geneseed 4.9.1 → 4.9.2

package/CHANGELOG.md

@@ -8,6 +8,25 @@ label. For the capability ↔ spec map, see [SHIPPED.md](SHIPPED.md).
 
 ## [Unreleased]
 
+## [4.9.2] — 2026-10-18
+
+Patch: the review pass — faster emits, console and Stop; Build and setup keep your gate switches; protected checks follow links both ways.
+
+### Upgrade notes
+- Run `geneseed rebuild-all` once after updating so installed hooks and OpenCode plugins pick up the changes.
+
+### Changed
+- **A Stop no longer parses the whole transcript.** The done gate and `learn` each read the full session transcript on every Stop (real ones reach 50 MB), and an armed install with `GENESEED_LLM` set read it twice. Both now read backward from the end, in windows that start at 2 MB and grow fourfold: the done gate until the window holds the prompt that opened the turn (a turn longer than every window falls back to the whole file, so it is never judged on a truncated turn), `learn` until its notes hold the 16 000 characters it keeps, so the notes are the ones a full read gives. One Stop reads each window once, shared by both. On a generated 50 MB transcript (old and new interleaved, median of 10) the armed gate alone runs about 3× faster and gate + learn about 3× faster, and both now cost about the same as on a 1 KB transcript: a Stop no longer grows with the session.
+- **The console stops re-rendering an install to measure its drift on every refresh.** The overview and the fleet table each rendered the selected install's expected tree afresh (~0.6 s per install per call); the render is now memoised per install, keyed on the source fingerprint and every axis the install was built with (theme, footprint, posture, mode, packs, trust, excluded rules and skills, gate switches), and re-done the moment any of them changes. The comparison against the deployed tree still runs on every call, so a hand edit shows at once. Measured on a two-install sandbox: overview ~0.75 s → ~0.2 s, fleet ~1.5 s → ~0.32 s after the first refresh. `geneseed diff` is unchanged.
+- **Emits no longer read back what they just wrote to hash it.** The owned-file hashes in `.geneseed-manifest.json` are now computed from the text `writeText` recorded at write time (a copied binary, or a file rewritten since by any other writer, is still read), and the claim-on-create closure (`claimer`) resolves the config root once per emit instead of once per file. The per-file symlink and hard-link checks are unchanged, and manifests are byte-identical to before. A global re-emit runs about a quarter faster (measured on Windows: claude-global 560 → 424 ms, opencode-global 716 → 542 ms, median of 7).
+- **The console reads user-rules.md once, under one key, and a rules or profile write reloads only its own file.** Personal's cards, the Overview's ledger and the Constitution page's "Your rules" tier share one cached `/api/rules` read (`web/src/hooks/useRules.js`), so a rule written on Personal shows on the other two at once. Each visit to one of those pages paints the cached copy and refetches it once, so a rule an agent session wrote shows without waiting for a build. On Personal, a rules write no longer refetches the profile and a profile save no longer refetches the rules. A memory fact promoted to a rule from the Library drops the cached copy, so the Rules tab it lands on shows the new rule. Install changes (build, toggle, switch, edits) still refresh the whole console.
+
+### Fixed
+- **Protected checks follow links in both directions on every host.** Both the Claude/Bob hook and the OpenCode guard now read a write's target twice: as written, and with symlinks and junctions followed (the hook's `resolvePath`). A hit on either reading asks (Claude) or blocks (Bob, OpenCode). A write through a link from outside a repo into one of its protected folders is now caught on OpenCode, where before it passed; a protected folder inside a repo that links out of it is now caught by the hook, where before it passed. Ordinary repos are unchanged. The guard's git readers are now pinned to `js/hosts/gitref.mjs` by a test.
+- **The console's always-on cost no longer counts skills the model never sees.** The skill part of each install's cost counted every `SKILL.md`, including user-only skills and aliases the host keeps out of the model's catalogue. It now skips them the way each host does: on their `disable-model-invocation: true` frontmatter for Claude Code and OpenClaude, and on the `permission.skill` deny in `opencode.json(c)` for OpenCode, which ignores that frontmatter key. Bob writes no `SKILL.md` for a user-only skill, so nothing changes there. Measured on a fresh claude-global lean emit, the skill part drops from 12,982 to 10,837 characters (opencode-global: 12,548 to 11,825). The root-file ceiling is unaffected.
+- **The console's Build no longer re-arms switched-off gates or restores excluded rules and skills.** Rebuilding a deployed install from the console (the theme picker) assembled its own argv: no gate switches, `--exclude-rules none` and no excluded skills. It now takes the argv the install's own profile gives `rebuild-all` and `status`, with only the picked theme swapped in. A global install's Build also names its own `--config-dir`, and a project install's its own `--out`/`--root`.
+- **Re-running `geneseed setup` no longer re-arms switched-off gates.** The wizard kept an install's excluded rules and skills but read none of its `Secrets gate:` / `Done gate:` / `Deletion gate:` lines, so holding Enter through a re-run switched every gate back on. It now carries them into the build like the exclusions, without asking about them.
+
 ## [4.9.1] — 2026-10-18
 
 Patch: Deletion Is Deliberate and the root-scan check no longer fail open behind shell structure; the console stops re-running the doctor on every change.

package/SHIPPED.md

@@ -20,7 +20,7 @@ historical references, not files distributed with the repo.
 > **On version numbers.** [`harness.config.json`](harness.config.json)'s `version` is a
 > human-readable label only. The canonical identity of an installed harness is the
 > **source fingerprint** stamped in `.geneseed-version` (see `geneseed version`), not the
-> string. Current label: **4.9.1**.
+> string. Current label: **4.9.2**.
 
