) ? priorRaw : [];
+  if (scope === 'project' && hasAgentText && preambleExclude) {
+    const wantExcl = [preambleExclude];
+    if (process.env.GENESEED_STACK_GLOBAL) {
+      unwireClaudeExcludes(settingsPath, wantExcl);
+      managed.settings_excludes = [];
+    } else {
+      const addedExcl = wireClaudeExcludes(settingsPath, wantExcl);
+      // Claim only what Geneseed itself wired (prior + newly added) — folding `wantExcl`
+      // in unconditionally would claim a user's own pre-existing exclude, and uninstall
+      // would then strip it. `sorted(set(a) | set(b))` — Python sorts strings by code
+      // point and so does the default `Array.sort`, which is why no comparator is passed.
+      managed.settings_excludes = [...new Set([...priorExcl, ...addedExcl])].sort();
     }
-  } else if (scope === 'global') {
-    // Copilot's hooks are event → array now, so the Claude merge (append/prune by deep
-    // equality) is the Copilot merge too, recorded under `settings_hooks`. An install from
-    // before that recorded single-slot `copilot_hooks` (the dead `toolCall` event): unwire
-    // those claims first, or they linger in the file forever.
-    const settingsPath = path.join(cfgDir, 'settings.json');
-    managed.settings_file = 'settings.json';
-    const legacy = get(old, 'copilot_hooks');
-    if (Array.isArray(legacy) && legacy.length) unwireCopilotSettings(settingsPath, legacy);
-    const [, managedHooks] = mergeClaudeSettings(settingsPath, scope,
-      Array.isArray(legacy) ? null : get(old, 'settings_hooks'), hookOpts, null, [], host, cfgDir);
-    managed.settings_hooks = managedHooks;
+  } else if (priorExcl.length && isBob) {
+    // Self-heal older Bob installs: earlier versions wrote the global AGENTS.md into
+    // claudeMdExcludes here. The key is Claude-only and its Bob semantics are unknown, so
+    // a re-emit removes it instead of carrying it forward.
+    unwireClaudeExcludes(settingsPath, priorExcl);
+  } else if (priorExcl.length) {
+    managed.settings_excludes = priorExcl;
   }
   return managed;
 }

package/js/build/generate.mjs

@@ -173,7 +173,6 @@ export const DEFAULT_EMIT = new Map([
   ['opencode global', 'opencode-global'], ['opencode project', 'opencode'],
   ['claude global', 'claude-global'], ['claude project', 'claude'],
   ['bob global', 'bob-global'], ['bob project', 'bob'],
-  ['copilot global', 'copilot-global'], ['copilot project', 'copilot'],
   ['openclaude global', 'openclaude-global'], ['openclaude project', 'openclaude'],
 ]);
 
@@ -255,7 +254,18 @@ export function rebuildCommand(argv) {
  * choose — which is the same failure mode `_footprint_of_dir`'s WARN exists to prevent, at a
  * larger scale.
  */
-export function cmdRebuildAll() {
+export async function cmdRebuildAll() {
+  const rc = rebuildAll();
+  // A console started before an upgrade keeps serving the old `index.html`; restart it — only
+  // when stale, see `bounceDaemonIfRunning`. Lazy: no other verb in this module needs js/web/.
+  const { bounceDaemonIfRunning } = await import('../web/daemon.mjs');
+  await bounceDaemonIfRunning(null, (m) => printOut(`${m}
+`), { onlyIfStale: true });
+  return rc;
+}
+
+/** The rebuild itself, synchronous — `cmdRebuildAll` is it plus the console restart. */
+export function rebuildAll() {
   const targets = installTargets().filter(([h, s, r]) => installState(r, h, s) === 'active');
   if (!targets.length) {
     printOut('[rebuild-all] no active installs detected.\n');

