@thebassclef/lite 1.4.0 → 1.4.1

package/dist/lite/presence/install/bassclef-sync.template.sh

@@ -2178,10 +2178,13 @@ echo ""
 # === 6. Boot check — only report what's missing ===
 MISSING=""
 
-# Google service account (needed for LinkedIn → Google Docs)
-SA_KEY="$HOME/.config/gcloud/sunjay-google-ops.json"
-if [ ! -f "$SA_KEY" ]; then
-  MISSING="${MISSING}\n- Google Docs service account key missing at $SA_KEY (needed for /journal → Google Doc push)"
+# Google service account (needed for journal → Google Docs)
+# Ship 1 (#1816): env var lookup; unset = feature disabled.
+# Operator sets BASSCLEF_GCLOUD_KEY in their shell profile pointing at their
+# service-account JSON. Adopters without a Google Docs pipeline leave it unset.
+SA_KEY="${BASSCLEF_GCLOUD_KEY:-}"
+if [ -n "$SA_KEY" ] && [ ! -f "$SA_KEY" ]; then
+  MISSING="${MISSING}\n- Google Docs service account key missing at \$BASSCLEF_GCLOUD_KEY (needed for /journal → Google Doc push)"
 fi
 
 # gh CLI auth (needed for /promote, issue creation)

package/dist/lite/scripts/generate-lite-manifest.sh

@@ -30,7 +30,11 @@
 
 set -euo pipefail
 
-MANIFEST_VERSION="1.8.2"
+# Bug 2 fix (#1829): MANIFEST_VERSION was hardcoded here; dry-run always
+# emitted the compile-time value regardless of on-disk manifest state,
+# so the pre-commit auto-regen hook saw phantom version drift on every
+# commit and bumped needlessly. Now resolved dynamically from the on-disk
+# manifest AFTER OUTPUT_PATH is set (see below).
 
 # --- arg parse ---
 DRY_RUN=0
@@ -94,6 +98,16 @@ if [[ -z "$OUTPUT_PATH" ]]; then
   OUTPUT_PATH="${REPO_ROOT}/${TARGET_TIER}-manifest.json"
 fi
 
+# --- resolve MANIFEST_VERSION dynamically (Bug 2 fix per #1829) ---
+# Read from on-disk manifest so dry-run + write emit the SAME version.
+# Callers that need to bump the version (pre-commit auto-regen hook)
+# apply the bump AFTER regen via jq. Default 0.0.0 when no manifest exists.
+if [[ -f "$OUTPUT_PATH" ]]; then
+  MANIFEST_VERSION=$(jq -r '.manifest_version // "0.0.0"' "$OUTPUT_PATH" 2>/dev/null || echo "0.0.0")
+else
+  MANIFEST_VERSION="0.0.0"
+fi
+
 # --- generation metadata ---
 GENERATED_AT="$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
 UPSTREAM_COMMIT="$(cd "$REPO_ROOT" && git rev-parse HEAD 2>/dev/null || echo '0000000000000000000000000000000000000000')"
@@ -140,6 +154,49 @@ count_hook_tier_declarations() {
     || true
 }
 
+# Extract install-class from bash hook file # install-class: header.
+# Ship 1 (#1825): the install-class boundary Gate B reads this per hook
+# to filter operator-scope files from adopter bundles. Values per
+# standards/hook-install-class.md — operator | project | dual.
+# Missing header — grace-window default is "dual" per docs/risk-ledgers/
+# 2026-09-20-ship-1-install-class-boundary.md pre-mortem N2.
+extract_hook_install_class() {
+  local val
+  val=$(grep -m1 -E '^#[[:space:]]*install-class:[[:space:]]' "$1" 2>/dev/null \
+    | sed -E 's/^#[[:space:]]*install-class:[[:space:]]*//' \
+    | sed -E 's/[[:space:]]*$//' \
+    || true)
+  # Grace-window default per pre-mortem N2 fold — missing header treated as dual.
+  echo "${val:-dual}"
+}
+
+# Gate B — install-class admission check.
+# Returns 0 (admit) when the file belongs in the current TARGET_TIER's bundle
+# based on install-class alone. Returns 1 (reject) when operator-scope in an
+# adopter target. Ship 1 (#1825, #1827, #1828) closes the boundary here.
+check_install_class_admission() {
+  local install_class="$1"
+  local surface_type="$2"
+  # Only enforce on hook + script + presence-template + lib surfaces —
+  # skill + rule + luminary + agent + standard + adr do not carry
+  # install-class semantics (they are content, not wiring).
+  case "$surface_type" in
+    hook|script|lib|presence-template) ;;
+    *) return 0 ;;
+  esac
+  # Operator-class always excluded from adopter bundles.
+  # Ship 1 grace window (through 2026-10-31 per ADR-031) — allow override
+  # for legacy files during rollout via SKIP_INSTALL_CLASS_FILTER.
+  if [ "${SKIP_INSTALL_CLASS_FILTER:-0}" = "1" ]; then
+    return 0
+  fi
+  case "$install_class" in
+    operator) return 1 ;;
+    project|dual) return 0 ;;
+    *) return 0 ;;
+  esac
+}
+
 # Normalize `—` YAML escape to literal em-dash character. Closes
 # bassclef-upstream#1548 — YAML frontmatter with double-quoted strings can
 # carry `—` as a 6-char literal; jq preserves it as `\\u2014` in JSON
@@ -313,6 +370,21 @@ emit_entries() {
       *) continue ;;
     esac
 