 ## Capabilities
 

package/adapters/opencode/plugins/geneseed-context.js

@@ -64,7 +64,9 @@ const PLUGIN_DIR = path.dirname(fileURLToPath(import.meta.url))
 // Sovereign-repo bypass — twin of the harness's own `sovereignBypass()`.
 // <cfg>/excludes.json (user-owned, managed by `harness exclude`) lists folders where
 // this GLOBAL install goes dormant. Any error degrades to "not excluded".
-const norm = (p) => {
+// Twin of js/hosts/hosts.mjs `resolvePath`: the absolute path with symlinks and junctions
+// followed, the way the Claude/Bob hook resolves one. `norm` folds its case for matching.
+function resolvePath(p) {
   // Expand a leading "~" / "~/…" to the home dir — a hand-edited excludes.json entry
   // like "~/vault" must resolve the same way here as it does for the Claude/Bob
   // hook guard.
@@ -83,6 +85,10 @@ const norm = (p) => {
     tail.unshift(path.basename(cur))
     cur = up
   }
+  return s
+}
+const norm = (p) => {
+  const s = resolvePath(p)
   return process.platform === "win32" ? s.toLowerCase() : s
 }
 // A linked git worktree of an excluded repo is excluded too, wherever it sits on disk — twin of

package/adapters/opencode/plugins/geneseed-guard.js

@@ -59,7 +59,9 @@ const PLUGIN_DIR = path.dirname(fileURLToPath(import.meta.url))
 // Sovereign-repo bypass — twin of the harness's own `sovereignBypass()`.
 // <cfg>/excludes.json (user-owned, managed by `harness exclude`) lists folders where
 // this GLOBAL install goes dormant. Any error degrades to "not excluded".
-const norm = (p) => {
+// Twin of js/hosts/hosts.mjs `resolvePath`: the absolute path with symlinks and junctions
+// followed, the way the Claude/Bob hook resolves one. `norm` folds its case for matching.
+function resolvePath(p) {
   // Expand a leading "~" / "~/…" to the home dir — a hand-edited excludes.json entry
   // like "~/vault" must resolve the same way here as it does for the Claude/Bob
   // hook guard.
@@ -78,6 +80,10 @@ const norm = (p) => {
     tail.unshift(path.basename(cur))
     cur = up
   }
+  return s
+}
+const norm = (p) => {
+  const s = resolvePath(p)
   return process.platform === "win32" ? s.toLowerCase() : s
 }
 // A linked git worktree of an excluded repo is excluded too, wherever it sits on disk — twin of
@@ -234,8 +240,9 @@ const SHELL_BLOCK_RE = [
 // the Bob behaviour — and `GENESEED_GUARD=warn` downgrades it to a log line.
 //
 // The fs-only readers below are the twins of js/hosts/gitref.mjs (gitRootOf, gitDirOf,
-// gitCommonDirOf, currentBranch, protectedBranches, stashExists); the block between the twin
-// markers is js/hosts/loss.mjs verbatim, and tests/plugins/guard.test.mjs diffs it.
+// gitCommonDirOf, currentBranch, protectedBranches, stashExists) — tests/plugins/guard.test.mjs
+// compares each with its gitref.mjs original, quotes, semicolons and layout aside; the block
+// between the twin markers is js/hosts/loss.mjs verbatim, and the same file diffs it.
 function gitRootOf(cwd) {
   try {
     let dir = path.resolve(cwd)
@@ -1178,19 +1185,20 @@ function ruleStoreTarget(p) {
 // must not edit in `.geneseed/protected-checks.txt` at its git root, one repo-relative path per
 // line; the list protects itself. Found from the WRITE TARGET up to the first `.git`, re-read on
 // every write (a short file, read only on a write call). No ask tier here, so a hit is a deny.
+// The target is read twice — as written, and with links followed — and a hit on either is a hit:
+// a link from outside into a protected folder and a protected folder that links out are both
+// caught, so following links never loosens the gate.
 const SENSOR_LIST = ".geneseed/protected-checks.txt"
 // The done gate's list (#289, js/hosts/hooks-done.mjs) protects itself the same way, with or
 // without a protected-checks list: emptying it would disarm the gate. Twin of js/hosts/hooks.mjs.
 const DONE_LIST = ".geneseed/done-checks.txt"
 function protectedCheck(p) {
+  return protectedIn(path.resolve(p)) ?? protectedIn(resolvePath(p))
+}
+function protectedIn(target) {
   try {
-    const target = path.resolve(p)
-    let root = path.dirname(target)
-    while (!existsSync(path.join(root, ".git"))) {
-      const up = path.dirname(root)
-      if (up === root) return null
-      root = up
-    }
+    const root = gitRootOf(path.dirname(target))
+    if (!root) return null
     const fold = (s) => nocase(s.replace(/\\/g, "/"))
     const rel = fold(path.relative(root, target))
     if (rel === fold(DONE_LIST)) return DONE_LIST

