@antoneeo/course-creator 0.1.0-beta.1 → 0.1.0-beta.13

package/CHANGELOG.md

@@ -1,5 +1,107 @@
 # Changelog
 
+## [0.1.0-beta.13] - 2026-10-23
+
+### Changed
+- `guides.md`: a document snapshot is verbatim except for credentials and personal or confidential data the guide does not need, which become `[REDACTED: <kind>]` before the snapshot is written; the guide lists the kinds in `redacted_at_intake:`.
+- The session-start orientation (`orient`) now fits under Claude Code's 10,000-character hook limit, even in a project with many documents. Above that limit Claude Code saves the output to a file and shows the agent only the first 2,000 characters, so the guide router never reached the agent. The output is now at most 9,500 characters, including the knowledge layer's lines, and in this order: the triage line, the guide router (one line per guide), the workstream registry (one line per workstream, then the project-wide notes), then the reading guide (README). The manifest (INDEX) and the full files are listed as pointers. A section that does not fit is cut at a line, with a pointer to its file.
+- The per-turn `remind` line also tells the agent, above L1 and when sibling lenses are installed, to choose the lens with `routing.md` and declare it. The line's limit rises from 500 to 600 characters (`vision/rulings.md` r32).
+- `docs_site.py` adds `.docs-site/` to the project's `.gitignore` on its first run in a git repository, so the site's copy of the documents is not committed. It used to print a note only. An entry already in the file is never changed; when git still does not ignore the folder, the note is printed as before.
+- `SKILL.md` names the docs site in the words users use ("docs site", "minisito", "documentation site", "project site"), so a request for it runs `docs_site.py` instead of building a page by hand.
+
+### Added
+- `check` refuses, in every lens, a line shaped like a credential (a password, token or key with a real value, a private-key header, a password in a URL, a bearer token) in a `corpus/given/` file or in the snapshot of a `source_kind: document` guide. The message names the file, the lines and the kinds, never the value. A human clears a false positive with `credential_scan: reviewed — <reason>` (in the sidecar, or in the guide). A project whose stored sources already hold such a line fails `check` until each is redacted or reviewed (`vision/rulings.md` r35a).
+- `adopt`: a dry run listing the document guides that rest on `.sources/` snapshots and what moving each into `corpus/given/` involves. It writes nothing.
+- `check` warns when the same text is stored both as a guide snapshot and as a corpus artifact.
+- `check` also warns on a `corpus/given/` file with no sidecar, accepts a withdrawn artifact's tombstone sidecar (no bytes, no digest), and, when an `original_path:` is a URI, names `original_ref:` for non-local identifiers. A password inside a URL in that warning is masked.
+- Shared claim checks (`check`): a claim's `about` cell may hold several relations separated by `; `, and one reserved predicate, `not-yet-honored-by -> ANALYSIS_<name>`, marks a specification claim the code does not yet honor. `check` refuses the marker when that analysis is missing from `solutions/` or cites neither the claim id nor the id of a row the claim succeeds. `export` drops the markers and says so in one line. Nothing lists or counts claims by the marker (`vision/rulings.md` r33). `memory.md`: a marked claim is cited as not yet true of the code, naming its analysis.
+- Shared claim checks (`check`): the `not-yet-honored-by` marker now works in Hybrid projects (devPNT present). It may name `SHADOW_<doc_key>`; `check` reads the newest `solutions/SHADOW_<doc_key>_vX.Y.md` (versions compared number by number), which must exist and cite the claim id or a predecessor's. A missing shadow is an error that says to export it, and names a file of that key whose name lacks the `_vX.Y` suffix. `check` behaves the same with or without `--hybrid`; export drops both target forms (`vision/rulings.md` r36). New shared helper `sdlc_core.newest_shadow`. `memory.md`: a marked claim is cited naming its target.
+- `verdict --hook` (PreToolUse): refuses an edit when the session declared no guide-router verdict, or never read a guide its verdict names; silent in projects without guides and whenever it cannot tell. Not wired by this package (`ENFORCEMENT.md` §3).
+- `orient` adds a note when one client runs it from two settings entries, which means each session gets the orientation twice. Claude Code and Codex are counted separately, an identical command counts once, and an entry whose validator is gone is not counted.
+- `orient` adds a line naming the sibling lenses installed beside the skill or in the user's Claude skills directory, and says to choose the lens with `routing.md`. The family list is read from `routing.md` §0, as the installer does.
+- `routing.md` §2 gains worked verdicts for four mixed requests: an interface spec written for another team, the requirements another team must build, a guide whose source spec changed, and code that diverges from a supplied spec.
+- The shared validator adds an advisory for a code-lens (`domain: code`) L3 analysis, started on or after 2026-10-24, that lacks a filled `## Guide check` section. Analyses of this lens are not checked.
+
+## [0.1.0-beta.12] - 2026-10-19
+
+Includes everything listed under [0.1.0-beta.11], which was tagged but never published to npm.
+
+### Added
+- `mark <paths> --note "<what was done>"` writes a dated entry `**YYYY-MM-DD — <what was done>.**` at the top of `audit/project_notes.md`. A release or work outside an open unit used to leave no dated event, because the date had to be copied there by hand. Without `--note`, and with no open unit, `mark` says so.
