geneseed 4.8.0 → 4.9.1

package/js/build/driver.mjs

@@ -647,19 +647,25 @@ const PROJECT_EMITS = {
  * mode readers return `null` for "undetectable" too, which an explicit `posture: null` would
  * carry straight past the parameter default.
  */
-function axesCfg({ posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate = null }) {
+function axesCfg({
+  posture, mode, trust, doctrines, excludeRules, excludeSkills,
+  deletionGate = null, secretsGate = null, doneGate = null,
+}) {
   return makeCfg({
     ...(posture ? { posture } : {}), ...(mode ? { mode } : {}), ...(trust ? { trust } : {}),
     ...(doctrines ? { doctrines } : {}), ...(excludeRules ? { excludeRules } : {}),
     ...(excludeSkills ? { excludeSkills } : {}),
     // Only an explicit `false` disarms; `null` (no opinion) keeps the gate.
     ...(deletionGate === false ? { noDeletionGate: true } : {}),
+    ...(secretsGate === false ? { noSecretsGate: true } : {}),
+    ...(doneGate === false ? { noDoneGate: true } : {}),
   });
 }
 
 export function emitProjectInto(host, {
   theme, out, root, footprint = 'full', posture = null, mode = null, trust = null,
   doctrines = null, excludeRules = null, excludeSkills = null, deletionGate = null,
+  secretsGate = null, doneGate = null,
 }) {
   const emit = PROJECT_EMITS[host];
   // The axes ride the same rail into every `*Into`, and for the same reason: a drift reader
@@ -667,7 +673,8 @@ export function emitProjectInto(host, {
   // edited on every narrowed install, and `validate --doctrines craft` that ignored its flag
   // checked an all-packs render nobody asked for.
   return withPlatformNewlines(() => emit(
-    axesCfg({ posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate }),
+    axesCfg({
+      posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate, secretsGate, doneGate }),
     { theme, footprint, root }, out,
   ));
 }
@@ -682,16 +689,16 @@ export function emitProjectInto(host, {
  */
 export function buildInto({
   theme, out, footprint = 'lean', posture = null, mode = null, trust = null, doctrines = null,
-  excludeRules = null, excludeSkills = null, deletionGate = null,
+  excludeRules = null, excludeSkills = null, deletionGate = null, secretsGate = null, doneGate = null,
 }) {
   return withPlatformNewlines(() => build(axesCfg({
-    posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate }),
+    posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate, secretsGate, doneGate }),
     theme, out, { footprint, nativeCatalog: false }));
 }
 
 export function emitGlobalInto(host, {
   theme, out, cfgDir, footprint, posture = null, mode = null, doctrines = null, trust = null,
-  excludeRules = null, excludeSkills = null, deletionGate = null,
+  excludeRules = null, excludeSkills = null, deletionGate = null, secretsGate = null, doneGate = null,
 }) {
   // `build.HOSTS.get(host, build.HOSTS["opencode"])` — an unknown host falls back rather than
   // raising, because the host comes from a marker file a user can edit.
@@ -707,7 +714,8 @@ export function emitGlobalInto(host, {
   // edited on every install that chose a register, narrowed its packs or excluded a rule —
   // the same scar the footprint left in `diffCollect`, one axis over each time.
   return withPlatformNewlines(() => emit(
-    axesCfg({ posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate }),
+    axesCfg({
+      posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate, secretsGate, doneGate }),
     { theme, footprint, root: null, cfgDir }, out,
   ));
 }

package/js/build/emit-claude.mjs

@@ -182,7 +182,7 @@ export function emitClaudeRender(cfg, job) {
   // WIRE — see `claudeWire` below. One child per emit, so the two halves are two
   // functions rather than two spawns; the seam between them is a call, not a process.
   const managed = claudeWire(job, claudeMdText, agentText !== null, cfg.doctrines,
-    cfg.excludeRules, cfg.deletionGate);
+    cfg.excludeRules, cfg.deletionGate, { secretsGate: cfg.secretsGate, doneGate: cfg.doneGate });
 