package/adapters/opencode/plugins/geneseed-learn.js

@@ -46,7 +46,9 @@ const PLUGIN_DIR = path.dirname(fileURLToPath(import.meta.url))
 // Sovereign-repo bypass — twin of the harness's own `sovereignBypass()`.
 // <cfg>/excludes.json (user-owned, managed by `harness exclude`) lists folders where
 // this GLOBAL install goes dormant. Any error degrades to "not excluded".
-const norm = (p) => {
+// Twin of js/hosts/hosts.mjs `resolvePath`: the absolute path with symlinks and junctions
+// followed, the way the Claude/Bob hook resolves one. `norm` folds its case for matching.
+function resolvePath(p) {
   // Expand a leading "~" / "~/…" to the home dir — a hand-edited excludes.json entry
   // like "~/vault" must resolve the same way here as it does for the Claude/Bob
   // hook guard.
@@ -65,6 +67,10 @@ const norm = (p) => {
     tail.unshift(path.basename(cur))
     cur = up
   }
+  return s
+}
+const norm = (p) => {
+  const s = resolvePath(p)
   return process.platform === "win32" ? s.toLowerCase() : s
 }
 // A linked git worktree of an excluded repo is excluded too, wherever it sits on disk — twin of

package/docs/concepts/hooks.md

@@ -48,7 +48,7 @@ Geneseed writes its hooks into the host's settings file. Every hook calls one pr
 - A write to `.geneseed/done-checks.txt`, the done gate's own list (below), gets the same *External Gate* prompt: emptying it would disarm the gate.
 - Ordinary edits pass untouched.
 
-**The done gate.** Runs when a turn ends, inside `learn` and before it calls any model. A project opts in with `.geneseed/done-checks.txt` at its git root: one command per line, `#` for comments — the checks that prove the work, for example `npm run lint` and `node --test`. If the turn edited a file under that root and a listed check has not passed since the last edit, the turn does not end: the agent is told which checks are owed, citing *Verify Before Asserting*. A check counts when it ran as a shell command, unpiped (`npm test | tail` exits with `tail`'s code, so it proves nothing), and its result was not an error. The gate never runs a check itself. It blocks at most once per turn; the second stop ends the turn and leaves a line in the gate ledger. Only file-write tools count as edits: a shell `sed -i` or redirect is not seen. Without the file, nothing changes. On OpenCode the gate is a reminder on the next request (OpenCode 1 only); on Bob, whose Stop carries no transcript, the turn is not judged and a log line says so. An install built `--no-done-gate` wires `learn` with that flag: the check is skipped, learning still runs ([Exclusions](exclusions.md)).
+**The done gate.** Runs when a turn ends, inside `learn` and before it calls any model. A project opts in with `.geneseed/done-checks.txt` at its git root: one command per line, `#` for comments — the checks that prove the work, for example `npm run lint` and `node --test`. If the turn edited a file under that root and a listed check has not passed since the last edit, the turn does not end: the agent is told which checks are owed, citing *Verify Before Asserting*. A check counts when it ran as a shell command, unpiped (`npm test | tail` exits with `tail`'s code, so it proves nothing), and its result was not an error. The gate never runs a check itself. It reads the transcript from its end, back only to the prompt that opened the turn, so its cost does not grow with the session. It blocks at most once per turn; the second stop ends the turn and leaves a line in the gate ledger. Only file-write tools count as edits: a shell `sed -i` or redirect is not seen. Without the file, nothing changes. On OpenCode the gate is a reminder on the next request (OpenCode 1 only); on Bob, whose Stop carries no transcript, the turn is not judged and a log line says so. An install built `--no-done-gate` wires `learn` with that flag: the check is skipped, learning still runs ([Exclusions](exclusions.md)).
 
 **learn.** Takes the tail of the transcript and asks a model to distil what is worth keeping into one-fact-per-file entries under `memory/`. It is shown the facts already stored, so it updates one with the merged text rather than writing a twin (the old version is kept in `memory/archive/`), and moves one the session proved obsolete into `memory/archive/`. It needs `GENESEED_LLM` set to a model command, for example:
 

package/harness.config.json

@@ -2,5 +2,5 @@
   "_comment": "version is a human-readable release label only; the canonical identity of an installed harness is the source fingerprint stamped in .geneseed-version (see `harness version`), not this string.",
   "theme": "neutral",
   "product": "Geneseed",
-  "version": "4.9.1"
+  "version": "4.9.2"
 }

package/js/README.md

@@ -1,6 +1,6 @@
 # `js/` — the module map
 
-Sixty-nine modules in eight folders. This page is the address book: **what each one owns**, and
+Every module under `js/`, in eight folders. This page is the address book: **what each one owns**, and
 **which file to open first** for a given task. It is not documentation of behaviour — every module
 has a docblock for that, and the docblock is the thing to read before editing.
 
