geneseed 3.9.0 → 3.11.0

package/js/hosts/hosts.mjs

@@ -1,5 +1,5 @@
 /**
- * The five host config dirs, and the two path primitives they are built on.
+ * The four host config dirs, and the two path primitives they are built on.
  *
  * EXTRACTED IN P5c, and the reason is arithmetic rather than taste. `bin/build-driver.mjs`
  * owned these; `bin/geneseed-cli.mjs` needs the same four to find a global install, and a
@@ -172,20 +172,6 @@ export function opencodeConfigDir() {
   return resolvePath(path.join(base, 'opencode'));
 }
 
-/**
- * `_build_core._copilot_config_dir` — `~/.copilot`, relocatable via `$COPILOT_CONFIG_DIR`.
- *
- * Geneseed's own knob, mirroring `$BOB_CONFIG_DIR`: Copilot documents no such variable, but
- * tests, doctor and locked-down setups still need to re-point the target. Like every
- * relocation variable it is CLEARED by `golden.cell_env`, so no cell can observe whether
- * a driver honours it — see `test_the_relocation_var_moves_the_global_target`.
- */
-export function copilotConfigDir() {
-  const env = process.env.COPILOT_CONFIG_DIR;
-  if (env) return resolvePath(env);
-  return resolvePath(path.join(os.homedir(), '.copilot'));
-}
-
 /**
  * `_build_core._claude_config_dir` — `~/.claude`, and there is NO env branch BY DESIGN.
  *
@@ -223,7 +209,7 @@ export function openclaudeConfigDir() {
 
 /**
  * `_build_global.HOSTS`, reduced to the two columns a non-emitting caller needs, and IN ITS
- * ORDER — opencode, claude, bob, copilot, openclaude.
+ * ORDER — opencode, claude, bob, openclaude.
  *
  * An array rather than an object because the order is observable output, not an
  * implementation detail: `harness exclude add` walks it and prints one message per host, so
@@ -233,21 +219,20 @@ export function openclaudeConfigDir() {
  *
  * `projectMarker` joined in P5f. `_install_targets` asks "does this cwd carry a project
  * install of host H", and `_claude_cfg` asks "which subdir holds a project install's
- * manifest" — both are the same `.opencode`/`.claude`/`.bob`/`.github` value the Python reads
+ * manifest" — both are the same `.opencode`/`.claude`/`.bob`/`.openclaude` value the Python reads
  * out of `build.HOSTS[host]["project_marker"]`, so it belongs beside the config dir rather
  * than in a second table in `js/hosts/installs.mjs`.
  *
  * `agentFile` joined in P5h, and for one caller: `cmd_uninstall` names the managed block's
  * carrier in its "removes:" preamble (`the CLAUDE.md managed block`, `the AGENTS.md managed
  * block`). It is a column and not a literal in the message for the reason every other column
- * here is one — Bob and Copilot both answer `AGENTS.md` while Claude answers `CLAUDE.md`, and
+ * here is one — Bob answers `AGENTS.md` while Claude answers `CLAUDE.md`, and
  * a host added later must not need the message edited to stay true.
  */
 export const HOSTS = [
   { host: 'opencode', configDir: opencodeConfigDir, projectMarker: '.opencode', agentFile: 'AGENT.md' },
   { host: 'claude', configDir: claudeConfigDir, projectMarker: '.claude', agentFile: 'CLAUDE.md' },
   { host: 'bob', configDir: bobConfigDir, projectMarker: '.bob', agentFile: 'AGENTS.md' },
-  { host: 'copilot', configDir: copilotConfigDir, projectMarker: '.github', agentFile: 'AGENTS.md' },
   { host: 'openclaude', configDir: openclaudeConfigDir, projectMarker: '.openclaude', agentFile: 'CLAUDE.md' },
 ];
 
@@ -271,14 +256,13 @@ export const HOSTS = [
  * single boolean was wrong both ways: `false` shipped the §4 Skills table on top of a
  * catalogue Bob already had (~1.7k tokens twice), `true` would have stripped the §3 Agents
  * table that is Bob's ONLY agent catalogue. Each CATALOG block in AGENT.md names its kind and
- * resolves against its own flag. Copilot stays unverified and keeps both tables. Mirrored in
+ * resolves against its own flag. Mirrored in
  * `bin/build-driver.mjs` (which cannot import this module's spawning neighbours).
  */
 const NATIVE_CATALOG = {
   opencode: { skills: true, agents: true },
   claude: { skills: true, agents: true },
   bob: { skills: true, agents: false },
-  copilot: { skills: false, agents: false },
   openclaude: { skills: true, agents: true },
 };
 