+    # Ship 1 (#1825) Gate B — install-class filter.
+    # Excludes operator-scope files from adopter bundles.
+    # Only fires on wiring-carrying surface types (hook, script, lib,
+    # presence-template). Content surfaces (skill, rule, luminary, agent,
+    # standard, adr) pass through.
+    case "$surface_type" in
+      hook|script|lib|presence-template)
+        local install_class
+        install_class=$(extract_hook_install_class "$f" || echo "dual")
+        if ! check_install_class_admission "$install_class" "$surface_type"; then
+          continue
+        fi
+        ;;
+    esac
+
     case "$slug_from" in
       dirname)
         slug=$(basename "$(dirname "$f")")
@@ -441,6 +513,13 @@ while IFS= read -r f; do
   PRESENCE_TEMPLATE_MD_FILES+=("$f")
 done < <(find "$REPO_ROOT/presence/install" -maxdepth 1 -type f -name '*.md' 2>/dev/null | sort)
 
+# Presence templates (jsonc) — Ship 1 (bassclef-cli#104) — configs template
+# ships so `bassclef init` can copy it to adopter's `.claude/bassclef-configs.jsonc`.
+PRESENCE_TEMPLATE_JSONC_FILES=()
+while IFS= read -r f; do
+  PRESENCE_TEMPLATE_JSONC_FILES+=("$f")
+done < <(find "$REPO_ROOT/presence/install" -maxdepth 1 -type f -name '*.jsonc' 2>/dev/null | sort)
+
 # Templates (md) — per #1392 Shape 3; chronicle-template + iteration-goal etc adopters copy
 TEMPLATE_FILES=()
 while IFS= read -r f; do
@@ -556,6 +635,9 @@ ENTRIES_JSON=$(
     if [[ ${#PRESENCE_TEMPLATE_MD_FILES[@]} -gt 0 ]]; then
       emit_entries "presence-template" extract_yaml_tier extract_yaml_description basename "${PRESENCE_TEMPLATE_MD_FILES[@]}"
     fi
+    if [[ ${#PRESENCE_TEMPLATE_JSONC_FILES[@]} -gt 0 ]]; then
+      emit_entries "presence-template" extract_json_tier extract_json_description basename "${PRESENCE_TEMPLATE_JSONC_FILES[@]}"
+    fi
     if [[ ${#TEMPLATE_FILES[@]} -gt 0 ]]; then
       emit_entries "template" extract_yaml_tier extract_yaml_description basename "${TEMPLATE_FILES[@]}"
     fi
@@ -644,3 +726,71 @@ else
   echo "$MANIFEST_JSON" > "$OUTPUT_PATH"
   echo "Wrote $OUTPUT_PATH ($ENTRY_COUNT entries; commit ${UPSTREAM_COMMIT:0:7})" >&2
 fi
+
+# =============================================================
+# Ship 1 (#1827) — Gate C: wiring/file symmetry check
+# =============================================================
+# Post-emit — cross-reference hooks wired in the adopter settings template
+# against hooks emitted in the manifest. Any wiring entry without a
+# matching file entry is a "dead-wired hook" (per #1827). Emits WARNING
+# in V1 (ADVISORY per ADR-031 grace window); flips to BLOCK in V2 after
+# one calibration cycle.
+#
+# Per @luminary linus-torvalds — adopter contract at the boundary.
+# Per @luminary saltzer-schroeder — complete mediation.
+# Per @luminary michael-nygard — stability pattern (fail-visible not fail-silent).
+#
+# Only fires for TARGET_TIER=lite. Other tiers have their own settings templates
+# tracked in follow-on work. Skips when settings template absent (adopter has
+# not published it yet — early Ship 1 dev state).
+if [ "$TARGET_TIER" = "lite" ] && [ "${SKIP_MANIFEST_SYMMETRY:-0}" != "1" ]; then
+  SETTINGS_TEMPLATE="$REPO_ROOT/presence/install/public-bassclef-settings.template.json"
+  ALLOWLIST="$REPO_ROOT/scripts/generate-lite-manifest-symmetry-allowlist.txt"
+  if [ -f "$SETTINGS_TEMPLATE" ] && command -v jq >/dev/null 2>&1; then
+    # Extract hook basenames wired in settings template.
