feat: load a private repository's agent instructions without repository files

docs/install/claude-code.md

@@ -10,6 +10,13 @@ calling out, after a word on what the install writes.
   17 agent wrappers are written to `~/.claude/agents/docket-*.md`, each carrying the model and
   effort resolved from your global config over the built-in table. Nothing is written per
   repository for these.
+- **Two `SessionStart` hooks in `~/.claude/settings.json`.** These content-free hooks run
+  `dckt instructions --hook claude --section dispatch` and
+  `dckt instructions --hook claude --section lessons`, which print nothing outside a private
+  repository, so they are inert everywhere else. A `settings.json` docket cannot edit in place (a
+  symlink, or a file docket cannot parse, such as one with comments) is left untouched, and the
+  run warns about it. Uninstall removes the hooks
+  only while they are unchanged.
 - **The dispatch block in `CLAUDE.md`, on opt-in only.** When a repository's `.docket.yml` or
   `.docket.local.yml` lists `claude` in `agent_harnesses`, the install reconciles a
   marker-bounded `docket` dispatch block in that repository's `CLAUDE.md`. When Codex or opencode is

docs/install/codex.md

@@ -1,6 +1,6 @@
 # Codex: running docket under Codex
 
-Codex is a first-class docket harness. An install writes two kinds of Codex artifact:
+Codex is a first-class docket harness. An install writes three kinds of Codex artifact:
 
 - **User-level skills and agent wrappers.** docket's skills are linked under the harness-neutral
   `~/.agents/skills/` root, which Codex reads, and its 17 agent wrappers are written to
@@ -13,6 +13,11 @@ Codex is a first-class docket harness. An install writes two kinds of Codex arti
   `.toml` agent (Codex reads `AGENTS.md`; it has no analog of Cursor's `.mdc` rule). The block is
   **committed and machine-neutral**: it carries only agent names and routing instructions, never a
   model ID or effort value, so it is identical in every clone (ADR-0036).
+- **A `dckt:private-instructions` pointer block in `~/.codex/AGENTS.md`.** This user-level,
+  content-free block asks Codex to run `dckt instructions` once at the start of a session and to
+  follow whatever it prints as the repository's own `AGENTS.md`. Outside a private repository the
+  command prints nothing, so the block is inert. It needs no opt-in, and uninstall removes it only
+  while it is unchanged.
 
 ### The opt-in you need
 

docs/install/cursor.md

@@ -10,6 +10,11 @@ small, stable permission configuration, because docket must run **outside** Curs
   `description`, and a `model:` line wherever a model resolves, with any reasoning effort encoded
   inside the model value. Agent overrides come from your global config only. Nothing is written
   per repository for these.
+- **A `sessionStart` hook in `~/.cursor/hooks.json`.** This content-free hook runs
+  `dckt instructions --hook cursor`, which prints nothing outside a private repository, so it is
+  inert everywhere else. A `hooks.json` docket cannot edit in place (a symlink, or a file docket
+  cannot parse, such as one with comments) is left untouched, and the run warns about it. Uninstall removes the hook only while it is
+  unchanged.
 - **The dispatch rule, on opt-in only.** When a repository's `.docket.yml` or `.docket.local.yml`
   lists `cursor` in `agent_harnesses`, the install writes `.cursor/rules/docket-dispatch.mdc` in that
   repository. It tells Cursor to dispatch a docket workflow to its matching agent instead of running

docs/install/install.md

@@ -46,6 +46,16 @@ harness, after editing a config file, and after every version update). A single
   global agent wrappers** — the model/effort-pinned subagent copies, resolved from your global
   config over docket's built-in defaults. Wrappers are user-level only; no repository carries its
   own copies.
+- **Installs one content-free session trigger per harness**, so a private repository's agent
+  instructions load without any file in that repository: two Claude Code `SessionStart` hooks in
+  `~/.claude/settings.json` (`dckt instructions --hook claude --section dispatch` and
+  `dckt instructions --hook claude --section lessons`), a Cursor `sessionStart` hook in
+  `~/.cursor/hooks.json` (`dckt instructions --hook cursor`), the OpenCode plugin
+  `~/.config/opencode/plugins/dckt-instructions.js`, and a `dckt:private-instructions` pointer
+  block in `~/.codex/AGENTS.md`. Each one only runs `dckt instructions`, which prints nothing
+  outside a private repository, so a trigger is inert everywhere else. A hooks file docket cannot
+  edit in place (a symlink, or a file docket cannot parse, such as one with comments) is left
+  untouched, and the run warns about it.
 - **Retires the old global parent-facing dispatch blocks** that earlier docket versions wrote into
   your personal `~/.claude/CLAUDE.md` and the other harnesses' global instruction files, while
   keeping the global skills and agent wrappers. Removal is **proof-gated** — the engine deletes a
@@ -75,7 +85,9 @@ Claude-Code-only user can stop here. To pin a model or change a default on this
 ## Uninstalling docket
 
 `docket uninstall` removes the harness integrations docket recorded for you — the
-global `skills/` symlinks and `agents/` wrappers it wrote — and nothing else. With
+global `skills/` symlinks, the `agents/` wrappers, and the session triggers it wrote
+(the hook entries, the OpenCode plugin, and the Codex pointer block, each removed only
+while it is unchanged) — and nothing else. With
 no flag it removes **every recorded harness**; a repeatable **`--harness <name>`**
 limits the run to the harness(es) you name, and duplicate `--harness` values are
 de-duplicated before anything is touched. **`--dry-run`** reports exactly what a

docs/install/opencode.md

@@ -1,6 +1,6 @@
 # opencode: running docket under opencode
 
-opencode is a first-class docket harness. An install writes two kinds of opencode artifact:
+opencode is a first-class docket harness. An install writes three kinds of opencode artifact:
 
 - **User-level skills and agent definitions**, under
   `${XDG_CONFIG_HOME:-~/.config}/opencode/`: docket's skills are linked under `skills/`, and its 17
@@ -13,6 +13,10 @@ opencode is a first-class docket harness. An install writes two kinds of opencod
   block, **shared with Codex**: opencode reads the same committed project-root `AGENTS.md`, so one
   managed block serves both. A repo targeting either harness gets it; a repo targeting both gets it
   exactly once. It is **committed and machine-neutral** (ADR-0036).
+- **The `plugins/dckt-instructions.js` plugin**, under the same user-level opencode directory. This
+  content-free plugin runs `dckt instructions` and adds whatever it prints to the system prompt.
+  Outside a private repository the command prints nothing, so the plugin is inert. It needs no
+  opt-in, and uninstall removes it only while it is unchanged.
 
 ### The opt-in you need