package/js/hosts/installs.mjs

@@ -137,15 +137,14 @@ function themeFromAgent(agentMd) {
 }
 
 /**
- * `_harness_setup.CARRIERS` — the five instruction carriers, in the Python's order.
+ * `_harness_setup.CARRIERS` — the four instruction carriers, in the Python's order.
  *
  * A shared table rather than three copies of the same list: `_theme_of_dir`,
  * `_posture_of_dir` and `_mode_of_dir` each walk it, and the order is observable (the first
  * carrier that answers wins). `rules/geneseed.md` is spelled with `path.join` at each use
  * because the Python writes `d / "rules" / "geneseed.md"` for that one entry.
  */
-const CARRIERS = ['AGENT.md', 'CLAUDE.md', path.join('rules', 'geneseed.md'),
-  'copilot-instructions.md', 'AGENTS.md'];
+const CARRIERS = ['AGENT.md', 'CLAUDE.md', path.join('rules', 'geneseed.md'), 'AGENTS.md'];
 
 /**
  * The scan `themeOfDir`, `leadOfDir`, `doctrinesOfDir` and `excludedRulesOfDir` each wrote
@@ -392,7 +391,6 @@ export const EMIT_HOST_SCOPE = new Map([
   ['opencode', ['opencode', 'project']], ['opencode-global', ['opencode', 'global']],
   ['claude', ['claude', 'project']], ['claude-global', ['claude', 'global']],
   ['bob', ['bob', 'project']], ['bob-global', ['bob', 'global']],
-  ['copilot', ['copilot', 'project']], ['copilot-global', ['copilot', 'global']],
   ['openclaude', ['openclaude', 'project']], ['openclaude-global', ['openclaude', 'global']],
 ]);
 
@@ -410,7 +408,7 @@ export const DISABLED_STASH = '.geneseed-disabled';
  * `_harness_mcp._claude_cfg` — where a Claude-STYLE install keeps its manifest.
  *
  * The config dir itself for a global install; `<repo>/<project_marker>` for a project one.
- * Host-aware so Bob and Copilot ride the whole Claude lifecycle with only the subdir
+ * Host-aware so Bob and OpenClaude ride the whole Claude lifecycle with only the subdir
  * differing, and the marker comes from `HOSTS` rather than a literal for that reason.
  */
 export function claudeCfg(root, scope, host = 'claude') {
@@ -435,7 +433,7 @@ export function installKind(root) {
 
 /** `_harness_mcp._install_state` — 'active' | 'disabled' | 'absent'. */
 export function installState(root, host = 'opencode', scope = 'global') {
-  if (['claude', 'bob', 'copilot', 'openclaude'].includes(host)) return claudeState(root, scope, host);
+  if (['claude', 'bob', 'openclaude'].includes(host)) return claudeState(root, scope, host);
   if (isDir(path.join(root, DISABLED_STASH))) return 'disabled';
   return installKind(root) !== null ? 'active' : 'absent';
 }

package/js/hosts/mcp.mjs

@@ -32,7 +32,7 @@ import { existsSync, mkdirSync, renameSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 
-import { bobConfigDir, copilotConfigDir, resolvePath } from './hosts.mjs';
+import { bobConfigDir, resolvePath } from './hosts.mjs';
 import { installState, installTargets } from './installs.mjs';
 import { printOut, printErr, readText, writeText } from '../lib/fs.mjs';
 import { isDict, jsonDumpsIndent, parseJson } from '../lib/json.mjs';
@@ -44,7 +44,7 @@ import { opencodeTarget, readJsonc } from './settings.mjs';
 const dget = (obj, key, dflt) => (isDict(obj) && Object.hasOwn(obj, key) ? obj[key] : dflt);
 
 /** The hosts whose MCP config is strict JSON under `mcpServers`, with no `enabled` flag. */
-const FLAGLESS = ['claude', 'bob', 'copilot', 'openclaude'];
+const FLAGLESS = ['claude', 'bob', 'openclaude'];
 
 /**
  * `_harness_mcp._MCP_PRESETS` — the ready-to-wire servers the MCP screen can toggle.
@@ -68,7 +68,7 @@ export const MCP_PRESETS = {
       + 'install). Edit GITLAB_PERSONAL_ACCESS_TOKEN (scopes: api, read_repository) '
       + 'and GITLAB_API_URL before use. For a second instance (a self-hosted server), '
       + 'copy this block by hand under a new name and point it at the other URL — '
-      + 'SETUP.md has the pattern.',
+      + 'docs/guides/mcp.md has the pattern.',
     block: {
       type: 'local',
       command: ['npx', '-y', '@zereight/mcp-gitlab'],
@@ -105,8 +105,7 @@ const serversOf = (config, host) => {
  * `_mcp_preset_block` — the block to WRITE for a preset, shaped for `host`.
  *
  * OpenCode takes it verbatim. The flagless three split the command list into `command`
- * (head) + `args` (tail) and rename `environment` to `env`; Copilot additionally requires
- * `type` and a `tools` allowlist.
+ * (head) + `args` (tail) and rename `environment` to `env`.
  */
 export function mcpPresetBlock(name, host = 'opencode') {
   const block = { ...MCP_PRESETS[name].block };
@@ -115,10 +114,6 @@ export function mcpPresetBlock(name, host = 'opencode') {
   const out = { command: cmd.length ? cmd[0] : '', args: cmd.slice(1) };
   const env = block.environment;
   if (env) out.env = { ...env };
-  if (host === 'copilot') {
-    out.type = 'local';
-    out.tools = ['*'];
-  }
   return out;
 }
 
