create-claude-cabinet 0.50.0 → 0.51.0

package/lib/CLAUDE.md

@@ -53,7 +53,15 @@ No build step; CommonJS.
   `patterns-scope-check.mjs`).
 - `lib/installer-gate.js` — shared version/hash gating for the setup
   engines (Wave 1, act:a6377c82). Exports `sha256`, `compareVersions`,
-  `hashSourceDir`, `tarballIsStale`. Before it, `sha256()` was
+  `hashSourceDir`, `tarballIsStale`, and — since act:9a0af01a —
+  `readGlobalManifest`/`writeGlobalManifest` (+ `ccHome`/
+  `globalManifestPath`), hoisted here from mux-setup, watchtower-setup, and
+  engagement-server-setup, which each carried a BYTE-IDENTICAL copy of the
+  pair: the same duplication condition that created this module in the first
+  place. All four user-level engines (the fourth being output-register) now
+  delegate; the shape-drift guard (a non-object top level or non-object
+  `files` reads as empty) lives in the one copy, since every caller indexes
+  `manifest.files[dest]` unconditionally. Before it, `sha256()` was
   copy-pasted three times and `compareVersions()` twice, and the
   equal-version "don't hard-skip, fall through to a per-file hash-compare"
   rule was re-implemented per installer. Per-file-manifest installers
@@ -195,6 +203,27 @@ No build step; CommonJS.
   follows mux-setup.js pattern with global manifest SHA256 tracking,
   incl. the equal-version hash-compare fall-through of act:df1a1dc3 —
   equal versions copy only changed files, `'unchanged'` when none do).
+- `lib/output-register.js` — Cabinet Register output-style installer
+  (act:9a0af01a). Seeds `templates/output-styles/*.md` (GLOBBED, never
+  hand-enumerated — the orphan test only scans `templates/skills/`) into the
+  user-level `~/.claude/output-styles/`, then seeds `outputStyle` into the
+  PROJECT's `.claude/settings.json`. Unlike the other four engines this one
+  is SEED-ONLY: `isProjectOwnedSeed()` semantics (never overwrite — the
+  operator hand-tunes their register) PLUS loud validation of the INSTALLED
+  copy, because neither sibling engine's ownership model is right here (mux
+  never re-examines a hand edit → the footgun persists; watchtower reverts
+  hand edits every reinstall). Its load-bearing export is `versionGate()`:
+  `keep-coding-instructions` only exists as of Claude Code **v2.0.37**, and
+  below that the field is silently ignored, its `false` default applies, and
+  CC's software-engineering instructions are STRIPPED with no error — a
+  hazard NO file-content test can see, so the guard shells `claude --version`
+  (refuse below the floor; fail OPEN when absent/unparseable, since absence is
+  not an old version). `resolveRegisterLevel()` is a three-valued
+  `{level, ours, source}` ENUMERATOR (blind to force-for-plugin / CLI /
+  managed layers, and says so); `REGISTER_STYLE_NAME` must equal the style's
+  frontmatter `name` — CC keys custom styles by that field verbatim. Full
+  rationale in `templates/CLAUDE.md` § output-register; 40 tests in
+  `test/output-register/`.
 - `lib/mux-setup.js` — mux runtime installer (copies bin/mux, config
   scripts, and popup to user-level paths; creates data dirs;
   `setupDarwinIntegration()` appends source-file to `~/.tmux.conf`,

package/lib/cli.js

@@ -4,7 +4,7 @@ const fs = require('fs');
 const os = require('os');
 const crypto = require('crypto');
 const { copyTemplates, recordSkip, isProjectOwnedSeed, classifyFileOwnership } = require('./copy');
-const { mergeSettings, healUserSettings, mergeWatchtowerHooks, mergeMuxHooks, mergeBashCompressHooks, mergeCcDevHooks, mergeSkillOverrides } = require('./settings-merge');
+const { mergeSettings, healUserSettings, mergeWatchtowerHooks, mergeMuxHooks, mergeBashCompressHooks, mergeRegisterHooks, mergeCcDevHooks, mergeSkillOverrides } = require('./settings-merge');
 const { create: createMetadata, read: readMetadata, readFrozenModules, setFrozenModules, readMcpOptOut } = require('./metadata');
 const { setupDb, shouldSkipInit, readBundledSchemaVersion } = require('./db-setup');
 const { setupVerifyRuntime } = require('./verify-setup');
@@ -13,6 +13,7 @@ const { setupEngagement } = require('./engagement-setup');
 const { setupMux } = require('./mux-setup');
 const { setupEngagementServer } = require('./engagement-server-setup');
 const { refreshWatchtowerRuntime } = require('./watchtower-setup');
+const { setupOutputRegister, renderRegisterReport } = require('./output-register');
 const { reset } = require('./reset');
 
