create-claude-cabinet 0.47.0 → 0.48.0

package/lib/installer-gate.js

@@ -0,0 +1,135 @@
+/**
+ * installer-gate.js — the SINGLE source of truth for the version/hash gate
+ * logic shared by CC's five runtime installers (mux, watchtower,
+ * engagement-server, verify, site-audit).
+ *
+ * Before this helper, `sha256()` was copy-pasted three times,
+ * `compareVersions()` twice, and the equal-version "don't hard-skip, fall
+ * through and copy only what changed" fix (act:df1a1dc3) was applied twice
+ * to the per-file-manifest installers while the two tarball installers
+ * (verify, site-audit) still hard-skipped on an equal version — so a
+ * template edit without a package.json bump never propagated. This module
+ * unifies all of it so the rule lives in one place ("one concept, one
+ * place"; technical-debt-0003, act:a6377c82).
+ *
+ * Two installer shapes delegate here:
+ *   - Per-file manifest (mux, watchtower, engagement-server): use `sha256`
+ *     + `compareVersions`; equal version falls through to a per-file
+ *     hash-compare in the caller.
+ *   - Tarball (verify, site-audit): npm-pack a runtime source dir into a
+ *     versioned tarball. `tarballIsStale` gives them the equal-version
+ *     fall-through — re-pack when the runtime SOURCE content changed even
+ *     though the version is identical, instead of hard-skipping.
+ */
+
+'use strict';
+
+const crypto = require('crypto');
+const fs = require('fs');
+const path = require('path');
+
+/** SHA-256 hex digest of a string or Buffer. */
+function sha256(content) {
+  return crypto.createHash('sha256').update(content).digest('hex');
+}
+
+/**
+ * Compare two dotted numeric version strings.
+ * @returns 1 if a > b, -1 if a < b, 0 if equal.
+ */
+function compareVersions(a, b) {
+  const pa = String(a).split('.').map(Number);
+  const pb = String(b).split('.').map(Number);
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    const va = pa[i] || 0;
+    const vb = pb[i] || 0;
+    if (va > vb) return 1;
+    if (va < vb) return -1;
+  }
+  return 0;
+}
+
+/**
+ * Deterministic content hash of a source directory tree: every file's
+ * relative path + bytes, in a stable sorted order. Two trees with identical
+ * file contents hash identically regardless of readdir order. node_modules
+ * and .git are ignored (build/VCS artifacts, not source).
+ */
+function hashSourceDir(dir, { ignore = ['node_modules', '.git'] } = {}) {
+  const entries = [];
+  const walk = (d, rel) => {
+    const names = fs.readdirSync(d, { withFileTypes: true });
+    for (const ent of names) {
+      if (ignore.includes(ent.name)) continue;
+      const full = path.join(d, ent.name);
+      const r = rel ? `${rel}/${ent.name}` : ent.name;
+      if (ent.isDirectory()) walk(full, r);
+      else if (ent.isFile()) entries.push([r, fs.readFileSync(full)]);
+    }
+  };
+  walk(dir, '');
+  entries.sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0));
+  const hash = crypto.createHash('sha256');
+  for (const [r, buf] of entries) {
+    hash.update(r);
+    hash.update('\0');
+    hash.update(buf);
+    hash.update('\0');
+  }
+  return hash.digest('hex');
+}
+
+const SOURCE_HASH_FILE = '.source-hash';
+
+/** Read the stored runtime-source hash sidecar from an install dir (or null). */
+function readSourceHash(installDir) {
+  try {
+    return fs.readFileSync(path.join(installDir, SOURCE_HASH_FILE), 'utf8').trim() || null;
+  } catch {
+    return null;
+  }
+}
+
+/** Persist the runtime-source hash sidecar next to the packed tarball. */
+function writeSourceHash(installDir, hash) {
+  fs.mkdirSync(installDir, { recursive: true });
+  fs.writeFileSync(path.join(installDir, SOURCE_HASH_FILE), hash, 'utf8');
+}
+
+/**
+ * Equal-version fall-through decision for the TARBALL installers.