   return {
     owned,
@@ -216,7 +216,7 @@ export function emitClaudeRender(cfg, job) {
  * always a string, so `''` is the only falsy value either language sees.
  */
 function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRules = [],
-  deletionGate = true) {
+  deletionGate = true, gates = {}) {
   phaseLog('WIRE');
   const { cfgDir, claudeMd, scope, host, oldManaged, preambleExclude, hookOpts } = job;
   const old = oldManaged && typeof oldManaged === 'object' && !Array.isArray(oldManaged)
@@ -280,7 +280,7 @@ function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRu
   // DECIDES the install's packs, so the marker on disk is still the previous build's.
   const [, managedHooks] = mergeClaudeSettings(
     settingsPath, oldSf === settingsName ? get(old, 'settings_hooks') : null, hookOpts,
-    doctrines, excludeRules, host, cfgDir, deletionGate,
+    doctrines, excludeRules, host, cfgDir, deletionGate, gates,
   );
   managed.settings_hooks = managedHooks;
 

package/js/build/generate.mjs

@@ -35,12 +35,12 @@ import { existsSync, mkdirSync, statSync } from 'node:fs';
 import path from 'node:path';
 
 import { main as driverMain } from './driver.mjs';
-import { makeCfg, PACK_ORDER } from './source.mjs';
+import { GATE_SWITCHES, makeCfg, PACK_ORDER } from './source.mjs';
 import { DEFAULT_PRESET } from '../loop/score.mjs';
 import { opencodeConfigDir, resolvePath } from '../hosts/hosts.mjs';
 import {
   EMIT_HOST_SCOPE, defaultMode, defaultPosture, defaultTheme, doctrinesForBuild,
-  deletionGateOfDir, excludedRulesOfDir, excludedSkillsOfDir, footprintOfDir, installState, installTargets,
+  excludedRulesOfDir, excludedSkillsOfDir, footprintOfDir, gatesOfDir, installState, installTargets,
   legacyProcessCarrierOfDir, modeOfDir, postureOfDir, readMaybe, themeOfDir, trustOfDir,
 } from '../hosts/installs.mjs';
 import { colorThemeFiles, colorThemeJson, PALETTE_ROLES } from '../hosts/opencode.mjs';
@@ -102,8 +102,9 @@ const BUILD_FORWARD = [
 export function cmdBuild(args) {
   const argv = [];
   for (const [key, flag] of BUILD_FORWARD) if (args[key] != null) argv.push(flag, args[key]);
-  // The one bare switch `build` forwards: it takes no value, so it is not a BUILD_FORWARD row.
-  if (args.noDeletionGate) argv.push('--no-deletion-gate');
+  // The bare switches `build` forwards (the gate switches): they take no value, so they are
+  // not BUILD_FORWARD rows.
+  for (const g of GATE_SWITCHES) if (args[g.arg]) argv.push(g.flag);
   return driverMain(argv);
 }
 
@@ -140,7 +141,8 @@ export function cmdBuild(args) {
  */
 export function setupBuildArgs(theme, emit, out = null, root = null, footprint = 'lean',
   posture = 'peer', mode = 'direct', doctrines = null, allPacks = PACK_ORDER,
-  excludeRules = null, trust = DEFAULT_PRESET, excludeSkills = null, deletionGate = true) {
+  excludeRules = null, trust = DEFAULT_PRESET, excludeSkills = null, deletionGate = true,
+  { secretsGate = true, doneGate = true } = {}) {
   const argv = ['--theme', theme, '--emit', emit];
   if (!emit.endsWith('-global')) {
     if (out) argv.push('--out', out);
@@ -168,9 +170,11 @@ export function setupBuildArgs(theme, emit, out = null, root = null, footprint =
   // feeds it), so the flag's absence and `none` are the same answer, and every argv that
   // excludes nothing stays the bytes it was before the flag existed.
   if (excludeSkills?.length) argv.push('--exclude-skills', excludeSkills.join(','));
-  // Law IV's gate elides when armed: the driver's default IS armed (no config key feeds it), so
-  // only an explicit `false` speaks, and every armed argv stays the bytes it was.
-  if (deletionGate === false) argv.push('--no-deletion-gate');
+  // The gate switches elide when armed: the driver's default IS armed (no config key feeds
+  // them), so only an explicit `false` speaks, and every armed argv stays the bytes it was.
+  // Law order, so a Law IV-only install still ends on `--no-deletion-gate` as it did.
+  const gates = { secretsGate, doneGate, deletionGate };
+  for (const g of GATE_SWITCHES) if (gates[g.key] === false) argv.push(g.flag);
   return argv;
 }
 
