@antoneeo/course-creator 0.1.0-beta.1 → 0.1.0-beta.10

package/CHANGELOG.md

@@ -1,5 +1,70 @@
 # Changelog
 
+## [0.1.0-beta.10] - 2026-10-19
+
+Includes everything listed under [0.1.0-beta.9], which was tagged but never published to npm.
+
+### Added
+- Docs site: each card in Open work and each feature in Features links its merge review and its end-to-end test script, when they exist. They were reachable only inside a feature's chain page; who merges looks in Open work while the work is open, who tests looks in Features after it closed.
+
+### Changed
+- Docs site: Features are listed newest first by their declared start date; those without a start date come last.
+
+## [0.1.0-beta.9] - 2026-10-18
+
+### Changed
+- F-071: a review weighs effort against what the owner asked for. In a design review, each outcome the owner named (the opening request, any entry widening scope, an approved north star) is a row of the conformance statement, saying where the design serves it and what share of the design goes to it; an outcome no section serves, or one served by a minor share while a secondary concern takes the bulk, is a finding. `review.md` §Reviewing.
+- F-071: a review runs where something is left to judge. At level 2 the closure review is due only on a security-sensitive area the lens's Rule Zero names, or at the owner's request; otherwise it does not run and logs no row. After a design or closure PASS, a delta made only of version and release metadata, regenerated indexes and audit-mark records, tool-verified copies of a shared file, and CHANGELOG lines adding no claim is not reviewed: its own check runs and a `NOT DUE` row records it. README or overview prose, an E2E script, a rulings row, doctrine, behaviour, tests and any correction of a review finding are still reviewed. `review.md` §When a review is due.
+- `sdlc_check.py benefit` counts `NOT DUE` rows apart, in no review or findings figure.
+
+## [0.1.0-beta.8] - 2026-10-18
+
+### Fixed
+- F-072 (field run): the `SKILL.md` line that announces the docs site now reads `scripts/docs_site.py --root <project> --open` and says to use it to show the project state. Asked for the state, an agent had opened the site in its own client pane, where it renders blank, and improvised a local server; `--open` opens it in the user's browser, where it works offline.
+
+## [0.1.0-beta.7] - 2026-10-18
+
+### Added
+- F-074: every Vision is born from an owner interview. Before any Vision text is written (project, feature, the course Vision, and the devPNT M-VISION), the agent asks the owner six questions in order, re-asking an answer that has the wrong form: the problem as one concrete case, the benefit as a result for someone, the actors including who takes the initiative, a success signal with its starting value, the boundaries, and the known constraints with where each comes from. Then the owner approves a one- or two-sentence north star in their own words; without it no Vision is written, not even a draft. The blind check still tests that the rules hold; the approved north star shows they are the owner's. `vision.md` §The owner interview.
+
+### Changed
+- `elicitation.md`: the skip path never covers a Vision; the interview is a planned occasion like the round.
+- Bootstrap no longer writes a Vision reconstructed by the agent: the installer seeds `ai_docs/vision/project_vision.md` as a stub awaiting the interview (an existing file is never overwritten).
+- A Non-Goal now bounds scope. It rejects a proposal that pursues what it names; it is not a ban on behaviour that already exists and creates no obligation. A behaviour that must never happen is an Invariant or a constraint with its source.
+- The course Vision template gains North Star and Problem, learners with the initiative, signals with starting values, Non-Goals as scope, and the source of every constraint.
+
+## [0.1.0-beta.6] - 2026-10-18
+
+### Added
+- F-072: `scripts/docs_site.py --root <project>` writes a static, read-only website of what the agent reads in the project: what it is (reading guide, Vision, rules, documents), its open work with each next step verbatim, its courses, and — with a knowledge base — a map of topics, the facts with the exact passage each comes from, what an inferred fact rests on, and the source documents. It opens from disk with the network off, writes outside the docs root, changes nothing in it, and selects, ranks or recommends nothing. Each analysis opens with the chain the agent works through — Vision, use cases, flows and interfaces, risks, solution study, design and tests, merge brief and E2E script, Diary — the Vision's North Star is shown above the home page, and the guides have a page of their own: the guide router, the operative guides with when to read each, and the code-comprehension guides. The chronology lists the dated events the documents declare (Diary entries, spike outcomes, request-record entries, review-log rows, decision records, dated project notes, notes and sources received), most recent first, read with the same F-073 readers `validate` uses. Shared by the four packages (generator, page and battery are byte-identical spine files).
+
+## [0.1.0-beta.5] - 2026-10-17
+
+### Changed
+- F-073: one written form for a dated entry, `**YYYY-MM-DD — label.**`, is taught for Diary entries, spike outcomes and project notes that record an event, and shared readers (`entry_openers`, `request_entries`, `adr_date`, `frontmatter_date`) let a chronology list those events the same way the validator reads them. Three new advisories, which never fail a build, not even `--strict`: undated text in the Diary of an L3 analysis started on or after 2026-10-18; a HANDOFF `next:` longer than 240 characters on an L3 file updated on or after that date (`next:` now holds only the next step, and the state of the work goes to the Diary); and, in `check` only, an open L3 unit whose id another branch or tag uses for a different analysis (one `git grep` over local refs, silent without git). The doctrine now says to choose a new unit's id after fetching, and that a session sharing a checkout with another session works in its own git worktree.