 const VERSION = require('../package.json').version;
@@ -635,6 +636,7 @@ function parseArgs(argv) {
     else if (arg === '--migrate-memory') flags.migrateMemory = true;
     else if (arg === '--unmigrate-memory') flags.unmigrateMemory = true;
     else if (arg === '--list-frozen') flags.listFrozen = true;
+    else if (arg === '--register') flags.register = true;
     else if (arg === '--modules' && i + 1 < args.length) {
       flags.modules = args[++i].split(',').map(s => s.trim()).filter(Boolean);
     }
@@ -692,6 +694,11 @@ function printHelp() {
     --unfreeze [keys]  Clear the freeze for the given module(s), or all if no
                   keys. Re-run the installer to refresh the unfrozen module(s).
     --list-frozen      Show which modules are frozen (+ their closure) and exit.
+    --register    Show where the Cabinet Register output style stands: every
+                  settings file that names an outputStyle and what each says.
+                  Enumerates only — it cannot see plugin force-for-plugin, CLI
+                  --settings, or managed policy, and says so. Use /status and
+                  /context for ground truth. Exits without installing.
     --reset       Remove Claude Cabinet files (uses manifest for safety)
     --force       With --reset: remove even customized files;
                   with --migrate-memory: override already-migrated guard
@@ -843,6 +850,18 @@ async function run() {
     }
   }
 
+  // Standalone register enumeration (act:9a0af01a). Prints every settings file
+  // that mentions outputStyle and what each says, then names the layers it
+  // could NOT consult and points at /status + /context for ground truth. An
+  // ENUMERATOR, never a verdict — see renderRegisterReport.
+  if (flags.register) {
+    const projectDir = path.resolve(flags.targetDir);
+    console.log('');
+    for (const line of renderRegisterReport({ projectDir })) console.log(line);
+    console.log('');
+    return;
+  }
+
   if (flags.migrateMemory) {
     const { migrateMemoryCmd } = require('./migrate-memory-cmd');
     const projectDir = path.resolve(flags.targetDir);
@@ -1422,6 +1441,11 @@ async function run() {
       console.log('  ⚙️  Registered bash-output compression PostToolUse hook');
     }
 
+    if (selectedModules.includes('output-register')) {
+      mergeRegisterHooks(settingsPath);
+      console.log('  ⚙️  Registered Cabinet Register reinforcement UserPromptSubmit hook');
+    }
+
     // Repo-local maintainer hooks — no-op unless this IS the CC source repo
     // (dogfood). Registers the node --check PostToolUse gate durably so a
     // reinstall can't silently regenerate it away (architecture-0004).
@@ -1537,6 +1561,7 @@ async function run() {
     'engagement-setup': setupEngagement,
     'mux-setup': setupMux,
     'engagement-server-setup': setupEngagementServer,
+    'output-register-setup': setupOutputRegister,
   };
   for (const moduleKey of selectedModules) {
     const mod = MODULES[moduleKey];

package/lib/engagement-server-setup.js

@@ -20,10 +20,9 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
-const { sha256, compareVersions } = require('./installer-gate');
+const { sha256, compareVersions, readGlobalManifest, writeGlobalManifest } = require('./installer-gate');
 
 const CC_HOME = path.join(os.homedir(), '.claude-cabinet');
-const GLOBAL_MANIFEST_PATH = path.join(CC_HOME, 'global-manifest.json');
 const INSTALL_DIR = path.join(CC_HOME, 'engagement-server');
 const VERSION_FILE = path.join(INSTALL_DIR, '.cc-version');
 const TEMPLATE_DIR = path.resolve(__dirname, '..', 'templates', 'engagement-server');
@@ -42,25 +41,6 @@ const DATA_DIRS = [
   path.join(INSTALL_DIR, 'migrations'),
 ];
 
