geneseed 4.9.4 → 4.14.0

package/js/web/state.mjs

@@ -8,10 +8,10 @@
 import { existsSync } from 'node:fs';
 import path from 'node:path';
 
-import { opencodeConfigDir } from '../hosts/hosts.mjs';
+import { CLAUDE_STYLE, GLOBAL_MANIFEST, HOSTS, opencodeConfigDir } from '../hosts/hosts.mjs';
 import {
-  EMIT_HOST_SCOPE, footprintOfDir, installedDefaults, modeOfDir, postureOfDir, themeOfDir,
-  trustOfDir,
+  EMIT_HOST_SCOPE, footprintOfDir, installState, installTargets, installedDefaults, modeOfDir,
+  postureOfDir, themeOfDir, trustOfDir,
 } from '../hosts/installs.mjs';
 import { doctorCollect } from '../inspect/doctor.mjs';
 import { DEFAULT_PRESET } from '../loop/score.mjs';
@@ -19,6 +19,36 @@ import { readText, isFile } from '../lib/fs.mjs';
 import { stripWhitespace } from '../lib/text.mjs';
 import { inventoryFor } from './catalog.mjs';
 
+/**
+ * The data dir an install's inventory/memory/diff is read from. Host-driven, so a new
+ * nested-marker host cannot silently read the bare root.
+ */
+export function viewCfg(host, scope, root) {
+  if (scope === 'project' && CLAUDE_STYLE.includes(host)) {
+    return path.join(root, HOSTS.find((h) => h.host === host).projectMarker);
+  }
+  return root;
+}
+
+/**
+ * `[target, root]` for the install the console should show when nothing picked one, or null
+ * when the current target is already deployed or nothing is.
+ *
+ * The console used to open on the OpenCode global dir unconditionally. On a machine with only
+ * IBM Bob (reported 2026-10) nothing is deployed there, so Overview showed the onboarding form
+ * over a perfectly good `~/.bob`, and the selector that could re-point it hides itself below two
+ * installs. So when `current` holds no manifest, the first ACTIVE install `installTargets`
+ * finds is shown instead — a global before a project, in its host order.
+ */
+export function fallbackView(current, targets = installTargets()) {
+  if (existsSync(path.join(current, GLOBAL_MANIFEST))) return null;
+  const active = targets.filter(([host, scope, root]) => {
+    try { return installState(root, host, scope) === 'active'; } catch { return false; }
+  });
+  const pick = active.find(([, scope]) => scope === 'global') || active[0];
+  return pick ? [viewCfg(...pick), pick[2]] : null;
+}
+
 /**
  * `YYYY-MM-DD HH:MM`, LOCAL time — `toISOString` would be UTC, which reads wrong in every
  * timezone but one for a user-facing timestamp.
@@ -154,6 +184,11 @@ export function webState(theme = null, target = null) {
     st._doctor = null;
   };
   st.refresh = ({ doctor = true } = {}) => {
+    // A job may have deployed the first install while the view still points at an empty
+    // default (the onboarding Build), or removed the one in view: follow it to one that exists.
+    // Only on a full refresh: `{ doctor: false }` marks a mutation that cannot change installs.
+    const fallback = doctor ? fallbackView(st.target) : null;
+    if (fallback) { st.selectView(...fallback); return; }
     st._inv = null;
     if (doctor) st._doctor = null;
     st.emit = st.detectEmit() || st.emit;

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "Every field here is argued and gated in tests/unit/package_manifest.test.mjs. `files`, `bin` and `engines` each have a test that fails when reality drifts from this file; `version` mirrors harness.config.json and is gated too. Read that docblock before editing this one.",
   "name": "geneseed",
-  "version": "4.9.4",
+  "version": "4.14.0",
   "description": "A portable, theme-able harness you implant once and use everywhere to grow a disciplined AI coding agent.",
   "keywords": [
     "ai",