+- The package publishes on npm `latest`, like the other three: `npm i @antoneeo/course-creator` installs the newest version with no separate promotion. The version keeps its `-beta.N` suffix and the README its experimental statement; the `beta` dist-tag no longer advances.
+
+## [0.1.0-beta.4] - 2026-10-17
+
+### Changed
+- F-068 (shared doctrine with kb-agentic): the supersession cascade runs at the unit's closure, once for every supersession since the last one, instead of at each supersession.
+- F1: closing the last open workstream now empties the generated registry `audit/handoff.md` instead of leaving its stale row behind: with zero `HANDOFF_*.md` sources `index` rewrites it empty (keeping `project_notes.md`), and `validate` reports a generated registry that still has rows but no sources as an error.
+- F-069: `graph`, `check`, `stale` and the session-start count are faster on a mature knowledge base, with byte-identical output. Citations of superseded claim ids are found with one pass per living document instead of one scan per (document, id) pair, and one check run reads and resolves each cited extraction once instead of once per claim row. On a synthetic ledger of 2183 rows and 1000 living documents, `graph` drops from 14 s to 4 s. No new flag.
+
+## [0.1.0-beta.3] - 2026-10-13
+
+### Changed
+- F-067: every L3 unit now keeps a verbatim, append-only request record `audit/requests/REQUEST_course_<slug>.md`, started before the Vision Gate: the owner's opening words and every later statement that settles something (answers, approvals, costs, rulings). Artifacts cite its entries instead of paraphrasing; the shared `review.md` asks for the record and makes an owner statement with no resolving entry a finding. Secrets, personal data and confidential third-party or employer information are redacted.
+
+## [0.1.0-beta.2] - 2026-10-08
+
+### Changed
+- F-065: every agent review request opens with a fixed REVIEW MANDATE block copied verbatim, which carries `review.md` itself to the reviewer in Standalone and Hybrid alike; §Requesting now lists every input its clauses check (Functional Spec, Interface Contract, Component Map, audit plan, probe harness, closure test evidence). devPNT performs no review: in Hybrid an agent review with verdict PASS precedes every proposal to devPNT, where the human reviews; after the round cap only the user's explicit decision sends an artifact on, with open findings attached.
+
+### Fixed
+- Shared memory catalog hashes normalize CRLF/LF, avoiding checkout-dependent index mismatches.
+- The validator prints its final check verdict after memory, topic and corpus checks, so their errors count in the summary.
+
 ## [0.1.0-beta.1] - 2026-10-02
 
 - First public beta on the beta channel. Diagnostic simulation does not establish human learning; interfaces and method may change.

package/README.md

@@ -2,12 +2,12 @@
 
 `course-creator` helps an AI agent create a course for a defined learner. It maps what the learner already knows, orders concepts by prerequisite, writes explanations in progressive modules, and links factual statements to reopenable sources. Independent fresh learner agents can expose confusing steps; their results are diagnostic. The course is labeled **efficacy not verified** until enough evidence from real learners supports a narrower claim.
 
-The package is the fourth lens of the Agentic SDLC family. It uses the shared `ai_docs/` project memory and governance. Version 0.1.0-beta.1 supports Standalone mode. This is an experimental beta: the authoring method and artifact contracts may change; human learning efficacy has not been established. Its course artifacts remain readable without the skill.
+The package is the fourth lens of the Agentic SDLC family. It uses the shared `ai_docs/` project memory and governance. Version 0.1.0-beta.4 supports Standalone mode. This is an experimental beta: the authoring method and artifact contracts may change; human learning efficacy has not been established. Its course artifacts remain readable without the skill. Each new course keeps a verbatim, append-only record of the requester's own words and decisions in `audit/requests/`, cited by the analysis and checked by its reviews.
 
 ## Install and initialize
 
 ```sh
-npm install -g @antoneeo/course-creator@beta
+npm install -g @antoneeo/course-creator
 course-creator-install-skill
 cd YOUR_PROJECT
 course-creator-init
@@ -15,6 +15,8 @@ course-creator-init
 
 The installer detects Claude Code, Gemini CLI, Codex and Google Antigravity. Initialization creates absent `ai_docs/` files and a project protocol pointer; it does not overwrite existing project documents. Use `python <skill_dir>/scripts/sdlc_check.py check --root .` to validate the shared SDLC and course structures.
 
+**Docs site** (`scripts/docs_site.py --root <project> [--open]`): a static, offline, read-only website of what the agent reads in the project — reading guide, Vision, rules, documents, open work with each next step, courses and, with a knowledge base, the topic map, each fact with its exact source passage, and the source documents. Written outside `ai_docs/`; nothing is ranked or recommended.
+
 Using the skill in your own project carries no obligation to publish your course or its sources. See [LICENSE](LICENSE) for the software terms and [NOTICE](NOTICE) for attribution.
