geneseed 4.10.0 → 4.14.0

package/js/maintain/setup.mjs

@@ -41,7 +41,8 @@
  * a cell could not have varied the answers at all.
  */
 import { spawnSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { existsSync, readdirSync } from 'node:fs';
+import os from 'node:os';
 import path from 'node:path';
 
 import { main as driverMain, resolveOut } from '../build/driver.mjs';
@@ -228,9 +229,11 @@ function askDoctrines(deployed = null) {
 }
 
 /**
- * The Kits question (spec A5): one pick, a kit or `none`, defaulting to what the install has on
- * (`deployed`, its `Active kits:` marker). Asked ONLY when this checkout ships a kit, so a kit-less
- * wizard reads exactly the stdin it always did (and has no kit to carry: `kitsOfDir` drops an unshipped one).
+ * The Kits questions (spec A5): one yes/no per shipped kit, each defaulting to whether the install
+ * has it on (`deployed`, its `Active kits:` marker), so holding Enter keeps the installed set. A
+ * single pick could not hold two kits at once, which is why the menu became per kit when the second
+ * kit shipped. Asked ONLY when this checkout ships a kit, so a kit-less wizard reads exactly the
+ * stdin it always did (and has no kit to carry: `kitsOfDir` drops an unshipped one).
  * Returns the kit list, or null for none (`setupBuildArgs` omits `--kits`).
  */
 export function askKits(deployed = null, kits = null) {
@@ -239,14 +242,9 @@ export function askKits(deployed = null, kits = null) {
     return null;
   }
   const on = (deployed ?? []).filter((k) => kits.has(k));
-  if (!kits.size) return null;
-  const opts = [...kits].map(([k, m]) => [k, m.description ?? '']);
-  // shortcut: one pick per run, so several deployed kits are offered as one "keep" option; ask
-  // per kit once a second kit ships.
-  if (on.length > 1) opts.push([on.join(','), 'keep the installed kits']);
-  opts.push(['none', 'no kit']);
-  const pick = askChoice('Kits', opts, on.length ? on.join(',') : 'none');
-  return pick === 'none' ? null : pick.split(',');
+  const picked = [...kits].filter(([k, m]) => askChoice(`Kit ${k} — ${m.description ?? k}`,
+    [['yes', `install the ${k} kit`], ['no', `leave ${k} out`]], on.includes(k) ? 'yes' : 'no') === 'yes');
+  return picked.length ? picked.map(([k]) => k) : null;
 }
 
 /**
@@ -521,8 +519,8 @@ export function setupLines() {
     doctrines = null, excludeRules = null, excludeSkills = null, gates = {}, kits = null,
   } = sel;
   if (emit === 'opencode-global') {
-    // The build below overwrites the deployed global harness, and the self-improvement loops
-    // may have edited it in place. Preserve that drift first.
+    // The build below overwrites the deployed global harness, which may carry hand edits (or
+    // in-place edits from a harness older than the notebook notes). Preserve that drift first.
     try {
       const [ipath] = exportImprovements();
       if (ipath) {
@@ -575,26 +573,83 @@ export function cmdSetup() {
 }
 
