v4.0.1 — the front-door install actually works

The install command on contextium.ai is curl -sSL contextium.ai/install | bash. That pipes install.sh in on its own, with no repo around it — and the script needed the repo's files to be sitting next to it, so it aborted with "run this from a fresh clone." It now fetches the template itself and hands off, so the advertised one-liner works. Passing a target directory through the pipe (| bash -s -- ~/myproject) works too; the argument used to be dropped.

Installing from a clone is unchanged.

v4.0.0 — apps/ is yours

Two structural changes.

apps/ now starts empty. Through v3.4.0 the template installed its own machinery into your apps/ — three index generators, a quality/ folder, and a shared/ folder of helpers. None of that was code you wrote. The generators now live in .claude/hooks/generators/ and the commit checks in .githooks/checks/, beside the hooks that call them. apps/ ships with a README and nothing else.

Upgrading from v3.x: re-run install.sh. It removes those five folders if you never touched them, keeps any folder you added your own files to, and rebuilds apps/README.md from your actual apps.

Enforcement no longer depends on Claude. The commit-subject and secret-scan checks moved out of the Claude layer, so a Gemini, Codex, Cursor, or Copilot install gets a working commit gate even though it never receives a .claude/ directory.

Also in this release:

• The commit gate now rejects a bare verb with no object. A lone wip used to pass the check that exists to keep wip out of your log.
• settings.json no longer grants the agent read/write access to your entire filesystem.
• /close's documented push command was missing a required argument and could never have run.
• Worked examples in the review agents were rewritten around scenarios a new user can actually follow.