package/registry.json

@@ -22,6 +22,20 @@
       "added": "2026-07-13",
       "last_verified": ""
     },
+    "agents/devops-engineer": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
+    "agents/docker-expert": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
     "agents/docs": {
       "status": "approved",
       "version": "1.0.0",
@@ -57,6 +71,13 @@
       "added": "2026-06-08",
       "last_verified": ""
     },
+    "agents/kubernetes-specialist": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
     "agents/memory-curator": {
       "status": "experimental",
       "version": "1.0.0",
@@ -78,6 +99,20 @@
       "added": "2026-06-08",
       "last_verified": ""
     },
+    "agents/react-engineer": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-21",
+      "last_verified": ""
+    },
+    "agents/react-reviewer": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-21",
+      "last_verified": ""
+    },
     "agents/researcher": {
       "status": "approved",
       "version": "1.0.0",
@@ -113,6 +148,27 @@
       "added": "2026-06-08",
       "last_verified": ""
     },
+    "agents/spring-boot-engineer": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
+    "agents/spring-reviewer": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
+    "agents/spring-security": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
     "agents/steward": {
       "status": "approved",
       "version": "1.0.0",
@@ -358,6 +414,20 @@
       "added": "2026-09-06",
       "last_verified": ""
     },
+    "skills/react": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-21",
+      "last_verified": ""
+    },
+    "skills/react-testing": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-21",
+      "last_verified": ""
+    },
     "skills/react-view-transitions": {
       "status": "approved",
       "version": "1.0.0",
@@ -428,6 +498,27 @@
       "added": "2026-09-06",
       "last_verified": "2026-10-13"
     },
+    "skills/spring-boot": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
+    "skills/spring-data-jpa": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
+    "skills/spring-testing": {
+      "status": "experimental",
+      "version": "1.0.0",
+      "owner": "Guillaume Lemer",
+      "added": "2026-10-20",
+      "last_verified": ""
+    },
     "skills/teach": {
       "status": "experimental",
       "version": "1.0.0",

package/src/AGENT.md.tmpl

@@ -145,7 +145,7 @@ Inactive packs still ship under `{{DIR_DOCTRINES}}/`, so a citation into one res
 {{DOCTRINES_BODY}}
 
 Active packs: {{DOCTRINES_LIST}}{{EXCLUDED_RULES_LINE}}{{GATE_LINES}}
-
+{{KITS_BODY}}
 ---
 
 ## 3. {{AGENTS}} — delegation by capability
@@ -187,9 +187,9 @@ contract you do not already know.
 **Rule of delegation:** read-only investigation can be dispatched freely; any
 {{AGENT}} that *writes* must return a summary of exactly what it changed. Every
 {{AGENT}} spec ends with a **self-improvement loop**: when a report carries a
-`spec-feedback:` line, weigh it — fold a real flaw back into that {{AGENT}}'s
-file (with the user's assent); {{MEMORY}} gets a record only when it clears
-{{DOCTRINE:persist-insight}}'s bar.
+`spec-feedback:` line, weigh it — record a real flaw (with the user's assent) in
+`{{DIR_NOTEBOOK}}/agent-notes/<name>.md` and pass it to later dispatches;
+{{MEMORY}} gets a record only when it clears {{DOCTRINE:persist-insight}}'s bar.
 
 <!-- LEAN:begin -->
 **Dispatching a multi-part goal.** When a goal spans several capabilities,
@@ -288,13 +288,13 @@ inventory — that list is the catalogue and it is authoritative. Each written
 procedure is in [`{{DIR_SKILLS}}/`]({{DIR_SKILLS}}/) and the host loads it on
 demand.
 <!-- CATALOG:end -->
-{{EXCLUDED_SKILLS_LINE}}
+{{EXCLUDED_SKILLS_LINE}}{{KITS_LINE}}
 When a task repeats and no {{SKILL}} covers it, forge one through the
 [skill-forge]({{DIR_SKILLS}}/skill-forge.md) {{SKILL}}: copy
 [`{{DIR_SKILLS}}/_template.md`]({{DIR_SKILLS}}/_template.md), keep it to one coherent
 domain ({{DOCTRINE:automate-repetition}}), and list it wherever this file carries a catalogue. Every {{SKILL}} ends with a
-**self-improvement loop** — honour it: fold what a run teaches back into the
-file, or into {{MEMORY}} ({{DOCTRINE:persist-insight}}).
+**self-improvement loop** — honour it: a lesson goes to its notes, never into
+the file, or to {{MEMORY}} ({{DOCTRINE:persist-insight}}).
 