@@ -229,12 +233,12 @@ export function installProfile(host, scope, root, notify = null) {
   const excludeRules = excludedRulesOfDir(root, host);
   // Skills left out stay left out: an upgrade that forgot them would put them all back.
   const excludeSkills = excludedSkillsOfDir(root, host, notify);
-  // Law IV's gate switch: a rebuild that forgot it would silently re-arm (or, read wrong, disarm)
+  // The gate switches: a rebuild that forgot one would silently re-arm (or, read wrong, disarm)
   // the install. A missing marker reads as armed.
-  const deletionGate = deletionGateOfDir(root, host);
+  const gates = gatesOfDir(root, host);
   const out = scope === 'global' ? null : root;
   const argv = setupBuildArgs(theme, emit, out, out, footprint, posture, mode, doctrines,
-    PACK_ORDER, excludeRules, trust, excludeSkills, deletionGate);
+    PACK_ORDER, excludeRules, trust, excludeSkills, gates.deletionGate, gates);
   // A GLOBAL ROW NAMES ITS OWN DIR. `root` came from the host's config-dir resolver, which
   // honours env overrides (`OPENCODE_CONFIG_DIR`, `CLAUDE_CONFIG_DIR`…); without the flag the
   // same argv run from a shell lacking that variable re-emits into the DEFAULT dir — a second
@@ -243,7 +247,7 @@ export function installProfile(host, scope, root, notify = null) {
   return {
     host, scope, root, state: installState(root, host, scope),
     emit, theme, footprint, posture, mode, trust, doctrines, excludeRules, excludeSkills,
-    deletionGate, argv,
+    ...gates, argv,
   };
 }
 

package/js/build/render.mjs

@@ -34,7 +34,7 @@ import { readText } from '../lib/fs.mjs';
 import { parseJson } from '../lib/json.mjs';
 import { normcase, comparePaths } from '../lib/paths.mjs';
 // `js/build/source.mjs` imports nothing but node builtins, so this direction cannot cycle.
-import { PACK_ORDER, readPackText, resolveRuleIds, ruleCanon } from './source.mjs';
+import { GATE_SWITCHES, PACK_ORDER, readPackText, resolveRuleIds, ruleCanon } from './source.mjs';
 import { DEFAULT_PRESET } from '../loop/score.mjs';
 
 /** Document STRUCTURE is theme-INDEPENDENT — mirrors `_build_render.STRUCTURE`. */
@@ -444,10 +444,12 @@ export function effectiveTheme(cfg, themeName, { footprint = 'full', lawsPrefix
   const skipped = [...(cfg.excludeSkills ?? [])].sort();
   // It fills a template line of its own, so its value carries the blank line around it.
   theme.EXCLUDED_SKILLS_LINE = skipped.length ? `\nExcluded skills: ${skipped.join(', ')}\n` : '';
-  // Law IV's gate switch, under the same contract: written only when OFF, so a default build
-  // stays byte-identical and a missing line reads back as armed (`deletionGateOfDir`). The
-  // OpenCode guard plugin reads this line at load, so its wording is a parsed contract.
-  theme.DELETION_GATE_LINE = cfg.deletionGate === false ? '\nDeletion gate: off' : '';
+  // The gate switches (`GATE_SWITCHES`: Laws I, III, IV), under the same contract: a line is
+  // written only when its gate is OFF, so a default build stays byte-identical and a missing
+  // line reads back as armed (`gatesOfDir`). The OpenCode plugins read these lines at load, so
+  // their wording is a parsed contract.
+  theme.GATE_LINES = GATE_SWITCHES.filter((g) => cfg[g.key] === false)
+    .map((g) => `\n${g.marker}: off`).join('');
   return theme;
 }
 

