geneseed 4.9.0 → 4.9.2

package/js/inspect/doctor.mjs

@@ -25,9 +25,10 @@
  * that this tool never shells back to the generator — is asserted directly instead.
  *
  * WHAT `doctorCollect` DOES NOT REACH, MEASURED RATHER THAN ASSUMED. It takes `groups` and
- * `cmdDoctor` does not pass it: that parameter is the WEB's, and `apiDoctor` in
- * `js/web/api.mjs` is its only caller. `ran` exists for it — four lines of accumulator that
- * keep the Doctor page's per-check cards a parameter rather than a rewrite.
+ * `cmdDoctor` does not pass it: that parameter is the WEB's, and `runDoctor` in
+ * `js/web/state.mjs` (the cache `apiDoctor` serves) is its only caller. `ran` exists for it —
+ * four lines of accumulator that keep the Doctor page's per-check cards a parameter rather
+ * than a rewrite.
  */
 import path from 'node:path';
 import { emitGlobalInto, emitProjectInto, main as driverMain } from '../build/driver.mjs';

package/js/inspect/validate.mjs

@@ -130,8 +130,8 @@ export function cmdValidate(args) {
     const opts = {
       theme: args.theme, footprint: args.footprint, posture: args.posture, mode: args.mode,
       trust: args.trust, doctrines: args.doctrines, excludeRules: args.excludeRules,
-      excludeSkills: args.excludeSkills, deletionGate: args.noDeletionGate ? false : null,
-      secretsGate: args.noSecretsGate ? false : null, doneGate: args.noDoneGate ? false : null,
+      excludeSkills: args.excludeSkills,
+      ...Object.fromEntries(GATE_SWITCHES.map((g) => [g.key, args[g.arg] ? false : null])),
     };
     let scanDirs;
     try {

package/js/lib/fs.mjs

@@ -29,8 +29,32 @@
  */
 import {
   appendFileSync, writeFileSync, readFileSync, copyFileSync, statSync, utimesSync,
+  openSync, fstatSync, readSync, closeSync,
 } from 'node:fs';
 import { EOL } from 'node:os';
+import { resolve } from 'node:path';
+
+/**
+ * What `writeText` wrote while an emit has armed this (`withWriteRecord` below, around the
+ * three manifest-writing emits in `js/build/driver.mjs`): resolved path ->
+ * `{ text, size, mtimeMs }`, the translated text and a stat taken right after the write.
+ * `ownedHashes` (`js/hosts/owned.mjs`) hashes that text instead of reading the file back —
+ * the read-back was ~25% of `doctor --all` — and only while the file's size and mtime still
+ * match, so a later rewrite by any writer that does not record (a raw `writeFileSync`, a
+ * rename) falls back to the read. `copyFile` and `appendText` drop the entry outright.
+ * `null`, the default, records nothing: no other caller pays the stat or retains the text.
+ */
+export const textWrites = { map: null };
+
+/**
+ * Run one emit with `textWrites` armed, and disarm it on EVERY exit: an emit that throws inside
+ * a long-lived process (the web daemon emits in-process) would otherwise leave every later
+ * `writeText` paying a stat and keeping its text in memory.
+ */
+export function withWriteRecord(fn) {
+  textWrites.map = new Map();
+  try { return fn(); } finally { textWrites.map = null; }
+}
 /**
  * `Path.write_text(text, encoding="utf-8")`.
  *
@@ -49,7 +73,12 @@ import { EOL } from 'node:os';
  * The same vendored skill folder can contain files from both categories.
  */
 export function writeText(path, text) {
-  writeFileSync(path, EOL === '\n' ? text : text.replaceAll('\n', EOL), 'utf8');
+  const out = EOL === '\n' ? text : text.replaceAll('\n', EOL);
+  writeFileSync(path, out, 'utf8');
+  if (textWrites.map) {
+    const st = statSync(path);
+    textWrites.map.set(resolve(path), { text: out, size: st.size, mtimeMs: st.mtimeMs });
+  }
 }
 
 /**
@@ -62,6 +91,7 @@ export function writeText(path, text) {
  * invisible in an editor and a whole-file difference to the gate.
  */
 export function appendText(path, text) {
+  textWrites.map?.delete(resolve(path));
   appendFileSync(path, EOL === '\n' ? text : text.replaceAll('\n', EOL), 'utf8');
 }
 
@@ -79,6 +109,46 @@ export function readText(path) {
   return readFileSync(path, 'utf8').replaceAll('\r\n', '\n').replaceAll('\r', '\n');
 }
 
+/**
+ * The last `bytes` of a file, decoded as `readText` decodes it, and the byte offset the window
+ * began at (0: the whole file). A window that starts mid-line drops that partial line, cut at a
+ * newline BYTE before decoding — so a multibyte character the window split falls in the dropped
+ * part, and a `\r\n` split between its two bytes leaves only an empty line. One byte before the
+ * window is read too, so a window that starts exactly on a line keeps it. Throws as
+ * `readFileSync` does (missing, unreadable, a directory).
+ */
+export function readTail(path, bytes) {
+  const fd = openSync(path, 'r');
+  try {
+    const st = fstatSync(fd);
+    // Windows opens a directory without complaint and reports size 0: refuse it as readFileSync does.
+    if (st.isDirectory()) {
+      throw Object.assign(new Error(`EISDIR: illegal operation on a directory, read '${path}'`),
+        { code: 'EISDIR' });
+    }
+    const size = st.size;
+    const start = Math.max(0, size - bytes);
+    const from = start > 0 ? start - 1 : 0;
+    const buf = Buffer.alloc(size - from);
+    let got = 0;
+    while (got < buf.length) {
+      const n = readSync(fd, buf, got, buf.length - got, from + got);
+      if (!n) break;
+      got += n;
+    }
+    let cut = 0;
+    if (start > 0) {
+      const read = buf.subarray(0, got);
+      const ends = [read.indexOf(0x0a), read.indexOf(0x0d)].filter((i) => i !== -1);
+      cut = ends.length ? Math.min(...ends) + 1 : got;   // no line end: nothing whole to decode
+    }
+    const text = buf.toString('utf8', cut, got).replaceAll('\r\n', '\n').replaceAll('\r', '\n');
+    return { text, start };
+  } finally {
+    closeSync(fd);
+  }
+}
+
 /**
  * `shutil.copy2(src, dest)`.
  *
@@ -94,6 +164,7 @@ export function readText(path) {
  * mode the Python side has and nothing depends on. Mode is not copied here.
  */
 export function copyFile(src, dest) {
+  textWrites.map?.delete(resolve(dest));
   copyFileSync(src, dest);
   const st = statSync(src);
   utimesSync(dest, st.atime, st.mtime);
@@ -216,7 +287,7 @@ export function withPlatformNewlines(fn) {
  */
 const NOT_THERE = new Set(['ENOENT', 'ENOTDIR', 'ELOOP', 'EBADF']);
 