+- `validate`: an advisory for a dated entry in `project_notes.md` whose bold does not pair; the chronology then showed the label running into the body.
+- Docs site chronology: a Diary entry's label carries its unit id ("F-074 — closed"), so it reads on its own.
+- `stale` no longer counts files inside the docs root (`ai_docs/`, `mkt_docs/`) as drift of any area, and `mark` refuses to record it: `validate` already checks the docs root, and every document edit used to leave `check` NOT CLEAN until a redundant re-mark.
+
+## [0.1.0-beta.11] - 2026-10-19
+
+### Added
+- Docs site: `docs_site.py --zip <file>` also writes the site as one .zip to share; unzipped, `index.html` opens on any system. A zip made by hand with Windows PowerShell 5.1 `Compress-Archive` stores `data\core.js`, and on Linux or macOS the page then finds no data; `--zip` always writes `/` names. It refuses a target inside the docs root or the site folder. The `SKILL.md` line names it.
+
+## [0.1.0-beta.10] - 2026-10-19
+
+Includes everything listed under [0.1.0-beta.9], which was tagged but never published to npm.
+
+### Added
+- Docs site: each card in Open work and each feature in Features links its merge review and its end-to-end test script, when they exist. They were reachable only inside a feature's chain page; who merges looks in Open work while the work is open, who tests looks in Features after it closed.
+
+### Changed
+- Docs site: Features are listed newest first by their declared start date; those without a start date come last.
+
+## [0.1.0-beta.9] - 2026-10-18
+
+### Changed
+- F-071: a review weighs effort against what the owner asked for. In a design review, each outcome the owner named (the opening request, any entry widening scope, an approved north star) is a row of the conformance statement, saying where the design serves it and what share of the design goes to it; an outcome no section serves, or one served by a minor share while a secondary concern takes the bulk, is a finding. `review.md` §Reviewing.
+- F-071: a review runs where something is left to judge. At level 2 the closure review is due only on a security-sensitive area the lens's Rule Zero names, or at the owner's request; otherwise it does not run and logs no row. After a design or closure PASS, a delta made only of version and release metadata, regenerated indexes and audit-mark records, tool-verified copies of a shared file, and CHANGELOG lines adding no claim is not reviewed: its own check runs and a `NOT DUE` row records it. README or overview prose, an E2E script, a rulings row, doctrine, behaviour, tests and any correction of a review finding are still reviewed. `review.md` §When a review is due.
+- `sdlc_check.py benefit` counts `NOT DUE` rows apart, in no review or findings figure.
+
+## [0.1.0-beta.8] - 2026-10-18
+
+### Fixed
+- F-072 (field run): the `SKILL.md` line that announces the docs site now reads `scripts/docs_site.py --root <project> --open` and says to use it to show the project state. Asked for the state, an agent had opened the site in its own client pane, where it renders blank, and improvised a local server; `--open` opens it in the user's browser, where it works offline.
+
+## [0.1.0-beta.7] - 2026-10-18
+
+### Added
+- F-074: every Vision is born from an owner interview. Before any Vision text is written (project, feature, the course Vision, and the devPNT M-VISION), the agent asks the owner six questions in order, re-asking an answer that has the wrong form: the problem as one concrete case, the benefit as a result for someone, the actors including who takes the initiative, a success signal with its starting value, the boundaries, and the known constraints with where each comes from. Then the owner approves a one- or two-sentence north star in their own words; without it no Vision is written, not even a draft. The blind check still tests that the rules hold; the approved north star shows they are the owner's. `vision.md` §The owner interview.
+
+### Changed
+- `elicitation.md`: the skip path never covers a Vision; the interview is a planned occasion like the round.
+- Bootstrap no longer writes a Vision reconstructed by the agent: the installer seeds `ai_docs/vision/project_vision.md` as a stub awaiting the interview (an existing file is never overwritten).
+- A Non-Goal now bounds scope. It rejects a proposal that pursues what it names; it is not a ban on behaviour that already exists and creates no obligation. A behaviour that must never happen is an Invariant or a constraint with its source.
+- The course Vision template gains North Star and Problem, learners with the initiative, signals with starting values, Non-Goals as scope, and the source of every constraint.
+
+## [0.1.0-beta.6] - 2026-10-18
+
+### Added
+- F-072: `scripts/docs_site.py --root <project>` writes a static, read-only website of what the agent reads in the project: what it is (reading guide, Vision, rules, documents), its open work with each next step verbatim, its courses, and — with a knowledge base — a map of topics, the facts with the exact passage each comes from, what an inferred fact rests on, and the source documents. It opens from disk with the network off, writes outside the docs root, changes nothing in it, and selects, ranks or recommends nothing. Each analysis opens with the chain the agent works through — Vision, use cases, flows and interfaces, risks, solution study, design and tests, merge brief and E2E script, Diary — the Vision's North Star is shown above the home page, and the guides have a page of their own: the guide router, the operative guides with when to read each, and the code-comprehension guides. The chronology lists the dated events the documents declare (Diary entries, spike outcomes, request-record entries, review-log rows, decision records, dated project notes, notes and sources received), most recent first, read with the same F-073 readers `validate` uses. Shared by the four packages (generator, page and battery are byte-identical spine files).