 /**
- * The AI coding tools Geneseed installs into, as `[label, present, url]` rows in HOSTS order.
+ * The AI coding tools Geneseed installs into, as `[label, present, url, where]` rows in HOSTS
+ * order. `where` is the path found OFF the PATH (see `userInstall`), else null.
  *
- * PRESENT MEANS THE COMMAND IS ON PATH, and nothing else. The config dir looked like a second
- * signal — a desktop-only install has one and no command — but GENESEED ITSELF CREATES IT: a
- * `bob-global` emit writes `~/.bob` on a machine that never had Bob, and the first run of this
- * check reported Bob present on exactly such a machine. A wrong "ok" sends the user to an
- * install mode for a tool they cannot open; a wrong "not found" costs one line they can ignore.
+ * PRESENT MEANS THE TOOL ITSELF WAS FOUND — its command on PATH, or its program in a per-user
+ * install location — and never its config dir. That dir looked like a signal — a desktop-only
+ * install has one and no command — but GENESEED ITSELF CREATES IT: a `bob-global` emit writes
+ * `~/.bob` on a machine that never had Bob, and the first run of this check reported Bob present
+ * on exactly such a machine. A wrong "ok" sends the user to an install mode for a tool they
+ * cannot open; a wrong "not found" costs a line, and `toolsReport` lets them name the path.
  *
  * NO SPAWN, deliberately. `which` walks PATH by hand, so asking costs nothing on the CLI's
  * child_process allow-list — a `claude --version` probe would have been a third entry there to
- * learn nothing `which` does not already say. `lookup` is the seam for the test, which cannot
- * rely on what this machine happens to have installed.
+ * learn nothing `which` does not already say. `lookup` and `userLookup` are the seams for the
+ * test, which cannot rely on what this machine happens to have installed.
  */
-export function hostTools({ lookup = which } = {}) {
+export function hostTools({ lookup = which, userLookup = userInstall } = {}) {
   return [
     ['OpenCode', 'opencode', 'https://opencode.ai/docs/'],
     ['Claude Code', 'claude', 'https://code.claude.com/docs/en/setup'],
     ['IBM Bob', 'bob', 'https://bob.ibm.com/'],
     ['OpenClaude', 'openclaude', 'https://openclaude.gitlawb.com/'],
-  ].map(([label, cmd, url]) => [label, Boolean(lookup(cmd)), url]);
+  ].map(([label, cmd, url]) => {
+    if (lookup(cmd)) return [label, true, url, null];
+    const where = userLookup(cmd);
+    return [label, Boolean(where), url, where || null];
+  });
+}
+
+/**
+ * Per-host off-PATH places: a bin dir a tool's own installer uses, and a name pattern for the
+ * desktop app folder. Only Bob ships as a desktop IDE; matching `claude` against app folders
+ * would find the Claude desktop chat app, which is not Claude Code.
+ */
+const USER_BIN_DIRS = {
+  opencode: ['.opencode/bin'],
+  claude: ['.claude/local'],
+  bob: [],
+  openclaude: [],
+};
+const APP_PATTERN = { bob: /\bbob\b/i };
+
+/**
+ * Where a tool installed FOR ONE USER lives when its installer did not put it on PATH — the
+ * report of 2026-10 was IBM Bob installed under the user's own profile, which `which` never sees.
+ *
+ * Three kinds of place, each one the tool's own program, never its config dir:
+ *   * a per-user bin dir: `~/.local/bin` and `~/bin` for every tool, plus the dir its own
+ *     installer uses (`USER_BIN_DIRS`) — an executable file, through `which` and its PATHEXT;
+ *   * on Windows, `%APPDATA%\npm` (a per-user `npm i -g`) and a desktop app folder under
+ *     `%LOCALAPPDATA%\Programs` whose name matches `APP_PATTERN`;
+ *   * on macOS, a matching `.app` in `/Applications` or `~/Applications`.
+ * The first hit wins. Everything a machine could differ on is a parameter, for the test.
+ */
+export function userInstall(cmd, {
+  home = os.homedir(), env = process.env, platform = process.platform,
+  find = which, list = listDir,
+} = {}) {
+  const bins = ['.local/bin', 'bin', ...(USER_BIN_DIRS[cmd] ?? [])].map((d) => path.join(home, d));
+  if (platform === 'win32' && env.APPDATA) bins.push(path.join(env.APPDATA, 'npm'));
+  const hit = find(cmd, bins.join(path.delimiter));
+  if (hit) return hit;
+  const pattern = APP_PATTERN[cmd];
+  if (!pattern) return null;
+  const appDirs = platform === 'win32'
+    ? (env.LOCALAPPDATA ? [path.join(env.LOCALAPPDATA, 'Programs')] : [])
+    : platform === 'darwin' ? ['/Applications', path.join(home, 'Applications')] : [];
+  for (const dir of appDirs) {
+    const name = list(dir).find((n) => pattern.test(n)
+      && (platform !== 'darwin' || n.endsWith('.app')));
+    if (name) return path.join(dir, name);
+  }
+  return null;
+}
+
+/** `readdirSync`, with a missing or unreadable dir as no entries. */
+function listDir(dir) {
+  try { return readdirSync(dir); } catch { return []; }
 }
 