-function readGlobalManifest() {
-  if (!fs.existsSync(GLOBAL_MANIFEST_PATH)) return { files: {} };
-  try {
-    const m = JSON.parse(fs.readFileSync(GLOBAL_MANIFEST_PATH, 'utf8'));
-    // Guard shape drift: manifest.files is indexed unconditionally below.
-    if (typeof m !== 'object' || m === null || Array.isArray(m)) return { files: {} };
-    if (typeof m.files !== 'object' || m.files === null || Array.isArray(m.files)) m.files = {};
-    return m;
-  } catch {
-    return { files: {} };
-  }
-}
-
-function writeGlobalManifest(manifest) {
-  fs.mkdirSync(path.dirname(GLOBAL_MANIFEST_PATH), { recursive: true });
-  const tmp = GLOBAL_MANIFEST_PATH + '.tmp';
-  fs.writeFileSync(tmp, JSON.stringify(manifest, null, 2));
-  fs.renameSync(tmp, GLOBAL_MANIFEST_PATH);
-}
 
 function readInstalledVersion() {
   if (!fs.existsSync(VERSION_FILE)) return null;

package/lib/installer-gate.js

@@ -26,8 +26,26 @@
 
 const crypto = require('crypto');
 const fs = require('fs');
+const os = require('os');
 const path = require('path');
 
+// The user-level install root and the SHA256 manifest every user-level engine
+// records its managed files in. Resolved per-call (not frozen at module load)
+// because the tests point HOME at a sandbox in a child process.
+//
+// `home` is injectable for the engines that take an in-process `home` option
+// instead of a child-process $HOME (output-register does). Without it, such an
+// engine threads its sandbox home to its file destinations but still resolves
+// the manifest against the REAL os.homedir() — a half-injection that writes
+// dead temp paths into the operator's live manifest on every test run
+// (act:9a0af01a; caught by the QA drain, 8 stale entries deep).
+function ccHome(home = os.homedir()) {
+  return path.join(home, '.claude-cabinet');
+}
+function globalManifestPath(home = os.homedir()) {
+  return path.join(ccHome(home), 'global-manifest.json');
+}
+
 /** SHA-256 hex digest of a string or Buffer. */
 function sha256(content) {
   return crypto.createHash('sha256').update(content).digest('hex');
@@ -124,6 +142,40 @@ function tarballIsStale({ tarballPath, installDir, runtimeSourceDir, minSize = 1
   return { stale: false, sourceHash, reason: 'unchanged' };
 }
 
+/**
+ * Read the user-level global manifest (`~/.claude-cabinet/global-manifest.json`).
+ *
+ * Hoisted here from the three user-level engines (mux-setup, watchtower-setup,
+ * engagement-server-setup), which each carried a byte-identical copy of this
+ * function and its writer — the exact duplication condition that created this
+ * module ("one concept, one place"). A fourth copy was about to land with
+ * output-register; instead all four delegate.
+ *
+ * Shape-drift defensive: a non-object top level, or a non-object `files`, reads
+ * as an empty manifest, because every caller indexes `manifest.files[dest]`
+ * unconditionally. Never throws — an unreadable/corrupt manifest degrades to
+ * "nothing recorded", which makes callers re-copy rather than silently skip.
+ */
+function readGlobalManifest(manifestPath = globalManifestPath()) {
+  if (!fs.existsSync(manifestPath)) return { files: {} };
+  try {
+    const m = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+    if (typeof m !== 'object' || m === null || Array.isArray(m)) return { files: {} };
+    if (typeof m.files !== 'object' || m.files === null || Array.isArray(m.files)) m.files = {};
+    return m;
+  } catch {
+    return { files: {} };
+  }
+}
+
+/** Persist the global manifest atomically (tmp + rename). */
+function writeGlobalManifest(manifest, manifestPath = globalManifestPath()) {
+  fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
+  const tmp = manifestPath + '.tmp';
+  fs.writeFileSync(tmp, JSON.stringify(manifest, null, 2));
+  fs.renameSync(tmp, manifestPath);
+}
+
 module.exports = {
   sha256,
   compareVersions,
@@ -131,5 +183,9 @@ module.exports = {
   readSourceHash,
   writeSourceHash,
   tarballIsStale,
+  readGlobalManifest,
+  writeGlobalManifest,
+  ccHome,
+  globalManifestPath,
   SOURCE_HASH_FILE,
 };