+ *
+ * A tarball is stale (must re-pack) when it is missing/truncated OR when the
+ * runtime source content changed since it was last packed (the sidecar hash
+ * differs / is absent). Otherwise it is fresh and the caller may skip. This
+ * is what stops verify/site-audit from hard-skipping a same-version reinstall
+ * that carries a real template change.
+ *
+ * @returns {{ stale: boolean, sourceHash: string, reason: string }}
+ */
+function tarballIsStale({ tarballPath, installDir, runtimeSourceDir, minSize = 1024 }) {
+  const sourceHash = hashSourceDir(runtimeSourceDir);
+  let size = 0;
+  try {
+    size = fs.statSync(tarballPath).size;
+  } catch {
+    size = 0;
+  }
+  if (size <= minSize) {
+    return { stale: true, sourceHash, reason: size === 0 ? 'missing' : 'truncated' };
+  }
+  const stored = readSourceHash(installDir);
+  if (!stored) return { stale: true, sourceHash, reason: 'no-source-hash' };
+  if (stored !== sourceHash) return { stale: true, sourceHash, reason: 'source-changed' };
+  return { stale: false, sourceHash, reason: 'unchanged' };
+}
+
+module.exports = {
+  sha256,
+  compareVersions,
+  hashSourceDir,
+  readSourceHash,
+  writeSourceHash,
+  tarballIsStale,
+  SOURCE_HASH_FILE,
+};

package/lib/modules.js

@@ -0,0 +1,292 @@
+// MODULES is the manifest: every template path here is copied into a
+// consumer's project on install. A skill/hook/script that exists under
+// templates/ but is NOT listed in any module never ships — that is the
+// orphan bug that left the whole built-in-memory layer uninstalled
+// before v0.27.2 (test/manifest-integrity guards against recurrence).
+//
+// Intentional orphans (maintainer-only, must NOT ship to consumers) are
+// allowlisted in test/manifest-integrity. Currently: skills/cc-publish
+// (CC-source-repo release tooling, like scripts/migrate-all-consumers.js).
+//
+// This registry is DATA, deliberately extracted from lib/cli.js (a ~2000-line
+// orchestrator) so the module map can be read and edited in isolation
+// (architecture-0005). lib/cli.js requires + re-exports MODULES for
+// back-compat; existing importers (`require('../lib/cli').MODULES`) are
+// unchanged.
+const MODULES = {
+  'session-loop': {
+    name: 'Session Loop (orient + debrief)',
+    description: 'The briefing cycle. Claude starts each session informed, ends by preparing the next briefing.',
+    mandatory: true,
+    templates: [
+      'skills/orient',
+      'skills/orient-quick',
+      'skills/debrief',
+      'skills/debrief-quick',
+      'skills/session-handoff',
+      // Instruction phases — always ship, overriding the default skip-phases rule in copy.js
+      'skills/debrief/phases/audit-pattern-capture.md',
+      'skills/debrief/phases/methodology-capture.md',
+      'skills/debrief/phases/record-lessons.md',
+      'skills/debrief/phases/upstream-feedback.md',
+      'skills/debrief/phases/qa-handoff-sweep.md',
+      // Reversibility scaffolding (act:6fa60c7d) — standalone classic copies
+      // of orient/debrief, kept invokable so the orient/debrief retirement is
+      // reversible during the watchtower transition. They do NOT delegate to
+      // the live orient/debrief (which will change at retirement); they ARE
+      // the old skills under a new name. orient-classic ships SKILL.md only
+      // (its phases use skeleton defaults, like live orient); debrief-classic
+      // ships its SKILL.md + the same instruction phases as live debrief.