 /**
@@ -602,16 +657,25 @@ export function hostTools({ lookup = which } = {}) {
  * answer knowing it — and when NONE is, ask whether to stop and install one first. It never
  * installs one: on a managed machine that is IT's call, and each tool has its own installer.
  * A missing tool among several present is a line, not a question; nobody needs all four.
+ * When none is found, the user can name where theirs is before being asked to stop — the
+ * search covers PATH and the usual per-user places, not every folder an installer may pick.
  * `false` is the user choosing to stop.
  */
 export function toolsReport(tools = hostTools()) {
   printOut('AI coding tools on this machine:\n');
-  for (const [label, present, url] of tools) {
-    printOut(present ? `  ok  ${label}\n` : `  --  ${label} not on PATH — install: ${url}\n`);
+  for (const [label, present, url, where] of tools) {
+    if (!present) printOut(`  --  ${label} not found — install: ${url}\n`);
+    else printOut(where ? `  ok  ${label} (${where}, not on PATH)\n` : `  ok  ${label}\n`);
   }
   if (tools.some(([, present]) => present)) { printOut('\n'); return true; }
-  printOut('\nNone of them is installed. Install the one you use (links above), then run setup '
-    + 'again — or go on and pick the plain bundle, which any AGENT.md tool can read.\n');
+  printOut('\nNone of them was found on PATH or in the usual per-user folders.\n');
+  // Quotes stripped: a path dragged into a Windows console arrives wrapped in them.
+  const given = ask('Installed somewhere else? Path to the tool (Enter to skip)')
+    .replace(/^"(.*)"$/, '$1');
+  if (given && existsSync(given)) { printOut(`  ok  ${given}\n\n`); return true; }
+  if (given) printOut(`  --  nothing at ${given}\n`);
+  printOut('Install the one you use (links above), then run setup again — or go on and pick the '
+    + 'plain bundle, which any AGENT.md tool can read.\n');
   if (confirm('Continue without one?', false)) { printOut('\n'); return true; }
   printOut('Stopped. Run setup again once a tool is installed.\n');
   return false;

package/js/maintain/update.mjs

@@ -796,8 +796,8 @@ export async function upgrade(ref = null, themeArg = null) {
  * `_harness_lifecycle.cmd_upgrade` — the harness verb, which is `export_improvements()` and
  * then `upgrade()`.
  *
- * THE EXPORT RUNS FIRST AND MUST NEVER BLOCK. The self-improvement loops edit the deployed
- * harness in place and the rebuild is about to overwrite those edits, so the drift has to be
+ * THE EXPORT RUNS FIRST AND MUST NEVER BLOCK. A deployed harness can carry in-place edits (by
+ * hand, or by a harness older than the notebook notes) and the rebuild is about to overwrite them, so the drift has to be
  * captured against the PRE-refresh source. Anything it throws is a warning on stderr and the
  * upgrade continues — a failed export is a lost note, a blocked upgrade is a broken install.
  */

package/js/web/actions.mjs

@@ -475,6 +475,14 @@ export function buildActionCmds(state, body) {
     const [, , ...rest] = installProfile(host, scope, state.root).argv;
     return actionCommands('build', { buildArgv: ['--theme', theme, ...rest] });
   }
+  // Only a GLOBAL emit has a home of its own. Any other carries no folder on this route, so the
+  // generator fell back to its default `./Harness` — and jobs run with the Geneseed checkout as
+  // cwd, so a Bob "project" install landed inside the clone (reported 2026-10), where the doctor's
+  // bundle check then read it as 178 missing files. The `deploy` action takes a chosen folder.
+  if (!emit.endsWith('-global')) {
+    return { error: `${emit} installs into a folder you choose — use Deploy with a folder, `
+      + 'not Build' };
+  }
   return actionCommands('build', {
     theme, emit, footprint: state.footprint, posture: state.posture, mode: state.mode,
     trust: state.trust,