package/js/build/source.mjs

@@ -399,7 +399,8 @@ export function resolveSkillNames(names, {
  */
 export function makeCfg({
   posture = 'peer', mode = 'direct', trust = DEFAULT_PRESET, doctrines = PACK_ORDER,
-  excludeRules = [], excludeSkills = [], noDeletionGate = false,
+  excludeRules = [], excludeSkills = [], noDeletionGate = false, noSecretsGate = false,
+  noDoneGate = false,
 } = {}) {
   return {
     root: ROOT,
@@ -430,5 +431,22 @@ export function makeCfg({
     // Law IV's deletion gate (`--no-deletion-gate`). Armed unless switched off in so many words:
     // only a literal `true` disarms, so every caller that never heard of the switch keeps it.
     deletionGate: noDeletionGate !== true,
+    // Law I's secret scan (`--no-secrets-gate`) and Law III's done gate (`--no-done-gate`), the
+    // same contract (user decision 2026-10-18; see GATE_SWITCHES).
+    secretsGate: noSecretsGate !== true,
+    doneGate: noDoneGate !== true,
   };
 }
+
+/**
+ * The laws whose hook gate an install can switch off, in law order: the cfg/profile key, the
+ * build flag, the carrier marker (`<marker>: off`, written only when off) and the law. ONE
+ * table, so the flag, the marker, the rebuild argv, the read-back and `status` cannot drift
+ * apart. Every gate is ARMED by default and the law's text binds either way. The deletion row
+ * is #319's, unchanged: existing installs carry its flag and marker.
+ */
+export const GATE_SWITCHES = [
+  { key: 'secretsGate', flag: '--no-secrets-gate', arg: 'noSecretsGate', marker: 'Secrets gate', law: 'I' },
+  { key: 'doneGate', flag: '--no-done-gate', arg: 'noDoneGate', marker: 'Done gate', law: 'III' },
+  { key: 'deletionGate', flag: '--no-deletion-gate', arg: 'noDeletionGate', marker: 'Deletion gate', law: 'IV' },
+];

package/js/cli-table.json

@@ -238,6 +238,36 @@
           "type": null,
           "hidden": false
         },
+        {
+          "names": [
+            "--no-secrets-gate"
+          ],
+          "dest": "no_secrets_gate",
+          "metavar": null,
+          "help": "switch Law I's secret scan off for this install: a credential-shaped write stops being refused (Sealed Secrets' text still binds); written to the carrier as 'Secrets gate: off' and replayed by rebuilds",
+          "choices": null,
+          "default": false,
+          "required": false,
+          "nargs": "0",
+          "is_flag": true,
+          "type": null,
+          "hidden": false
+        },
+        {
+          "names": [
+            "--no-done-gate"
+          ],
+          "dest": "no_done_gate",
+          "metavar": null,
+          "help": "switch Law III's done gate off for this install: a turn may end with the project's declared checks unproven (Verify Before Asserting's text still binds); written to the carrier as 'Done gate: off' and replayed by rebuilds",
+          "choices": null,
+          "default": false,
+          "required": false,
+          "nargs": "0",
+          "is_flag": true,
+          "type": null,
+          "hidden": false
+        },
         {
           "names": [
             "--no-deletion-gate"
@@ -672,6 +702,21 @@
           "is_flag": true,
           "type": null,
           "hidden": false
+        },
+        {
+          "names": [
+            "--no-done-gate"
+          ],
+          "dest": "no_done_gate",
+          "metavar": null,
+          "help": "skip the done gate on Stop (set by the emit when the install was built --no-done-gate); learning still runs",
+          "choices": null,
+          "default": false,
+          "required": false,
+          "nargs": "0",
+          "is_flag": true,
+          "type": null,
+          "hidden": false
         }
       ],
       "mutex": []
@@ -1150,6 +1195,21 @@
           "is_flag": false,
           "type": null,
           "hidden": false
+        },
+        {
+          "names": [
+            "--no-secrets-gate"
+          ],
+          "dest": "no_secrets_gate",
+          "metavar": null,
+          "help": "skip the Sealed Secrets credential scan (set by the emit when the install was built --no-secrets-gate); the protected checks and the persist check still run",
+          "choices": null,
+          "default": false,
+          "required": false,
+          "nargs": "0",
+          "is_flag": true,
+          "type": null,
+          "hidden": false
         }
       ],
       "mutex": []
@@ -1427,6 +1487,21 @@
           "is_flag": true,
           "type": null,
           "hidden": false
+        },
+        {
+          "names": [
+            "--no-secrets-gate"
+          ],
+          "dest": "no_secrets_gate",
+          "metavar": null,
+          "help": "skip the Sealed Secrets credential scan (set by the emit when the install was built --no-secrets-gate); the deletion, root-scan and protected checks still refuse",
+          "choices": null,
+          "default": false,
+          "required": false,
+          "nargs": "0",
+          "is_flag": true,
+          "type": null,
+          "hidden": false
         }
       ],
       "mutex": []