 
 ## Primary course output

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "course-creator",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.10",
   "description": "Course creation for defined learners, with progressive explanations, sourced facts and diagnostic independent testing.",
   "author": "Antonio Pinto (https://github.com/Antoneeo)"
 }

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@antoneeo/course-creator",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.10",
   "description": "Design sourced, progressive courses for a defined learner with Agentic SDLC governance and diagnostic learner simulations.",
   "keywords": ["claude-code", "gemini-cli", "codex", "course-design", "skill", "ai-agent"],
   "author": "Antonio Pinto (https://github.com/Antoneeo)",
   "license": "Apache-2.0",
-  "publishConfig": { "access": "public", "tag": "beta" },
+  "publishConfig": { "access": "public" },
   "bin": {
     "course-creator-init": "scripts/init.js",
     "course-creator-install-skill": "scripts/postinstall.js"
@@ -35,6 +35,11 @@
     "skills/course-creator/scripts/course_check.py",
     "skills/course-creator/scripts/sdlc_core.py",
     "skills/course-creator/scripts/knowledge.py",
+    "skills/course-creator/scripts/docs_site.py",
+    "skills/course-creator/docs_site/index.html",
+    "skills/course-creator/docs_site/app.js",
+    "skills/course-creator/docs_site/style.css",
+    "skills/course-creator/docs_site/strings.js",
     "skills/course-creator/scripts/entry_point.py",
     "skills/course-creator/scripts/shared_files.py",
     "skills/course-creator/scripts/shared_manifest.json",

package/scripts/init.js

@@ -1,62 +1,62 @@
-#!/usr/bin/env node
-"use strict";
-const fs = require('fs');
-const path = require('path');
-const { execFileSync } = require('child_process');
-const { SKILL_SOURCE, INSTALLED_SKILL_NAME, SELF_LENS, SIBLING_LENSES,
-  CLIENTS, clientDetected, skillTarget, wireOrientHook, detectPython } = require('./lib');
-
-const root = process.cwd();
-const seed = new Map([
-  ['ai_docs/README.md', `---\ndefault_domain: course\n---\n# Project knowledge and course work\n\nRead vision/project_vision.md, INDEX.md and reference/INDEX.md first.\n`],
-  ['ai_docs/vision/project_vision.md', `---\ndescription: Project benefit and boundaries.\nstatus: DRAFT\n---\n# Project Vision\nStatus: DRAFT\n\n## Expected Benefit\n<Discuss with the owner.>\n`],
-  ['ai_docs/vision/roadmap.md', `---\ndescription: Project learning and delivery roadmap.\nstatus: DRAFT\n---\n# Roadmap\nStatus: DRAFT\n`],
-  ['ai_docs/vision/principles.md', `---\ndescription: Decisions that constrain project work.\nstatus: DRAFT\n---\n# Principles\nStatus: DRAFT\n`],
-  ['ai_docs/strategic/architecture.md', `---\ndescription: Verified component inventory.\nstatus: CURRENT\n---\n# Architecture\n\n## Component Map\n| Component | Capability it owns | Contract | Where |\n|---|---|---|---|\n\n## Architectural Patterns\n<Add only verified patterns.>\n`],
-  ['ai_docs/strategic/existing_features.md', `---\ndescription: Existing capabilities verified in this project.\nstatus: CURRENT\n---\n# Existing Features\n`],
-  ['ai_docs/audit/audit_plan.md', `# Audit Plan\n\n| Area | State | Reference | Notes |\n|---|---|---|---|\n| . | PENDING | - | Initial analysis |\n`],
-]);
-function writeIfAbsent(rel, content) {
-  const dest = path.join(root, rel);
-  if (fs.existsSync(dest)) return false;
-  fs.mkdirSync(path.dirname(dest), { recursive: true });
-  fs.writeFileSync(dest, content, 'utf8');
-  console.log(`Created ${rel}`);
-  return true;
-}
-for (const [rel, content] of seed) writeIfAbsent(rel, content);
-for (const dir of ['ai_docs/vision/features', 'ai_docs/reference', 'ai_docs/solutions/courses',
-  'ai_docs/audit/reviews']) fs.mkdirSync(path.join(root, dir), { recursive: true });
-
-const pointer = `# Course Creator project protocol\n\nUse the installed \`course-creator\` skill when the deliverable teaches a defined learner. It applies Agentic SDLC in Standalone mode: triage, project and course Vision, ANALYSIS, progressive explanations, sourced facts, independent diagnostic testing and a truthful efficacy label. Course files live in \`ai_docs/solutions/courses/<slug>/\`. Read \`ai_docs/README.md\` and the skill before working.\n\nInstall if missing: \`npm i -g @antoneeo/course-creator@beta && course-creator-install-skill\`.\n`;
-const pointers = { claude: 'CLAUDE.md', gemini: 'GEMINI.md', codex: 'AGENTS.md',
-  antigravity: 'AGENTS.md' };
-const detected = CLIENTS.filter(clientDetected);
-for (const client of detected) writeIfAbsent(pointers[client.key], pointer);
-writeIfAbsent('.cursorrules', pointer);
-const siblings = new Map();
-for (const client of detected) {
-  const parent = path.dirname(skillTarget(client));