package/js/web/api.mjs

@@ -8,21 +8,21 @@
  * bind paths to these functions are `routes.mjs`. This file imports none of its route siblings,
  * which is what keeps the old `api ↔ actions` and `api ↔ activity` cycles from coming back.
  */
-import { statSync } from 'node:fs';
+import { readdirSync, statSync } from 'node:fs';
 import path from 'node:path';
 
-import { CONFIG, ROOT, THEMES, discoverNames, loadKits, makeCfg } from '../build/source.mjs';
+import { CONFIG, CREDIT_RE, ROOT, SRC, THEMES, discoverNames, loadKits, makeCfg, upstreamOf } from '../build/source.mjs';
 import { readVersion, sourceFingerprint } from '../build/version.mjs';
 import { sourceReleaseVersion } from '../hosts/opencode.mjs';
 import { alwaysOnCost } from '../inspect/cost.mjs';
 import { installProfile } from '../build/generate.mjs';
 import { diffCollect, renderMemo } from '../inspect/diff.mjs';
 import { excludesSnapshot } from '../inspect/excludes.mjs';
-import { CLAUDE_STYLE, HOSTS, VERSION_MARKER, resolvePath } from '../hosts/hosts.mjs';
+import { VERSION_MARKER, resolvePath } from '../hosts/hosts.mjs';
 import {
   footprintOfDir, gatesOfDir, installState, installTargets, legacyProcessCarrierOfDir, modeOfDir,
   trustOfDir,
-  postureOfDir, readJsonMaybe, themeOfDir,
+  postureOfDir, readJsonMaybe, readMaybe, themeOfDir,
 } from '../hosts/installs.mjs';
 import { PRESETS } from '../loop/score.mjs';
 import { loadCatalog, catalogProblems } from '../loop/catalog.mjs';
@@ -34,7 +34,7 @@ import { comparePaths, normcase } from '../lib/paths.mjs';
 import {
   configItems, deployed, dget, memoryItems, notebookItems, wikiItems,
 } from './catalog.mjs';
-import { stampMinute } from './state.mjs';
+import { stampMinute, viewCfg } from './state.mjs';
 import { updateStatus } from './update-check.mjs';
 
 /**
@@ -108,16 +108,9 @@ export function apiDiff(state) {
 /** The union across every global install, verbatim. */
 export const apiExcludes = () => excludesSnapshot();
 
-/**
- * The data dir an install's inventory/memory/diff is read from. Host-driven, so a new
- * nested-marker host cannot silently read the bare root.
- */
-export function viewCfg(host, scope, root) {
-  if (scope === 'project' && CLAUDE_STYLE.includes(host)) {
-    return path.join(root, HOSTS.find((h) => h.host === host).projectMarker);
-  }
-  return root;
-}
+// `viewCfg` moved to `state.mjs`, which needs it to pick a default view and cannot import
+// this module back (this one imports `stampMinute` from it).
+export { viewCfg } from './state.mjs';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
 
@@ -233,6 +226,31 @@ export function apiFleet(state) {
   return { installs, source_fp: sourceFp, doctor: state.doctor };
 }
 