package/js/hosts/hooks-done.mjs

@@ -10,6 +10,10 @@
  * last-writer-wins: an older `geneseed-hook` would refuse a new verb or flag, and the Stop
  * command's `|| exit 0` would then skip learning too, silently. Arming on a project FILE keeps
  * every emitted settings file byte-identical, so a stale shim only means "no done gate".
+ * The ONE flag is the off switch, `--no-done-gate` (user decision 2026-10-18): it is emitted
+ * only on an install built with the gate off, so armed settings stay byte-identical — but on
+ * such an install a stale shim refuses the flag and that install loses LEARNING too, not just a
+ * gate it already switched off. Hence "run rebuild-all before switching it off" (exclusions.md).
  *
  * WHY STDOUT JSON AND NOT EXIT 2. The emitted Stop command ends in `|| exit 0`, which swallows
  * a 2. `{"decision":"block"}` on exit 0 is the one signal that survives the existing wiring.

package/js/hosts/hooks-learn.mjs

@@ -312,7 +312,9 @@ export function cmdLearn(args) {
 
   // The done gate (#289) judges the turn BEFORE anything here spawns, and only on Stop. A block
   // means the turn goes on, so there is nothing to distil yet: the next Stop will.
-  if (hookEvent === 'Stop' && !args.file && doneGate(meta, args, install)) return 0;
+  // `--no-done-gate` (the install switched Law III's gate off) skips the check, never the
+  // distillation below.
+  if (hookEvent === 'Stop' && !args.file && !args.noDoneGate && doneGate(meta, args, install)) return 0;
 
   // I2 (Bob): its Stop payload never carries `transcript_path`, so there is never a transcript
   // to distil — and the bare envelope itself is not notes text (that would waste a model call

package/js/hosts/hooks.mjs

@@ -58,7 +58,7 @@ import {
   GATE_LEDGER, globalHookStandingDown, hookProjectDir, resolvePath, sovereignBypass,
 } from './hosts.mjs';
 import { currentBranch, gitRootOf, loopLaunched } from './gitref.mjs';
-import { LOSS_CANDIDATE_RE, lossReason } from './loss.mjs';
+import { LOSS_CANDIDATE_RE, lossReason, stripStructure } from './loss.mjs';
 import { selfAndParents, readStdin } from './hooks-prims.mjs';
 import { recordUse } from './usage.mjs';
 