-function statOrNull(p) {
+export function statOrNull(p) {
   try {
     return statSync(p);
   } catch (e) {

package/js/maintain/setup.mjs

@@ -46,13 +46,13 @@ import path from 'node:path';
 
 import { main as driverMain, resolveOut } from '../build/driver.mjs';
 import { playLine } from '../ui/anim.mjs';
-import { discoverNames, PACK_ORDER } from '../build/source.mjs';
+import { discoverNames, GATE_SWITCHES, PACK_ORDER } from '../build/source.mjs';
 import { exportImprovements } from '../inspect/diff.mjs';
 import { cmdDoctor } from '../inspect/doctor.mjs';
 import { setupBuildArgs } from '../build/generate.mjs';
 import { GLOBAL_MANIFEST, HOSTS, opencodeConfigDir } from '../hosts/hosts.mjs';
 import {
-  claudeCfg, defaultMode, defaultPosture, defaultTheme, EMIT_HOST_SCOPE, installedDefaults,
+  claudeCfg, defaultMode, defaultPosture, defaultTheme, EMIT_HOST_SCOPE, gatesOfDir, installedDefaults,
   readJsonMaybe, themeFiles,
 } from '../hosts/installs.mjs';
 import { printOut, printErr } from '../lib/fs.mjs';
@@ -242,6 +242,24 @@ function askDoctrines(deployed = null) {
  * whole, `null` included, because `askDoctrines` distinguishes "no carrier said" from "a
  * carrier said none" and the two open the question differently.
  */
+/**
+ * The gate switches of the one install a setup answer re-runs: the chosen emit's global config
+ * dir, or the project/bundle root it names. Never another host's install — carrying its `off`
+ * across would disarm a gate nobody switched off here. FAILS CLOSED: no install there, or a dir
+ * that cannot be resolved, reads as all armed (`gatesOfDir` already fails closed per line).
+ */
+function targetGates(emit, out) {
+  const [host, scope] = EMIT_HOST_SCOPE.get(emit) ?? [];
+  try {
+    if (!host) return gatesOfDir(resolveOut(out || 'Harness'));
+    const dir = scope === 'global'
+      ? HOSTS.find((h) => h.host === host).configDir() : resolveOut(out || '.');
+    return gatesOfDir(dir, host);
+  } catch {
+    return Object.fromEntries(GATE_SWITCHES.map((g) => [g.key, true]));
+  }
+}
+
 export function collectSetupLines() {
   printOut('Geneseed setup — answer a few questions; nothing is written until you confirm.\n');
   const inst = installedDefaults();
@@ -279,14 +297,20 @@ export function collectSetupLines() {
   const excludeRules = inst.excludeRules?.length ? inst.excludeRules : null;
   // Skills left out are preserved the same way, and elide when there are none.
   const excludeSkills = inst.excludeSkills?.length ? inst.excludeSkills : null;
+  // The gate switches too: a re-run that dropped them would re-arm every gate its owner switched
+  // off. Read off the install THIS answer targets, never the machine walk above (`targetGates`).
+  // `setupBuildArgs` elides an armed gate, so an all-armed install prints what it always did.
+  const gates = targetGates(emit, out);
+  const gated = Object.values(gates).some((on) => on === false);
   printOut(`\nAbout to run:  geneseed build ${
     setupBuildArgs(theme, emit, out, root, footprint, posture, mode, doctrines, allPacks,
-      excludeRules, undefined, excludeSkills).join(' ')}\n`);
+      excludeRules, undefined, excludeSkills, gates).join(' ')}\n`);
   if (!confirm('Proceed?', true)) return null;
-  // The key only when there is something to carry, so a selection that excludes no skill is
-  // the same object it was before the flag existed.
+  // The key only when there is something to carry, so a selection that excludes no skill and
+  // switches off no gate is the same object it was before either existed.
   return {
     theme, posture, mode, doctrines, excludeRules, ...(excludeSkills ? { excludeSkills } : {}),
+    ...(gated ? { gates } : {}),
     emit, out, root, footprint,
   };
 }
@@ -470,7 +494,7 @@ export function setupLines() {
   }
   const {
     theme, emit, out, root, footprint = 'lean', posture = 'peer', mode = 'direct',
-    doctrines = null, excludeRules = null, excludeSkills = null,
+    doctrines = null, excludeRules = null, excludeSkills = null, gates = {},
   } = sel;
   if (emit === 'opencode-global') {
     // The build below overwrites the deployed global harness, and the self-improvement loops
@@ -489,7 +513,7 @@ export function setupLines() {
   // runs must carry the pack selection the plan line just previewed, or the wizard would print
   // one command and run another.
   const argv = setupBuildArgs(theme, emit, out, root, footprint, posture, mode, doctrines,
-    doctrineOptions().map(([n]) => n), excludeRules, undefined, excludeSkills);
+    doctrineOptions().map(([n]) => n), excludeRules, undefined, excludeSkills, gates);
   printOut(`Running:  geneseed build ${argv.join(' ')}\n`);
   const rc = driverMain(argv);
   if (rc !== 0) {