+/** Source files of a kit member: `<dir>/<name>.md`, or every `.md` in a `<dir>/<name>/` folder. */
+function memberTexts(dir, name) {
+  const one = readMaybe(path.join(SRC, dir, `${name}.md`));
+  if (one !== null && one !== undefined) return [one];
+  const d = path.join(SRC, dir, name);
+  try { return readdirSync(d).filter((f) => f.endsWith('.md')).map((f) => readMaybe(path.join(d, f)) ?? ''); } catch { return []; }
+}
+
+/** Upstream credits cited by a kit's rules and member sources; an unknown key is skipped, never a 500. */
+function kitCredits(m, rules) {
+  const texts = [rules, ...(m.skills ?? []).flatMap((n) => memberTexts('skills', n)),
+    ...(m.agents ?? []).flatMap((n) => memberTexts('agents', n))];
+  const keys = new Set();
+  for (const t of texts) for (const x of t.matchAll(CREDIT_RE)) keys.add(x[1]);
+  const out = [];
+  for (const key of [...keys].sort()) {
+    let u;
+    try { u = upstreamOf(key); } catch { u = null; }
+    if (!u) continue;
+    out.push({ key, repo: u.repo, author: u.author, license: u.license, commit: u.commit,
+      compareUrl: `https://github.com/${u.repo}/compare/${u.commit}...HEAD` });
+  }
+  return out;
+}
+
 /**
  * EVERY INSTALL'S KITS — the Kits tab. Its own route, like `apiFleet`: it re-reads each carrier
  * and the kit manifests, which the sidebar's `/api/installs` refetch must not pay for.
@@ -247,8 +265,12 @@ export function apiKits() {
   try { known = loadKits(); } catch (e) {
     return { kits: [], installs: [], error: String(e?.message ?? e) };
   }
-  const kits = [...known].map(([name, m]) => ({
-    name, description: m.description ?? '', skills: m.skills ?? [], agents: m.agents ?? [] }));
+  const kits = [...known].map(([name, m]) => {
+    const rules = readMaybe(path.join(SRC, 'kits', name, 'rules.md')) ?? '';
+    return { name, description: m.description ?? '', skills: m.skills ?? [], agents: m.agents ?? [],
+      rules, rulesWordBudget: m.rulesWordBudget ?? null, banned: m.banned ?? [],
+      credits: kitCredits(m, rules) };
+  });
   const installs = [];
   for (const [host, scope, root] of installTargets()) {
     const st = installState(root, host, scope);

package/js/web/catalog.mjs

@@ -24,6 +24,7 @@ import { readText, withDiscardableStderr, isDir, isFile } from '../lib/fs.mjs';
 import { comparePaths, normcase, within } from '../lib/paths.mjs';
 import { stripWhitespace } from '../lib/text.mjs';
 import { readJsonc } from '../hosts/settings.mjs';
+import { loadKits } from '../build/source.mjs';
 
 /** A requested catalog section or item that does not exist. */
 export class NotFound extends Error {}
@@ -466,16 +467,29 @@ function constitutionItems(inv) {
   ];
 }
 
+/** `Map<'skills/x' | 'agents/y', kit>` from the shipped manifests; a broken manifest means no badges, not a 500. */
+function kitOwners() {
+  const owner = new Map();
+  try {
+    for (const [kit, m] of loadKits()) {
+      for (const n of m.skills ?? []) owner.set(`skill:${n}`, kit);
+      for (const n of m.agents ?? []) owner.set(`agent:${n}`, kit);
+    }
+  } catch { /* shortcut: unreadable manifests hide the badge; apiKits reports the error */ }
+  return owner;
+}
+
 export function apiCatalog(state, section) {
   if (!SECTIONS.includes(section)) throw new NotFound(section);
   const inv = state.inventory;
   let items;
+  const owner = kitOwners();
   if (section === 'agents') {
     items = inv.agents.map((e) => ({ name: e.name, title: e.name, desc: e.desc,
-      source: e.source ?? null, status: e.status ?? 'unknown' }));
+      source: e.source ?? null, status: e.status ?? 'unknown', kit: owner.get(`agent:${e.name}`) ?? null }));
   } else if (section === 'skills') {
     items = inv.skills.map((e) => ({ name: e.name, title: e.name, desc: e.desc,
-      source: e.source ?? null, klass: e.klass ?? 'build', status: e.status ?? 'unknown' }));
+      source: e.source ?? null, klass: e.klass ?? 'build', status: e.status ?? 'unknown', kit: owner.get(`skill:${e.name}`) ?? null }));
   } else if (section === 'laws') {
     items = constitutionItems(inv);
   } else if (section === 'memory') {
@@ -499,6 +513,7 @@ export function apiItem(state, type, name) {
       links: resolveLinks(state, e.body), source: e.source ?? null };
     if (type === 'skill') out.klass = e.klass ?? 'build';
     out.status = e.status ?? 'unknown';
+    out.kit = kitOwners().get(`${type}:${name}`) ?? null;
     return out;
   }
   if (type === 'law') {

