@thebassclef/lite 1.0.0 → 1.0.2

package/dist/lite/.claude/hooks/whereami-utc-gate.sh

@@ -0,0 +1,142 @@
+#!/usr/bin/env bash
+# tier: lite
+# install-class: dual
+#
+# whereami-utc-gate.sh — PreToolUse hook that BLOCKs Edit|Write|MultiEdit
+# on docs/whereami.md when last_updated.at value does not end in Z (UTC).
+#
+# Wires per .claude/settings.json under hooks.PreToolUse with matcher
+# "Edit|Write|MultiEdit". Reads the tool's event JSON from stdin,
+# extracts the incoming content (content for Write; new_string for Edit
+# and MultiEdit), scans for last_updated.at timestamp values in both
+# YAML-frontmatter form (`at: <timestamp>` under `last_updated:` block)
+# and markdown-section form (`## Last updated` followed by a timestamp).
+# BLOCKs (exit 2) when any value carries a non-Z offset.
+#
+# Cure B side of #897; Cure A (sync-hook parser accepts both shapes for
+# grace window) shipped in bet 26e PR #917. Cure B is the write-time
+# gate; adopter grace window per ADR-031 through 2026-10-31 — Cure A
+# parser keeps working during migration.
+#
+# Ships as WU-4 of bet 2026-07-26g.
+#
+# Override: SKIP_WHEREAMI_UTC_GATE=1 (logged to stderr).
+#
+# Pairs with: .claude/rules/state-schema-validation.md (sister discipline
+#             at state-spine surface; this hook covers the whereami-
+#             specific UTC-Z constraint)
+
+set -u
+
+# === Override path ===
+
+if [ "${SKIP_WHEREAMI_UTC_GATE:-}" = "1" ]; then
+  echo "[whereami-utc-gate.sh] SKIP_WHEREAMI_UTC_GATE=1 — bypassing" >&2
+  exit 0
+fi
+
+# === Read PreToolUse event ===
+
+EVENT_JSON="$(cat 2>/dev/null || true)"
+if [ -z "$EVENT_JSON" ]; then
+  exit 0  # empty stdin → pass through (fail-soft per stdin contract)
+fi
+
+# Fail-soft on malformed JSON per sufficiency criterion 6
+TOOL_NAME="$(echo "$EVENT_JSON" | jq -r '.tool_name // empty' 2>/dev/null || echo "")"
+TARGET_PATH="$(echo "$EVENT_JSON" | jq -r '.tool_input.file_path // empty' 2>/dev/null || echo "")"
+
+# --- Tool filter: only Edit / Write / MultiEdit trigger ---
+case "$TOOL_NAME" in
+  Edit|Write|MultiEdit) ;;
+  *) exit 0 ;;
+esac
+
+# --- Path filter: only docs/whereami.md triggers ---
+if [ -z "$TARGET_PATH" ]; then
+  exit 0
+fi
+
+# Match either bare "docs/whereami.md" or an absolute path ending in it
+case "$TARGET_PATH" in
+  */docs/whereami.md|docs/whereami.md) ;;
+  *) exit 0 ;;
+esac
+
+# === Extract incoming content ===
+
+# Write uses .tool_input.content; Edit + MultiEdit use .tool_input.new_string
+CONTENT=""
+case "$TOOL_NAME" in
+  Write)
+    CONTENT="$(echo "$EVENT_JSON" | jq -r '.tool_input.content // empty' 2>/dev/null || echo "")"
+    ;;
+  Edit|MultiEdit)
+    CONTENT="$(echo "$EVENT_JSON" | jq -r '.tool_input.new_string // empty' 2>/dev/null || echo "")"
+    ;;
+esac
+
+if [ -z "$CONTENT" ]; then
+  exit 0  # nothing to validate
+fi
+
+# === Scan for non-Z last_updated.at values ===
+#
+# Two shapes to cover per Cure A parser scope:
+#
+# 1. YAML frontmatter (Shape B state-spine):
+#      last_updated:
+#        at: 2026-07-26T18:30:00Z
+#
+# 2. Markdown section (## Last updated form):
+#      ## Last updated
+#
+#      2026-07-26T18:30:00Z — session-end
+#
+# The scan pattern: any ISO-8601 timestamp of shape YYYY-MM-DDTHH:MM:SS
+# followed by a non-Z suffix (+HHMM, -HHMM, +HH:MM, -HH:MM). We do NOT
+# require the surrounding structure — a bare non-Z timestamp anywhere
+# in the whereami content is a BLOCK signal.
+
+NON_Z_MATCH=""
+
+# Regex catches: 2026-07-26T18:30:00+0100 / -0500 / +01:00 / -05:00
+NON_Z_PATTERN='[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}[+-][0-9]{2}:?[0-9]{2}'
+
+NON_Z_MATCH="$(printf '%s' "$CONTENT" | grep -oE "$NON_Z_PATTERN" | head -3 || true)"
+
+if [ -z "$NON_Z_MATCH" ]; then
+  exit 0  # all timestamps end in Z (or none present); pass
+fi
+
+# === BLOCK message ===
+
+echo "" >&2
+echo "============================================" >&2
+echo "🛑 WHEREAMI UTC GATE — BLOCKED 🛑" >&2
+echo "============================================" >&2
+echo "" >&2
+echo "File:  $TARGET_PATH" >&2
+echo "Tool:  $TOOL_NAME" >&2
+echo "" >&2
+echo "Found timestamp value(s) with non-Z (non-UTC) offset:" >&2
+echo "$NON_Z_MATCH" | sed 's/^/  /' >&2
+echo "" >&2
+echo "Spec: .claude/skills/session-end/SKILL.md L60 — \"Set last_updated" >&2
+echo "      to current UTC ISO-8601 timestamp.\"" >&2
+echo "" >&2
+echo "Cure: rewrite the value to end in Z. Get current UTC:" >&2
+echo "" >&2
+echo "  date -u +%FT%TZ" >&2
+echo "" >&2
+echo "Adopter grace window per ADR-031: Cure A parser (bet 26e PR #917)" >&2
+echo "accepts both Z and +HHMM through 2026-10-31. Cure B (this hook)" >&2
+echo "closes the write-time class so new writes stay UTC-Z." >&2
+echo "" >&2
+echo "Override (logged): SKIP_WHEREAMI_UTC_GATE=1 <command>" >&2
+echo "" >&2
+echo "Rule:  .claude/rules/state-schema-validation.md" >&2
+echo "Issue: bassclef-upstream#897 Cure B" >&2
+echo "============================================" >&2
+
+exit 2