package/js/build/render.mjs

@@ -42,6 +42,10 @@ export const STRUCTURE = {
   SCRIPT: 'Script', SCRIPTS: 'Scripts',
   DIR_LAWS: 'laws', DIR_AGENTS: 'agents', DIR_SKILLS: 'skills', DIR_MEMORY: 'memory',
   DIR_NOTEBOOK: 'notebook', DIR_ONTOLOGY: 'ontology', DIR_DOCTRINES: 'doctrines',
+  // Where the harness's own files sit, as seen from the root instruction file: empty when they
+  // are its siblings (`files`, OpenCode), `.claude/`-style when the root sits a level above them —
+  // set per emit by `prefixedAgentText` in js/build/emit-claude.mjs, like the DIR_* prefixes.
+  AT_HARNESS: '',
   // Ontology section names. Theme-INDEPENDENT on purpose: a citation reads
   // `({{ONTOLOGY}}: {{ONT_TELOS}})` — token on both sides, so the heading and every
   // reference to it move together and a rename can never desync them.

package/js/build/source.mjs

@@ -168,6 +168,12 @@ export const CONFIG = path.join(ROOT, 'harness.config.json');
 export const THEMES = path.join(ROOT, 'themes');
 export const PLUGIN_SRC = path.join(ROOT, 'adapters', 'opencode', 'plugins');
 export const WORKFLOW_SRC = path.join(ROOT, 'adapters', 'opencode', 'workflows');
+/**
+ * The user docs: one folder per kind of reading, all under `docs/` so GitHub renders the same
+ * files the console serves. A page's id is its basename, so ids must be unique across folders.
+ */
+export const DOCS = path.join(ROOT, 'docs');
+export const DOC_FOLDERS = ['understand', 'guides', 'concepts', 'reference'];
 
 /**
  * `_build_render.posture_names()` / `mode_names()` — discovered, never hardcoded, so a new

package/js/build/stubs.mjs

@@ -245,9 +245,25 @@ export const ensureBundleGitignore = stubWriter('.gitignore', BUNDLE_GITIGNORE);
  * right after the store dir is created, but never invent the dir themselves). */
 const storeIndexWriter = (file, header) => (dir) => { if (isDir(dir)) seed(path.join(dir, file), header); };
 
+const MEMORY_INDEX = '# Memory Index\n';
+const NOTEBOOK_INDEX = '# Notebook Index\n';
+
 /** `_build_render.ensure_memory_index` — only inside an EXISTING store dir. */
-export const ensureMemoryIndex = storeIndexWriter('MEMORY.md', '# Memory Index\n');
+export const ensureMemoryIndex = storeIndexWriter('MEMORY.md', MEMORY_INDEX);
 
 /** `_build_render.ensure_notebook_index`. */
-export const ensureNotebookIndex = storeIndexWriter('NOTEBOOK.md', '# Notebook Index\n');
+export const ensureNotebookIndex = storeIndexWriter('NOTEBOOK.md', NOTEBOOK_INDEX);
+
+/**
+ * The seeds of the files the session-start injection reads (`SESSION_FILES` in
+ * `js/hosts/hooks.mjs`, and its twin in the OpenCode context plugin). Both carry the SHA-256
+ * of these bodies rather than importing them — the hook path pays for every import, and the
+ * plugin is deployed on its own — so an untouched seed is skipped instead of injected as
+ * noise. `tests/unit/claude.test.mjs` gates both hash lists against this map: edit a stub and
+ * the two copies must move with it.
+ */
+export const SESSION_SEEDS = {
+  'user-rules.md': RULES_STUB, 'PROFILE.md': PROFILE_STUB, 'wiki.jsonc': WIKI_STUB,
+  'MEMORY.md': MEMORY_INDEX, 'NOTEBOOK.md': NOTEBOOK_INDEX,
+};
 