@@ -243,11 +238,6 @@ export function mcpConfigFor(host, scope, root) {
     return scope === 'project' ? path.join(root, '.bob', 'mcp.json')
       : path.join(bobConfigDir(), 'settings', 'mcp.json');
   }
-  if (host === 'copilot') {
-    // The Copilot CLI reads MCP servers from ~/.copilot/mcp-config.json only — no per-repo
-    // file is documented, so a project install carries no MCP wiring.
-    return scope === 'global' ? path.join(copilotConfigDir(), 'mcp-config.json') : null;
-  }
   if (host === 'openclaude') {
     // Claude's `.mcp.json` per repo; globally `.openclaude.json` beside the home dir, or
     // INSIDE `$OPENCLAUDE_CONFIG_DIR` when set — OpenClaude's own `getGlobalClaudeFile` rule.

package/js/hosts/native.mjs

@@ -3,7 +3,7 @@
  *
  * A faithful translation of `_build_emit._write_native_layer` and the frontmatter
  * builders it dispatches to. Capability specs become host-native subagents and skills:
- * one dialect per host (OpenCode / Claude Code / Copilot), vendored skill folders copied
+ * one dialect per host (OpenCode / Claude Code), vendored skill folders copied
  * through verbatim, authoring templates shipped flat.
  *
  * WHY THIS IS THE HARD HALF. `js/build/render.mjs` is a pure function of `src/` and `themes/`;
@@ -33,6 +33,9 @@ import path from 'node:path';
 import { writeText, copyFile, readText } from '../lib/fs.mjs';
 import { jsonDumps, parseJson, formatValue, formatRepr, isTruthy, isDict } from '../lib/json.mjs';
 
+/** What a folder skill writes where it needs its own directory — see `writeNativeLayer`. */
+export const SKILL_DIR_PLACEHOLDER = '<this-skill-directory>';
+
 /** Mirrors `_build_core.VENDORED_SKILL_DIRS`. */
 export const VENDORED_SKILL_DIRS = new Set(['react-view-transitions', 'daydream', 'token-report', 'explain-changes']);
 
@@ -58,7 +61,7 @@ export function isVendoredPath(rel) {
  * `build._validate_is_vendored` — the same question, tolerant of `skills` at ANY depth.
  *
  * The per-repo native layers nest one level deeper than a `files`/opencode-global bundle
- * (`.claude/skills/<name>/…`, `.bob/skills/<name>/…`, `.github/skills/<name>/…`), so
+ * (`.claude/skills/<name>/…`, `.bob/skills/<name>/…`, `.openclaude/skills/<name>/…`), so
  * `doctor`'s scan of those trees needs the loose form or every vendored folder's own
  * upstream cross-links read as dead links. Never the last segment — `parts[:-1]`, because a
  * FILE named `skills` is not a directory of them.
@@ -79,8 +82,6 @@ const AGENT_COLORS = {
 const VALID_AGENT_COLOR_SLOTS = new Set(
   ['primary', 'secondary', 'accent', 'success', 'warning', 'error', 'info']);
 
-/** `_build_emit._SIBLING_AGENT_LINK_RE` — a bare same-dir agent filename in a link. */
-const SIBLING_AGENT_LINK_RE = /\]\(([A-Za-z0-9_-]+)\.md\)/g;
 
 /**
  * `_build_emit._strip_skill_body_links`'s pattern: every RELATIVE markdown link to a
@@ -296,51 +297,23 @@ const BASH_MARKER = '<!-- bash: allow -->';
 const WEBFETCH_MARKER = '<!-- webfetch: allow -->';
 