+
+## [0.1.0-beta.5] - 2026-10-17
+
+### Changed
+- F-073: one written form for a dated entry, `**YYYY-MM-DD — label.**`, is taught for Diary entries, spike outcomes and project notes that record an event, and shared readers (`entry_openers`, `request_entries`, `adr_date`, `frontmatter_date`) let a chronology list those events the same way the validator reads them. Three new advisories, which never fail a build, not even `--strict`: undated text in the Diary of an L3 analysis started on or after 2026-10-18; a HANDOFF `next:` longer than 240 characters on an L3 file updated on or after that date (`next:` now holds only the next step, and the state of the work goes to the Diary); and, in `check` only, an open L3 unit whose id another branch or tag uses for a different analysis (one `git grep` over local refs, silent without git). The doctrine now says to choose a new unit's id after fetching, and that a session sharing a checkout with another session works in its own git worktree.
+- The package publishes on npm `latest`, like the other three: `npm i @antoneeo/course-creator` installs the newest version with no separate promotion. The version keeps its `-beta.N` suffix and the README its experimental statement; the `beta` dist-tag no longer advances.
+
+## [0.1.0-beta.4] - 2026-10-17
+
+### Changed
+- F-068 (shared doctrine with kb-agentic): the supersession cascade runs at the unit's closure, once for every supersession since the last one, instead of at each supersession.
+- F1: closing the last open workstream now empties the generated registry `audit/handoff.md` instead of leaving its stale row behind: with zero `HANDOFF_*.md` sources `index` rewrites it empty (keeping `project_notes.md`), and `validate` reports a generated registry that still has rows but no sources as an error.
+- F-069: `graph`, `check`, `stale` and the session-start count are faster on a mature knowledge base, with byte-identical output. Citations of superseded claim ids are found with one pass per living document instead of one scan per (document, id) pair, and one check run reads and resolves each cited extraction once instead of once per claim row. On a synthetic ledger of 2183 rows and 1000 living documents, `graph` drops from 14 s to 4 s. No new flag.
+
+## [0.1.0-beta.3] - 2026-10-13
+
+### Changed
+- F-067: every L3 unit now keeps a verbatim, append-only request record `audit/requests/REQUEST_course_<slug>.md`, started before the Vision Gate: the owner's opening words and every later statement that settles something (answers, approvals, costs, rulings). Artifacts cite its entries instead of paraphrasing; the shared `review.md` asks for the record and makes an owner statement with no resolving entry a finding. Secrets, personal data and confidential third-party or employer information are redacted.
+
+## [0.1.0-beta.2] - 2026-10-08
+
+### Changed
+- F-065: every agent review request opens with a fixed REVIEW MANDATE block copied verbatim, which carries `review.md` itself to the reviewer in Standalone and Hybrid alike; §Requesting now lists every input its clauses check (Functional Spec, Interface Contract, Component Map, audit plan, probe harness, closure test evidence). devPNT performs no review: in Hybrid an agent review with verdict PASS precedes every proposal to devPNT, where the human reviews; after the round cap only the user's explicit decision sends an artifact on, with open findings attached.
+
+### Fixed
+- Shared memory catalog hashes normalize CRLF/LF, avoiding checkout-dependent index mismatches.
+- The validator prints its final check verdict after memory, topic and corpus checks, so their errors count in the summary.
+
 ## [0.1.0-beta.1] - 2026-10-02
 
 - First public beta on the beta channel. Diagnostic simulation does not establish human learning; interfaces and method may change.

package/README.md

@@ -2,12 +2,12 @@
 
 `course-creator` helps an AI agent create a course for a defined learner. It maps what the learner already knows, orders concepts by prerequisite, writes explanations in progressive modules, and links factual statements to reopenable sources. Independent fresh learner agents can expose confusing steps; their results are diagnostic. The course is labeled **efficacy not verified** until enough evidence from real learners supports a narrower claim.
 
-The package is the fourth lens of the Agentic SDLC family. It uses the shared `ai_docs/` project memory and governance. Version 0.1.0-beta.1 supports Standalone mode. This is an experimental beta: the authoring method and artifact contracts may change; human learning efficacy has not been established. Its course artifacts remain readable without the skill.
+The package is the fourth lens of the Agentic SDLC family. It uses the shared `ai_docs/` project memory and governance. Version 0.1.0-beta.4 supports Standalone mode. This is an experimental beta: the authoring method and artifact contracts may change; human learning efficacy has not been established. Its course artifacts remain readable without the skill. Each new course keeps a verbatim, append-only record of the requester's own words and decisions in `audit/requests/`, cited by the analysis and checked by its reviews.