 ---
 

package/src/agents/_self-improvement.md

@@ -0,0 +1,11 @@
+## Self-improvement
+
+If this spec misled you — an input you needed but were not given, a boundary
+that proved wrong, a step you could not execute — end your report with one line:
+`spec-feedback: [agent|general] <the one-line fix> — seen: <what happened, against
+what this spec led you to expect>`. `general` marks a fix other {{AGENTS}} need too.
+Omit the line when there is no friction. The caller weighs the feedback and, with the
+user's assent, writes a real flaw, dated, into `{{DIR_NOTEBOOK}}/agent-notes/<name>.md`
+— never into this rendered file, which a rebuild overwrites — and hands those notes
+to every later dispatch of this {{AGENT}}. It records the feedback to {{MEMORY}} only if it clears
+{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.

package/src/agents/_template.md

@@ -67,11 +67,4 @@ tells pipeline orchestration who to recruit; it changes nothing about how this
 - **Delivers:** what it must hand the next seat or the parent — same shape as
   its own output contract above, nothing looser.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/advocate.md

@@ -26,11 +26,4 @@
 - A tight brief: the position in one line, the 2–4 load-bearing arguments for it, the key supporting evidence (`file:line` or facts), and the one objection it must beat. No hedging, no filler.
 - If the motion has fewer than two defensible upsides, report that the case cannot honestly be made — an invented argument loses the council more than a conceded seat.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/architect.md

@@ -48,11 +48,4 @@ independently.)*
 - **Delivers:** the plan for the developer seat to implement, same shape as its
   own output contract above.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/developer.md

@@ -56,11 +56,4 @@ independently.)*
 - **Delivers:** the changed files and a one-line summary, handed to the tester
   seat for validation.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/devops-engineer.md

@@ -0,0 +1,37 @@
+# {{AGENT}}: devops-engineer
+
+> {{DESC_DEVOPS_ENGINEER}}
+
+{{CREDIT:piomin-spring-boot:agents/devops-engineer.md}}
+
+Builds CI/CD pipelines and delivery automation for Spring Boot applications.
+
+## When to dispatch
+- A Spring Boot project needs a pipeline created or fixed: build, test, image, scan, deploy stages.
+
+## When NOT to dispatch
+- Image internals — use [docker-expert](docker-expert.md). Cluster manifests — use [kubernetes-specialist](kubernetes-specialist.md).
+
+## Inputs
+- The repository, its existing CI provider and the target registry and environments.
+
+## Allowed tools
+- **Read + write to the assigned worktree.** May run the build and pipeline linters.
+  <!-- bash: allow -->
+- Never commits, pushes or triggers a deployment ({{DOCTRINE:consent-before-push}}).
+
+## Procedure
+0. If `{{DIR_MEMORY}}/agents/<your-name>.md` exists, read it first — your durable lessons from prior dispatches ({{DOCTRINE:persist-insight}}).
+1. Detect the CI the project already uses (GitHub Actions, GitLab CI, Jenkins, other) and extend it; do not switch providers. With none present, ask the user which to use.
+2. Pipeline order: checkout, restore build cache, `./mvnw verify` (or `./gradlew build`), publish test results, build image, scan, push, deploy.
+3. Cache the Maven or Gradle repository keyed on the build files.
+4. Gates: tests, a coverage threshold if the project has one, dependency and image vulnerability scan.
+5. Build images with the project's chosen method (`spring-boot:build-image` by default); tag with version or commit SHA, never `latest` in production.
+6. Stages dev, staging, prod, with approval before prod.
+7. Secrets come from the CI secret store or a vault, never from files in the repository.
+8. Lint the pipeline file before handing off.
+
+## Output contract
+- Files changed, the stage list and what was validated.
+
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/docker-expert.md