@@ -26,8 +26,28 @@ js/ui/        what it prints at a terminal
 js/web/       the `geneseed web` console
 ```
 
-Dependency direction is one-way: `lib/` ← everything; `build/` ← `hosts/`; `inspect/` and `web/`
-read what `build/` produced. Nothing in `lib/` imports anything above it.
+**Dependency direction is only partly one-way, and no test or doctor arm enforces any of it.**
+`lib/` is the one true leaf: it imports only Node builtins and itself, and every other folder
+imports it. A few modules sit just above it and are read from almost everywhere: `build/source.mjs`
+(the source paths, the rule canon, `aliasesOf`), `hosts/hosts.mjs` (the host config dirs) and
+`loop/score.mjs` (builtins only, by its docblock). Above those, the folders are domains, not
+layers. These pairs import each other (relative imports between folders, measured 2026-10):
+
+| pair | edges A→B / B→A | the smaller direction |
+|---|---|---|
+| build ↔ hosts | 24 / 5 | hosts reads `build/source.mjs` (`installs`, `link`, `native`, `opencode`) and `build/version.mjs` (`opencode`) |
+| build ↔ inspect | 2 / 23 | `build/driver.mjs` records deploy roots in `inspect/registry.mjs`; `build/catalog.mjs` reads `inspect/inventory.mjs` |
+| build ↔ loop | 4 / 1 | `loop/catalog.mjs` reads `build/source.mjs` |
+| build ↔ ui | 2 / 1 | `ui/cli.mjs` reads `ROOT` from `build/source.mjs` |
+| build ↔ web | 1 / 9 | `build/generate.mjs` lazily imports `web/daemon.mjs` to restart a stale console after `rebuild-all` |
+| hosts ↔ inspect | 1 / 36 | `hosts/installs.mjs` reads `inspect/registry.mjs`'s deploy roots |
+| ui ↔ web | 1 / 1 | `ui/menu.mjs` starts the daemon; `web/docs.mjs` renders `ui/cli.mjs`'s CLI reference |
+| maintain ↔ web | 1 / 6 | `maintain/update.mjs` lazily imports `web/daemon.mjs` for the same restart |
+
+The only gates over the import graph are the transitive closure walks in
+`tests/unit/hook_cli.test.mjs`. They pin which modules the generator and CLI entries may pull
+`child_process` into, not which folder imports which. Adding a cross-folder import is therefore a
+review question, not a test failure.
 
 ---
 
@@ -108,7 +128,7 @@ Everything that inspects an already-built or already-deployed harness and report
 | `checks-constitution.mjs` | The constitution: rule declarations and citations, LEAN blocks, `HOOK_PINNED`, theme vocabulary, the console's `LAW_META`/`DOCTRINE_META` |
 | `checks-counts.mjs` | The hand-written counts: AGENT.md tables, README badges and prose, `SHIPPED.md`, held against `src/` |
 | `scan.mjs` | The shared walk/sort/strip/test primitives every `checks-*` uses. Owns no judgement itself |
-| `validate.mjs` | The `--validate-only` verb: renders a sandbox, scans it for tokens and dead links, own exit contract |
+| `validate.mjs` | The `validate` verb (the generator's old `--validate-only`): renders a sandbox, scans it for tokens and dead links, own exit contract |
 | `inventory.mjs` | The one catalog walk and its taxonomy tables, read by status, the TUI and the web console |
 | `status.mjs` | `geneseed status` and `version` — the panel data, counts, accent colour, version verdict |
 | `cost.mjs` | What one install injects every session, by part (root file, skill and agent lists, session files), in characters; owns `CARRIER_CEILING`, which the smoke test gates and the console draws |
@@ -182,15 +202,16 @@ Verbs that change an install that already exists, as opposed to rendering one.
 | module | owns |
 |---|---|
 | `update.mjs` | `upgrade`/`sync-self`/`bootstrap` — git pull, doctor gate, rebuild, each via a respawn |
-| `setup.mjs` | The install wizard, and the CLI's only synchronous stdin readers (`ask`/`confirm`/`askChoice`) |
+| `setup.mjs` | The install wizard. Its prompts go through `js/lib/prompt.mjs`'s stdin readers |
 | `uninstall.mjs` | Removes or disables an install: manifest-driven reversal, plus stash deactivate/reactivate |
 | `migrate.mjs` | `geneseed migrate` — all-or-nothing re-emit moving installs onto the npm install shape |
 | `memory.mjs` | `geneseed memory list|rm` — CLI-side fact removal (archive by default, `--purge` deletes), twin of the web delete endpoint |
 
 **Before editing:** `update.mjs` is the one module that MUST spawn rather than import — the code on
 disk is replaced mid-run, so an in-process call would validate the *old* source and then render it.
-`setup.mjs` is the whole program's stdin layer, not just setup's. `memory.mjs` hard-unlinks user
-facts with no archive path.
+The stdin readers are not here: they live in `js/lib/prompt.mjs`, shared by `setup.mjs`,
+`uninstall.mjs` and `js/web/server.mjs`. `memory.mjs` deletes user facts: `rm` moves a fact into
+`archive/` by default, but `--purge` unlinks it and nothing can bring it back.
 
 ## `js/ui/` — the terminal
 
@@ -243,9 +264,9 @@ and inline lists are held against a surface list written out in