-  for (const [name, lens] of Object.entries(SIBLING_LENSES)) {
-    if (fs.existsSync(path.join(parent, name))) siblings.set(name, lens);
-  }
-}
-if (siblings.size) {
-  const rows = [`- \`${INSTALLED_SKILL_NAME}\` — the **${SELF_LENS}** lens`,
-    ...[...siblings].map(([name, lens]) => `- \`${name}\` — the **${lens}** lens`)];
-  writeIfAbsent('AGENTIC_MULTI_LENS.md',
-    `# Agentic SDLC family routing\n\nRead \`routing.md\` to choose the owner of each deliverable; \`memory.md\` is shared.\n\n${rows.join('\n')}\n`);
-}
-const python = detectPython();
-for (const client of detected.filter(c => c.key === 'claude')) {
-  const result = wireOrientHook({ cwd: root, client, python, docsLabel: 'ai_docs' });
-  console.log(`Claude SessionStart orientation: ${result.code}`);
-}
-if (python) {
-  try {
-    execFileSync(python, [path.join(SKILL_SOURCE, 'scripts/sdlc_check.py'),
-      'index', '--root', root], { stdio: 'ignore' });
-    console.log('Generated ai_docs indexes.');
-  } catch (e) { console.log('Run sdlc_check.py index when Python is available.'); }
-}
-console.log('Course Creator initialization complete.');
+#!/usr/bin/env node
+"use strict";
+const fs = require('fs');
+const path = require('path');
+const { execFileSync } = require('child_process');
+const { SKILL_SOURCE, INSTALLED_SKILL_NAME, SELF_LENS, SIBLING_LENSES,
+  CLIENTS, clientDetected, skillTarget, wireOrientHook, detectPython } = require('./lib');
+
+const root = process.cwd();
+const seed = new Map([
+  ['ai_docs/README.md', `---\ndefault_domain: course\n---\n# Project knowledge and course work\n\nRead vision/project_vision.md, INDEX.md and reference/INDEX.md first.\n`],
+  ['ai_docs/vision/project_vision.md', `---\ndescription: Project benefit and boundaries.\nstatus: DRAFT\n---\n# Project Vision\nStatus: DRAFT\n<!-- STUB: awaiting the owner interview (vision.md §The owner interview). Not a\n     Vision: no artifact traces to it. -->\n`],
+  ['ai_docs/vision/roadmap.md', `---\ndescription: Project learning and delivery roadmap.\nstatus: DRAFT\n---\n# Roadmap\nStatus: DRAFT\n`],
+  ['ai_docs/vision/principles.md', `---\ndescription: Decisions that constrain project work.\nstatus: DRAFT\n---\n# Principles\nStatus: DRAFT\n`],
+  ['ai_docs/strategic/architecture.md', `---\ndescription: Verified component inventory.\nstatus: CURRENT\n---\n# Architecture\n\n## Component Map\n| Component | Capability it owns | Contract | Where |\n|---|---|---|---|\n\n## Architectural Patterns\n<Add only verified patterns.>\n`],
+  ['ai_docs/strategic/existing_features.md', `---\ndescription: Existing capabilities verified in this project.\nstatus: CURRENT\n---\n# Existing Features\n`],
+  ['ai_docs/audit/audit_plan.md', `# Audit Plan\n\n| Area | State | Reference | Notes |\n|---|---|---|---|\n| . | PENDING | - | Initial analysis |\n`],
+]);
+function writeIfAbsent(rel, content) {
+  const dest = path.join(root, rel);
+  if (fs.existsSync(dest)) return false;
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  fs.writeFileSync(dest, content, 'utf8');
+  console.log(`Created ${rel}`);
+  return true;
+}
+for (const [rel, content] of seed) writeIfAbsent(rel, content);
+for (const dir of ['ai_docs/vision/features', 'ai_docs/reference', 'ai_docs/solutions/courses',
+  'ai_docs/audit/reviews']) fs.mkdirSync(path.join(root, dir), { recursive: true });
+
+const pointer = `# Course Creator project protocol\n\nUse the installed \`course-creator\` skill when the deliverable teaches a defined learner. It applies Agentic SDLC in Standalone mode: triage, project and course Vision, ANALYSIS, progressive explanations, sourced facts, independent diagnostic testing and a truthful efficacy label. Course files live in \`ai_docs/solutions/courses/<slug>/\`. Read \`ai_docs/README.md\` and the skill before working.\n\nInstall if missing: \`npm i -g @antoneeo/course-creator@beta && course-creator-install-skill\`.\n`;
+const pointers = { claude: 'CLAUDE.md', gemini: 'GEMINI.md', codex: 'AGENTS.md',
+  antigravity: 'AGENTS.md' };
+const detected = CLIENTS.filter(clientDetected);
+for (const client of detected) writeIfAbsent(pointers[client.key], pointer);
+writeIfAbsent('.cursorrules', pointer);
+const siblings = new Map();
+for (const client of detected) {
+  const parent = path.dirname(skillTarget(client));
+  for (const [name, lens] of Object.entries(SIBLING_LENSES)) {
+    if (fs.existsSync(path.join(parent, name))) siblings.set(name, lens);
+  }
+}
+if (siblings.size) {
+  const rows = [`- \`${INSTALLED_SKILL_NAME}\` — the **${SELF_LENS}** lens`,
+    ...[...siblings].map(([name, lens]) => `- \`${name}\` — the **${lens}** lens`)];
+  writeIfAbsent('AGENTIC_MULTI_LENS.md',
+    `# Agentic SDLC family routing\n\nRead \`routing.md\` to choose the owner of each deliverable; \`memory.md\` is shared.\n\n${rows.join('\n')}\n`);