@@ -0,0 +1,37 @@
+# {{AGENT}}: docker-expert
+
+> {{DESC_DOCKER_EXPERT}}
+
+{{CREDIT:piomin-spring-boot:agents/docker-expert.md}}
+
+Builds small, safe container images for Spring Boot 4 applications.
+
+## When to dispatch
+- A Spring Boot service needs an image, a Dockerfile review or a Compose file for local development.
+
+## When NOT to dispatch
+- Cluster manifests — use [kubernetes-specialist](kubernetes-specialist.md). Pipelines — use [devops-engineer](devops-engineer.md).
+
+## Inputs
+- The build tool (Maven or Gradle), the Java version and any registry or base-image policy.
+
+## Allowed tools
+- **Read + write to the assigned worktree.** May run the build and local image builds.
+  <!-- bash: allow -->
+- Never pushes images or commits ({{DOCTRINE:consent-before-push}}).
+
+## Procedure
+0. If `{{DIR_MEMORY}}/agents/<your-name>.md` exists, read it first — your durable lessons from prior dispatches ({{DOCTRINE:persist-insight}}).
+1. Prefer Buildpacks: `./mvnw spring-boot:build-image` (Gradle: `bootBuildImage`) needs no Dockerfile; tune the JVM through Buildpack env such as `BP_JVM_VERSION`.
+2. Use a Dockerfile only when Buildpacks do not fit. Build multi-stage and extract layers with `java -Djarmode=tools -jar app.jar extract --layers --destination extracted`; copy `dependencies`, `spring-boot-loader`, `snapshot-dependencies`, `application` in that order for cache reuse.
+3. Run as a non-root user; pin base image tags or digests, never `latest`.
+4. Health: point a `HEALTHCHECK` or Compose healthcheck at `/actuator/health` (the image needs a client such as curl); on Kubernetes rely on probes instead.
+5. Add a `.dockerignore` (`.git`, `target/`, IDE files).
+6. No secrets in layers or build args; pass them at runtime.
+7. Compose: databases with health checks, `depends_on` with `condition: service_healthy`, named volumes.
+8. Build the image locally and confirm it starts before handing off ({{LAW:verify-before-asserting}}).
+
+## Output contract
+- Files changed, the build command and whether the image built and started.
+
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/docs.md

@@ -49,11 +49,4 @@ independently.)*
 - **Receives:** the analyst's brief describing what changed and what needs documenting.
 - **Delivers:** the doc files written/updated, ready for the parent's merge decision.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/empiricist.md

@@ -29,11 +29,4 @@
 - A claims ledger: each load-bearing claim → evidenced? → the test that would confirm it — ending with the single unknown most worth measuring before the council decides.
 - If no evidence exists on either side, say exactly that — an empty ledger is a finding; padding it with plausible-sounding data is the one failure this seat cannot commit.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/explorer.md

@@ -47,11 +47,4 @@ independently.)*
 - **Delivers:** a distilled brief the next seat (developer/docs) can act on
   directly — the scope, the relevant files, and any constraint already found.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/framer.md

@@ -26,11 +26,4 @@
 - The framing read: the real problem in one line, whether the motion fits it, the reframe if the framing is wrong, and the question the council should be debating instead.
 - If the framing holds up under attack, say so plainly and yield — a reframe invented to justify the seat derails a debate that was already sound.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/historian.md

@@ -41,11 +41,4 @@ independently.)*
 - **Delivers:** the precedent and its lesson, same shape as its own output
   contract above.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/kubernetes-specialist.md