package/js/cli-table.json

@@ -1,5 +1,5 @@
 {
-  "prog": "harness",
+  "prog": "geneseed",
   "commands": [
     {
       "name": "bootstrap",
@@ -297,7 +297,7 @@
           ],
           "dest": "host",
           "metavar": null,
-          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) and 'copilot' ask, each in its own envelope; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
           "choices": null,
           "default": null,
           "required": false,
@@ -513,7 +513,7 @@
           ],
           "dest": "host",
           "metavar": null,
-          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) and 'copilot' ask, each in its own envelope; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
           "choices": null,
           "default": null,
           "required": false,
@@ -791,7 +791,7 @@
           ],
           "dest": "host",
           "metavar": null,
-          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) and 'copilot' ask, each in its own envelope; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
           "choices": null,
           "default": null,
           "required": false,
@@ -975,7 +975,7 @@
     },
     {
       "name": "tool-gate",
-      "help": "PreToolUse hook for hosts with no tool matcher (Copilot, Bob): git-gate and rule-gate fused behind one command, dispatched on the payload",
+      "help": "PreToolUse hook for hosts with no tool matcher (Bob): git-gate and rule-gate fused behind one command, dispatched on the payload",
       "description": "",
       "positionals": [],
       "options": [
@@ -1000,7 +1000,7 @@
           ],
           "dest": "host",
           "metavar": null,
-          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) and 'copilot' ask, each in its own envelope; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
+          "help": "the host that reads the verdict (set by the emitted hook): 'claude' (default) asks; 'bob' has no ask tier, so Laws I/IV exit 2 and everything else is a stderr warning",
           "choices": null,
           "default": null,
           "required": false,

package/js/hosts/hooks.mjs

@@ -8,11 +8,8 @@
  *
  * ONE VERB, TWO DIALECTS. `--host` names the host that will read the verdict. Claude Code
  * (the default) reads `hookSpecificOutput.permissionDecision: "ask"` and shows the user a
- * prompt. GitHub Copilot's `preToolUse` reads the same decision TOP-LEVEL —
- * `{"permissionDecision": "ask", "permissionDecisionReason": …}` — so `--host copilot` asks
- * exactly where Claude asks, in Copilot's envelope. `--host bob` is Bob's own
- * protocol: PreToolUse ignores stdout and refuses only on EXIT CODE 2, so the two Laws
- * exit 2 with the reason on stderr and the rest is a stderr line with exit 0; SessionStart
+ * prompt. `--host bob` is Bob's own protocol: PreToolUse ignores stdout and refuses only on
+ * EXIT CODE 2, so the two Laws exit 2 with the reason on stderr and the rest is a stderr line with exit 0; SessionStart
  * context is plain stdout, as on Claude. `--host openclaude` speaks Claude's dialect verbatim
  * (OpenClaude is a Claude Code fork); the flag only picks which root file counts as native. Since P5b they are also what the emitted hooks name: `bin/build-driver.mjs` bakes
  * `<node> <checkout>/bin/geneseed-hook.mjs` into the machine-wide shim, so an install this
@@ -47,6 +44,7 @@ import { existsSync, statSync, readFileSync, readdirSync, mkdirSync,
   from 'node:fs';
 import path from 'node:path';
 import { spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
 import { readText, writeText, printOut, printErr, withDiscardableStderr } from '../lib/fs.mjs';
 import { jsonDumpsCompact } from '../lib/json.mjs';
 import { normcase, comparePaths, toPlatformPath } from '../lib/paths.mjs';
@@ -227,7 +225,7 @@ const EXCLUDE_DIRS = new Set(['node_modules', '.git', 'dist', 'build', 'vendor',
 // OpenClaude's root file is AGENTS.md, or CLAUDE.md when AGENTS.md is absent — resolved
 // per repo in `discoverContext`, since which one it loads depends on what is on disk.
 const NATIVE_ROOT = {
-  claude: ['CLAUDE.md'], bob: ['AGENTS.md'], copilot: ['AGENTS.md'],
+  claude: ['CLAUDE.md'], bob: ['AGENTS.md'],
   openclaude: ['AGENTS.md', 'CLAUDE.md'],
 };
 
@@ -237,6 +235,49 @@ const NATIVE_ROOT = {
 const EAGER_FILE_BYTES = 16 * 1024;
 const EAGER_TOTAL_BYTES = 48 * 1024;
 