+}
+const python = detectPython();
+for (const client of detected.filter(c => c.key === 'claude')) {
+  const result = wireOrientHook({ cwd: root, client, python, docsLabel: 'ai_docs' });
+  console.log(`Claude SessionStart orientation: ${result.code}`);
+}
+if (python) {
+  try {
+    execFileSync(python, [path.join(SKILL_SOURCE, 'scripts/sdlc_check.py'),
+      'index', '--root', root], { stdio: 'ignore' });
+    console.log('Generated ai_docs indexes.');
+  } catch (e) { console.log('Run sdlc_check.py index when Python is available.'); }
+}
+console.log('Course Creator initialization complete.');

package/scripts/lib.js

@@ -3,8 +3,8 @@
 
 const fs = require('fs');
 const path = require('path');
-const os = require('os');
-const crypto = require('crypto');
+const os = require('os');
+const crypto = require('crypto');
 const { execSync } = require('child_process');
 
 const PACKAGE_ROOT = path.resolve(__dirname, '..');
@@ -449,104 +449,104 @@ function pathsEqual(a, b) {
     return false;
   }
 }
-function pathInside(child, parent) {
+function pathInside(child, parent) {
   try {
     const rel = path.relative(String(parent), String(child));
     return rel !== '' && !rel.startsWith('..') && !path.isAbsolute(rel);
   } catch (e) {
     return false;
   }
-}
-
-// Ownership is per file. An existing directory without our marker belongs to its
-// owner, and a file edited after installation is retained on uninstall.
-const INSTALL_MARKER = '.course-creator-install.json';
-function hashFile(file) {
-  return crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
-}
-function sourceFiles(dir = SKILL_SOURCE, prefix = '') {
-  const found = [];
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    if (entry.isSymbolicLink()) continue;
-    const rel = path.join(prefix, entry.name);
-    if (entry.isDirectory()) found.push(...sourceFiles(path.join(dir, entry.name), rel));
-    else if (entry.isFile()) found.push(rel);
-  }
-  return found;
-}
-function safeOwnedPath(target, rel) {
-  if (path.isAbsolute(rel) || rel.split(/[\\/]/).includes('..')) return null;
-  const full = path.resolve(target, rel);
-  if (!pathInside(full, target)) return null;
-  let cur = path.resolve(target);
-  for (const part of path.relative(cur, full).split(path.sep)) {
-    cur = path.join(cur, part);
-    if (fs.existsSync(cur) && fs.lstatSync(cur).isSymbolicLink()) return null;
-  }
-  return full;
-}
-function ownedMarker(target) {
-  const marker = path.join(target, INSTALL_MARKER);
-  if (!fs.existsSync(marker)) return null;
-  try {
-    if (!fs.lstatSync(marker).isFile() || fs.lstatSync(marker).isSymbolicLink()) return null;
-    const data = JSON.parse(fs.readFileSync(marker, 'utf8'));
-    return data.skill === INSTALLED_SKILL_NAME && data.files &&
-      typeof data.files === 'object' ? data : null;
-  } catch (e) { return null; }
-}
-function installOwned(target) {
-  if (!fs.existsSync(SKILL_SOURCE)) return { code: 'missing-source' };
-  if (fs.existsSync(target) && (!fs.lstatSync(target).isDirectory() ||
-      fs.lstatSync(target).isSymbolicLink())) return { code: 'unowned' };
-  const existing = fs.existsSync(target) ? fs.readdirSync(target) : [];
-  const prior = ownedMarker(target);
-  if (existing.length && !prior) return { code: 'unowned' };
-  fs.mkdirSync(target, { recursive: true });
-  const owned = { ...(prior ? prior.files : {}) };
-  let copied = 0, preserved = 0;
-  for (const rel of sourceFiles()) {
-    const dest = safeOwnedPath(target, rel);
-    if (!dest) { preserved++; continue; }
-    if (fs.existsSync(dest)) {
-      if (!Object.hasOwn(owned, rel) || hashFile(dest) !== owned[rel]) {
-        preserved++; continue;
-      }
-    }
-    fs.mkdirSync(path.dirname(dest), { recursive: true });
-    fs.copyFileSync(path.join(SKILL_SOURCE, rel), dest);
-    owned[rel] = hashFile(dest);
-    copied++;
-  }
-  fs.writeFileSync(path.join(target, INSTALL_MARKER),
-    JSON.stringify({ skill: INSTALLED_SKILL_NAME, files: owned }, null, 2) + '\n');
-  return { code: 'installed', copied, preserved };
-}
-function uninstallOwned(target) {
-  if (!fs.existsSync(target) || fs.lstatSync(target).isSymbolicLink()) {
-    return { code: 'unowned' };
-  }
-  const prior = ownedMarker(target);
-  if (!prior) return { code: 'unowned' };
-  let removed = 0, preserved = 0;
-  for (const [rel, hash] of Object.entries(prior.files)) {
-    const dest = safeOwnedPath(target, rel);
-    if (!dest || !fs.existsSync(dest) || !fs.lstatSync(dest).isFile() ||
-        hashFile(dest) !== hash) { preserved++; continue; }
-    fs.unlinkSync(dest);
-    removed++;
-  }
-  fs.unlinkSync(path.join(target, INSTALL_MARKER));
-  // Remove only empty directories; a user-owned file keeps its parent.