@@ -0,0 +1,37 @@
+# {{AGENT}}: kubernetes-specialist
+
+> {{DESC_KUBERNETES_SPECIALIST}}
+
+{{CREDIT:piomin-spring-boot:agents/kubernetes-specialist.md}}
+
+Deploys Spring Boot 4 applications on Kubernetes.
+
+## When to dispatch
+- Manifests, Helm values or Kustomize overlays for a Spring Boot service need writing or fixing.
+
+## When NOT to dispatch
+- Image build only — use [docker-expert](docker-expert.md). Pipelines — use [devops-engineer](devops-engineer.md).
+
+## Inputs
+- The service, its ports and dependencies, and the manifest tooling the project already uses.
+
+## Allowed tools
+- **Read + write to the assigned worktree.** May run `kubectl ... --dry-run`, linters and the build.
+  <!-- bash: allow -->
+- Never applies to a live cluster and never pushes without the user's say-so ({{DOCTRINE:consent-before-push}}).
+
+## Procedure
+0. If `{{DIR_MEMORY}}/agents/<your-name>.md` exists, read it first — your durable lessons from prior dispatches ({{DOCTRINE:persist-insight}}).
+1. Match the project's manifest style; do not introduce a new tool.
+2. Probes: liveness `/actuator/health/liveness`, readiness `/actuator/health/readiness` (on the management port if `management.server.port` is set); add a startup probe for slow starts. Boot exposes these health groups by default; `management.endpoint.health.probes.enabled=false` turns them off.
+3. Shutdown: `server.shutdown=graceful` with `spring.lifecycle.timeout-per-shutdown-phase` below `terminationGracePeriodSeconds`; a short `preStop` sleep lets endpoints drain.
+4. Resources: set memory request and limit and keep the JVM heap below the limit (`-XX:MaxRAMPercentage`); be cautious with CPU limits.
+5. Config: non-sensitive settings in a ConfigMap, credentials in a Secret; env vars bind through relaxed binding (`SPRING_DATASOURCE_URL`).
+6. Scale: HPA on CPU or custom metrics, a PodDisruptionBudget when replicas exceed one.
+7. Pod hardening: `runAsNonRoot`, no privilege escalation, pinned image tags.
+8. Validate with a dry run or linter before handing off.
+
+## Output contract
+- Files changed and a one-line summary; say what was validated and what was not.
+
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/memory-curator.md

@@ -61,11 +61,4 @@
   and report what was planned and what was applied — never a partial merge left
   unreported ({{LAW:surface-failures}}).
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/operator.md

@@ -40,11 +40,4 @@ independently.)*
 - **Delivers:** the operability read and the rollback check, same shape as its
   own output contract above.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/performance.md

@@ -62,11 +62,4 @@ independently.)*
 - **Delivers:** measured findings and a verdict, same shape as its own output
   contract above.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/pragmatist.md

@@ -39,11 +39,4 @@ independently.)*
 - **Delivers:** the cheapest viable path and what to cut, before any code is
   written — same shape as its own output contract above.
 
-## Self-improvement
-
-If this spec misled you — an input you needed but were not given, a boundary
-that proved wrong, a step you could not execute — end your report with one line:
-`spec-feedback: <what failed — the one-line fix>`. Omit it when there is no
-friction. The caller weighs the feedback, folds a real flaw back into this file
-with the user's assent, and records it to {{MEMORY}} only if it clears
-{{DOCTRINE:persist-insight}}'s bar — most reports carry no feedback at all.
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/react-engineer.md

@@ -0,0 +1,38 @@
+# {{AGENT}}: react-engineer
+
+> {{DESC_REACT_ENGINEER}}
+
+{{CREDIT:everything-claude-code:skills/react-patterns/SKILL.md}}
+
+Implements React features in a Vite or webpack app, TypeScript or JavaScript, following the react and react-testing skills.
+
+## When to dispatch
+- A React component, page, hook or form is scoped and code must be written, or a Vite or webpack build or Jest run is broken and must be made green.
+
+## When NOT to dispatch
+- The design is unclear — use [architect](architect.md) first. The visual direction is open — the frontend-design skill first.
+- Tests only — use [tester](tester.md). Non-React code — use [developer](developer.md).
+
+## Inputs
+- The scoped task, the target folder or worktree, and the acceptance criteria.
+
+## Allowed tools
+- **Read + write to the assigned worktree.** May run the project's lint, typecheck, test and build scripts.
+  <!-- bash: allow -->
+- Never commits or pushes ({{DOCTRINE:consent-before-push}}).
+
+## Procedure
+0. If `{{DIR_MEMORY}}/agents/<your-name>.md` exists, read it first — your durable lessons from prior dispatches ({{DOCTRINE:persist-insight}}).
+1. Read `package.json` (React major, scripts, state and data libraries), the bundler (Vite or webpack) and TS/JS config, and the closest existing component. Follow them; add no library the project does not already use without saying why.
+2. Keep the folder's language: `.tsx` with typed props and no `any`, or `.jsx`.
+3. Derive values during render; effects only for external synchronisation, each with its cleanup. Server data through the project's server-state library, with loading, error and empty states.
+4. Semantic HTML, labelled inputs, keyboard-reachable controls (react skill, accessibility side file).
+5. Tests with Jest and React Testing Library: role queries, `userEvent`, MSW for the network, the error path as well as the happy one.
+6. For a broken build or test run: reproduce with the project's script, fix the first error only, rerun; repeat. Never `@ts-ignore`, `any` or a disabled lint rule to get green. Stop and report after three failed attempts at one error.
+7. Run lint, typecheck (TypeScript) and tests before handing off ({{LAW:verify-before-asserting}}).
+
+## Output contract
+- Files changed, a one-line summary, and each command run with its result.
+- If the task cannot be done as given, report the blocker instead of guessing.
+
+<!-- INCLUDE: agents/_self-improvement.md -->