package/dist/lite/CLAUDE.md

@@ -1,4 +1,4 @@
-# [Repo name]
+# [REPO_NAME]
 
 @.claude/bassclef-orientation.md
 
@@ -25,7 +25,7 @@ Discovery commands:
 
 ## Bassclef version
 
-Sync source declared in `.bassclef-source.json`. This adopter runs the `<tier>` tier. Substrate updates land at every session-start via `~/.claude/hooks/bassclef-sync.sh`.
+Sync source declared in `.bassclef-source.json`. This adopter runs the `[TIER]` tier. Substrate updates land at every session-start via `~/.claude/hooks/bassclef-sync.sh`.
 
 ## What NOT to do
 

package/dist/lite/whereami.md

@@ -13,7 +13,7 @@ Current project-state snapshot. Read at session-start. Updated at session-end.
 
 ## Bassclef bring-up
 
-New adopter. Ran `bassclef init` at [ISO_TIMESTAMP]. Substrate landed at `<tier>` tier per `.bassclef-source.json`. Every session-start now fires the sync + reflection chain.
+New adopter. Ran `bassclef init` at [ISO_TIMESTAMP]. Substrate landed at `[TIER]` tier per `.bassclef-source.json`. Every session-start now fires the sync + reflection chain.
 
 ## First iteration goal
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thebassclef/lite",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Bassclef CLI — install and upgrade bassclef in your project with two commands.",
   "keywords": ["bassclef", "claude-code", "cli", "scaffolding"],
   "homepage": "https://github.com/sunj-labs/bassclef-cli",