-  const dirs = new Set(Object.keys(prior.files).map(rel => path.dirname(rel)));
-  for (const rel of [...dirs].sort((a, b) => b.length - a.length)) {
-    const dir = path.resolve(target, rel);
-    if (!pathInside(dir, target)) continue;
-    try { fs.rmdirSync(dir); } catch (e) { /* non-empty or absent */ }
-  }
-  try { fs.rmdirSync(target); } catch (e) { /* user files remain */ }
-  return { code: 'removed', removed, preserved };
-}
+}
+
+// Ownership is per file. An existing directory without our marker belongs to its
+// owner, and a file edited after installation is retained on uninstall.
+const INSTALL_MARKER = '.course-creator-install.json';
+function hashFile(file) {
+  return crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+}
+function sourceFiles(dir = SKILL_SOURCE, prefix = '') {
+  const found = [];
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    if (entry.isSymbolicLink()) continue;
+    const rel = path.join(prefix, entry.name);
+    if (entry.isDirectory()) found.push(...sourceFiles(path.join(dir, entry.name), rel));
+    else if (entry.isFile()) found.push(rel);
+  }
+  return found;
+}
+function safeOwnedPath(target, rel) {
+  if (path.isAbsolute(rel) || rel.split(/[\\/]/).includes('..')) return null;
+  const full = path.resolve(target, rel);
+  if (!pathInside(full, target)) return null;
+  let cur = path.resolve(target);
+  for (const part of path.relative(cur, full).split(path.sep)) {
+    cur = path.join(cur, part);
+    if (fs.existsSync(cur) && fs.lstatSync(cur).isSymbolicLink()) return null;
+  }
+  return full;
+}
+function ownedMarker(target) {
+  const marker = path.join(target, INSTALL_MARKER);
+  if (!fs.existsSync(marker)) return null;
+  try {
+    if (!fs.lstatSync(marker).isFile() || fs.lstatSync(marker).isSymbolicLink()) return null;
+    const data = JSON.parse(fs.readFileSync(marker, 'utf8'));
+    return data.skill === INSTALLED_SKILL_NAME && data.files &&
+      typeof data.files === 'object' ? data : null;
+  } catch (e) { return null; }
+}
+function installOwned(target) {
+  if (!fs.existsSync(SKILL_SOURCE)) return { code: 'missing-source' };
+  if (fs.existsSync(target) && (!fs.lstatSync(target).isDirectory() ||
+      fs.lstatSync(target).isSymbolicLink())) return { code: 'unowned' };
+  const existing = fs.existsSync(target) ? fs.readdirSync(target) : [];
+  const prior = ownedMarker(target);
+  if (existing.length && !prior) return { code: 'unowned' };
+  fs.mkdirSync(target, { recursive: true });
+  const owned = { ...(prior ? prior.files : {}) };
+  let copied = 0, preserved = 0;
+  for (const rel of sourceFiles()) {
+    const dest = safeOwnedPath(target, rel);
+    if (!dest) { preserved++; continue; }
+    if (fs.existsSync(dest)) {
+      if (!Object.hasOwn(owned, rel) || hashFile(dest) !== owned[rel]) {
+        preserved++; continue;
+      }
+    }
+    fs.mkdirSync(path.dirname(dest), { recursive: true });
+    fs.copyFileSync(path.join(SKILL_SOURCE, rel), dest);
+    owned[rel] = hashFile(dest);
+    copied++;
+  }
+  fs.writeFileSync(path.join(target, INSTALL_MARKER),
+    JSON.stringify({ skill: INSTALLED_SKILL_NAME, files: owned }, null, 2) + '\n');
+  return { code: 'installed', copied, preserved };
+}
+function uninstallOwned(target) {
+  if (!fs.existsSync(target) || fs.lstatSync(target).isSymbolicLink()) {
+    return { code: 'unowned' };
+  }
+  const prior = ownedMarker(target);
+  if (!prior) return { code: 'unowned' };
+  let removed = 0, preserved = 0;
+  for (const [rel, hash] of Object.entries(prior.files)) {
+    const dest = safeOwnedPath(target, rel);
+    if (!dest || !fs.existsSync(dest) || !fs.lstatSync(dest).isFile() ||
+        hashFile(dest) !== hash) { preserved++; continue; }
+    fs.unlinkSync(dest);
+    removed++;
+  }
+  fs.unlinkSync(path.join(target, INSTALL_MARKER));
+  // Remove only empty directories; a user-owned file keeps its parent.