 
 ## Install and initialize
 
 ```sh
-npm install -g @antoneeo/course-creator@beta
+npm install -g @antoneeo/course-creator
 course-creator-install-skill
 cd YOUR_PROJECT
 course-creator-init
@@ -15,6 +15,8 @@ course-creator-init
 
 The installer detects Claude Code, Gemini CLI, Codex and Google Antigravity. Initialization creates absent `ai_docs/` files and a project protocol pointer; it does not overwrite existing project documents. Use `python <skill_dir>/scripts/sdlc_check.py check --root .` to validate the shared SDLC and course structures.
 
+**Docs site** (`scripts/docs_site.py --root <project> [--open] [--zip <file>]`): a static, offline, read-only website of what the agent reads in the project — reading guide, Vision, rules, documents, open work with each next step, courses and, with a knowledge base, the topic map, each fact with its exact source passage, and the source documents. Written to `.docs-site/` (added to `.gitignore` on the first run), outside `ai_docs/`; nothing is ranked or recommended.
+
 Using the skill in your own project carries no obligation to publish your course or its sources. See [LICENSE](LICENSE) for the software terms and [NOTICE](NOTICE) for attribution.
 
 ## Primary course output

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "course-creator",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.13",
   "description": "Course creation for defined learners, with progressive explanations, sourced facts and diagnostic independent testing.",
   "author": "Antonio Pinto (https://github.com/Antoneeo)"
 }

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@antoneeo/course-creator",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.13",
   "description": "Design sourced, progressive courses for a defined learner with Agentic SDLC governance and diagnostic learner simulations.",
   "keywords": ["claude-code", "gemini-cli", "codex", "course-design", "skill", "ai-agent"],
   "author": "Antonio Pinto (https://github.com/Antoneeo)",
   "license": "Apache-2.0",
-  "publishConfig": { "access": "public", "tag": "beta" },
+  "publishConfig": { "access": "public" },
   "bin": {
     "course-creator-init": "scripts/init.js",
     "course-creator-install-skill": "scripts/postinstall.js"
@@ -35,6 +35,11 @@
     "skills/course-creator/scripts/course_check.py",
     "skills/course-creator/scripts/sdlc_core.py",
     "skills/course-creator/scripts/knowledge.py",
+    "skills/course-creator/scripts/docs_site.py",
+    "skills/course-creator/docs_site/index.html",
+    "skills/course-creator/docs_site/app.js",
+    "skills/course-creator/docs_site/style.css",
+    "skills/course-creator/docs_site/strings.js",
     "skills/course-creator/scripts/entry_point.py",
     "skills/course-creator/scripts/shared_files.py",
     "skills/course-creator/scripts/shared_manifest.json",

package/scripts/init.js

@@ -1,62 +1,62 @@
-#!/usr/bin/env node
-"use strict";
-const fs = require('fs');
-const path = require('path');
-const { execFileSync } = require('child_process');
-const { SKILL_SOURCE, INSTALLED_SKILL_NAME, SELF_LENS, SIBLING_LENSES,
-  CLIENTS, clientDetected, skillTarget, wireOrientHook, detectPython } = require('./lib');
-
-const root = process.cwd();
-const seed = new Map([
-  ['ai_docs/README.md', `---\ndefault_domain: course\n---\n# Project knowledge and course work\n\nRead vision/project_vision.md, INDEX.md and reference/INDEX.md first.\n`],
-  ['ai_docs/vision/project_vision.md', `---\ndescription: Project benefit and boundaries.\nstatus: DRAFT\n---\n# Project Vision\nStatus: DRAFT\n\n## Expected Benefit\n<Discuss with the owner.>\n`],
-  ['ai_docs/vision/roadmap.md', `---\ndescription: Project learning and delivery roadmap.\nstatus: DRAFT\n---\n# Roadmap\nStatus: DRAFT\n`],
-  ['ai_docs/vision/principles.md', `---\ndescription: Decisions that constrain project work.\nstatus: DRAFT\n---\n# Principles\nStatus: DRAFT\n`],
-  ['ai_docs/strategic/architecture.md', `---\ndescription: Verified component inventory.\nstatus: CURRENT\n---\n# Architecture\n\n## Component Map\n| Component | Capability it owns | Contract | Where |\n|---|---|---|---|\n\n## Architectural Patterns\n<Add only verified patterns.>\n`],
-  ['ai_docs/strategic/existing_features.md', `---\ndescription: Existing capabilities verified in this project.\nstatus: CURRENT\n---\n# Existing Features\n`],
-  ['ai_docs/audit/audit_plan.md', `# Audit Plan\n\n| Area | State | Reference | Notes |\n|---|---|---|---|\n| . | PENDING | - | Initial analysis |\n`],
-]);
-function writeIfAbsent(rel, content) {
-  const dest = path.join(root, rel);
-  if (fs.existsSync(dest)) return false;
-  fs.mkdirSync(path.dirname(dest), { recursive: true });
-  fs.writeFileSync(dest, content, 'utf8');
-  console.log(`Created ${rel}`);
-  return true;
-}
-for (const [rel, content] of seed) writeIfAbsent(rel, content);