 | a law (invariant) | `src/laws/universal.md` — `### {{LAW:<id>}} <Principle>`; cite by id, never by number | `docs/extending.md` §2c. Author both LEAN halves: the lean footprint ships nothing else |
 | to remove or retire a rule | `docs/extending.md` §2e | `RETIRED_RULE_IDS` in `js/build/source.mjs` — a retired id is never reused |
 | a skill or an agent | `src/skills/<name>.md` or `src/agents/<name>.md` | `docs/extending.md` §3 — eight steps. Write the FILE before the table row or the build aborts |
-| a doctor check | `js/inspect/checks-{build,repo,authoring}.mjs` | register with `ran(...)` in `doctor.mjs`, then a PLANTED FAULT in `tests/unit/harness.test.mjs` |
+| a doctor check | `js/inspect/checks-{build,repo,authoring,constitution,counts}.mjs`; `checks-probe.mjs` for a check that runs a live install's gates | wire it in one of two ways. Give it its own `ran(...)` group in `doctor.mjs`, as the module map and the host tables have. Or append it to `authoringProblems`, which is how the constitution and count checks run. Then add a PLANTED FAULT in `tests/unit/harness.test.mjs` (`tests/unit/doctor_probe.test.mjs` for the probe) |
 | a web endpoint | GET → `js/web/api.mjs`; POST → `js/web/actions.mjs` | declare it in `js/web/routes.mjs`; the partition test probes the real handler |
-| a CLI verb | `js/cli-table.json` — the table IS the parser | the `VERBS` row in `bin/geneseed-cli.mjs`, the row count in `cli_table.test.mjs`, `NATIVE` in **two** test files |
+| a CLI verb | `js/cli-table.json` — the table IS the parser | the `VERBS` row in `bin/geneseed-cli.mjs`, the row count in `cli_table.test.mjs`, and, for a Node-native verb with no recorded cell, `NATIVE` in `tests/unit/hook_cli.test.mjs` |
 | a hook verb | `js/hosts/hooks.mjs` (a gate) or its own `js/hosts/hooks-<verb>.mjs` | `claudeHookGroups` in `settings.mjs`, the `VERBS` row (with its `load`) in `bin/geneseed-hook.mjs`. Keep the import graph tiny |
 | a console doc page | `docs/<understand|guides|concepts|reference>/<id>.md` — the stem is the id | `docs/extending.md` §4c. Only `kind: "concept"` gets `{N_*}` substitution |
 | an OpenCode plugin | `adapters/opencode/plugins/geneseed-<name>.js` | `docs/extending.md` §4a — the `geneseed-` prefix is mechanically load-bearing |

package/js/build/args.mjs

@@ -11,7 +11,7 @@ import { parseArgs as nodeParseArgs } from 'node:util';
 import { withPlatformNewlines } from '../lib/fs.mjs';
 import path from 'node:path';
 import {
-  CONFIG, discoverNames, PACK_ORDER, knownRuleIds, knownSkillIds, linkedSkillIds, resolveSkillNames,
+  CONFIG, discoverNames, GATE_SWITCHES, PACK_ORDER, knownRuleIds, knownSkillIds, linkedSkillIds, resolveSkillNames,
 } from './source.mjs';
 // The loop engine's trust presets — the `--trust` choices. `score.mjs` imports nothing, which is
 // what lets it sit inside this module's `child_process` ban.
@@ -101,11 +101,10 @@ const VALUED = {
 };
 const FLAGS = {
   '--sync-themes': 'syncThemes', '--validate-only': 'validateOnly',
-  // Law IV's gate switch. No `harness.config.json` key feeds it, deliberately: a rebuild elides
-  // the flag when armed, so a config default could disarm an armed install on its next upgrade.
-  '--no-deletion-gate': 'noDeletionGate',
-  // Laws I and III, the same contract (`GATE_SWITCHES` in source.mjs).
-  '--no-secrets-gate': 'noSecretsGate', '--no-done-gate': 'noDoneGate',
+  // The gate switches (`GATE_SWITCHES`, law order). No `harness.config.json` key feeds them,
+  // deliberately: a rebuild elides a flag when armed, so a config default could disarm an armed
+  // install on its next upgrade.
+  ...Object.fromEntries(GATE_SWITCHES.map((g) => [g.flag, g.arg])),
   '-v': 'verbose', '--verbose': 'verbose',
 };
 
@@ -306,6 +305,8 @@ function usage() {
  * this one) refuses the whole typed token, `-bogus`, once.
  */
 export function parseArgs(argv, defaults) {
+  // Typed open: the gate rows are spread in from `GATE_SWITCHES`, and `cfgDir` is set only when given.
+  /** @type {Record<string, any>} */
   const args = {
     theme: defaults.theme, posture: defaults.posture, mode: defaults.mode,
     trust: defaults.trust,
@@ -313,8 +314,8 @@ export function parseArgs(argv, defaults) {
     excludeRules: defaults.excludeRules,
     excludeSkills: defaults.excludeSkills ?? [],
     out: 'Harness', emit: 'files', footprint: 'lean', root: null,
-    syncThemes: false, validateOnly: false, verbose: false, noDeletionGate: false,
-    noSecretsGate: false, noDoneGate: false,
+    syncThemes: false, validateOnly: false, verbose: false,
+    ...Object.fromEntries(GATE_SWITCHES.map((g) => [g.arg, false])),
   };
   const { tokens } = nodeParseArgs({
     args: argv, options: PARSE_OPTIONS, allowPositionals: true, strict: false, tokens: true,

package/js/build/driver.mjs

@@ -40,7 +40,7 @@ import { emitClaudeRender } from './emit-claude.mjs';