+  const dirs = new Set(Object.keys(prior.files).map(rel => path.dirname(rel)));
+  for (const rel of [...dirs].sort((a, b) => b.length - a.length)) {
+    const dir = path.resolve(target, rel);
+    if (!pathInside(dir, target)) continue;
+    try { fs.rmdirSync(dir); } catch (e) { /* non-empty or absent */ }
+  }
+  try { fs.rmdirSync(target); } catch (e) { /* user files remain */ }
+  return { code: 'removed', removed, preserved };
+}
 
 // The marker lives under the family's agent-global root (the same root the
 // validator's AGENTIC_SDLC_KB_ROOT seam names), read at call time so the test
@@ -720,10 +720,10 @@ module.exports = {
   detectPython,
   pathsEqual,
   orientHookCommand,
-  copyRecursive,
-  installOwned,
-  uninstallOwned,
-  ownedMarker,
+  copyRecursive,
+  installOwned,
+  uninstallOwned,
+  ownedMarker,
   loadTemplates,
   templateFor,
 };

package/scripts/postinstall.js

@@ -1,16 +1,16 @@
-#!/usr/bin/env node
-"use strict";
-const { CLIENTS, clientDetected, skillTarget, installOwned,
-  wireGlobalOrientHook, detectPython } = require('./lib');
-
-for (const client of CLIENTS) {
-  if (!clientDetected(client)) continue;
-  const target = skillTarget(client);
-  const result = installOwned(target);
-  console.log(`${client.label}: ${result.code} (${target})`);
-  if (client.key === 'claude' && result.code === 'installed') {
-    try { wireGlobalOrientHook({ client, python: detectPython() }); }
-    catch (e) { console.log('Session orientation can be wired from ENFORCEMENT.md.'); }
-  }
-}
-console.log('Initialize a project with course-creator-init.');
+#!/usr/bin/env node
+"use strict";
+const { CLIENTS, clientDetected, skillTarget, installOwned,
+  wireGlobalOrientHook, detectPython } = require('./lib');
+
+for (const client of CLIENTS) {
+  if (!clientDetected(client)) continue;
+  const target = skillTarget(client);
+  const result = installOwned(target);
+  console.log(`${client.label}: ${result.code} (${target})`);
+  if (client.key === 'claude' && result.code === 'installed') {
+    try { wireGlobalOrientHook({ client, python: detectPython() }); }
+    catch (e) { console.log('Session orientation can be wired from ENFORCEMENT.md.'); }
+  }
+}
+console.log('Initialize a project with course-creator-init.');

package/scripts/preuninstall.js

@@ -1,12 +1,12 @@
-#!/usr/bin/env node
-"use strict";
-const { CLIENTS, skillTarget, ownedMarker, uninstallOwned,
-  removeGlobalOrientHooks } = require('./lib');
-
-const ownedTargets = CLIENTS.map(skillTarget).filter(ownedMarker);
-try { removeGlobalOrientHooks(ownedTargets); } catch (e) { /* convenience only */ }
-for (const target of ownedTargets) {
-  const result = uninstallOwned(target);
-  console.log(`${result.code}: ${target} (${result.removed} owned files removed; ` +
-    `${result.preserved} retained)`);
-}
+#!/usr/bin/env node
+"use strict";
+const { CLIENTS, skillTarget, ownedMarker, uninstallOwned,
+  removeGlobalOrientHooks } = require('./lib');
+
+const ownedTargets = CLIENTS.map(skillTarget).filter(ownedMarker);
+try { removeGlobalOrientHooks(ownedTargets); } catch (e) { /* convenience only */ }
+for (const target of ownedTargets) {
+  const result = uninstallOwned(target);
+  console.log(`${result.code}: ${target} (${result.removed} owned files removed; ` +
+    `${result.preserved} retained)`);
+}

package/skills/course-creator/ENFORCEMENT.md

@@ -47,8 +47,8 @@ The consolidated view is `sdlc_check.py stale` (the overlay intercepts
 the spine command, preserves its output, flags and exit code --
 `--hybrid` included -- and appends `## claims` only when nonempty). The
 orient append prints one count line at session start, only when dirty
-and always fail-open. Event-driven by design: reconciliation §2 runs
-`stale` after recording a supersession; nothing polls per turn.
+and always fail-open. Event-driven by design: reconciliation §2 runs `stale` at the unit's
+closure, once for every supersession since the last one; nothing polls per turn.
 
 ## 2. Check in CI (recommended for teams)
 

package/skills/course-creator/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: course-creator
-version: 0.1.0-beta.1
+version: 0.1.0-beta.10
 description: Design and improve courses that teach a defined learner through sourced, progressive explanations. Use when the deliverable is instruction or a learning path; route corpus intake to kb-agentic and persuasive campaigns to marketing-agentic.
 author: Antonio Pinto (https://github.com/Antoneeo)
 copyright: (c) 2026 Antonio Pinto
@@ -13,6 +13,8 @@ Create a course that helps a specific learner understand and use something. The
 
 This is the course lens of the Agentic SDLC family. It shares `vision.md`, `review.md`, `guides.md`, `routing.md`, `dispatch.md`, `memory.md`, `scripts/sdlc_core.py`, and `scripts/knowledge.py` with the other lenses. It adds `slide_content.md`, `templates.md`, `learning_design.md`, `source_check.md`, `simulation.md`, `feedback.md`, `elicitation.md`, `ENFORCEMENT.md`, `scripts/sdlc_check.py` and `scripts/course_check.py`. Read a support file when its phase needs it.
 
+`scripts/docs_site.py --root <project> --open`: opens in the user's browser a read-only site of what the agent reads; use it to show the project state.