-for (const dir of ['ai_docs/vision/features', 'ai_docs/reference', 'ai_docs/solutions/courses',
-  'ai_docs/audit/reviews']) fs.mkdirSync(path.join(root, dir), { recursive: true });
-
-const pointer = `# Course Creator project protocol\n\nUse the installed \`course-creator\` skill when the deliverable teaches a defined learner. It applies Agentic SDLC in Standalone mode: triage, project and course Vision, ANALYSIS, progressive explanations, sourced facts, independent diagnostic testing and a truthful efficacy label. Course files live in \`ai_docs/solutions/courses/<slug>/\`. Read \`ai_docs/README.md\` and the skill before working.\n\nInstall if missing: \`npm i -g @antoneeo/course-creator@beta && course-creator-install-skill\`.\n`;
-const pointers = { claude: 'CLAUDE.md', gemini: 'GEMINI.md', codex: 'AGENTS.md',
-  antigravity: 'AGENTS.md' };
-const detected = CLIENTS.filter(clientDetected);
-for (const client of detected) writeIfAbsent(pointers[client.key], pointer);
-writeIfAbsent('.cursorrules', pointer);
-const siblings = new Map();
-for (const client of detected) {
-  const parent = path.dirname(skillTarget(client));
-  for (const [name, lens] of Object.entries(SIBLING_LENSES)) {
-    if (fs.existsSync(path.join(parent, name))) siblings.set(name, lens);
-  }
-}
-if (siblings.size) {
-  const rows = [`- \`${INSTALLED_SKILL_NAME}\` — the **${SELF_LENS}** lens`,
-    ...[...siblings].map(([name, lens]) => `- \`${name}\` — the **${lens}** lens`)];
-  writeIfAbsent('AGENTIC_MULTI_LENS.md',
-    `# Agentic SDLC family routing\n\nRead \`routing.md\` to choose the owner of each deliverable; \`memory.md\` is shared.\n\n${rows.join('\n')}\n`);
-}
-const python = detectPython();
-for (const client of detected.filter(c => c.key === 'claude')) {
-  const result = wireOrientHook({ cwd: root, client, python, docsLabel: 'ai_docs' });
-  console.log(`Claude SessionStart orientation: ${result.code}`);
-}
-if (python) {
-  try {
-    execFileSync(python, [path.join(SKILL_SOURCE, 'scripts/sdlc_check.py'),
-      'index', '--root', root], { stdio: 'ignore' });
-    console.log('Generated ai_docs indexes.');
-  } catch (e) { console.log('Run sdlc_check.py index when Python is available.'); }
-}
-console.log('Course Creator initialization complete.');
+#!/usr/bin/env node
+"use strict";
+const fs = require('fs');
+const path = require('path');
+const { execFileSync } = require('child_process');
+const { SKILL_SOURCE, INSTALLED_SKILL_NAME, SELF_LENS, SIBLING_LENSES,
+  CLIENTS, clientDetected, skillTarget, wireOrientHook, detectPython } = require('./lib');
+
+const root = process.cwd();
+const seed = new Map([
+  ['ai_docs/README.md', `---\ndefault_domain: course\n---\n# Project knowledge and course work\n\nRead vision/project_vision.md, INDEX.md and reference/INDEX.md first.\n`],
+  ['ai_docs/vision/project_vision.md', `---\ndescription: Project benefit and boundaries.\nstatus: DRAFT\n---\n# Project Vision\nStatus: DRAFT\n<!-- STUB: awaiting the owner interview (vision.md §The owner interview). Not a\n     Vision: no artifact traces to it. -->\n`],
+  ['ai_docs/vision/roadmap.md', `---\ndescription: Project learning and delivery roadmap.\nstatus: DRAFT\n---\n# Roadmap\nStatus: DRAFT\n`],
+  ['ai_docs/vision/principles.md', `---\ndescription: Decisions that constrain project work.\nstatus: DRAFT\n---\n# Principles\nStatus: DRAFT\n`],
+  ['ai_docs/strategic/architecture.md', `---\ndescription: Verified component inventory.\nstatus: CURRENT\n---\n# Architecture\n\n## Component Map\n| Component | Capability it owns | Contract | Where |\n|---|---|---|---|\n\n## Architectural Patterns\n<Add only verified patterns.>\n`],
+  ['ai_docs/strategic/existing_features.md', `---\ndescription: Existing capabilities verified in this project.\nstatus: CURRENT\n---\n# Existing Features\n`],
+  ['ai_docs/audit/audit_plan.md', `# Audit Plan\n\n| Area | State | Reference | Notes |\n|---|---|---|---|\n| . | PENDING | - | Initial analysis |\n`],
+]);
+function writeIfAbsent(rel, content) {
+  const dest = path.join(root, rel);
+  if (fs.existsSync(dest)) return false;
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  fs.writeFileSync(dest, content, 'utf8');
+  console.log(`Created ${rel}`);
+  return true;
+}
+for (const [rel, content] of seed) writeIfAbsent(rel, content);
+for (const dir of ['ai_docs/vision/features', 'ai_docs/reference', 'ai_docs/solutions/courses',
+  'ai_docs/audit/reviews']) fs.mkdirSync(path.join(root, dir), { recursive: true });
+
+const pointer = `# Course Creator project protocol\n\nUse the installed \`course-creator\` skill when the deliverable teaches a defined learner. It applies Agentic SDLC in Standalone mode: triage, project and course Vision, ANALYSIS, progressive explanations, sourced facts, independent diagnostic testing and a truthful efficacy label. Course files live in \`ai_docs/solutions/courses/<slug>/\`. Read \`ai_docs/README.md\` and the skill before working.\n\nInstall if missing: \`npm i -g @antoneeo/course-creator@beta && course-creator-install-skill\`.\n`;