package/js/maintain/uninstall.mjs

@@ -1179,7 +1179,7 @@ function remergeClaudeHooks(cfg, root = cfg, host = 'claude') {
   const gates = Object.fromEntries(Object.keys(atRoot).map((k) => [k, atRoot[k] && atCfg[k]]));
   const [, claims] = mergeClaudeSettings(settingsFile(cfg, managed),
     managed.settings_hooks ?? null, hookRunnerEntry(), doctrines, excluded, host, cfg,
-    gates.deletionGate, gates);
+    gates);
   // `and data` — a manifest that did not parse is not one to write back.
   if (!deepEquals(claims, managed.settings_hooks ?? null) && Object.keys(data).length > 0) {
     managed.settings_hooks = claims;

package/js/maintain/update.mjs

@@ -632,7 +632,7 @@ export async function installAxes(dir, { installProfile, setupBuildArgs }, notif
   if (legacyProcessCarrierOfDir(String(dir), 'opencode')) return null;
   const p = installProfile('opencode', 'global', String(dir), notify);
   return setupBuildArgs('', 'files', null, null, p.footprint, p.posture, p.mode, p.doctrines,
-    undefined, p.excludeRules, p.trust, p.excludeSkills, p.deletionGate, p).slice(4);
+    undefined, p.excludeRules, p.trust, p.excludeSkills, p).slice(4);
 }
 
 /**

package/js/web/actions.mjs

@@ -38,7 +38,7 @@ import {
 } from '../build/source.mjs';
 import { withStdoutSwallowed } from '../inspect/diff.mjs';
 import { excludeAdd, excludeRemove } from '../inspect/excludes.mjs';
-import { setupBuildArgs } from '../build/generate.mjs';
+import { installProfile, setupBuildArgs } from '../build/generate.mjs';
 import { DEFAULT_PRESET, PRESETS } from '../loop/score.mjs';
 import { activeLoops, setLoopPreset } from '../loop/registry.mjs';
 import {
@@ -61,6 +61,7 @@ import { stripWhitespace } from '../lib/text.mjs';
 import { memoryDelete } from '../maintain/memory.mjs';
 import { installDeactivate, installReactivate, installUninstall } from '../maintain/uninstall.mjs';
 import { emitChoices, themeChoices, viewCfg } from './api.mjs';
+import { actionCommands } from './jobs.mjs';
 import { NotFound, deployed, memoryDir } from './catalog.mjs';
 
 /** One body field, `dflt` when the body is not an object or does not carry the key. */
@@ -307,7 +308,8 @@ export function apiMemoryDelete(state, name) {
   // CASE-FOLDED: this endpoint's own compared `MEMORY` exactly, so on Windows and macOS `memory`
   // resolved to MEMORY.md, passed, and deleted the index the agent reads at session start.
   if (memoryDelete(d, name) === null) throw new NotFound(name);
-  state.refresh();
+  // The doctor reads nothing in the memory store, so its cached verdict survives (`refresh`).
+  state.refresh({ doctor: false });
   return { archived: name };
 }
 
@@ -438,6 +440,38 @@ export function buildOverride(state, body) {
   return [themes.has(t) ? t : state.theme, emits.has(e) ? e : state.emit];
 }
 
+/**
+ * The job steps for a Build POST.
+ *
+ * A DEPLOYED INSTALL REBUILT IN ITS OWN EMIT TAKES THE ARGV ITS PROFILE OWNS (`installProfile`,
+ * the one reader `rebuild-all`, `status` and `upgrade` share), with only the theme the picker
+ * chose swapped in. This path used to re-assemble the axes it happened to carry — no gate
+ * switches, `--exclude-rules none`, no excluded skills — so a console Build silently re-armed
+ * every switched-off gate and handed back every rule and skill its owner had left out.
+ *
+ * Nothing deployed (the first-deploy Onboarding form) or a re-target to another emit has no
+ * install of that emit to honour — a re-target is a FRESH target, by decision (2026-10-18), so it
+ * deliberately carries none of this install's switches or exclusions — and keeps the defaults it
+ * always had: footprint, posture
+ * and mode off the viewed dir, and ALL packs when unknown — never `harness.config.json`, which
+ * would drop the consent gate.
+ */
+export function buildActionCmds(state, body) {
+  const [theme, emit] = buildOverride(state, body);
+  const [host, scope] = EMIT_HOST_SCOPE.get(state.emit || '') ?? [];
+  if (host && deployed(state) && emit === state.emit) {
+    // `setupBuildArgs` always leads with `--theme <theme>`, so the swap is the head alone.
+    // `state.root`, not `target`: a project install's markers live at the repo root.
+    const [, , ...rest] = installProfile(host, scope, state.root).argv;
+    return actionCommands('build', { buildArgv: ['--theme', theme, ...rest] });
+  }
+  return actionCommands('build', {
+    theme, emit, footprint: state.footprint, posture: state.posture, mode: state.mode,
+    trust: state.trust,
+    doctrines: doctrinesForBuild(state.target),
+  });
+}
+
 /**
  * The global emit matching a deployed install's `.geneseed-emit`, so the EXPECTED render
  * uses the install's own host dialect.
@@ -594,7 +628,7 @@ export function apiInstallCmd(state, body) {
   const gates = bodyGates(body, root, host);
   const out = scope === 'global' ? null : String(root);
   const argv = setupBuildArgs(theme || 'neutral', emit, out, out, fp, pos, mode, doctrines,
-    PACK_ORDER, excludeRules, trust, excludedSkillsOfDir(root, host), gates.deletionGate, gates);
+    PACK_ORDER, excludeRules, trust, excludedSkillsOfDir(root, host), gates);
   return { cmd: [process.execPath, path.join(ROOT, 'bin', 'build-driver.mjs'), ...argv] };
 }
 