+      'skills/orient-classic',
+      'skills/debrief-classic',
+      'skills/debrief-classic/phases/audit-pattern-capture.md',
+      'skills/debrief-classic/phases/methodology-capture.md',
+      'skills/debrief-classic/phases/record-lessons.md',
+      'skills/debrief-classic/phases/upstream-feedback.md',
+      'skills/debrief-classic/phases/qa-handoff-sweep.md',
+      'skills/menu',
+    ],
+  },
+  'hooks': {
+    name: 'Git Guardrails + Telemetry',
+    description: 'Block destructive git ops (force push, hard reset). Track skill usage via JSONL telemetry.',
+    mandatory: false,
+    default: true,
+    lean: true,
+    templates: ['hooks/git-guardrails.sh', 'hooks/cc-upstream-guard.sh', 'hooks/skill-telemetry.sh', 'hooks/skill-tool-telemetry.sh', 'hooks/work-tracker-guard.sh', 'hooks/action-quality-gate.sh', 'hooks/action-completion-gate.sh', 'hooks/memory-index-guard.sh', 'scripts/cc-drift-check.cjs', 'scripts/skill-usage.mjs'],
+  },
+  'work-tracking': {
+    name: 'Work Tracking (pib-db or markdown)',
+    description: 'Track work items for orient/debrief. Default: SQLite (pib-db). Also supports markdown (tasks.md) or external systems. Choice made during /onboard.',
+    mandatory: false,
+    default: true,
+    lean: false,
+    templates: ['scripts/pib-db.mjs', 'scripts/pib-db-path.mjs', 'scripts/pib-db-lib.mjs', 'scripts/pib-db-mcp-server.mjs', 'scripts/pib-db-schema.sql', 'scripts/work-tracker-server.mjs', 'scripts/work-tracker-ui.html', 'skills/work-tracker', 'skills/spring-clean'],
+    needsDb: true,
+  },
+  'planning': {
+    name: 'Planning + Execution (plan + execute)',
+    description: 'Structured planning with cabinet critique — members weigh in before you build.',
+    mandatory: false,
+    default: true,
+    lean: true,
+    templates: ['skills/plan', 'skills/execute', 'skills/execute/phases/post-impl-checklist.md', 'skills/debrief/phases/checklist-feedback.md', 'skills/checklist-discover', 'skills/generate-plan-groups', 'skills/execute-group', 'workflows/execute-group-implement.js', 'workflows/execute-group-complete.js', 'skills/investigate', 'cabinet/checkpoint-protocol.md', 'cabinet/worktree-invocation-contract.md', 'cabinet/elicitation-methods.md', 'cabinet/qa-dimensions-template.yaml', 'cabinet/checklist-stats-schema.md', 'scripts/qa-dimensions-validator.cjs', 'skills/orient/phases/checklist-status.md', 'skills/audit/phases/checklist-pruning.md'],
+  },
+  'compliance': {
+    name: 'Compliance Stack (rules + enforcement)',
+    description: 'Scoped instructions that load by path. Enforcement pipeline for promoting patterns to rules.',
+    mandatory: false,
+    default: true,
+    lean: false,
+    templates: ['rules/enforcement-pipeline.md', 'rules/maintainability.md', 'rules/markdown-prose.md', 'rules/verify-before-asserting.md', 'rules/plan-before-bulk-or-irreversible-actions.md', 'rules/acknowledge-when-corrected.md', 'skills/unwrap', 'memory/patterns/_pattern-template.md', 'memory/patterns/pattern-intelligence-first.md'],
+  },
+  'memory': {
+    name: 'Built-In Memory (cc-remember + reader + validator)',
+    description: 'Curated write/validate layer over Claude Code\'s built-in file memory. /cc-remember writes indexed memories, /memory browses them, validate-memory.mjs guards MEMORY.md integrity. Replaced the retired omega engine in v0.27.',
+    mandatory: false,
+    default: true,
+    // lean:true is load-bearing — it keeps the skill triad, scripts, and
+    // rule installing together as an atomic unit. compliance is lean:false,
+    // so the memory-capture rule must NOT live there or lean installs get a
+    // partial, incoherent set.
+    lean: true,
+    templates: [
+      'skills/cc-remember',
+      'skills/memory',
+      'rules/memory-capture.md',
+      'cabinet/memory-lifecycle-contract.md',
+      'scripts/write-memory-file.mjs',
+      'scripts/validate-memory.mjs',
+      // project-context.cjs ships as a co-located sibling: the two .mjs
+      // scripts require('./project-context.cjs') and consumers have no lib/.