package/js/web/handler.mjs

@@ -303,6 +303,7 @@ export function makeHandler(state, jm, token, dist, holder = null) {
     // Build resolves its argv off the install (`buildActionCmds`); the other actions take no
     // axes and self-resolve the deployed theme downstream.
     const cmds = action === 'build' ? buildActionCmds(state, body) : actionCommands(action);
+    if (cmds && Object.hasOwn(cmds, 'error')) return sendJson(res, cmds, 400, ae);
     if (!isTruthy(cmds)) {
       return sendJson(res, { error: `unknown action ${action}` }, 404, ae);
     }

package/js/web/server.mjs

@@ -27,7 +27,7 @@ import { isFile, printOut } from '../lib/fs.mjs';
 import { which } from '../lib/paths.mjs';
 import { parseIntStrict } from '../lib/text.mjs';
 import { promptLine } from '../lib/prompt.mjs';
-import { warmDoctor, webState } from './state.mjs';
+import { fallbackView, warmDoctor, webState } from './state.mjs';
 import { clearDaemon, codeStamp, openUrl, readDaemon, restartDaemon, startDaemon, statusDaemon, stopDaemon, writeDaemon } from './daemon.mjs';
 import { makeHandler } from './handler.mjs';
 import { JobManager } from './jobs.mjs';
@@ -132,6 +132,12 @@ export async function serve({ theme = null, port = 4747, openBrowser = true,
     }
   }
   const state = webState(theme);
+  // The daemon record and the job file stay at the DEFAULT target, captured before the view
+  // moves: `geneseed web stop`/`status` find them through `webState(theme).target`, which never
+  // moves, and a view that followed a Bob-only install into ~/.bob would hide the record.
+  const home = state.target;
+  const fallback = fallbackView(home);
+  if (fallback) state.selectView(...fallback);
   if (!existsSync(join(state.target, GLOBAL_MANIFEST))) {
     printOut(`[web] no deployed harness at ${state.target}.\n`);
     printOut('      Run `geneseed setup` first — serving anyway (read-only UI).\n');
@@ -143,7 +149,7 @@ export async function serve({ theme = null, port = 4747, openBrowser = true,
   const holder = {};
   // The console's job list survives a reload and a restart because it is a FILE on disk,
   // not held in process memory.
-  const jm = new JobManager(join(state.target, '.geneseed-web-runs.json'));
+  const jm = new JobManager(join(home, '.geneseed-web-runs.json'));
   const srv = createServer(makeHandler(state, jm, token, dist, holder));
   holder.srv = srv;
   return new Promise((done) => {
@@ -157,7 +163,7 @@ export async function serve({ theme = null, port = 4747, openBrowser = true,
       const hostPort = /** @type {import('node:net').AddressInfo} */ (srv.address()).port;
       const url = `http://127.0.0.1:${hostPort}`;
       if (daemon) {
-        writeDaemon(state.target, {
+        writeDaemon(home, {
           pid: process.pid, port: hostPort, url,
           token, theme: state.theme, started: Math.floor(Date.now() / 1000), code: startCode,
         });
@@ -177,8 +183,8 @@ export async function serve({ theme = null, port = 4747, openBrowser = true,
       });
       srv.on('close', () => {
         if (daemon) {
-          const st = readDaemon(state.target);
-          if (!st || st.pid === process.pid) clearDaemon(state.target);
+          const st = readDaemon(home);
+          if (!st || st.pid === process.pid) clearDaemon(home);
         }
         done(0);
       });

package/js/web/state.mjs

@@ -8,10 +8,10 @@
 import { existsSync } from 'node:fs';
 import path from 'node:path';
 