 import { emitOpencodeRender, emitOpencodeGlobalRender } from './emit-opencode.mjs';
 import { settingsIntegrityCheck } from '../hosts/settings.mjs';
 import { hookRunnerEntry } from '../hosts/shim.mjs';
-import { writeText, withPlatformNewlines, isFile } from '../lib/fs.mjs';
+import { writeText, withPlatformNewlines, isFile, withWriteRecord } from '../lib/fs.mjs';
 import { parseJson, jsonDumpsIndent } from '../lib/json.mjs';
 import { relPosix } from '../lib/text.mjs';
 // P5c moved these out of this file: `bin/geneseed-cli.mjs` needs the same four resolvers to
@@ -58,7 +58,7 @@ import {
 // status` renders to count, so `bin/geneseed-cli.mjs` needs the same checkout paths and the
 // same cfg. golden.py's 259 cells all build one, which is what made the move safe.
 import {
-  ROOT, makeCfg,
+  GATE_SWITCHES, ROOT, makeCfg,
 } from './source.mjs';
 
 // P5f moved these, for the same arithmetic a third time: `harness rebuild-all` reads the
@@ -75,8 +75,11 @@ import { configDefaults, die, parseArgs } from './args.mjs';
 export { parseDriverArgs } from './args.mjs';
 
 
-/** `_build_emit.PRIMARY_AGENT_SRC`. */
-const PRIMARY_AGENT_SRC = path.join(ROOT, 'adapters', 'opencode', 'agents', 'orchestrator.md');
+/**
+ * `_build_emit.PRIMARY_AGENT_SRC`. Exported for `diffCollect`'s render memo: a render input
+ * `sourceFingerprint` does not hash, so the memo keys on its bytes itself.
+ */
+export const PRIMARY_AGENT_SRC = path.join(ROOT, 'adapters', 'opencode', 'agents', 'orchestrator.md');
 
 /** `_build_render.resolve_out` — absolute, or relative to the CURRENT WORKING DIRECTORY
  *  (not to ROOT), so the harness renders straight into any repository.
@@ -555,9 +558,9 @@ const claudeShaped = (name) => (cfg, args, out) => {
   const claudeMd = path.join(configDir || carrierInLayer ? cfgDir : root, carrier);
   const hookOpts = hookRunnerEntry();
   before?.();
-  const r = emitClaudeCore(cfg, args, {
+  const r = withWriteRecord(() => emitClaudeCore(cfg, args, {
     cfgDir, claudeMd, scope: configDir ? 'global' : 'project', host, out, hookOpts,
-  });
+  }));
   process.stdout.write(summary(root ?? cfgDir, r));
   return configDir ? cfgDir : undefined;
 };
@@ -604,7 +607,7 @@ function writeMarkers(markerDir, emit, footprint) {
  * but this argument would overwrite the live install `diff` is only reading.
  */
 const GLOBAL_EMITS = {
-  opencode: emitOpencodeGlobal,
+  opencode: (...a) => withWriteRecord(() => emitOpencodeGlobal(...a)),
   claude: claudeShaped('claude-global'),
   bob: claudeShaped('bob-global'),
   openclaude: claudeShaped('openclaude-global'),
@@ -633,7 +636,7 @@ const PROJECT_EMITS = {
   // P2. `opencode` joins the three for `cmdValidate`, which has to be able to render EVERY
   // `--emit` choice into its sandbox and not only the three doctor already scans. Its call
   // shape is the Claude-shaped emits' exactly — `(cfg, args, out)` — so the row is the whole change.
-  opencode: emitOpencode,
+  opencode: (...a) => withWriteRecord(() => emitOpencode(...a)),
 };
 
 /**
@@ -648,24 +651,21 @@ const PROJECT_EMITS = {
  * carry straight past the parameter default.
  */
 function axesCfg({
-  posture, mode, trust, doctrines, excludeRules, excludeSkills,
-  deletionGate = null, secretsGate = null, doneGate = null,
+  posture, mode, trust, doctrines, excludeRules, excludeSkills, ...gates
 }) {
   return makeCfg({
     ...(posture ? { posture } : {}), ...(mode ? { mode } : {}), ...(trust ? { trust } : {}),
     ...(doctrines ? { doctrines } : {}), ...(excludeRules ? { excludeRules } : {}),
     ...(excludeSkills ? { excludeSkills } : {}),
-    // Only an explicit `false` disarms; `null` (no opinion) keeps the gate.
-    ...(deletionGate === false ? { noDeletionGate: true } : {}),
-    ...(secretsGate === false ? { noSecretsGate: true } : {}),
-    ...(doneGate === false ? { noDoneGate: true } : {}),
+    // The gate switches (`GATE_SWITCHES` keys): only an explicit `false` disarms; `null` (no
+    // opinion) keeps the gate.
+    ...Object.fromEntries(GATE_SWITCHES.filter((g) => gates[g.key] === false).map((g) => [g.arg, true])),
   });
 }
 
 export function emitProjectInto(host, {
   theme, out, root, footprint = 'full', posture = null, mode = null, trust = null,
-  doctrines = null, excludeRules = null, excludeSkills = null, deletionGate = null,
-  secretsGate = null, doneGate = null,
+  doctrines = null, excludeRules = null, excludeSkills = null, ...gates
 }) {
   const emit = PROJECT_EMITS[host];
   // The axes ride the same rail into every `*Into`, and for the same reason: a drift reader
@@ -674,7 +674,7 @@ export function emitProjectInto(host, {
   // checked an all-packs render nobody asked for.
   return withPlatformNewlines(() => emit(
     axesCfg({
-      posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate, secretsGate, doneGate }),