@@ -696,6 +730,6 @@ export function apiDeployCmd(state, body) {
   const gates = bodyGates(body, root, host);
   // project-scope emit name == host name (opencode / claude / bob / openclaude)
   const argv = setupBuildArgs(theme || 'neutral', host, root, root, fp, pos, mode, doctrines,
-    PACK_ORDER, excludeRules, trust, excludedSkillsOfDir(root, host), gates.deletionGate, gates);
+    PACK_ORDER, excludeRules, trust, excludedSkillsOfDir(root, host), gates);
   return { cmd: [process.execPath, path.join(ROOT, 'bin', 'build-driver.mjs'), ...argv] };
 }

package/js/web/api.mjs

@@ -15,8 +15,7 @@ import { CONFIG, ROOT, THEMES, discoverNames, makeCfg } from '../build/source.mj
 import { readVersion, sourceFingerprint } from '../build/version.mjs';
 import { sourceReleaseVersion } from '../hosts/opencode.mjs';
 import { alwaysOnCost } from '../inspect/cost.mjs';
-import { diffCollect } from '../inspect/diff.mjs';
-import { doctorCollect } from '../inspect/doctor.mjs';
+import { diffCollect, renderMemo } from '../inspect/diff.mjs';
 import { excludesSnapshot } from '../inspect/excludes.mjs';
 import { CLAUDE_STYLE, HOSTS, VERSION_MARKER, resolvePath } from '../hosts/hosts.mjs';
 import {
@@ -79,13 +78,15 @@ export function apiSetup(state) {
   };
 }
 
-/** The same engine as the `doctor` verb, grouped per check. */
-export function apiDoctor(state) {
-  const groups = [];
-  const [themes, problems] = doctorCollect({ theme: state.theme, groups });
-  state.stampDoctor(problems);
-  return { themes, ok: !problems.length, problems, groups,
-    checked_at: state.doctor.checked_at };
+/**
+ * The same engine as the `doctor` verb, grouped per check — served from the state's cached run
+ * (a lens visit or a page mount no longer pays ~3.6 s), and re-run only when `fresh` is asked
+ * for: the Doctor page's Re-run button, as `GET /api/doctor?fresh=1`.
+ */
+export function apiDoctor(state, fresh = false) {
+  if (fresh) state.runDoctor();
+  const { ok, problems, checked_at } = state.doctor;
+  return { ...state._doctorRun, ok, problems, checked_at };
 }
 
 /**
@@ -129,6 +130,12 @@ export function* activeInstalls(targets) {
   }
 }
 
+/**
+ * The state's memo of `expected` renders, made on first use: overview and fleet diff the same
+ * install on every refresh, and only the compare has to run again (see `renderMemo`).
+ */
+const memoOf = (state) => (state.renderMemo ??= renderMemo());
+
 /** The edited/added/missing tally of a `diffCollect` file list. */
 const driftCounts = (files) => ({
   edited: files.filter((f) => f.status === 'edited').length,
@@ -178,8 +185,9 @@ export function apiInstalls(state) {
  *
  * Its own route, not more fields on `/api/installs`: the sidebar refetches that list on every
  * data revision, and the drift check below re-renders a whole emit per global install.
- * ponytail: one `diffCollect` render per global install per request, fine for the handful a
- * machine carries; cache per (root, build mtime) if a fleet ever grows past that.
+ * Each global install's `expected` render is memoised on the state (`renderMemo`, keyed on the
+ * source fingerprint computed once per request and every axis), so a refresh re-runs only the
+ * compare; the memo holds a handful of installs, enough for any machine seen so far.
  *
  * Each row reads ITS OWN `.geneseed-version`. `statusData().installed_fp` is the first carrier
  * a fixed walk finds, which describes the wrong install as soon as two hosts are deployed.
@@ -196,7 +204,7 @@ export function apiFleet(state) {
     let drift = null;
     if (st === 'active') {
       try {
-        const { files } = diffCollect({ target: dir });
+        const { files } = diffCollect({ target: dir, memo: memoOf(state), sourceFp });
         if (files !== null) drift = driftCounts(files);
       } catch { /* an install that cannot be re-rendered reports no drift figure, not zero */ }
     }
@@ -225,7 +233,7 @@ export function apiOverview(state) {
   let diff = null;
   if (deployed(state)) {
     const { files } = diffCollect({
-      target: state.target, theme: state.theme, emit: state.emit });
+      target: state.target, theme: state.theme, emit: state.emit, memo: memoOf(state) });
     if (files !== null) diff = driftCounts(files);
   }
   let buildTime = null;

package/js/web/handler.mjs

@@ -11,11 +11,10 @@
  * declared next door in `routes.mjs`; the daemon that starts it is in `daemon.mjs`.
  */
 import { resolvePath } from '../hosts/hosts.mjs';
-import { doctrinesForBuild } from '../hosts/installs.mjs';
 import { isTruthy, jsonDumpsCompact } from '../lib/json.mjs';
 import { parseIntStrict, percentDecode } from '../lib/text.mjs';
 import { preflight } from '../maintain/update.mjs';
-import { apiDeployCmd, apiInstallCmd, apiPickFolder, apiRestore, buildOverride, mcpTargetPaths } from './actions.mjs';
+import { apiDeployCmd, apiInstallCmd, apiPickFolder, apiRestore, buildActionCmds, mcpTargetPaths } from './actions.mjs';
 import { NotFound } from './catalog.mjs';
 import { openUrl, requestRestart } from './daemon.mjs';
 import { apiDocs, apiDocsPage } from './docs.mjs';
@@ -130,7 +129,7 @@ export function makeHandler(state, jm, token, dist, holder = null) {
 