package/lib/modules.js

@@ -278,6 +278,21 @@ const MODULES = {
     postInstall: 'engagement-server-setup',
     templates: [],
   },
+  'output-register': {
+    name: 'Cabinet Register (plain-English output style)',
+    description: 'Makes plain-English, decision-level communication the DEFAULT rather than guidance that decays. Ships a Claude Code output style (the contract lands in the system prompt, re-sent every request) to ~/.claude/output-styles/, plus a one-line-per-turn UserPromptSubmit reminder — custom styles get no per-turn reminder from the platform, only built-ins do. Code, paths, errors, and every filed artifact stay technical. On by default; the style is seeded, never clobbered, so a project that already sets an output style is left alone. Requires Claude Code v2.0.37+ (below that the engine refuses, loudly, and installs nothing).',
+    mandatory: false,
+    default: true,
+    lean: false,
+    requires: ['hooks'],
+    postInstall: 'output-register-setup',
+    // Project-level payload only: the per-turn hook. The STYLE itself is
+    // user-level (~/.claude/output-styles/ is where Claude Code reads custom
+    // styles from) and is seeded by the postInstall engine, which is why this
+    // array doesn't list it. Same shape as engagement-server (templates: [] +
+    // postInstall + user-level payload) — an existing, green precedent.
+    templates: ['hooks/register-reinforce.sh'],
+  },
   'bash-compress': {
     name: 'Bash Output Compression Hook',
     description: 'PostToolUse hook that compresses noisy Bash stdout (git status walls, npm/yarn install output, find/ls dumps) to reclaim context in long sessions. Off by default. stderr and error/warning lines pass through verbatim; every rewrite carries a visible [compressed] marker; fail-open on any error. Requires the hooks module (it wires into .claude/settings.json).',

package/lib/mux-setup.js

@@ -19,10 +19,8 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
-const { sha256, compareVersions } = require('./installer-gate');
+const { sha256, compareVersions, readGlobalManifest, writeGlobalManifest } = require('./installer-gate');
 
-const CC_HOME = path.join(os.homedir(), '.claude-cabinet');
-const GLOBAL_MANIFEST_PATH = path.join(CC_HOME, 'global-manifest.json');
 const MUX_VERSION_FILE = path.join(os.homedir(), '.config', 'mux', '.cc-version');
 const TEMPLATE_DIR = path.resolve(__dirname, '..', 'templates', 'mux');
 
@@ -65,25 +63,6 @@ const DATA_DIRS = [
   path.join(os.homedir(), '.local', 'share', 'mux', 'qa-handoff'),
 ];
 
-function readGlobalManifest() {
-  if (!fs.existsSync(GLOBAL_MANIFEST_PATH)) return { files: {} };
-  try {
-    const m = JSON.parse(fs.readFileSync(GLOBAL_MANIFEST_PATH, 'utf8'));
-    // Guard shape drift: manifest.files is indexed unconditionally below.
-    if (typeof m !== 'object' || m === null || Array.isArray(m)) return { files: {} };
-    if (typeof m.files !== 'object' || m.files === null || Array.isArray(m.files)) m.files = {};
-    return m;
-  } catch {
-    return { files: {} };
-  }
-}
-
-function writeGlobalManifest(manifest) {
-  fs.mkdirSync(path.dirname(GLOBAL_MANIFEST_PATH), { recursive: true });
-  const tmp = GLOBAL_MANIFEST_PATH + '.tmp';
-  fs.writeFileSync(tmp, JSON.stringify(manifest, null, 2));
-  fs.renameSync(tmp, GLOBAL_MANIFEST_PATH);
-}
 
 function readInstalledVersion() {
   if (!fs.existsSync(MUX_VERSION_FILE)) return null;