 /**
- * The readonly-tool line `claudeAgentFrontmatter`/`copilotAgentFrontmatter` each emit — a
- * DENYLIST for Claude, an ALLOWLIST for Copilot — differing only in the key, the base list,
- * the gated entries the markers toggle, and whether the value is bracketed. Each `gated`
- * row is `[tool, marker, listedWhenMarked]`: `false` for Claude (the tool is denied UNLESS
- * the marker allows it) and `true` for Copilot (the tool is allowed ONLY IF the marker is
- * present) — the same marker, read in the opposite sense a denylist and an allowlist
- * require. Row order is emit order: WebFetch before Bash keeps the unmarked Claude line
- * byte-identical to what it was before the webfetch marker existed.
+ * `_build_emit._claude_agent_frontmatter`. A read-only spec gets a `disallowedTools` DENYLIST;
+ * each opt-in marker takes its tool back off the list. Order is emit order: WebFetch before
+ * Bash keeps the unmarked line byte-identical to what it was before the webfetch marker existed.
  */
-const READONLY_TOOLS = {
-  claude: {
-    key: 'disallowedTools', tools: ['Write', 'Edit', 'NotebookEdit'], brackets: false,
-    gated: [['WebFetch', WEBFETCH_MARKER, false], ['Bash', BASH_MARKER, false]],
-  },
-  copilot: {
-    key: 'tools', tools: ['read', 'search', 'todo', 'agent'], brackets: true,
-    gated: [['fetch', WEBFETCH_MARKER, true], ['execute', BASH_MARKER, true]],
-  },
-};
-
-/** `_build_emit._claude_agent_frontmatter` / `._copilot_agent_frontmatter`. */
-function claudeCopilotAgentFrontmatter(host, stem, text, overrides) {
+function claudeAgentFrontmatter(stem, text, overrides) {
   const fm = [`name: ${stem}`, `description: ${jsonDumps(descOf(text))}`];
   const ov = agentOverride(overrides, stem);
   if (isTruthy(ov.model)) fm.push(`model: ${formatValue(ov.model)}`);
   if (isReadonly(text)) {
-    const { key, tools, brackets, gated } = READONLY_TOOLS[host];
-    const list = [...tools];
-    for (const [tool, marker, listedWhenMarked] of gated) {
-      if (text.includes(marker) === listedWhenMarked) list.push(tool);
-    }
-    fm.push(`${key}: ${brackets ? `[${list.join(', ')}]` : list.join(', ')}`);
+    const list = ['Write', 'Edit', 'NotebookEdit'];
+    if (!text.includes(WEBFETCH_MARKER)) list.push('WebFetch');
+    if (!text.includes(BASH_MARKER)) list.push('Bash');
+    fm.push(`disallowedTools: ${list.join(', ')}`);
   }
   return fm;
 }
 
-function claudeAgentFrontmatter(stem, text, overrides) {
-  return claudeCopilotAgentFrontmatter('claude', stem, text, overrides);
-}
-
-/** `tools:` is an ALLOWLIST, not a denylist. */
-function copilotAgentFrontmatter(stem, text, overrides) {
-  return claudeCopilotAgentFrontmatter('copilot', stem, text, overrides);
-}
-
 /** `_build_emit._opencode_agent_frontmatter`. */
 function opencodeAgentFrontmatter(stem, text, overrides, theme = null) {
   const fm = [`description: ${jsonDumps(descOf(text))}`, 'mode: subagent'];
@@ -387,6 +360,14 @@ function relPosix(base, target) {
  * source root it is relativised against (Python reads `_build_core.SRC` directly, which
  * is the module-level single owner; here it travels explicitly, as in `js/build/render.mjs`).
  *
+ * `opts.skillDirOf(name)` — set for a host that hands the model a skill's TEXT but not where
+ * the skill lives (Bob). A folder skill names its scripts and prompts
+ * `<this-skill-directory>/…`; Claude Code resolves that because it announces each skill's
+ * base directory on load, while on Bob the model got the text with a hole in it and went
+ * hunting through the filesystem. With the option, every rendered `.md` of a vendored folder
+ * has the placeholder replaced by the answer. Only vendored folders carry the placeholder — a
+ * flat skill has no siblings to point at.
+ *
  * Returns `{ nAgents, nSkills, written }` — Python's 3-tuple, with `written` as absolute
  * paths in write order.
  *
@@ -400,7 +381,7 @@ function relPosix(base, target) {
  */
 export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null, {
   host = 'opencode', oldOwned = null, cfg = null, manifestExisted = true,
-  theme = null, src,
+  theme = null, src, skillDirOf = null,
 } = {}) {
   const ov = overrides || {};
   const oldSet = oldOwned !== null && oldOwned !== undefined ? new Set(oldOwned) : null;
@@ -445,8 +426,10 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
       mkdirSync(path.dirname(dest), { recursive: true });
       // The same vendored folder mixes both writers: a rendered `.md` goes through
       // writeText (and picks up CRLF on Windows), a binary through copy2 (and keeps LF).
-      if (text !== null) writeText(dest, text);
-      else copyFile(source, dest);
+      if (text !== null) {
+        writeText(dest, skillDirOf === null ? text
+          : text.replaceAll(SKILL_DIR_PLACEHOLDER, skillDirOf(sparts[1])));
+      } else copyFile(source, dest);
       written.push(dest);
       continue;
     }
@@ -480,12 +463,6 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
       if (host === 'claude') {
         fm = claudeAgentFrontmatter(stem, text, ov);
         dest = path.join(agentsDir, `${stem}.md`);
-      } else if (host === 'copilot') {
-        fm = copilotAgentFrontmatter(stem, text, ov);
-        dest = path.join(agentsDir, `${stem}.agent.md`);
-        // The filename change drags the links with it: a sibling `](skeptic.md)` would
-        // point at a file this dialect never writes.
-        body = body.replace(SIBLING_AGENT_LINK_RE, ']($1.agent.md)');
       } else {
         fm = opencodeAgentFrontmatter(stem, text, ov, theme);
         dest = path.join(agentsDir, `${stem}.md`);
@@ -494,7 +471,7 @@ export function writeNativeLayer(items, agentsDir, skillsDir, overrides = null,
     } else {
       // Skills are BYTE-IDENTICAL across hosts: name + description, body link-stripped.
       // The user-only key is emitted for every host too — Claude Code and Bob honour it,
-      // OpenCode and Copilot ignore an unknown key — so the identity holds.
+      // OpenCode ignores an unknown key — so the identity holds.
       fm = [`name: ${stem}`, `description: ${jsonDumps(skillDescription(text))}`];
       if (isUserInvokedOnly(text)) fm.push('disable-model-invocation: true');
       body = stripSkillBodyLinks(body);