   function doGet(req, res, path, ae) {
     const route = STATE_ROUTES[path];
-    if (route !== undefined) return sendJson(res, route(state), 200, ae);
+    if (route !== undefined) return sendJson(res, route(state, req.url), 200, ae);
     // `pid` is what a restarting client waits on: the OLD server keeps answering this ping for
     // a moment after `/api/restart` returns, and a reload onto it fetches the old token.
     if (path === '/api/ping') {
@@ -301,20 +300,9 @@ export function makeHandler(state, jm, token, dist, holder = null) {
       if (jid === null) return sendJson(res, { error: 'busy' }, 409, ae);
       return sendJson(res, { job_id: jid }, 202, ae);
     }
-    // Build can be re-themed/re-targeted from the UI picker; the other actions self-resolve
-    // the deployed theme downstream. Footprint, posture and mode always follow the current
-    // install, so a re-theme preserves lean/full, the register and the operating mode.
-    const [theme, emit] = action === 'build'
-      ? buildOverride(state, body) : [state.theme, state.emit];
-    // The pack selection follows the install like footprint/posture/mode, and is read here
-    // rather than left to the table's default: a console Build must re-emit the constitution
-    // the deployment already carries. Unknown (no `Active packs:` marker) resolves to ALL
-    // packs — never to `harness.config.json`, which would drop the consent gate.
-    const cmds = actionCommands(action, {
-      theme, emit, footprint: state.footprint, posture: state.posture, mode: state.mode,
-      trust: state.trust,
-      doctrines: doctrinesForBuild(state.target),
-    });
+    // Build resolves its argv off the install (`buildActionCmds`); the other actions take no
+    // axes and self-resolve the deployed theme downstream.
+    const cmds = action === 'build' ? buildActionCmds(state, body) : actionCommands(action);
     if (!isTruthy(cmds)) {
       return sendJson(res, { error: `unknown action ${action}` }, 404, ae);
     }

package/js/web/jobs.mjs

@@ -421,14 +421,16 @@ export const INLINE_ACTIONS = ['restore', 'install', 'deploy'];
  * `harness.config.json` exactly as the pack list does, so `{"excludeRules":["process.5"]}`
  * there would take the consent gate out of a console Build that never asked for it. `[]` is
  * spelled `--exclude-rules none` and says "exclude nothing" out loud.
+ *
+ * `buildArgv`, when given, is used whole and the axes above are ignored: it is the argv a
+ * deployed install's profile owns (`buildActionCmds`), switches and exclusions included.
  */
 function actionTable({
   theme = 'neutral', emit = 'opencode-global', footprint = 'full',
   posture = 'peer', mode = 'direct', doctrines = [...PACK_ORDER], excludeRules = [],
-  trust = DEFAULT_PRESET,
+  trust = DEFAULT_PRESET, buildArgv = setupBuildArgs(theme, emit, null, null, footprint, posture,
+    mode, doctrines, PACK_ORDER, excludeRules, trust),
 } = {}) {
-  const buildArgv = setupBuildArgs(theme, emit, null, null, footprint, posture, mode,
-    doctrines, PACK_ORDER, excludeRules, trust);
   return {
     doctor: [[NODE(), CLI(), 'doctor']],
     build: [[NODE(), GEN(), ...buildArgv]],

package/js/web/routes.mjs

@@ -146,7 +146,9 @@ export const STATE_ROUTES = {
   '/api/recent': apiRecent,
   '/api/themes': apiThemes,
   '/api/setup': apiSetup,
-  '/api/doctor': apiDoctor,
+  // The one route here that reads its query: `?fresh=1` re-runs instead of serving the cache.
+  '/api/doctor': (state, url) => apiDoctor(state,
+    new URL(url || '', 'http://x').searchParams.has('fresh')),
   '/api/installs': apiInstalls,
   '/api/fleet': apiFleet,
   '/api/update': apiUpdate,

package/js/web/server.mjs

@@ -27,7 +27,7 @@ import { isFile, printOut } from '../lib/fs.mjs';
 import { which } from '../lib/paths.mjs';
 import { parseIntStrict } from '../lib/text.mjs';
 import { promptLine } from '../lib/prompt.mjs';
-import { webState } from './state.mjs';
+import { warmDoctor, webState } from './state.mjs';
 import { clearDaemon, codeStamp, openUrl, readDaemon, restartDaemon, startDaemon, statusDaemon, stopDaemon, writeDaemon } from './daemon.mjs';
 import { makeHandler } from './handler.mjs';
 import { JobManager } from './jobs.mjs';
@@ -165,6 +165,8 @@ export async function serve({ theme = null, port = 4747, openBrowser = true,
       printOut(`[web] Geneseed UI on ${url}  (theme: ${state.theme})\n`);
       printOut(daemon ? '[web] daemon ready.\n' : '[web] Ctrl-C to stop.\n');
       if (openBrowser) openUrl(url);
+      // After the record and the ready line, so `web start`'s wait loop already has its URL.
+      warmDoctor(state);
       // Node kills on SIGINT by default, which would skip this message and the record
       // cleanup in `srv.on('close', ...)` below — a foreground `--daemon-internal` server
       // stopped with Ctrl-C would otherwise leave a record pointing at a dead port.