@@ -349,13 +349,14 @@ const SCAN_WORD_RE = /\b(?:find|du|tree|rg|fd|where\.exe|grep|egrep|ls|dir|get-c
 const SCAN_TOKEN_RE = /(?:[^\s"']+|"[^"]*"?|'[^']*'?)+/g;
 const SCAN_WRAPPERS = new Set(['sudo', 'command', '\\builtin', 'time', 'nice']);
 // One left-to-right pass: a comment (`#` starting a word, to the end of the line — an apostrophe
-// in it is no quote), a quoted run (kept whole, so its `;`/`|` is data), a separator, or a
+// in it is no quote), a quoted run (kept whole, so its `;`/`|` is data), a separator (a lone `&`
+// backgrounds a command and runs the next, but `2>&1`, `<&3`, `&>` and `|&` are not one), or a
 // heredoc opener (`<<TAG`, `<<-TAG`, `<< 'TAG'`, `<<"TAG"` — never the here-string `<<<`).
 // Every alternative consumes at least one character, and none can backtrack past its start.
-const SCAN_SPLIT_RE = /(?<![^\s;|&(])#[^\n]*|"[^"]*"?|'[^']*'?|\|\||&&|[|;\n]|(?<!<)<<(?!<)(-?)[ \t]*(["']?)([A-Za-z_]\w*)\2/g;
+const SCAN_SPLIT_RE = /(?<![^\s;|&(])#[^\n]*|"[^"]*"?|'[^']*'?|\|\||&&|[|;\n]|(?<![&<>|])&(?![&>])|(?<!<)<<(?!<)(-?)[ \t]*(["']?)([A-Za-z_]\w*)\2/g;
 
 /**
- * The command cut at `|`/`;`/`&&`/`||`/newline OUTSIDE quotes, with every heredoc body (the
+ * The command cut at `|`/`;`/`&`/`&&`/`||`/newline OUTSIDE quotes, with every heredoc body (the
  * lines after `<<TAG` up to the `TAG` line; `<<-` lets it be tab-indented) dropped: both are data.
  * Without this, `git commit -F - <<'EOF'` — the mandated multi-line commit form — or a quoted
  * `-m "fix; find / loop"` whose text merely names a root scan reads as one, which on Bob and
@@ -401,7 +402,8 @@ export function rootScan(command) {
   if (!SCAN_WORD_RE.test(command)) return null;
   for (const seg of scanSegments(command)) {
     // Tokens keep their quotes until the root test, so a quoted `"a:"` can be told from a bare `C:`.
-    let toks = (seg.match(SCAN_TOKEN_RE) || []).filter((t) => !/^\w+=/.test(t));
+    // `(find / …)`, `then find / …`: the grammar around the command is not its program.
+    let toks = stripStructure(seg.match(SCAN_TOKEN_RE) || []).filter((t) => !/^\w+=/.test(t));
     while (toks.length && SCAN_WRAPPERS.has(unquote(toks[0]))) toks = toks.slice(1);
     if (!toks.length) continue;
     // The program word without its path (either slash) or an `.exe` suffix: `C:\tools\rg.exe`.
@@ -427,6 +429,8 @@ export function rootScan(command) {
   return null;
 }
 const unquote = (t) => t.replace(/^["']+|["']+$/g, '');
+// The segments `lossReason` reads: raw tokens, quotes still on — also how it cuts a `$(…)` body.
+const lossSegments = (s) => scanSegments(s).map((seg) => seg.match(SCAN_TOKEN_RE) || []);
 // A QUOTED token is data — a grep pattern (`grep -rn "/" src`), a path named in a search
 // (`rg "/mnt/c" README.md`) — never a root target; only an unquoted root is one.
 const rootArg = (t) => !/^["']/.test(t) && FS_ROOT_RE.test(t);
@@ -439,8 +443,8 @@ function gitDecide(args, payload) {
   if (!args.noDeletionGate && LOSS_CANDIDATE_RE.test(command)) {
     // A pass here FALLS THROUGH: a force push to a feature branch loses nothing, but it is still
     // a push, and process 5 below still asks for it.
-    const loss = lossReason(scanSegments(command).map((seg) => seg.match(SCAN_TOKEN_RE) || []),
-      (payload && payload.cwd) || process.cwd());
+    const loss = lossReason(lossSegments(command), (payload && payload.cwd) || process.cwd(),
+      { split: lossSegments });
     if (loss) {
       return ask(args, 'git-gate', 'law-4', `Geneseed (Deletion Is Deliberate) \u2014 ${loss}. `
         + 'Confirm this specific command, or leave the data in place.');
@@ -569,7 +573,9 @@ function ruleDecide(args, payload) {
   const edits = Array.isArray(ti.edits) ? ti.edits.map((e) => e && e.new_string) : [];
   const body = [ti.content, ti.new_string, ti.new_source, diffReplaced(ti.diff), ti.replace, ...edits]
     .filter((v) => typeof v === 'string').join('\n');
-  if (body && !DOTENV_RE.test(p) && SECRET_RE.test(body)) {
+  // `--no-secrets-gate`: the install switched Law I's scan off (user decision 2026-10-18). Only
+  // this check stands down; the protected checks and process 1 below still run.
+  if (!args.noSecretsGate && body && !DOTENV_RE.test(p) && SECRET_RE.test(body)) {
     return ask(args, 'rule-gate', 'law-1', `Geneseed (Sealed Secrets) — ${p} would carry a `
       + 'credential-shaped string. Secrets live in .env or a secret manager, never in a '
       + 'tracked file.');