package/js/hosts/opencode.mjs

@@ -84,7 +84,7 @@ const AGENT_OVERRIDES_STUB = {
   _recommended: {
     _comment: (
       'Cheap-tier seats: copy the ones you want into "agents" with your host\'s cheap '
-      + 'model id (OpenCode: "anthropic/claude-haiku-4-5"; Claude Code / Copilot: "haiku"). '
+      + 'model id (OpenCode: "anthropic/claude-haiku-4-5"; Claude Code: "haiku"). '
       + 'Read-and-summarise work — a council convenes several at once, so this is where '
       + 'the savings compound. Nothing applies until you copy it.'
     ),

package/js/hosts/settings.mjs

@@ -483,6 +483,18 @@ export function hookShimPath(platform = process.platform) {
   return path.join(shimHome(), ...shimRel(platform));
 }
 
+/**
+ * The paths the machine's hook shim names that are gone — `[]` when the shim is absent or live.
+ *
+ * Cheap on purpose: `status`, the doctor and EVERY CLI run call it (the run-time warning in
+ * `bin/geneseed-cli.mjs`), because a dead shim disables every hook of every Claude-shaped
+ * install and nothing else would say so. An absent shim is not dead — a checkout that has never
+ * emitted owns none — and an unreadable one is reported by the doctor, not here.
+ */
+export function shimDead() {
+  try { return shimDeadPaths(readText(hookShimPath())); } catch { return []; }
+}
+
 /**
  * `_build_settings._hook_shim_body`, with the two volatile values INJECTED.
  *
@@ -649,7 +661,7 @@ export function hookPrefix({ runner, entry, platform = process.platform } = {})
  * rule is no longer BINDING — so a gate that stopped every commit to ask for consent to a rule
  * the install did not adopt is the disagreement the three-tier split forbids. The group stays
  * and gains `--no-consent`, which skips only the process-5 branch. It once DROPPED the whole
- * group instead, and Law IV went with it — on Claude only, since Bob and Copilot carry it
+ * group instead, and Law IV went with it — on Claude only, since Bob carries it
  * through `tool-gate`. The command changing is also what re-wires an existing install:
  * `mergeClaudeSettings` prunes every previously-managed group that is not in this return
  * value.
@@ -700,22 +712,6 @@ export function claudeHookGroups(cfg, hookOpts, doctrines = null, excluded = [],
       Stop: [{ hooks: [{ type: 'command', command: `${run} learn ${mem} || exit 0` }] }],
     };
   }
-  if (host === 'copilot') {
-    // COPILOT'S OWN SCHEMA (docs.github.com/en/copilot/reference/hooks-configuration): camelCase
-    // events, each an ARRAY of `{type: "command", command}` entries — no matcher groups, so the
-    // array elements ARE the groups this merge appends and prunes. `preToolUse` answers with
-    // a top-level `permissionDecision` (`--host copilot`), and `agentStop`/`preCompact` carry
-    // `transcriptPath`, so `learn` runs here as on Claude. No matcher, so `tool-gate` reads
-    // the payload's shape. Unverified live: no Copilot CLI on the authoring machine.
-    const c = ' --host copilot';
-    const entry = (command) => [{ type: 'command', command }];
-    return {
-      sessionStart: entry(`${run} context --root "${cfg}"${c} || exit 0`),
-      preToolUse: entry(`${run} tool-gate --root "${cfg}"${c}`),
-      agentStop: entry(`${run} learn ${mem} || exit 0`),
-      preCompact: entry(`${run} learn ${mem} || exit 0`),
-    };
-  }
   // OpenClaude takes Claude's whole group set and verdicts unchanged; only `context` needs
   // the host, to know which root file OpenClaude already loads by itself.
   const h = host === 'openclaude' ? ' --host openclaude' : '';
@@ -753,63 +749,6 @@ export function claudeHookGroups(cfg, hookOpts, doctrines = null, excluded = [],
   };
 }
 