package/js/web/state.mjs

@@ -40,7 +40,10 @@ export function stampMinute(ms) {
  * THE CACHING IS BEHAVIOUR, NOT AN OPTIMISATION: `doctorCollect` renders a theme per call
  * and the console GETs `/api/overview` on mount and again after every mutation, so an
  * uncached `doctor` would put a full build on each of those requests. `refresh()` is what a mutation calls to
- * drop both.
+ * drop both — except where the mutation cannot change anything the doctor reads (the checkout,
+ * the hook shim, the hook shell, the OpenCode config dirs, the deployed install): a memory
+ * delete passes `{ doctor: false }` and keeps the ~3.6 s verdict. Rule and profile writes do not
+ * call `refresh()` at all. Every other caller keeps the default, so a new one is slow, never stale.
  */
 export function webState(theme = null, target = null) {
   const st = {
@@ -56,6 +59,13 @@ export function webState(theme = null, target = null) {
     trust: null,
     _inv: null,
     _doctor: null,
+    // The Doctor page's per-check cards and theme list, from the SAME run as `_doctor` — kept
+    // beside it rather than inside so `/api/overview` (fetched after every mutation) does not
+    // carry every group.
+    _doctorRun: null,
+    // `diffCollect`'s memo of `expected` renders, made on first use by `api.mjs` (`memoOf`);
+    // it re-renders on its own key change, so `refresh()` leaves it alone.
+    renderMemo: null,
   };
   // The INSTALL ROOT (== build --out). For globals it IS the data dir; a claude/bob/openclaude
   // PROJECT install keeps its data under <repo>/.claude|.bob|.openclaude while the markers
@@ -87,15 +97,19 @@ export function webState(theme = null, target = null) {
   });
   Object.defineProperty(st, 'doctor', {
     get() {
-      if (st._doctor === null) {
-        const [, problems] = doctorCollect({ theme: st.theme });
-        st.stampDoctor(problems);
-      }
+      if (st._doctor === null) st.runDoctor();
       return st._doctor;
     },
   });
-  st.stampDoctor = (problems) => {
+  /** One fresh doctor run, cached whole: the verdict and the grouped detail of the same run. */
+  st.runDoctor = () => {
+    const groups = [];
+    const [themes, problems] = doctorCollect({ theme: st.theme, groups });
+    st.stampDoctor(problems, themes, groups);
+  };
+  st.stampDoctor = (problems, themes = [], groups = []) => {
     st._doctor = { ok: !problems.length, problems, checked_at: stampMinute(Date.now()) };
+    st._doctorRun = { themes, groups };
   };
   /**
    * The CURRENT install's mode, from its `.geneseed-emit` marker: the ROOT first (where
@@ -139,9 +153,9 @@ export function webState(theme = null, target = null) {
     st._inv = null;
     st._doctor = null;
   };
-  st.refresh = () => {
+  st.refresh = ({ doctor = true } = {}) => {
     st._inv = null;
-    st._doctor = null;
+    if (doctor) st._doctor = null;
     st.emit = st.detectEmit() || st.emit;
     const host = hostOf();
     st.theme = themeOfDir(st.root, host) || themeOfDir(st.target, host) || st.theme;
@@ -149,3 +163,16 @@ export function webState(theme = null, target = null) {
   };
   return st;
 }
+
+/**
+ * Run the doctor once in the background, right after the server binds, so the first
+ * `/api/overview` finds a verdict instead of paying the ~3.6 s itself. Still synchronous once it
+ * starts — the event loop is blocked for that run — so a request landing mid-run waits for it,
+ * no longer than it would have. The catch is not optional: a throw inside `setImmediate` is
+ * uncaught and would kill the daemon; a failed warm-up just leaves the cache cold.
+ */
+export function warmDoctor(st) {
+  setImmediate(() => {
+    try { if (st._doctor === null) st.runDoctor(); } catch { /* cold cache, computed on demand */ }
+  });
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "Every field here is argued and gated in tests/unit/package_manifest.test.mjs. `files`, `bin` and `engines` each have a test that fails when reality drifts from this file; `version` mirrors harness.config.json and is gated too. Read that docblock before editing this one.",
   "name": "geneseed",
-  "version": "4.9.0",
+  "version": "4.9.2",
   "description": "A portable, theme-able harness you implant once and use everywhere to grow a disciplined AI coding agent.",
   "keywords": [
     "ai",