package/js/hosts/installs.mjs

@@ -35,7 +35,9 @@
 import { existsSync, readdirSync } from 'node:fs';
 import path from 'node:path';
 
-import { CONFIG, PACK_ORDER, THEMES, discoverNames, resolveSkillNames } from '../build/source.mjs';
+import {
+  CONFIG, GATE_SWITCHES, PACK_ORDER, THEMES, discoverNames, resolveSkillNames,
+} from '../build/source.mjs';
 import {
   CLAUDE_STYLE, DISABLED_STASH, GLOBAL_MANIFEST, HOSTS, isHostGlobalDir, liveRecordedHooks,
   resolvePath,
@@ -583,26 +585,33 @@ export function excludedSkillsOfDir(d, host = null, notify = null) {
   }, [], host);
 }
 
-/** `Deletion gate: off` — written only when Law IV's gate was switched off. */
-const DELETION_GATE_RE = /^Deletion gate:[ \t]*(.+?)[ \t]*$/m;
-
 /**
- * Whether a DEPLOYED install keeps Law IV's deletion gate armed — `true` (armed) or `false`
- * (built `--no-deletion-gate`). Read back so `upgrade`, `rebuild-all`, `diff` and the console
- * re-render the same switch. FAILS CLOSED: a missing line, a missing carrier, or any value but
- * exactly `off` reads as armed, because the line is only ever written when the gate is off and
- * a gate is the thing a misread must never take away.
+ * Whether a DEPLOYED install keeps one law's hook gate armed — `true` (armed) or `false` (its
+ * `<marker>: off` line, written by a build with that gate's `--no-*-gate` flag; `GATE_SWITCHES`).
+ * Read back so `upgrade`, `rebuild-all`, `diff` and the console re-render the same switch.
+ * FAILS CLOSED: a missing line, a missing carrier, or any value but exactly `off` reads as
+ * armed, because the line is only ever written when the gate is off and a gate is the thing a
+ * misread must never take away.
  */
-export function deletionGateOfDir(d, host = null) {
+function gateOfDir(d, marker, host = null) {
+  const re = new RegExp(`^${marker}:[ \\t]*(.+?)[ \\t]*$`, 'm');
   return firstCarrier(d, (carrierPath) => {
     const text = readMaybe(carrierPath);
     if (text === null) return undefined;
-    const m = DELETION_GATE_RE.exec(text);
+    const m = re.exec(text);
     if (!m) return undefined;
     return m[1] !== 'off';
   }, true, host);
 }
 
+/** Every switchable gate of a deployed install, keyed as `makeCfg` and `installProfile` key them. */
+export function gatesOfDir(d, host = null) {
+  return Object.fromEntries(GATE_SWITCHES.map((g) => [g.key, gateOfDir(d, g.marker, host)]));
+}
+
+/** Law IV's switch alone (#319's reader, kept for its callers). */
+export const deletionGateOfDir = (d, host = null) => gateOfDir(d, 'Deletion gate', host);
+
 // ---- what host a deployed dir belongs to (`_harness_mcp`) ---------------------------------
 
 /** `_harness_mcp._claude_read_manifest`. */