+
 ## Rule Zero: Triage and route
 
 If `agentic-sdlc`, `kb-agentic`, or `mkt-agentic-sdlc` is installed alongside this skill, consult `routing.md` for the owner of the **deliverable**, then declare the lens. L1 never reaches it. A course from supplied documents is course work; ingestion and verification of the corpus is a separate knowledge unit. A commercial campaign is marketing work. If the request contains distinct deliverables, split them before choosing a lens.
@@ -38,6 +40,7 @@ Before authoring a governed artifact, know which tier is authoring and follow `r
 
 | When | Write or update |
 |---|---|
+| New L3 unit, the moment the level is declared | `audit/requests/REQUEST_course_<slug>.md`: R1 quotes the requester's opening words verbatim, before the Vision Gate and the first question; every later statement of theirs that settles something (answer, approval, cost, ruling) is appended before acting on it. Append-only, never deleted; artifacts cite its entries. |
 | New L3 course | `vision/features/VISION_course_<slug>.md` with explicit `domain: course`; approve it before design. |
 | Approved Vision and a design need | `solutions/ANALYSIS_course_<slug>.md` with course risks; `D-UC.md`, `D-IC.md`, `P-TM.md`, graph and plan detail its IDs. |
 | New production or substantial revision | Deliver the complete textual source in `slide_content.md`; declare its versioned content contract in COURSE_PLAN. |
@@ -45,7 +48,7 @@ Before authoring a governed artifact, know which tier is authoring and follow `r
 | A course is tested | `SIMULATION_REPORT.md` names both independent attempts, control, material version and limitations; no simulated PASS changes efficacy status. |
 | Real feedback arrives | `FEEDBACK_REPORT.md` identifies course/version/module and evidence; propose a course correction or a method improvement. |
 | L3 design or closure review | Append a `REVIEW_LOG.md` row with findings, tier, reviewer and verdict before claiming the gate passed. |
-| Concurrent work | Write `audit/HANDOFF_[course].md` with resume logistics; `audit/handoff.md` is the generated workstream registry rebuilt by `index`. |
+| Concurrent work | Write `audit/HANDOFF_[course].md` with resume logistics; `audit/handoff.md` is the generated workstream registry rebuilt by `index`. Its `next:` is the next concrete step in one sentence; what happened, and the state of the work, go to the Diary as a dated entry. |
 | A repeatable lesson from source or work | PROPOSE distilling a guide with provenance under `reference/`; Propose proactively when the knowledge would otherwise be lost. |
 
 An operative guide is not a dumping ground. Follow `guides.md`: source provenance and section-level fidelity make a guide useful in a later session.
@@ -58,7 +61,7 @@ Read `ai_docs/README.md`, `ai_docs/INDEX.md`, and `ai_docs/reference/INDEX.md` (
 
 ### 2. Vision Gate
 
-Draft the course Vision with benefit, named learner groups, what they should be able to understand and do, and signals that would count as useful learning. Read `vision.md`, run its blind check, and obtain the person's approval before writing the course design. Project Vision remains above the course Vision. A course may be delivered before human evaluation, visibly labeled **efficacy not verified**.
+Draft from the request as recorded in `audit/requests/REQUEST_course_<slug>.md`, not from a paraphrase of it. Run the owner interview in `vision.md` §The owner interview first and obtain the north star in the person's words before drafting. Then draft the course Vision from the answers, with benefit, named learner groups, what they should be able to understand and do, and signals that would count as useful learning. Read `vision.md`, run its blind check, and obtain the person's approval before writing the course design. Project Vision remains above the course Vision. A course may be delivered before human evaluation, visibly labeled **efficacy not verified**.
 
 ### 3. Course Design
 
@@ -88,7 +91,7 @@ Run `python <skill_dir>/scripts/sdlc_check.py course <slug> --root <project_root
 
 Read `feedback.md` when real learner feedback or observed use arrives. A single reproducible defect may justify correcting the course or proposing a skill guide or change. It does not prove effectiveness. Human effectiveness needs comparable learners, observable criteria, results including contrary cases and stated limits; a formal pilot is optional. Keep **efficacy not verified** until that evidence supports a different claim.
 
-Run `sdlc_check.py index` then `sdlc_check.py check`; include course material, Vision, ANALYSIS and documentation in the same change. Close with an independent diff review against the approved design, tests, and a truthful efficacy label. Isolate the work on its own branch/worktree for L3. Branch/worktree hygiene follows the project owner’s integration choice; do not discard unmerged work without authorization.
+Run `sdlc_check.py index` then `sdlc_check.py check`; include course material, Vision, ANALYSIS and documentation in the same change. Close with an independent diff review against the approved design, tests, and a truthful efficacy label. Isolate the work on its own branch/worktree for L3. A session that may run while another session uses the same checkout works in its **own git worktree**, and never switches branch, stashes, resets or runs `index` in a checkout another session may be using. Parallel work also shares ids: choose a new unit's id **after fetching**, as the first id free on every branch and tag the checkout can see (`check` names a collision while the unit is open). Branch/worktree hygiene follows the project owner’s integration choice; do not discard unmerged work without authorization.
 
 ## Operative Guides and memory