+const pointers = { claude: 'CLAUDE.md', gemini: 'GEMINI.md', codex: 'AGENTS.md',
+  antigravity: 'AGENTS.md' };
+const detected = CLIENTS.filter(clientDetected);
+for (const client of detected) writeIfAbsent(pointers[client.key], pointer);
+writeIfAbsent('.cursorrules', pointer);
+const siblings = new Map();
+for (const client of detected) {
+  const parent = path.dirname(skillTarget(client));
+  for (const [name, lens] of Object.entries(SIBLING_LENSES)) {
+    if (fs.existsSync(path.join(parent, name))) siblings.set(name, lens);
+  }
+}
+if (siblings.size) {
+  const rows = [`- \`${INSTALLED_SKILL_NAME}\` — the **${SELF_LENS}** lens`,
+    ...[...siblings].map(([name, lens]) => `- \`${name}\` — the **${lens}** lens`)];
+  writeIfAbsent('AGENTIC_MULTI_LENS.md',
+    `# Agentic SDLC family routing\n\nRead \`routing.md\` to choose the owner of each deliverable; \`memory.md\` is shared.\n\n${rows.join('\n')}\n`);
+}
+const python = detectPython();
+for (const client of detected.filter(c => c.key === 'claude')) {
+  const result = wireOrientHook({ cwd: root, client, python, docsLabel: 'ai_docs' });
+  console.log(`Claude SessionStart orientation: ${result.code}`);
+}
+if (python) {
+  try {
+    execFileSync(python, [path.join(SKILL_SOURCE, 'scripts/sdlc_check.py'),
+      'index', '--root', root], { stdio: 'ignore' });
+    console.log('Generated ai_docs indexes.');
+  } catch (e) { console.log('Run sdlc_check.py index when Python is available.'); }
+}
+console.log('Course Creator initialization complete.');

package/scripts/lib.js

@@ -3,8 +3,8 @@
 
 const fs = require('fs');
 const path = require('path');
-const os = require('os');
-const crypto = require('crypto');
+const os = require('os');
+const crypto = require('crypto');
 const { execSync } = require('child_process');
 
 const PACKAGE_ROOT = path.resolve(__dirname, '..');
@@ -449,104 +449,104 @@ function pathsEqual(a, b) {
     return false;
   }
 }
-function pathInside(child, parent) {
+function pathInside(child, parent) {
   try {
     const rel = path.relative(String(parent), String(child));
     return rel !== '' && !rel.startsWith('..') && !path.isAbsolute(rel);
   } catch (e) {
     return false;
   }
-}
-
-// Ownership is per file. An existing directory without our marker belongs to its
-// owner, and a file edited after installation is retained on uninstall.
-const INSTALL_MARKER = '.course-creator-install.json';
-function hashFile(file) {
-  return crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
-}
-function sourceFiles(dir = SKILL_SOURCE, prefix = '') {
-  const found = [];
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    if (entry.isSymbolicLink()) continue;
-    const rel = path.join(prefix, entry.name);
-    if (entry.isDirectory()) found.push(...sourceFiles(path.join(dir, entry.name), rel));
-    else if (entry.isFile()) found.push(rel);
-  }
-  return found;
-}
-function safeOwnedPath(target, rel) {
-  if (path.isAbsolute(rel) || rel.split(/[\\/]/).includes('..')) return null;
-  const full = path.resolve(target, rel);
-  if (!pathInside(full, target)) return null;
-  let cur = path.resolve(target);
-  for (const part of path.relative(cur, full).split(path.sep)) {
-    cur = path.join(cur, part);
-    if (fs.existsSync(cur) && fs.lstatSync(cur).isSymbolicLink()) return null;
-  }
-  return full;
-}
-function ownedMarker(target) {
-  const marker = path.join(target, INSTALL_MARKER);
-  if (!fs.existsSync(marker)) return null;
-  try {
-    if (!fs.lstatSync(marker).isFile() || fs.lstatSync(marker).isSymbolicLink()) return null;
-    const data = JSON.parse(fs.readFileSync(marker, 'utf8'));
-    return data.skill === INSTALLED_SKILL_NAME && data.files &&
-      typeof data.files === 'object' ? data : null;
-  } catch (e) { return null; }
-}
-function installOwned(target) {
-  if (!fs.existsSync(SKILL_SOURCE)) return { code: 'missing-source' };
-  if (fs.existsSync(target) && (!fs.lstatSync(target).isDirectory() ||
-      fs.lstatSync(target).isSymbolicLink())) return { code: 'unowned' };
-  const existing = fs.existsSync(target) ? fs.readdirSync(target) : [];
-  const prior = ownedMarker(target);
-  if (existing.length && !prior) return { code: 'unowned' };
-  fs.mkdirSync(target, { recursive: true });
-  const owned = { ...(prior ? prior.files : {}) };
-  let copied = 0, preserved = 0;
-  for (const rel of sourceFiles()) {
-    const dest = safeOwnedPath(target, rel);
-    if (!dest) { preserved++; continue; }
-    if (fs.existsSync(dest)) {
-      if (!Object.hasOwn(owned, rel) || hashFile(dest) !== owned[rel]) {
-        preserved++; continue;
-      }
-    }
-    fs.mkdirSync(path.dirname(dest), { recursive: true });