+      posture, mode, trust, doctrines, excludeRules, excludeSkills, ...gates }),
     { theme, footprint, root }, out,
   ));
 }
@@ -689,16 +689,16 @@ export function emitProjectInto(host, {
  */
 export function buildInto({
   theme, out, footprint = 'lean', posture = null, mode = null, trust = null, doctrines = null,
-  excludeRules = null, excludeSkills = null, deletionGate = null, secretsGate = null, doneGate = null,
+  excludeRules = null, excludeSkills = null, ...gates
 }) {
   return withPlatformNewlines(() => build(axesCfg({
-    posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate, secretsGate, doneGate }),
+    posture, mode, trust, doctrines, excludeRules, excludeSkills, ...gates }),
     theme, out, { footprint, nativeCatalog: false }));
 }
 
 export function emitGlobalInto(host, {
   theme, out, cfgDir, footprint, posture = null, mode = null, doctrines = null, trust = null,
-  excludeRules = null, excludeSkills = null, deletionGate = null, secretsGate = null, doneGate = null,
+  excludeRules = null, excludeSkills = null, ...gates
 }) {
   // `build.HOSTS.get(host, build.HOSTS["opencode"])` — an unknown host falls back rather than
   // raising, because the host comes from a marker file a user can edit.
@@ -715,7 +715,7 @@ export function emitGlobalInto(host, {
   // the same scar the footprint left in `diffCollect`, one axis over each time.
   return withPlatformNewlines(() => emit(
     axesCfg({
-      posture, mode, trust, doctrines, excludeRules, excludeSkills, deletionGate, secretsGate, doneGate }),
+      posture, mode, trust, doctrines, excludeRules, excludeSkills, ...gates }),
     { theme, footprint, root: null, cfgDir }, out,
   ));
 }

package/js/build/emit-claude.mjs

@@ -182,7 +182,7 @@ export function emitClaudeRender(cfg, job) {
   // WIRE — see `claudeWire` below. One child per emit, so the two halves are two
   // functions rather than two spawns; the seam between them is a call, not a process.
   const managed = claudeWire(job, claudeMdText, agentText !== null, cfg.doctrines,
-    cfg.excludeRules, cfg.deletionGate, { secretsGate: cfg.secretsGate, doneGate: cfg.doneGate });
+    cfg.excludeRules, cfg);
 
   return {
     owned,
@@ -216,7 +216,7 @@ export function emitClaudeRender(cfg, job) {
  * always a string, so `''` is the only falsy value either language sees.
  */
 function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRules = [],
-  deletionGate = true, gates = {}) {
+  gates = {}) {
   phaseLog('WIRE');
   const { cfgDir, claudeMd, scope, host, oldManaged, preambleExclude, hookOpts } = job;
   const old = oldManaged && typeof oldManaged === 'object' && !Array.isArray(oldManaged)
@@ -280,7 +280,7 @@ function claudeWire(job, claudeMdText, hasAgentText, doctrines = null, excludeRu
   // DECIDES the install's packs, so the marker on disk is still the previous build's.
   const [, managedHooks] = mergeClaudeSettings(
     settingsPath, oldSf === settingsName ? get(old, 'settings_hooks') : null, hookOpts,
-    doctrines, excludeRules, host, cfgDir, deletionGate, gates,
+    doctrines, excludeRules, host, cfgDir, gates,
   );
   managed.settings_hooks = managedHooks;
 

package/js/build/generate.mjs

@@ -141,8 +141,7 @@ export function cmdBuild(args) {
  */
 export function setupBuildArgs(theme, emit, out = null, root = null, footprint = 'lean',
   posture = 'peer', mode = 'direct', doctrines = null, allPacks = PACK_ORDER,
-  excludeRules = null, trust = DEFAULT_PRESET, excludeSkills = null, deletionGate = true,
-  { secretsGate = true, doneGate = true } = {}) {
+  excludeRules = null, trust = DEFAULT_PRESET, excludeSkills = null, gates = {}) {
   const argv = ['--theme', theme, '--emit', emit];
   if (!emit.endsWith('-global')) {
     if (out) argv.push('--out', out);
@@ -172,9 +171,9 @@ export function setupBuildArgs(theme, emit, out = null, root = null, footprint =
   if (excludeSkills?.length) argv.push('--exclude-skills', excludeSkills.join(','));
   // The gate switches elide when armed: the driver's default IS armed (no config key feeds
   // them), so only an explicit `false` speaks, and every armed argv stays the bytes it was.
+  // `gates` is one object keyed as `GATE_SWITCHES` keys it (`gatesOfDir`, a profile, a body).
   // Law order, so a Law IV-only install still ends on `--no-deletion-gate` as it did.
-  const gates = { secretsGate, doneGate, deletionGate };
-  for (const g of GATE_SWITCHES) if (gates[g.key] === false) argv.push(g.flag);
+  for (const g of GATE_SWITCHES) if (gates?.[g.key] === false) argv.push(g.flag);
   return argv;
 }
 
@@ -238,7 +237,7 @@ export function installProfile(host, scope, root, notify = null) {
   const gates = gatesOfDir(root, host);
   const out = scope === 'global' ? null : root;
   const argv = setupBuildArgs(theme, emit, out, out, footprint, posture, mode, doctrines,