+// The files the root instruction file names for session start, relative to the HARNESS dir
+// (`--root`: `.claude/`, `.bob/`, a global config dir) — not to the repo root discovery walks,
+// which is why none of them reached a hooked host before 2026-10. Injected here so the read does
+// not depend on the model remembering it. `context.json` is not in the list: it is a manifest,
+// honoured by `resolveContextSets` (the harness dir is its last candidate). The OpenCode
+// context plugin carries the same list.
+const SESSION_FILES = ['user-rules.md', 'PROFILE.md', 'memory/MEMORY.md', 'anamnesis/MEMORY.md',
+  'notebook/NOTEBOOK.md', 'wiki.jsonc'];
+// SHA-256 of each seed body in `js/build/stubs.mjs` (`SESSION_SEEDS`), CRLF folded. A file still
+// byte-identical to its seed says nothing, so it is skipped rather than injected as noise.
+// Hashes, not an import: stubs.mjs pulls in the build's writers, and this module loads on every
+// tool call. tests/unit/claude.test.mjs gates this set, and the plugin's copy, against the seeds.
+const SEED_SHA256 = new Set([
+  '5c2e92fb1acde041e02d9ebf158460d8ff7a07cbc2b447859631604610130721', // user-rules.md
+  '29e012c3c4349ea62a9082cbd04bb25599a0ec280d62c33f6e10742809471816', // PROFILE.md
+  'cccc917c34e6b990e821620bdb4739090151885ab71b6e85046f30a3b71fa5e8', // wiki.jsonc
+  '99c786049c260f6baf7aec68a5c0f59907861afe9b867da009440613bdddb907', // MEMORY.md
+  '9acb5c9d9cb5dac572104480f05b48cc144e676869bd60e86d8a15b1f6308184', // NOTEBOOK.md
+]);
+export { SESSION_FILES, SEED_SHA256 };
+
+/**
+ * The session files present under `hookRoot` and changed from their seed, as `{ rel, abs, text }`
+ * (text CRLF-folded, trailing newlines trimmed). `$GENESEED_WIKI` overrides the wiki declaration,
+ * as it does on OpenCode. A missing or unreadable file is simply absent — this is best-effort
+ * context, never a gate.
+ */
+export function sessionFiles(hookRoot) {
+  const found = [];
+  for (const rel of SESSION_FILES) {
+    let abs = path.join(hookRoot, rel);
+    if (rel === 'wiki.jsonc' && process.env.GENESEED_WIKI && isFile(process.env.GENESEED_WIKI)) {
+      abs = process.env.GENESEED_WIKI;
+    }
+    if (!isFile(abs)) continue;
+    let text;
+    try { text = readFileSync(abs, 'utf8').replace(/\r\n/g, '\n'); } catch { continue; }
+    if (SEED_SHA256.has(createHash('sha256').update(text).digest('hex'))) continue;
+    found.push({ rel, abs, text: text.replace(/\n+$/, '') });
+  }
+  return found;
+}
+
 const CLAUDE_MARKERS = ['.claude', '.bob', '.openclaude'];
 const GENESEED_MANIFEST = '.geneseed-manifest.json';
 