-    fs.copyFileSync(path.join(SKILL_SOURCE, rel), dest);
-    owned[rel] = hashFile(dest);
-    copied++;
-  }
-  fs.writeFileSync(path.join(target, INSTALL_MARKER),
-    JSON.stringify({ skill: INSTALLED_SKILL_NAME, files: owned }, null, 2) + '\n');
-  return { code: 'installed', copied, preserved };
-}
-function uninstallOwned(target) {
-  if (!fs.existsSync(target) || fs.lstatSync(target).isSymbolicLink()) {
-    return { code: 'unowned' };
-  }
-  const prior = ownedMarker(target);
-  if (!prior) return { code: 'unowned' };
-  let removed = 0, preserved = 0;
-  for (const [rel, hash] of Object.entries(prior.files)) {
-    const dest = safeOwnedPath(target, rel);
-    if (!dest || !fs.existsSync(dest) || !fs.lstatSync(dest).isFile() ||
-        hashFile(dest) !== hash) { preserved++; continue; }
-    fs.unlinkSync(dest);
-    removed++;
-  }
-  fs.unlinkSync(path.join(target, INSTALL_MARKER));
-  // Remove only empty directories; a user-owned file keeps its parent.
-  const dirs = new Set(Object.keys(prior.files).map(rel => path.dirname(rel)));
-  for (const rel of [...dirs].sort((a, b) => b.length - a.length)) {
-    const dir = path.resolve(target, rel);
-    if (!pathInside(dir, target)) continue;
-    try { fs.rmdirSync(dir); } catch (e) { /* non-empty or absent */ }
-  }
-  try { fs.rmdirSync(target); } catch (e) { /* user files remain */ }
-  return { code: 'removed', removed, preserved };
-}
+}
+
+// Ownership is per file. An existing directory without our marker belongs to its
+// owner, and a file edited after installation is retained on uninstall.
+const INSTALL_MARKER = '.course-creator-install.json';
+function hashFile(file) {
+  return crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+}
+function sourceFiles(dir = SKILL_SOURCE, prefix = '') {
+  const found = [];
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    if (entry.isSymbolicLink()) continue;
+    const rel = path.join(prefix, entry.name);
+    if (entry.isDirectory()) found.push(...sourceFiles(path.join(dir, entry.name), rel));
+    else if (entry.isFile()) found.push(rel);
+  }
+  return found;
+}
+function safeOwnedPath(target, rel) {
+  if (path.isAbsolute(rel) || rel.split(/[\\/]/).includes('..')) return null;
+  const full = path.resolve(target, rel);
+  if (!pathInside(full, target)) return null;
+  let cur = path.resolve(target);
+  for (const part of path.relative(cur, full).split(path.sep)) {
+    cur = path.join(cur, part);
+    if (fs.existsSync(cur) && fs.lstatSync(cur).isSymbolicLink()) return null;
+  }
+  return full;
+}
+function ownedMarker(target) {
+  const marker = path.join(target, INSTALL_MARKER);
+  if (!fs.existsSync(marker)) return null;
+  try {
+    if (!fs.lstatSync(marker).isFile() || fs.lstatSync(marker).isSymbolicLink()) return null;
+    const data = JSON.parse(fs.readFileSync(marker, 'utf8'));
+    return data.skill === INSTALLED_SKILL_NAME && data.files &&
+      typeof data.files === 'object' ? data : null;
+  } catch (e) { return null; }
+}
+function installOwned(target) {
+  if (!fs.existsSync(SKILL_SOURCE)) return { code: 'missing-source' };
+  if (fs.existsSync(target) && (!fs.lstatSync(target).isDirectory() ||
+      fs.lstatSync(target).isSymbolicLink())) return { code: 'unowned' };
+  const existing = fs.existsSync(target) ? fs.readdirSync(target) : [];
+  const prior = ownedMarker(target);
+  if (existing.length && !prior) return { code: 'unowned' };
+  fs.mkdirSync(target, { recursive: true });
+  const owned = { ...(prior ? prior.files : {}) };
+  let copied = 0, preserved = 0;
+  for (const rel of sourceFiles()) {
+    const dest = safeOwnedPath(target, rel);
+    if (!dest) { preserved++; continue; }
+    if (fs.existsSync(dest)) {
+      if (!Object.hasOwn(owned, rel) || hashFile(dest) !== owned[rel]) {
+        preserved++; continue;
+      }
+    }
+    fs.mkdirSync(path.dirname(dest), { recursive: true });
+    fs.copyFileSync(path.join(SKILL_SOURCE, rel), dest);
+    owned[rel] = hashFile(dest);
+    copied++;
+  }
+  fs.writeFileSync(path.join(target, INSTALL_MARKER),
+    JSON.stringify({ skill: INSTALLED_SKILL_NAME, files: owned }, null, 2) + '\n');
+  return { code: 'installed', copied, preserved };
+}
+function uninstallOwned(target) {
+  if (!fs.existsSync(target) || fs.lstatSync(target).isSymbolicLink()) {
+    return { code: 'unowned' };
+  }
+  const prior = ownedMarker(target);
+  if (!prior) return { code: 'unowned' };
+  let removed = 0, preserved = 0;
+  for (const [rel, hash] of Object.entries(prior.files)) {
+    const dest = safeOwnedPath(target, rel);
+    if (!dest || !fs.existsSync(dest) || !fs.lstatSync(dest).isFile() ||
+        hashFile(dest) !== hash) { preserved++; continue; }
+    fs.unlinkSync(dest);
+    removed++;
+  }
+  fs.unlinkSync(path.join(target, INSTALL_MARKER));
+  // Remove only empty directories; a user-owned file keeps its parent.