-    PACK_ORDER, excludeRules, trust, excludeSkills, gates.deletionGate, gates);
+    PACK_ORDER, excludeRules, trust, excludeSkills, gates);
   // A GLOBAL ROW NAMES ITS OWN DIR. `root` came from the host's config-dir resolver, which
   // honours env overrides (`OPENCODE_CONFIG_DIR`, `CLAUDE_CONFIG_DIR`…); without the flag the
   // same argv run from a shell lacking that variable re-emits into the DEFAULT dir — a second

package/js/build/source.mjs

@@ -385,6 +385,19 @@ export function resolveSkillNames(names, {
   return { ids: [...new Set(ids)].sort(), notices, unknown };
 }
 
+/**
+ * The laws whose hook gate an install can switch off, in law order: the cfg/profile key, the
+ * build flag, the carrier marker (`<marker>: off`, written only when off) and the law. ONE
+ * table, so the flag, the marker, the rebuild argv, the read-back and `status` cannot drift
+ * apart. Every gate is ARMED by default and the law's text binds either way. The deletion row
+ * is #319's, unchanged: existing installs carry its flag and marker.
+ */
+export const GATE_SWITCHES = [
+  { key: 'secretsGate', flag: '--no-secrets-gate', arg: 'noSecretsGate', marker: 'Secrets gate', law: 'I' },
+  { key: 'doneGate', flag: '--no-done-gate', arg: 'noDoneGate', marker: 'Done gate', law: 'III' },
+  { key: 'deletionGate', flag: '--no-deletion-gate', arg: 'noDeletionGate', marker: 'Deletion gate', law: 'IV' },
+];
+
 /**
  * `_build_core.js_cfg()`, originated rather than received.
  *
@@ -399,8 +412,7 @@ export function resolveSkillNames(names, {
  */
 export function makeCfg({
   posture = 'peer', mode = 'direct', trust = DEFAULT_PRESET, doctrines = PACK_ORDER,
-  excludeRules = [], excludeSkills = [], noDeletionGate = false, noSecretsGate = false,
-  noDoneGate = false,
+  excludeRules = [], excludeSkills = [], ...switches
 } = {}) {
   return {
     root: ROOT,
@@ -428,25 +440,9 @@ export function makeCfg({
     excludeRules: Array.isArray(excludeRules) ? [...excludeRules] : [],
     // Skill names left out of this install — same "unspecified takes nothing away" default.
     excludeSkills: Array.isArray(excludeSkills) ? [...excludeSkills] : [],
-    // Law IV's deletion gate (`--no-deletion-gate`). Armed unless switched off in so many words:
-    // only a literal `true` disarms, so every caller that never heard of the switch keeps it.
-    deletionGate: noDeletionGate !== true,
-    // Law I's secret scan (`--no-secrets-gate`) and Law III's done gate (`--no-done-gate`), the
-    // same contract (user decision 2026-10-18; see GATE_SWITCHES).
-    secretsGate: noSecretsGate !== true,
-    doneGate: noDoneGate !== true,
+    // The gate switches (`GATE_SWITCHES`: `secretsGate`, `doneGate`, `deletionGate`), each armed
+    // unless its `no*` arg says so in so many words: only a literal `true` disarms, so every
+    // caller that never heard of a switch keeps the gate.
+    ...Object.fromEntries(GATE_SWITCHES.map((g) => [g.key, switches[g.arg] !== true])),
   };
 }
-
-/**
- * The laws whose hook gate an install can switch off, in law order: the cfg/profile key, the
- * build flag, the carrier marker (`<marker>: off`, written only when off) and the law. ONE
- * table, so the flag, the marker, the rebuild argv, the read-back and `status` cannot drift
- * apart. Every gate is ARMED by default and the law's text binds either way. The deletion row
- * is #319's, unchanged: existing installs carry its flag and marker.
- */
-export const GATE_SWITCHES = [
-  { key: 'secretsGate', flag: '--no-secrets-gate', arg: 'noSecretsGate', marker: 'Secrets gate', law: 'I' },
-  { key: 'doneGate', flag: '--no-done-gate', arg: 'noDoneGate', marker: 'Done gate', law: 'III' },
-  { key: 'deletionGate', flag: '--no-deletion-gate', arg: 'noDeletionGate', marker: 'Deletion gate', law: 'IV' },
-];

package/js/hosts/gitref.mjs

@@ -12,9 +12,11 @@
  * `child_process` ban like every other closure that feeds `bin/geneseed-cli.mjs` — may ever
  * import. A module that is fs/path only is importable from anywhere.
  *
- * The OpenCode guard plugin once kept a standalone twin of this for its `permission.ask`
- * loop exemption; upstream never calls that hook, so the twin was deleted (OpenCode verdict
- * I-2). This module has no copy to keep in step.
+ * The OpenCode guard plugin (`adapters/opencode/plugins/geneseed-guard.js`) is copied whole
+ * into an install and cannot import this, so it carries twins of `gitRootOf`, `gitDirOf`,
+ * `gitCommonDirOf`, `currentBranch`, `protectedBranches` and `stashExists` for its Law IV and
+ * protected-checks gates. `tests/plugins/guard.test.mjs` compares each with the original here;
+ * change one, change both.
  */
 import { existsSync, statSync, lstatSync, readFileSync, readdirSync, openSync, readSync, closeSync } from 'node:fs';
 import path from 'node:path';