+      'scripts/project-context.cjs',
+    ],
+  },
+  'audit': {
+    name: 'Audit Loop (audit + triage + cabinet)',
+    description: '27 expert cabinet members review your project. Convene the full cabinet or just one committee.',
+    mandatory: false,
+    default: true,
+    lean: true,
+    templates: [
+      'skills/audit', 'skills/pulse', 'skills/triage-audit', 'skills/cabinet',
+      'cabinet', 'briefing',
+      'skills/cabinet-accessibility', 'skills/cabinet-anti-confirmation',
+      'skills/cabinet-architecture', 'skills/cabinet-automation',
+      'skills/cabinet-boundary-man',
+      'skills/cabinet-anthropic-insider', 'skills/cabinet-cc-health',
+      'skills/cabinet-data-integrity',
+      'skills/cabinet-debugger', 'skills/cabinet-deployment',
+      'skills/cabinet-historian',
+      'skills/cabinet-organized-mind', 'skills/cabinet-process-therapist',
+      'skills/cabinet-qa', 'skills/cabinet-record-keeper',
+      'skills/cabinet-roster-check', 'skills/cabinet-security',
+      'skills/cabinet-seo',
+      'skills/cabinet-small-screen', 'skills/cabinet-speed-freak',
+      'skills/cabinet-system-advocate', 'skills/cabinet-technical-debt',
+      'skills/cabinet-usability', 'skills/cabinet-workflow-cop',
+      'skills/cabinet-framework-quality', 'skills/cabinet-goal-alignment',
+      'skills/cabinet-information-design', 'skills/cabinet-mantine-quality',
+      'skills/cabinet-ui-experimentalist', 'skills/cabinet-user-advocate',
+      'skills/cabinet-vision',
+      'skills/cabinet-narrative-architect', 'skills/cabinet-interactive-storyteller',
+      'skills/cabinet-elegance',
+      'scripts/merge-findings.js', 'scripts/load-triage-history.js',
+      'scripts/pib-db-path.mjs', // load-triage-history.js imports it (declared cross-module dep; also shipped by work-tracking)
+      'scripts/triage-server.mjs', 'scripts/triage-ui.html',
+      'scripts/finding-schema.json', 'scripts/resolve-committees.cjs',
+      'scripts/review-server.mjs', 'scripts/review-ui.html',
+      // audit-coherence-check.mjs backs the /validate `audit-coherence`
+      // validator (act:faf23e4c); audit-synth.mjs is the tested source-of-truth
+      // mirror of deliberative-audit.js's inline mechanical merge (kept in
+      // lockstep by a parity test); patterns-scope-check.mjs is the /validate
+      // `patterns-scope` cross-project-contamination guard (act:62608a5d).