@@ -348,7 +389,7 @@ export function discoverContext(root, host = HOST) {
  * `recs` is a Map, not an object: JS reorders integer-like keys on a plain object, and
  * these keys are absolute paths whose iteration order becomes the printed order.
  */
-export function resolveContextSets(root) {
+export function resolveContextSets(root, hookRoot = null) {
   let manifest = null;
   const env = process.env.GENESEED_CONTEXT;
   if (env && isFile(env)) {
@@ -356,8 +397,9 @@ export function resolveContextSets(root) {
     // way `str(Path(...))` folds them, or the source line differs by every slash in it.
     manifest = toPlatformPath(env);
   } else {
+    // The harness dir last: a repo's own manifest outranks the one seeded beside the install.
     for (const cand of [path.join(root, '.harness', 'context.json'),
-      path.join(root, 'context.json')]) {
+      path.join(root, 'context.json'), ...(hookRoot ? [path.join(hookRoot, 'context.json')] : [])]) {
       if (isFile(cand)) { manifest = cand; break; }
     }
   }
@@ -460,18 +502,40 @@ export function cmdContext(args) {
   if (hookRoot && sovereignBypass(hookRoot)) return 0;
   if (hookRoot && !process.env.GENESEED_STACK_GLOBAL
       && globalHookStandingDown(hookRoot, root)) return 0;
-  const [eager, lazy, source] = resolveContextSets(root);
-  if (!eager.length && !lazy.length) {
+  const session = hookRoot ? sessionFiles(hookRoot) : [];
+  // A session file discovery would also pick up (a `user-rules.md` at the repo root of an
+  // install whose harness dir IS the repo root) is injected once, in the session block.
+  const seen = new Set(session.map((s) => normcase(path.resolve(s.abs))));
+  const fresh = (e) => !seen.has(normcase(path.resolve(path.isAbsolute(e.path)
+    ? e.path : path.join(root, e.path))));
+  let [eager, lazy, source] = resolveContextSets(root, hookRoot);
+  eager = eager.filter(fresh);
+  lazy = lazy.filter(fresh);
+  if (!session.length && !eager.length && !lazy.length) {
     err(`[context] nothing to load for ${root} `
       + '(no docs discovered, no manifest entries).\n');
     return 0;
   }
 
-  const lines = [
-    `=== PROJECT CONTEXT \u2014 binding for this repo (via ${source}) ===`,
-    '',
-  ];
+  const lines = [];
   let spent = 0;
+  if (session.length) {
+    lines.push('=== SESSION FILES \u2014 your harness files, injected at session start '
+      + '(untouched seeds skipped) ===', '');
+    for (const s of session) {
+      let text = s.text;
+      if (text.length > EAGER_FILE_BYTES) {
+        const nl = text.lastIndexOf('\n', EAGER_FILE_BYTES);
+        text = `${text.slice(0, nl > 0 ? nl : EAGER_FILE_BYTES)}\n`
+          + `[context] truncated at ${EAGER_FILE_BYTES / 1024} KB \u2014 read ${s.abs} on demand`;
+      }
+      spent += text.length;
+      lines.push(`----- ${s.rel} -----`, text, '');
+    }
+  }
+  if (eager.length || lazy.length) {
+    lines.push(`=== PROJECT CONTEXT \u2014 binding for this repo (via ${source}) ===`, '');
+  }
   const demoted = [];
   for (const entry of eager) {
     const p = entry.path === undefined ? '' : entry.path;
@@ -511,12 +575,8 @@ export function cmdContext(args) {
     lines.push('');
   }
 
-  // Claude Code takes a SessionStart hook's plain stdout as context. Copilot's `sessionStart`
-  // wants a JSON document and reads `additionalContext` out of it; plain text there would be
-  // parsed as nothing and silently dropped.
-  // Bob reads a SessionStart hook's stdout as context exactly as Claude does.
-  const text = `${lines.join('\n')}\n`;
-  out(HOST === 'copilot' ? `${jsonDumpsCompact({ additionalContext: text })}\n` : text);
+  // Claude Code takes a SessionStart hook's plain stdout as context; Bob reads it the same way.
+  out(`${lines.join('\n')}\n`);
   return 0;
 }
 
@@ -559,16 +619,6 @@ function askDecision(reason) {
 let HOST = 'claude';
 const setHost = (args) => { HOST = (args && args.host) || 'claude'; };
 