-/**
- * LEGACY: the single-slot Copilot shape (`hooks.<event>` = ONE object, events `sessionStart` /
- * `toolCall`) an emit wrote before Copilot's hooks became event → array. Copilot has no
- * `toolCall` event any more, so those gates never ran. Nothing writes this shape now; these
- * two only take an older install's recorded `copilot_hooks` claims back out.
- */
-/** Remove exactly the recorded Copilot hooks from `p`. True when the file was rewritten. */
-export function unwireCopilotSettings(p, recorded) {
-  if (!existsSync(p) || !recorded || !recorded.length) return false;
-  let loaded;
-  let hadComments;
-  try {
-    [loaded, hadComments] = readJsonc(readText(p));
-  } catch (e) {
-    if (!isOsError(e)) throw e;
-    return false;
-  }
-  if (hadComments || !isDict(loaded)) return false;
-  const hooks = get(loaded, 'hooks');
-  if (!isDict(hooks)) return false;
-  for (const rec of recorded) {
-    const event = get(rec, 'event');
-    if (deepEquals(get(hooks, event), get(rec, 'hook'))) delete hooks[event];
-  }
-  if (!Object.keys(hooks).length) delete loaded.hooks;
-  try {
-    atomicWriteJson(p, loaded);
-  } catch (e) {
-    if (!isOsError(e)) throw e;
-    return false;
-  }
-  return true;
-}
-
-/**
- * The Copilot twin of `settingsIntegrityCheck`: every recorded hook present (or absent) in
- * the file it was claimed against. Same contract — problems as strings, each also WARNed on
- * stderr, empty when clean — so a merge that did not stick is loud at emit time rather than
- * a hook that quietly never fires.
- */
-export function copilotIntegrityCheck(p, recorded, expect = 'present') {
-  const problems = [];
-  const hooks = existsSync(p) ? (() => {
-    try { return get(readJsonc(readText(p))[0], 'hooks'); } catch { return null; }
-  })() : null;
-  for (const rec of (recorded || []).filter(isDict)) {
-    const hit = deepEquals(get(hooks, rec.event), rec.hook);
-    if (expect === 'present' && !hit) {
-      problems.push(`${p}: recorded Copilot hook missing — event=${rec.event}`);
-    } else if (expect === 'absent' && hit) {
-      problems.push(`${p}: recorded Copilot hook still present after unwire — event=${rec.event}`);
-    }
-  }
-  for (const x of problems) process.stderr.write(`[geneseed] WARN: ${x}\n`);
-  return problems;
-}
-
 /**
  * `_build_settings._merge_claude_settings` — returns `[target, managed]`.
  *
@@ -1045,8 +984,8 @@ const SHIM_ENTRY_MARK = 'geneseed-hook.mjs';
  *
  * PURE — and currently reached only END TO END, by the `migrate/a-node-baked-shim-reads-as-current`
  * cell. No unit corpus drives it directly, which is worth knowing before trusting it.
- * 'none' is not a fault: a Copilot install wires no hooks, and a user's own
- * settings.json may carry three hand-written hooks and no Geneseed entry. Both must read as
+ * 'none' is not a fault: a user's own settings.json may carry three hand-written hooks
+ * and no Geneseed entry. That must read as
  * "nothing to migrate" rather than "unrecognised", or `migrate` refuses on the commonest
  * config on any machine.
  */
@@ -1061,7 +1000,7 @@ export function migrateShape(commands, shimBody) {
 /**
  * `_build_settings._autostart_paths` — where a hand-written web-daemon autostart entry lives.
  *
- * NOTHING IN THIS REPOSITORY HAS EVER WRITTEN ONE — `SETUP.md` tells the user to create them
+ * NOTHING IN THIS REPOSITORY HAS EVER WRITTEN ONE — the install guide tells the user to create them
  * by hand, and no .py/.mjs/.sh/.cmd in the tree contains `vbs`, `LaunchAgents` or `plist`. So
  * `migrate` REPORTS a stale one and never rewrites it, on the rule `settingsIntegrityCheck`
  * already states: an entry the manifest does not claim is "possibly user-authored; left alone".
@@ -1181,8 +1120,7 @@ export function settingsIntegrityCheck(p, managed, expect = 'present') {
   for (const [event, group] of presentGroups) {
     const key = `${formatRepr(event)}\u0000${jsonDumpsCompact(group, { sortKeys: true })}`;
     if (recordedSet.has(key)) continue;
-    // A Claude group nests its commands under `hooks`; a Copilot entry IS the command.
-    const cmds = [...(get(group, 'hooks') || []).filter(isDict), group]
+    const cmds = (get(group, 'hooks') || []).filter(isDict)
       .map((h) => (has(h, 'command') ? h.command : ''));
     if (cmds.some((c) => typeof c === 'string'
       && GENESEED_HOOK_SNIFF.some((mk) => c.includes(mk)))) {