+      'scripts/audit-coherence-check.mjs', 'scripts/audit-synth.mjs',
+      'scripts/patterns-scope-check.mjs',
+      'workflows/deliberative-audit.js', 'cabinet/critique-contract.md',
+    ],
+  },
+  'lifecycle': {
+    name: 'Lifecycle (onboard + seed + cc-upgrade + link)',
+    description: 'Onboarding prepares the briefings. Seed proposes new cabinet members when you adopt new tech.',
+    mandatory: false,
+    default: true,
+    lean: true,
+    templates: ['skills/onboard', 'skills/seed', 'skills/cc-upgrade', 'skills/cc-link', 'skills/cc-unlink', 'skills/cc-extract', 'skills/cc-feedback', 'cabinet/elicitation-methods.md'],
+  },
+  'validate': {
+    name: 'Validate',
+    description: 'Structural validation checks with unified summary. Define your own validators.',
+    mandatory: false,
+    default: true,
+    lean: false,
+    templates: ['skills/validate', 'scripts/skill-validator.sh'],
+  },
+  'verify': {
+    name: 'Verification Harness (Cucumber + Playwright)',
+    description: 'Walkthrough verification with human-in-the-loop verdict pauses. Replaces flat AC lists with re-runnable user-journey scenarios. Includes /verify skeleton skill + cabinet-verify npm runtime + opt-in integration phases for /plan, /execute, /debrief.',
+    mandatory: false,
+    default: false,
+    lean: false,
+    templates: [
+      'skills/verify',
+      'skills/plan/phases/verify-plan.md',
+      'skills/execute/phases/verify-emit.md',
+      'skills/debrief/phases/verify-coverage.md',
+      'skills/orient/phases/verify-backfill.md',
+    ],
+    postInstall: 'verify-setup',
+  },
+  'site-audit': {
+    name: 'Site Audit (deployed-site quality)',
+    description: '14-check audit for deployed websites: performance, accessibility (3 engines), security, SEO, DNS, privacy, sustainability. Standalone HTML report + comparison mode.',
+    mandatory: false,
+    default: false,
+    lean: false,
+    templates: [
+      'skills/cc-site-audit',
+      'site-audit-runtime',
+    ],
+    postInstall: 'site-audit-setup',
+  },
+  engagement: {
+    name: 'Engagement management (with secure credential handoff)',
+    description: 'Ongoing client-engagement management built on pib-db: per-recipient packets (rendered projections of the work backlog), role-gated billing, client feedback flowing back as events, and secure credential handoff (encrypted capture via OS dialog, pluggable email/MCP/file transport). Three primary skills across consultant and client sides, plus redirect stubs. Requires work-tracking (the pib-db adapter is the engine\'s data source).',
+    mandatory: false,
+    default: false,
+    lean: false,
+    requires: ['work-tracking'],
+    postInstall: 'engagement-setup',
+    templates: [
+      'skills/collab-client',
+      'skills/collab-consultant',
+      'skills/engagement-help',
+      'skills/engagement-create',
+      'skills/setup-accounts',
+      'skills/guide',
+      'engagement',
+    ],
+  },
+  watchtower: {
+    name: 'Watchtower (continuous background state)',
+    description: 'Replaces orient/debrief with continuous background processing. Three rings (mechanical cron, Claude intelligence, session-aware), ambient state injection via SessionStart hook, and an inbox for extracted knowledge and signals. Sessions start informed with minimal context cost.',
+    mandatory: false,
+    default: false,
+    lean: false,
+    templates: [
+      'scripts/watchtower-validate.mjs',
+      'cabinet/watchtower-contracts.md',
+      'scripts/watchtower-lib.mjs',
+      'scripts/watchtower-queue.mjs',
+      'scripts/watchtower-routines.mjs',
+      'scripts/watchtower-hook-runner.mjs',
+      'scripts/watchtower-phase-shim.mjs',
+      'scripts/watchtower-migrate-keys.mjs',
+      'scripts/watchtower-sync.mjs',
+      'scripts/watchtower-advisories.mjs',
+      'cabinet/advisories-state-schema.md',
+      'skills/inbox',
+      'hooks/watchtower-session-start.sh',
+      'scripts/watchtower-build-context.mjs',
+      'scripts/watchtower-snapshot.mjs',
+      'scripts/watchtower-narrative-corpus.mjs',
+      'scripts/watchtower-cross-ring-reader.mjs',
+      'scripts/watchtower-inbox-assessment.mjs',
+      'scripts/watchtower-ring1.mjs',