-/**
- * Copilot's `preToolUse` verdict: the same `ask` Claude reads, but top-level rather than under
- * `hookSpecificOutput` (docs.github.com/en/copilot/reference/hooks-configuration). An older
- * emit wired a `toolCall` event answered with `{"block": true}`; Copilot no longer has that
- * event, so those gates never ran.
- */
-function copilotAskDecision(reason) {
-  return `${jsonDumpsCompact({ permissionDecision: 'ask', permissionDecisionReason: reason })}\n`;
-}
-
 /**
  * Bob's PreToolUse protocol: stdout is ignored and EXIT CODE 2 is the one refusal. The
  * single exception to "every gate exits 0" in this file, confined to `--host bob` — on
@@ -636,7 +686,7 @@ function ask(args, verb, rule, reason) {
     return BOB_DENY_EXIT;
   }
   ledger(args && args.root, verb, rule);
-  out(HOST === 'copilot' ? copilotAskDecision(reason) : askDecision(reason));
+  out(askDecision(reason));
   return 0;
 }
 
@@ -663,12 +713,6 @@ export function guardGate(fn, verb = 'gate') {
 
 /**
  * The hook payload on stdin, or null for a well-formed absence. Not-JSON THROWS.
- *
- * Copilot spells the same payload in camelCase — `toolName`/`toolArgs` where Claude sends
- * `tool_name`/`tool_input` — and `toolArgs` may arrive as a JSON STRING rather than an object.
- * Both are folded to Claude's shape so every gate reads one. (`toolInput` and the `after`
- * phase are the retired `toolCall` event's spelling, kept so an install not yet re-emitted
- * still reads right.) A `toolArgs` string that is not JSON throws: fail closed.
  */
 function readPayload() {
   const raw = readStdin();
@@ -679,16 +723,7 @@ function readPayload() {
   } catch {
     throw new Error('the hook payload on stdin is not JSON');
   }
-  if (!payload || typeof payload !== 'object') return null;
-  if (payload.phase === 'after') return null;
-  if (payload.tool_input === undefined) {
-    let ta = payload.toolArgs !== undefined ? payload.toolArgs : payload.toolInput;
-    if (typeof ta === 'string') {
-      try { ta = JSON.parse(ta); } catch { throw new Error('the payload\'s toolArgs is not JSON'); }
-    }
-    if (ta !== undefined) payload.tool_input = ta;
-  }
-  return payload;
+  return payload && typeof payload === 'object' ? payload : null;
 }
 
 function gitGate(args) {
@@ -759,9 +794,8 @@ function ruleDecide(args, payload) {
   const ti = (payload && payload.tool_input) || {};
   const p = ti.file_path || ti.path || '';
   if (typeof p !== 'string' || !p) return 0;
-  // Write carries `content`, Edit carries `new_string` (Copilot: `file_text`, `new_str`);
-  // any of them can plant a credential.
-  const body = [ti.content, ti.new_string, ti.file_text, ti.new_str]
+  // Write carries `content`, Edit carries `new_string`; either can plant a credential.
+  const body = [ti.content, ti.new_string]
     .find((v) => typeof v === 'string') || '';
   if (body && !DOTENV_RE.test(p) && SECRET_RE.test(body)) {
     return ask(args, 'rule-gate', 'law-1', `Geneseed (Sealed Secrets) — ${p} would carry a `
@@ -781,8 +815,7 @@ export const cmdRuleGate = guardGate(ruleGate, 'rule-gate');
 // ======================================================================================
 
 /**
- * Copilot's and Bob's PreToolUse entries carry no matcher over documented tool names, so
- * neither can name `git-gate` for Bash and `rule-gate` for Write the way Claude's
+ * Bob's PreToolUse entry carries no matcher over documented tool names, so it cannot name `git-gate` for Bash and `rule-gate` for Write the way Claude's
  * `PreToolUse` does. This verb is the two fused, dispatched on the payload rather
  * than on a matcher: a `command` field is a shell call and gets the git checks, a path
  * field is a write and gets the rule checks. Nothing here decides anything the two named
@@ -926,8 +959,7 @@ export function readNotes(raw) {
   if (s[0] === '{') {
     let payload;
     try { payload = JSON.parse(s); } catch { return raw; }
-    // Copilot's agentStop/preCompact spell it `transcriptPath`.
-    const tp = payload && (payload.transcript_path || payload.transcriptPath);
+    const tp = payload && payload.transcript_path;
     if (tp) return flattenTranscript(tp);
     return raw;
   }