package/js/inspect/checks-authoring.mjs

@@ -13,7 +13,7 @@
  */
 import path from 'node:path';
 import {
-  CONFIG, PACK_ORDER, PLUGIN_SRC, RETIRED_RULE_IDS, ROOT, RULE_ID_RE, SRC, THEMES, canonFiles,
+  CONFIG, DOCS, DOC_FOLDERS, PACK_ORDER, PLUGIN_SRC, RETIRED_RULE_IDS, ROOT, RULE_ID_RE, SRC, THEMES, canonFiles,
   knownRuleIds, ruleCanon, titleKey,
 } from '../build/source.mjs';
 import { themeFiles } from '../hosts/installs.mjs';
@@ -22,7 +22,9 @@ import { readText } from '../lib/fs.mjs';
 import { parseJson, formatRepr } from '../lib/json.mjs';
 import { which } from '../lib/paths.mjs';
 import { NO_WINDOW } from '../lib/proc.mjs';
-import { registryProblems, secretProblems, vendorPinProblems } from './checks-repo.mjs';
+import {
+  folderSkillProblems, registryProblems, secretProblems, vendorPinProblems,
+} from './checks-repo.mjs';
 import { LAW_CLASS, LAW_CLASSES, SKILL_CLASS } from './inventory.mjs';
 import { NOTE, globSorted, has, isDir, isFile, rglob, srcStems } from './scan.mjs';
 import { spawnSync } from 'node:child_process';
@@ -761,7 +763,7 @@ export function countTableProblems() {
 
   // WHERE THE ONBOARDING COPY LIVES, AND WHY THIS READ MOVED. It used to open the one module
   // that held the web console's onboarding prose. That prose has since moved into
-  // `docs/web/*.md`, and the counts in it render from `{N_LAWS}` / `{N_AGENTS}` / `{N_SKILLS}`
+  // `docs/<folder>/*.md`, and the counts in it render from `{N_LAWS}` / `{N_AGENTS}` / `{N_SKILLS}`
   // — so the read was still succeeding against a file the sentences had left, all three arms
   // below scored zero, and the check looked healthy while gating nothing. A templated count
   // cannot drift; what these arms still catch is a maintainer typing the NUMBER into a page
@@ -771,7 +773,9 @@ export function countTableProblems() {
   // byte moves. `web` stays fail-soft — a missing docs tree is not an authoring fault.
   let web = '';
   try {
-    web = globSorted(path.join(ROOT, 'docs', 'web'), (n) => n.endsWith('.md'))
+    web = DOC_FOLDERS
+      .flatMap((f) => (isDir(path.join(DOCS, f))
+        ? globSorted(path.join(DOCS, f), (n) => n.endsWith('.md')) : []))
       .map(readText).join('\n');
   } catch { web = ''; }
   // ⚠ NOT FAIL-SOFT, UNLIKE `web` ABOVE, AND THE ASYMMETRY IS THE POINT. A missing `docs/web`
@@ -901,6 +905,7 @@ export function authoringProblems() {
   problems.push(...registryProblems());
   problems.push(...secretProblems());
   problems.push(...vendorPinProblems());
+  problems.push(...folderSkillProblems());
   problems.push(...constitutionProblems());
   problems.push(...leanBlockProblems());
   problems.push(...countTableProblems());

package/js/inspect/checks-repo.mjs

@@ -1,6 +1,6 @@
 /**
  * The checks over the REPO's own records — the registry, committed secrets, the hook shim
- * and the vendored-skill pins.
+ * and the vendored skill folders (their pins and their SKILL.md frontmatter).
  *
  * Same contract as `checks-build.mjs`: an array of problem strings, empty when clean, one
  * planted fault per check in the gate. This is the group that reads what the repo SAYS about
@@ -240,6 +240,50 @@ export function vendorPinProblems() {
   return problems;
 }
 