+      'scripts/watchtower-ring1-runner.sh',
+      'skills/watchtower',
+      'watchtower/com.claude-cabinet.watchtower-ring1.plist',
+      'watchtower/watchtower-ring1.service',
+      'watchtower/watchtower-ring1.timer',
+      'scripts/watchtower-ring2.mjs',
+      'scripts/watchtower-ring2-runner.sh',
+      'watchtower/com.claude-cabinet.watchtower-ring2-fast.plist',
+      'watchtower/com.claude-cabinet.watchtower-ring2-slow.plist',
+      'watchtower/watchtower-ring2-fast.service',
+      'watchtower/watchtower-ring2-fast.timer',
+      'watchtower/watchtower-ring2-slow.service',
+      'watchtower/watchtower-ring2-slow.timer',
+      'hooks/watchtower-session-end.sh',
+      'scripts/watchtower-ring3-close.mjs',
+      'scripts/watchtower-ring4.mjs',
+      'scripts/watchtower-ring4-runner.sh',
+      'scripts/watchtower-status.sh',
+      'skills/briefing',
+      'skills/threads',
+      'skills/catch-up',
+      'skills/qa-handoff',
+      'skills/qa-drain',
+      'skills/close',
+    ],
+  },
+  mux: {
+    name: 'Mux (tmux project manager)',
+    description: 'Multi-project terminal manager. Desks (tmux sessions), auto-worktrees, trail logging, sticky notes, portal color-switching, and an MCP server for Claude. Installs to user-level paths (~/.local/bin/, ~/.config/mux/).',
+    mandatory: false,
+    default: false,
+    lean: false,
+    postInstall: 'mux-setup',
+    templates: ['skills/orient/phases/dx-captures.md', 'skills/dx-feedback'],
+  },
+  'engagement-server': {
+    name: 'Engagement Server',
+    description: 'Central multi-engagement API server. Deploys once to Railway/Fly, serves all client engagements. User-level infrastructure.',
+    mandatory: false,
+    default: false,
+    lean: false,
+    requires: ['engagement', 'work-tracking'],
+    postInstall: 'engagement-server-setup',
+    templates: [],
+  },
+  'bash-compress': {
+    name: 'Bash Output Compression Hook',
+    description: 'PostToolUse hook that compresses noisy Bash stdout (git status walls, npm/yarn install output, find/ls dumps) to reclaim context in long sessions. Off by default. stderr and error/warning lines pass through verbatim; every rewrite carries a visible [compressed] marker; fail-open on any error. Requires the hooks module (it wires into .claude/settings.json).',
+    mandatory: false,
+    default: false,
+    lean: false,
+    requires: ['hooks'],
+    templates: ['hooks/bash-output-compress.sh'],
+  },
+};
+
+module.exports = { MODULES };

package/lib/mux-setup.js

@@ -19,7 +19,7 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
-const crypto = require('crypto');
+const { sha256, compareVersions } = require('./installer-gate');
 
 const CC_HOME = path.join(os.homedir(), '.claude-cabinet');
 const GLOBAL_MANIFEST_PATH = path.join(CC_HOME, 'global-manifest.json');
@@ -65,22 +65,6 @@ const DATA_DIRS = [
   path.join(os.homedir(), '.local', 'share', 'mux', 'qa-handoff'),
 ];
 
-function sha256(content) {
-  return crypto.createHash('sha256').update(content).digest('hex');
-}
-
-function compareVersions(a, b) {
-  const pa = a.split('.').map(Number);
-  const pb = b.split('.').map(Number);
-  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
-    const va = pa[i] || 0;
-    const vb = pb[i] || 0;
-    if (va > vb) return 1;
-    if (va < vb) return -1;
-  }
-  return 0;
-}
-
 function readGlobalManifest() {
   if (!fs.existsSync(GLOBAL_MANIFEST_PATH)) return { files: {} };
   try {

package/lib/project-context.js

@@ -1,103 +1,23 @@
 /**
  * Shared project-identity and memory-dir resolution for CC's
- * memory-related tooling. Used by:
- *   - lib/migrate-from-omega.js (Phase 1 migration)
- *   - scripts/write-memory-file.mjs (Phase 3a /cc-remember writer)
- *   - scripts/validate-memory.mjs (Phase 3a validator)
+ * memory-related tooling.
  *
- * Worktree-safe: resolves project identity via `git rev-parse
- * --git-common-dir`, so callers from a worktree write to the host
- * project's memory dir, not a per-worktree split.
- */
-
-'use strict';
-
-const fs = require('node:fs');
-const path = require('node:path');
-const os = require('node:os');
-const { execSync } = require('node:child_process');
-
-/**
- * Resolve the absolute path of the current project's primary checkout.