-import { opencodeConfigDir } from '../hosts/hosts.mjs';
+import { CLAUDE_STYLE, GLOBAL_MANIFEST, HOSTS, opencodeConfigDir } from '../hosts/hosts.mjs';
 import {
-  EMIT_HOST_SCOPE, footprintOfDir, installedDefaults, modeOfDir, postureOfDir, themeOfDir,
-  trustOfDir,
+  EMIT_HOST_SCOPE, footprintOfDir, installState, installTargets, installedDefaults, modeOfDir,
+  postureOfDir, themeOfDir, trustOfDir,
 } from '../hosts/installs.mjs';
 import { doctorCollect } from '../inspect/doctor.mjs';
 import { DEFAULT_PRESET } from '../loop/score.mjs';
@@ -19,6 +19,36 @@ import { readText, isFile } from '../lib/fs.mjs';
 import { stripWhitespace } from '../lib/text.mjs';
 import { inventoryFor } from './catalog.mjs';
 
+/**
+ * The data dir an install's inventory/memory/diff is read from. Host-driven, so a new
+ * nested-marker host cannot silently read the bare root.
+ */
+export function viewCfg(host, scope, root) {
+  if (scope === 'project' && CLAUDE_STYLE.includes(host)) {
+    return path.join(root, HOSTS.find((h) => h.host === host).projectMarker);
+  }
+  return root;
+}
+
+/**
+ * `[target, root]` for the install the console should show when nothing picked one, or null
+ * when the current target is already deployed or nothing is.
+ *
+ * The console used to open on the OpenCode global dir unconditionally. On a machine with only
+ * IBM Bob (reported 2026-10) nothing is deployed there, so Overview showed the onboarding form
+ * over a perfectly good `~/.bob`, and the selector that could re-point it hides itself below two
+ * installs. So when `current` holds no manifest, the first ACTIVE install `installTargets`
+ * finds is shown instead — a global before a project, in its host order.
+ */
+export function fallbackView(current, targets = installTargets()) {
+  if (existsSync(path.join(current, GLOBAL_MANIFEST))) return null;
+  const active = targets.filter(([host, scope, root]) => {
+    try { return installState(root, host, scope) === 'active'; } catch { return false; }
+  });
+  const pick = active.find(([, scope]) => scope === 'global') || active[0];
+  return pick ? [viewCfg(...pick), pick[2]] : null;
+}
+
 /**
  * `YYYY-MM-DD HH:MM`, LOCAL time — `toISOString` would be UTC, which reads wrong in every
  * timezone but one for a user-facing timestamp.
@@ -154,6 +184,11 @@ export function webState(theme = null, target = null) {
     st._doctor = null;
   };
   st.refresh = ({ doctor = true } = {}) => {
+    // A job may have deployed the first install while the view still points at an empty
+    // default (the onboarding Build), or removed the one in view: follow it to one that exists.
+    // Only on a full refresh: `{ doctor: false }` marks a mutation that cannot change installs.
+    const fallback = doctor ? fallbackView(st.target) : null;
+    if (fallback) { st.selectView(...fallback); return; }
     st._inv = null;
     if (doctor) st._doctor = null;
     st.emit = st.detectEmit() || st.emit;

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "Every field here is argued and gated in tests/unit/package_manifest.test.mjs. `files`, `bin` and `engines` each have a test that fails when reality drifts from this file; `version` mirrors harness.config.json and is gated too. Read that docblock before editing this one.",
   "name": "geneseed",
-  "version": "4.10.0",
+  "version": "4.14.0",
   "description": "A portable, theme-able harness you implant once and use everywhere to grow a disciplined AI coding agent.",
   "keywords": [
     "ai",