+const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;
+
+/**
+ * Every vendored skill folder's `SKILL.md` opens with a frontmatter whose `name` IS the
+ * folder and which carries a `description`.
+ *
+ * A flat skill gets that frontmatter from `writeNativeLayer`; a folder is copied through as
+ * written, so its own SKILL.md is all a host has to register it from. Two shipped broken:
+ * daydream had no frontmatter at all and react-view-transitions named itself after its
+ * upstream repo — the Agent Skills format requires the name to match the folder. Claude Code
+ * tolerated both, so nothing showed; a stricter host is free not to register them. Only the
+ * two keys every host reads are checked, at the top level of the block (an indented
+ * `name:` under `metadata:` does not count).
+ */
+export function folderSkillProblems() {
+  const problems = [];
+  for (const name of VENDORED_SKILL_DIRS) {
+    const folder = path.join(SRC, 'skills', name);
+    if (!isDir(folder)) continue;   // vendorPinProblems reports the missing folder
+    let text;
+    try { text = readText(path.join(folder, 'SKILL.md')); } catch {
+      problems.push(`[authoring] skills/${name}/ has no SKILL.md — no host can load it`);
+      continue;
+    }
+    const fm = FRONTMATTER_RE.exec(text);
+    if (!fm) {
+      problems.push(`[authoring] skills/${name}/SKILL.md opens with no frontmatter — a host `
+        + 'registers a skill from its name and description');
+      continue;
+    }
+    const declared = /^name:[ \t]*["']?([^"'\r\n]*?)["']?[ \t]*$/m.exec(fm[1]);
+    if (!declared) {
+      problems.push(`[authoring] skills/${name}/SKILL.md frontmatter has no 'name'`);
+    } else if (declared[1] !== name) {
+      problems.push(`[authoring] skills/${name}/SKILL.md is named '${declared[1]}' — the name `
+        + 'must match the folder');
+    }
+    if (!/^description:[ \t]*\S/m.test(fm[1])) {
+      problems.push(`[authoring] skills/${name}/SKILL.md frontmatter has no 'description'`);
+    }
+  }
+  return problems;
+}
+
 
 /**
  * `js/README.md` describes every module under `js/`, and only modules that exist.

package/js/inspect/diff.mjs

@@ -41,7 +41,9 @@ import os from 'node:os';
 import path from 'node:path';
 
 import { emitGlobalInto } from '../build/driver.mjs';
-import { GLOBAL_MANIFEST, VERSION_MARKER, expanduser, opencodeConfigDir } from '../hosts/hosts.mjs';
+import {
+  GLOBAL_MANIFEST, VERSION_MARKER, expanduser, opencodeConfigDir, resolvePath,
+} from '../hosts/hosts.mjs';
 import {
   EMIT_HOST_SCOPE, defaultTheme, doctrinesForBuild, footprintOfDir, modeOfDir, postureOfDir,
   readJsonMaybe, readMaybe, themeOfDir,
@@ -174,6 +176,12 @@ export function diffCollect({ target = null, theme = null, emit = null, footprin
       // makes explicit rather than leaving to `makeCfg`'s parameter default two layers down.
       posture: postureOfDir(dir), mode: modeOfDir(dir), doctrines: doctrinesForBuild(dir),
     }));
+    // The one place a render depends on WHERE it is installed: a global Bob emit writes each
+    // folder skill's absolute directory into its SKILL.md (see `writeNativeLayer`), so the
+    // reference render names the temp tree. Mapped back to the deployed dir before comparing,
+    // or every such skill reads as edited. A deployment that has since MOVED still differs,
+    // and that is real drift — its skills point at a directory that is no longer theirs.
+    const deployedDir = resolvePath(dir);
     const rels = [...new Set([...ownedSet(dir), ...ownedSet(expected)])].sort();
     for (const rel of rels) {
       const a = path.join(dir, rel);
@@ -182,7 +190,7 @@ export function diffCollect({ target = null, theme = null, emit = null, footprin
         // `read_text(errors="replace")` — Node's utf8 decoder substitutes U+FFFD for the
         // same bytes, and `readText` folds the line endings the way `Path.read_text` does.
         const ta = readText(a);
-        const tb = readText(b);
+        const tb = readText(b).split(expected).join(deployedDir);
         if (cmpKey(rel, ta) !== cmpKey(rel, tb)) {
           const diff = unifiedDiff(splitLines(tb), splitLines(ta), {
             fromfile: `source/${rel}`, tofile: `deployed/${rel}`, lineterm: '',
@@ -349,7 +357,7 @@ export function cmdDiff(args) {
         + 'installs against a fresh render (a project layer is diffed against '
         + 'its own repo, which this command does not do). Pass --target at a '
         + 'global config dir (opencode-global/claude-global/bob-global/'
-        + 'copilot-global/openclaude-global), or omit '
+        + 'openclaude-global), or omit '
         + '--target to use the default.\n');
     } else {
       printErr(`[diff] no global Geneseed install at ${target} (no ${GLOBAL_MANIFEST}). `