+  const dirs = new Set(Object.keys(prior.files).map(rel => path.dirname(rel)));
+  for (const rel of [...dirs].sort((a, b) => b.length - a.length)) {
+    const dir = path.resolve(target, rel);
+    if (!pathInside(dir, target)) continue;
+    try { fs.rmdirSync(dir); } catch (e) { /* non-empty or absent */ }
+  }
+  try { fs.rmdirSync(target); } catch (e) { /* user files remain */ }
+  return { code: 'removed', removed, preserved };
+}
 
 // The marker lives under the family's agent-global root (the same root the
 // validator's AGENTIC_SDLC_KB_ROOT seam names), read at call time so the test
@@ -720,10 +720,10 @@ module.exports = {
   detectPython,
   pathsEqual,
   orientHookCommand,
-  copyRecursive,
-  installOwned,
-  uninstallOwned,
-  ownedMarker,
+  copyRecursive,
+  installOwned,
+  uninstallOwned,
+  ownedMarker,
   loadTemplates,
   templateFor,
 };

package/scripts/postinstall.js

@@ -1,16 +1,16 @@
-#!/usr/bin/env node
-"use strict";
-const { CLIENTS, clientDetected, skillTarget, installOwned,
-  wireGlobalOrientHook, detectPython } = require('./lib');
-
-for (const client of CLIENTS) {
-  if (!clientDetected(client)) continue;
-  const target = skillTarget(client);
-  const result = installOwned(target);
-  console.log(`${client.label}: ${result.code} (${target})`);
-  if (client.key === 'claude' && result.code === 'installed') {
-    try { wireGlobalOrientHook({ client, python: detectPython() }); }
-    catch (e) { console.log('Session orientation can be wired from ENFORCEMENT.md.'); }
-  }
-}
-console.log('Initialize a project with course-creator-init.');
+#!/usr/bin/env node
+"use strict";
+const { CLIENTS, clientDetected, skillTarget, installOwned,
+  wireGlobalOrientHook, detectPython } = require('./lib');
+
+for (const client of CLIENTS) {
+  if (!clientDetected(client)) continue;
+  const target = skillTarget(client);
+  const result = installOwned(target);
+  console.log(`${client.label}: ${result.code} (${target})`);
+  if (client.key === 'claude' && result.code === 'installed') {
+    try { wireGlobalOrientHook({ client, python: detectPython() }); }
+    catch (e) { console.log('Session orientation can be wired from ENFORCEMENT.md.'); }
+  }
+}
+console.log('Initialize a project with course-creator-init.');

package/scripts/preuninstall.js

@@ -1,12 +1,12 @@
-#!/usr/bin/env node
-"use strict";
-const { CLIENTS, skillTarget, ownedMarker, uninstallOwned,
-  removeGlobalOrientHooks } = require('./lib');
-
-const ownedTargets = CLIENTS.map(skillTarget).filter(ownedMarker);
-try { removeGlobalOrientHooks(ownedTargets); } catch (e) { /* convenience only */ }
-for (const target of ownedTargets) {
-  const result = uninstallOwned(target);
-  console.log(`${result.code}: ${target} (${result.removed} owned files removed; ` +
-    `${result.preserved} retained)`);
-}
+#!/usr/bin/env node
+"use strict";
+const { CLIENTS, skillTarget, ownedMarker, uninstallOwned,
+  removeGlobalOrientHooks } = require('./lib');
+
+const ownedTargets = CLIENTS.map(skillTarget).filter(ownedMarker);
+try { removeGlobalOrientHooks(ownedTargets); } catch (e) { /* convenience only */ }
+for (const target of ownedTargets) {
+  const result = uninstallOwned(target);
+  console.log(`${result.code}: ${target} (${result.removed} owned files removed; ` +
+    `${result.preserved} retained)`);
+}