package/registry.json

@@ -99,6 +99,20 @@
       "added": "2026-06-08",
       "last_verified": ""
     },
+    "agents/react-engineer": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-21",
+      "last_verified": ""
+    },
+    "agents/react-reviewer": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-21",
+      "last_verified": ""
+    },
     "agents/researcher": {
       "status": "approved",
       "version": "1.0.0",
@@ -400,6 +414,20 @@
       "added": "2026-09-06",
       "last_verified": ""
     },
+    "skills/react": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-21",
+      "last_verified": ""
+    },
+    "skills/react-testing": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-21",
+      "last_verified": ""
+    },
     "skills/react-view-transitions": {
       "status": "approved",
       "version": "1.0.0",

package/src/AGENT.md.tmpl

@@ -187,9 +187,9 @@ contract you do not already know.
 **Rule of delegation:** read-only investigation can be dispatched freely; any
 {{AGENT}} that *writes* must return a summary of exactly what it changed. Every
 {{AGENT}} spec ends with a **self-improvement loop**: when a report carries a
-`spec-feedback:` line, weigh it — fold a real flaw back into that {{AGENT}}'s
-file (with the user's assent); {{MEMORY}} gets a record only when it clears
-{{DOCTRINE:persist-insight}}'s bar.
+`spec-feedback:` line, weigh it — record a real flaw (with the user's assent) in
+`{{DIR_NOTEBOOK}}/agent-notes/<name>.md` and pass it to later dispatches;
+{{MEMORY}} gets a record only when it clears {{DOCTRINE:persist-insight}}'s bar.
 
 <!-- LEAN:begin -->
 **Dispatching a multi-part goal.** When a goal spans several capabilities,
@@ -293,8 +293,8 @@ When a task repeats and no {{SKILL}} covers it, forge one through the
 [skill-forge]({{DIR_SKILLS}}/skill-forge.md) {{SKILL}}: copy
 [`{{DIR_SKILLS}}/_template.md`]({{DIR_SKILLS}}/_template.md), keep it to one coherent
 domain ({{DOCTRINE:automate-repetition}}), and list it wherever this file carries a catalogue. Every {{SKILL}} ends with a
-**self-improvement loop** — honour it: fold what a run teaches back into the
-file, or into {{MEMORY}} ({{DOCTRINE:persist-insight}}).
+**self-improvement loop** — honour it: a lesson goes to its notes, never into
+the file, or to {{MEMORY}} ({{DOCTRINE:persist-insight}}).
 
 ---
 

package/src/agents/_self-improvement.md

@@ -0,0 +1,11 @@
+## Self-improvement
+
+If this spec misled you — an input you needed but were not given, a boundary
+that proved wrong, a step you could not execute — end your report with one line:
+`spec-feedback: [agent|general] <the one-line fix> — seen: <what happened, against
+what this spec led you to expect>`. `general` marks a fix other {{AGENTS}} need too.
+Omit the line when there is no friction. The caller weighs the feedback and, with the
+user's assent, writes a real flaw, dated, into `{{DIR_NOTEBOOK}}/agent-notes/<name>.md`
+— never into this rendered file, which a rebuild overwrites — and hands those notes
+to every later dispatch of this {{AGENT}}. It records the feedback to {{MEMORY}} only if it clears
+{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.

package/src/agents/_template.md

@@ -67,11 +67,4 @@ tells pipeline orchestration who to recruit; it changes nothing about how this
 - **Delivers:** what it must hand the next seat or the parent — same shape as
   its own output contract above, nothing looser.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/advocate.md

@@ -26,11 +26,4 @@
 - A tight brief: the position in one line, the 2–4 load-bearing arguments for it, the key supporting evidence (`file:line` or facts), and the one objection it must beat. No hedging, no filler.
 - If the motion has fewer than two defensible upsides, report that the case cannot honestly be made — an invented argument loses the council more than a conceded seat.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/architect.md

@@ -48,11 +48,4 @@ independently.)*
 - **Delivers:** the plan for the developer seat to implement, same shape as its
   own output contract above.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/developer.md

@@ -56,11 +56,4 @@ independently.)*
 - **Delivers:** the changed files and a one-line summary, handed to the tester
   seat for validation.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->