package/web/dist/assets/{Activity-DZ3O_DsJ.js → Activity-D7Igwuoo.js}

@@ -1 +1 @@
-import{s as e}from"./sections-BET3c1WT.js";import{i as t,t as n}from"./react-BOF6yL40.js";import{t as r}from"./api-Bp5eW_6m.js";import{A as i,F as a,Y as o,b as s,v as c}from"./index-DJorAjeH.js";import{a as l,i as u,n as d,o as f,r as p,t as m}from"./activity-DvPxoS4Y.js";import{t as h}from"./usePoll-NSTzLOF4.js";var g=e(t(),1),_=n();function v({s:e}){let t=p[e.status]||p.idle,n=e.files,r=e.todos,o=r&&r.total>0||e.error||e.blocked_on;return(0,_.jsxs)(`a`,{className:`card pad-md act-card`,href:`#/activity/${encodeURIComponent(e.session_id)}`,children:[(0,_.jsxs)(`div`,{className:`row between wrap gap-12`,children:[(0,_.jsxs)(`div`,{className:`row gap-10`,style:{minWidth:0},children:[(0,_.jsx)(`span`,{className:`feed-dot ${t.cls||`acc`}`,style:{width:9,height:9}}),(0,_.jsxs)(`div`,{style:{minWidth:0},children:[(0,_.jsx)(`h3`,{style:{margin:0},children:e.title||l(e.cwd)||e.session_id}),e.cwd&&(0,_.jsx)(`div`,{className:`dim mono`,style:{fontSize:12,...m},title:e.cwd,children:e.cwd})]})]}),(0,_.jsxs)(`div`,{className:`row gap-8`,style:{flexShrink:0},children:[e.model&&(0,_.jsx)(`span`,{className:`badge mono`,title:`model`,children:e.model}),e.agent&&(0,_.jsx)(`span`,{className:`badge`,children:e.agent}),(0,_.jsxs)(`span`,{className:`badge ${t.cls}`,children:[(0,_.jsx)(`span`,{className:`dot`}),t.label]}),(0,_.jsx)(i,{name:`chevron`,className:`glyph act-chev`})]})]}),e.phase&&(0,_.jsxs)(`div`,{className:`row gap-8`,style:{marginTop:10,fontSize:14},children:[(0,_.jsx)(i,{name:`activity`}),(0,_.jsx)(`span`,{style:m,children:e.phase})]}),(e.tokens>0||e.cost>0||e.turn_started_at||n&&n.count>0)&&(0,_.jsxs)(`div`,{className:`row wrap`,style:{gap:16,marginTop:12,fontSize:13,color:`var(--text-2)`},children:[e.tokens>0&&(0,_.jsxs)(`span`,{children:[f(e.tokens),` tok`]}),e.cost>0&&(0,_.jsxs)(`span`,{children:[`$`,e.cost.toFixed(2)]}),e.turn_started_at?(0,_.jsx)(`span`,{children:(0,_.jsx)(d,{startedAt:e.turn_started_at})}):null,n&&n.count>0&&(0,_.jsxs)(`span`,{children:[n.count,` file`,n.count===1?``:`s`,` `,(0,_.jsxs)(`span`,{style:{color:`var(--good)`},children:[`+`,n.additions]}),` `,(0,_.jsxs)(`span`,{style:{color:`var(--bad)`},children:[`−`,n.deletions]})]})]}),o&&(0,_.jsxs)(`div`,{className:`row between wrap gap-12`,style:{marginTop:12,paddingTop:10,borderTop:`1px solid var(--line)`},children:[r&&r.total>0?(0,_.jsxs)(`span`,{className:`row gap-8 dim`,style:{fontSize:13},children:[(0,_.jsx)(u,{done:r.done,total:r.total}),`plan `,r.done,`/`,r.total]}):(0,_.jsx)(`span`,{}),e.error?(0,_.jsx)(`span`,{className:`badge bad`,title:e.error,style:{maxWidth:300,...m},children:e.error}):e.blocked_on?(0,_.jsx)(`span`,{className:`badge bad`,title:e.blocked_on,style:{maxWidth:300,...m},children:e.blocked_on}):null]}),(0,_.jsxs)(`div`,{className:`dim mono`,style:{fontSize:11,marginTop:8},children:[`updated `,a(e.updated_at),` ago`]})]})}function y(){let[e,t]=(0,g.useState)(null),[n,i]=(0,g.useState)(``);h(e=>r.activity().then(n=>{e()&&(t(n),i(``))},t=>{e()&&i(t.message)}),2e3,[]);let a=!e||e.enabled!==!1,l=e?.activity||[],u=o(),d=async()=>{let e=!a;try{let n=await r.activityToggle(e);t(e=>({...e||{},enabled:n.enabled,activity:n.enabled&&e?.activity||[]})),i(``)}catch(e){i(e.message)}};return(0,_.jsxs)(`div`,{className:`narrow`,children:[(0,_.jsxs)(`div`,{className:`head-row mb-16`,children:[(0,_.jsxs)(`div`,{children:[(0,_.jsx)(`h1`,{className:`h`,children:`Activity`}),(0,_.jsx)(`p`,{className:`sub`,children:`Live OpenCode sessions this harness is running: what each one is doing right now. Refreshes every couple of seconds; sessions drop off when their process exits.`})]}),(0,_.jsxs)(`div`,{className:`row gap-10`,style:{alignItems:`center`,flexShrink:0},children:[(0,_.jsx)(`span`,{className:`dim mono`,style:{fontSize:12},children:a?`tracking on`:`tracking off`}),(0,_.jsx)(`div`,{className:`sw-toggle${a?` on`:``}`,role:`switch`,"aria-checked":a,"aria-label":`Toggle activity tracking`,tabIndex:0,onClick:d,onKeyDown:e=>{(e.key===`Enter`||e.key===` `)&&(e.key===` `&&e.preventDefault(),d())}})]})]}),(0,_.jsx)(c,{error:n,style:{marginBottom:12}}),e?a?l.length===0?(0,_.jsxs)(`div`,{className:`empty`,children:[(0,_.jsx)(`div`,{className:`big`,children:`No active sessions`}),`Run `,(0,_.jsx)(`code`,{children:`opencode`}),` and the sessions it spins up appear here.`]}):(0,_.jsx)(`div`,{className:`stack gap-12`,ref:u,children:l.map(e=>(0,_.jsx)(`div`,{"data-flip":e.session_id,children:(0,_.jsx)(v,{s:e})},e.session_id))}):(0,_.jsxs)(`div`,{className:`empty`,children:[(0,_.jsx)(`div`,{className:`big`,children:`Activity tracking is off`}),`The plugin isn't recording sessions. Flip the switch to turn it back on.`]}):(0,_.jsx)(s,{label:`Reading live sessions…`})]})}export{y as default};