- * Worktree-safe via git common-dir; falls back to cwd if not in a repo.
- */
-function resolveProjectAbsolutePath(cwd = process.cwd()) {
-  try {
-    const commonDir = execSync('git rev-parse --git-common-dir', {
-      cwd,
-      stdio: ['ignore', 'pipe', 'ignore'],
-      encoding: 'utf8',
-    }).trim();
-    const abs = path.isAbsolute(commonDir) ? commonDir : path.resolve(cwd, commonDir);
-    return path.dirname(abs);
-  } catch {
-    return path.resolve(cwd);
-  }
-}
-
-/**
- * Project slug — the basename of the project root. Used as a
- * human-readable identifier and to match memory keys.
- */
-function resolveProjectSlug(cwd = process.cwd()) {
-  return path.basename(resolveProjectAbsolutePath(cwd));
-}
-
-/**
- * Convert an absolute path to Claude Code's project-dir slug format
- * (dashified). `/Users/x/claude-cabinet` → `-Users-x-claude-cabinet`.
- */
-function dashifiedSlug(absolutePath) {
-  return absolutePath.replace(/^\//, '-').replace(/\//g, '-');
-}
-
-/**
- * Read settings.json safely; returns {} on absence or parse error.
- */
-function readSettings(settingsPath) {
-  if (!fs.existsSync(settingsPath)) return {};
-  try {
-    return JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
-  } catch {
-    return {};
-  }
-}
-
-/**
- * Resolve the memory directory for the current project.
- * Honors `autoMemoryDirectory` setting if present in ~/.claude/settings.json.
- * Otherwise uses platform default: ~/.claude/projects/<dashified>/memory/.
+ * SINGLE SOURCE OF TRUTH: the logic lives in
+ * `templates/scripts/project-context.cjs` — the copy that ships to
+ * consumers (co-located with the memory scripts, which `require` it as a
+ * sibling; consumers have no `lib/`). This file is a thin re-export so
+ * that CC-source-repo callers — `lib/` code and the memory/orient SKILL.md
+ * best-effort `require('./lib/project-context')` — resolve the exact same
+ * implementation instead of a divergent hand-kept copy (the "one concept,
+ * one place" rule; the byte-identical twins had already drifted once).
  *
- * Rejects literal `~` in autoMemoryDirectory — Claude Code does NOT
- * expand tilde in settings.json values, and a silent `./~/...` directory
- * is a footgun.
+ * The re-export direction is safe: lib/ can reach templates/ both in the
+ * source repo and in the published npm package (both are in package.json
+ * `files`). The manifest-integrity suite guards that the SHIPPED memory
+ * scripts never require this `../lib/` path and that the two modules stay
+ * identical.
  */
-function resolveMemoryDir(opts = {}) {
-  const homeDir = opts.homeDir || os.homedir();
-  const cwd = opts.cwd || process.cwd();
-  const settingsPath = opts.settingsPath || path.join(homeDir, '.claude', 'settings.json');
-
-  if (opts.memoryDir) return path.resolve(opts.memoryDir);
 
-  const settings = readSettings(settingsPath);
-  if (settings.autoMemoryDirectory) {
-    const v = settings.autoMemoryDirectory;
-    if (v.includes('~')) {
-      throw new Error(
-        `autoMemoryDirectory in ${settingsPath} contains '~' (literal). Claude Code does not expand tilde. Use an absolute path.`
-      );
-    }
-    return path.resolve(v);
-  }
-
-  const projectAbs = resolveProjectAbsolutePath(cwd);
-  return path.join(homeDir, '.claude', 'projects', dashifiedSlug(projectAbs), 'memory');
-}
+'use strict';
 
-module.exports = {
-  resolveProjectAbsolutePath,
-  resolveProjectSlug,
-  resolveMemoryDir,
-  dashifiedSlug,
-  readSettings,
-};
+module.exports = require('../templates/scripts/project-context.cjs');