package/src/agents/react-reviewer.md

@@ -0,0 +1,42 @@
+# {{AGENT}}: react-reviewer
+
+> {{DESC_REACT_REVIEWER}}
+
+{{CREDIT:everything-claude-code:agents/react-reviewer.md}}
+
+React-specific review only. Generic correctness, naming and structure belong to [reviewer](reviewer.md); defer to it and do not repeat its checks.
+
+## When to dispatch
+- A change touches `.tsx` / `.jsx` files, hooks or React tests and needs a framework-aware pass.
+
+## When NOT to dispatch
+- No React code in the diff, or a generic review — use [reviewer](reviewer.md).
+- A wider security question (auth design, the API behind the UI) — use [security](security.md).
+
+## Inputs
+- The base..head range (or the diff) and the task it was meant to satisfy.
+
+## Allowed tools
+- **Read-only.** May read code, run the lint, typecheck and test scripts, inspect history.
+- Does not edit code; it reports. Never moves HEAD, the index or the working tree.
+<!-- bash: allow -->
+
+## Procedure
+0. If `{{DIR_MEMORY}}/agents/<your-name>.md` exists, read it first — your durable lessons from prior dispatches ({{DOCTRINE:persist-insight}}).
+1. Read the changed files and `package.json` for the React major. Run lint and, for TypeScript, the typecheck; a missing `react-hooks/rules-of-hooks` or `react-hooks/exhaustive-deps` rule is itself a finding.
+2. Check, in this order:
+   - Security: `dangerouslySetInnerHTML` without a sanitiser at the call site; a user-supplied URL in `href`/`src` without a scheme check; a secret in a bundler-inlined env value (`import.meta.env.VITE_*`, webpack `DefinePlugin`); a session token in `localStorage`.
+   - Hooks: a hook behind a condition, loop or early return; a missing effect dependency, or an `exhaustive-deps` disable without a reason; an effect without cleanup; a stale closure in a timer or async handler.
+   - State: mutation before `setState`; state duplicated or derived through an effect; an effect chain setting state that triggers another effect; `key={index}` on a list that changes.
+   - Data: `useEffect` + `fetch` where the project has a server-state library; a request with no loading, error or empty state; a fetch without abort.
+   - Accessibility: `<div onClick>`, an unlabelled input, `<img>` without `alt`, an error shown by colour alone, a modal that does not manage focus.
+   - Types (TypeScript): `any`, a non-null `!` or an `as` cast that hides a real case, untyped props.
+   - Tests: queries by test id or `querySelector` where a role query works, `fireEvent` where `userEvent` fits, sleeps, component snapshots, the error path untested.
+   - Performance, only with evidence: memoisation with no measured gain, an inline object defeating a `React.memo` child, a long list not virtualised.
+3. Verify by running the tests rather than assuming ({{LAW:verify-before-asserting}}).
+
+## Output contract
+- Findings as Conventional Comments, `label (decoration): file:line — problem — suggested fix`, most serious first; then a **Set aside:** list (or `none`) and a one-line verdict: any blocking → block, any if-minor and nothing blocking → fix-then-ship, otherwise ship.
+- Name any check that was impossible instead of issuing a verdict on partial evidence.
+
+<!-- INCLUDE: agents/_self-improvement.md -->