+import{s as e}from"./sections-BET3c1WT.js";import{i as t,t as n}from"./react-BOF6yL40.js";import{t as r}from"./api-CiXlkbe0.js";import{C as i,N as a,Q as o,R as s,x as c}from"./index-BZgEGRbL.js";import{a as l,i as u,n as d,o as f,r as p,t as m}from"./activity-DvPxoS4Y.js";import{t as h}from"./usePoll-NSTzLOF4.js";var g=e(t(),1),_=n();function v({s:e}){let t=p[e.status]||p.idle,n=e.files,r=e.todos,i=r&&r.total>0||e.error||e.blocked_on;return(0,_.jsxs)(`a`,{className:`card pad-md act-card`,href:`#/activity/${encodeURIComponent(e.session_id)}`,children:[(0,_.jsxs)(`div`,{className:`row between wrap gap-12`,children:[(0,_.jsxs)(`div`,{className:`row gap-10`,style:{minWidth:0},children:[(0,_.jsx)(`span`,{className:`feed-dot ${t.cls||`acc`}`,style:{width:9,height:9}}),(0,_.jsxs)(`div`,{style:{minWidth:0},children:[(0,_.jsx)(`h3`,{style:{margin:0},children:e.title||l(e.cwd)||e.session_id}),e.cwd&&(0,_.jsx)(`div`,{className:`dim mono`,style:{fontSize:12,...m},title:e.cwd,children:e.cwd})]})]}),(0,_.jsxs)(`div`,{className:`row gap-8`,style:{flexShrink:0},children:[e.model&&(0,_.jsx)(`span`,{className:`badge mono`,title:`model`,children:e.model}),e.agent&&(0,_.jsx)(`span`,{className:`badge`,children:e.agent}),(0,_.jsxs)(`span`,{className:`badge ${t.cls}`,children:[(0,_.jsx)(`span`,{className:`dot`}),t.label]}),(0,_.jsx)(a,{name:`chevron`,className:`glyph act-chev`})]})]}),e.phase&&(0,_.jsxs)(`div`,{className:`row gap-8`,style:{marginTop:10,fontSize:14},children:[(0,_.jsx)(a,{name:`activity`}),(0,_.jsx)(`span`,{style:m,children:e.phase})]}),(e.tokens>0||e.cost>0||e.turn_started_at||n&&n.count>0)&&(0,_.jsxs)(`div`,{className:`row wrap`,style:{gap:16,marginTop:12,fontSize:13,color:`var(--text-2)`},children:[e.tokens>0&&(0,_.jsxs)(`span`,{children:[f(e.tokens),` tok`]}),e.cost>0&&(0,_.jsxs)(`span`,{children:[`$`,e.cost.toFixed(2)]}),e.turn_started_at?(0,_.jsx)(`span`,{children:(0,_.jsx)(d,{startedAt:e.turn_started_at})}):null,n&&n.count>0&&(0,_.jsxs)(`span`,{children:[n.count,` file`,n.count===1?``:`s`,` `,(0,_.jsxs)(`span`,{style:{color:`var(--good)`},children:[`+`,n.additions]}),` `,(0,_.jsxs)(`span`,{style:{color:`var(--bad)`},children:[`−`,n.deletions]})]})]}),i&&(0,_.jsxs)(`div`,{className:`row between wrap gap-12`,style:{marginTop:12,paddingTop:10,borderTop:`1px solid var(--line)`},children:[r&&r.total>0?(0,_.jsxs)(`span`,{className:`row gap-8 dim`,style:{fontSize:13},children:[(0,_.jsx)(u,{done:r.done,total:r.total}),`plan `,r.done,`/`,r.total]}):(0,_.jsx)(`span`,{}),e.error?(0,_.jsx)(`span`,{className:`badge bad`,title:e.error,style:{maxWidth:300,...m},children:e.error}):e.blocked_on?(0,_.jsx)(`span`,{className:`badge bad`,title:e.blocked_on,style:{maxWidth:300,...m},children:e.blocked_on}):null]}),(0,_.jsxs)(`div`,{className:`dim mono`,style:{fontSize:11,marginTop:8},children:[`updated `,s(e.updated_at),` ago`]})]})}function y(){let[e,t]=(0,g.useState)(null),[n,a]=(0,g.useState)(``);h(e=>r.activity().then(n=>{e()&&(t(n),a(``))},t=>{e()&&a(t.message)}),2e3,[]);let s=!e||e.enabled!==!1,l=e?.activity||[],u=o(),d=async()=>{let e=!s;try{let n=await r.activityToggle(e);t(e=>({...e||{},enabled:n.enabled,activity:n.enabled&&e?.activity||[]})),a(``)}catch(e){a(e.message)}};return(0,_.jsxs)(`div`,{className:`narrow`,children:[(0,_.jsxs)(`div`,{className:`head-row mb-16`,children:[(0,_.jsxs)(`div`,{children:[(0,_.jsx)(`h1`,{className:`h`,children:`Activity`}),(0,_.jsx)(`p`,{className:`sub`,children:`Live OpenCode sessions this harness is running: what each one is doing right now. Refreshes every couple of seconds; sessions drop off when their process exits.`})]}),(0,_.jsxs)(`div`,{className:`row gap-10`,style:{alignItems:`center`,flexShrink:0},children:[(0,_.jsx)(`span`,{className:`dim mono`,style:{fontSize:12},children:s?`tracking on`:`tracking off`}),(0,_.jsx)(`div`,{className:`sw-toggle${s?` on`:``}`,role:`switch`,"aria-checked":s,"aria-label":`Toggle activity tracking`,tabIndex:0,onClick:d,onKeyDown:e=>{(e.key===`Enter`||e.key===` `)&&(e.key===` `&&e.preventDefault(),d())}})]})]}),(0,_.jsx)(c,{error:n,style:{marginBottom:12}}),e?s?l.length===0?(0,_.jsxs)(`div`,{className:`empty`,children:[(0,_.jsx)(`div`,{className:`big`,children:`No active sessions`}),`Run `,(0,_.jsx)(`code`,{children:`opencode`}),` and the sessions it spins up appear here.`]}):(0,_.jsx)(`div`,{className:`stack gap-12`,ref:u,children:l.map(e=>(0,_.jsx)(`div`,{"data-flip":e.session_id,children:(0,_.jsx)(v,{s:e})},e.session_id))}):(0,_.jsxs)(`div`,{className:`empty`,children:[(0,_.jsx)(`div`,{className:`big`,children:`Activity tracking is off`}),`The plugin isn't recording sessions. Flip the switch to turn it back on.`]}):(0,_.jsx)(i,{label:`Reading live sessions…`})]})}export{y as default};