+    WIRED_TMP=$(mktemp -t bassclef-wired.XXXXXX)
+    MANIFEST_HOOKS_TMP=$(mktemp -t bassclef-manifest-hooks.XXXXXX)
+    ALLOWLIST_TMP=$(mktemp -t bassclef-allowlist.XXXXXX)
+    trap 'rm -f "$WIRED_TMP" "$MANIFEST_HOOKS_TMP" "$ALLOWLIST_TMP"' EXIT
+
+    jq -r '.hooks | to_entries[] | .value[] | .hooks[] | .command' "$SETTINGS_TEMPLATE" 2>/dev/null \
+      | grep -oE '[a-zA-Z0-9_-]+\.sh' | sort -u > "$WIRED_TMP"
+
+    # Extract hook slugs from the manifest we just emitted.
+    if [[ "$DRY_RUN" == "1" ]]; then
+      echo "$MANIFEST_JSON" | jq -r '.entries[] | select(.type=="hook") | .slug + ".sh"' 2>/dev/null | sort -u > "$MANIFEST_HOOKS_TMP"
+    else
+      jq -r '.entries[] | select(.type=="hook") | .slug + ".sh"' "$OUTPUT_PATH" 2>/dev/null | sort -u > "$MANIFEST_HOOKS_TMP"
+    fi
+
+    # Load allowlist (empty file OK — grep -v exits 1 when all lines match; guard for set -e).
+    if [ -f "$ALLOWLIST" ]; then
+      grep -vE '^\s*#|^\s*$' "$ALLOWLIST" 2>/dev/null > "$ALLOWLIST_TMP" || : > "$ALLOWLIST_TMP"
+      sort -u "$ALLOWLIST_TMP" -o "$ALLOWLIST_TMP" 2>/dev/null || true
+    else
+      : > "$ALLOWLIST_TMP"
+    fi
+
+    # Wired minus manifest, minus allowlist.
+    DEAD_WIRED=$(comm -23 "$WIRED_TMP" "$MANIFEST_HOOKS_TMP" | comm -23 - "$ALLOWLIST_TMP" || true)
+    if [ -z "$DEAD_WIRED" ]; then
+      DEAD_COUNT=0
+    else
+      DEAD_COUNT=$(echo "$DEAD_WIRED" | wc -l | tr -d ' ')
+    fi
+
+    if [ "$DEAD_COUNT" -gt 0 ]; then
+      echo "" >&2
+      echo "generate-lite-manifest: SYMMETRY WARNING — $DEAD_COUNT hook(s) wired in settings template but absent from manifest:" >&2
+      echo "$DEAD_WIRED" | sed 's/^/  - /' >&2
+      echo "" >&2
+      echo "Resolution paths:" >&2
+      echo "  1. Retag source hook so it enters lite (tier: lite + install-class: project or dual)" >&2
+      echo "  2. Remove the wiring entry from $SETTINGS_TEMPLATE" >&2
+      echo "  3. Add the hook basename to $ALLOWLIST (grace window through 2026-10-31)" >&2
+      echo "" >&2
+      echo "Per .claude/rules/we-dont-break-adopters.md (ADR-031). SKIP_MANIFEST_SYMMETRY=1 bypasses one call." >&2
+      # V1 ADVISORY — exit 0 with warning. V2 flips to exit 4 (BLOCK).
+    fi
+  fi
+fi

package/dist/lite/scripts/workflow-metrics-query.sh

@@ -0,0 +1,57 @@
+#!/bin/bash
+# tier: lite
+# CLI wrapper for lib/workflow-metrics.sh — Module B4 query helper.
+#
+# Used at Phase checkpoints per canvas activity diagram to sample the
+# median bassclef-pr-ci run duration over the last N days.
+#
+# Closes sunj-labs/bassclef-upstream#1307 (parent epic #1750).
+#
+# Usage:
+#   scripts/workflow-metrics-query.sh                        # list all entries
+#   scripts/workflow-metrics-query.sh --workflow <name>      # filter by workflow
+#   scripts/workflow-metrics-query.sh --median               # emit median
+#   scripts/workflow-metrics-query.sh --workflow <name> --median  # median for one workflow
+
+set -e
+
+WORKFLOW=""
+MEDIAN=0
+STORE_DIR=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --workflow) WORKFLOW="${2:-}"; shift 2 ;;
+    --median) MEDIAN=1; shift ;;
+    --store-dir) STORE_DIR="${2:-}"; shift 2 ;;
+    -h|--help)
+      grep -E '^# ' "$0" | sed 's/^# \?//'
+      exit 0
+      ;;
+    *)
+      echo "unknown arg: $1" >&2
+      exit 1
+      ;;
+  esac
+done
+
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || echo "$PWD")
+LIB="$REPO_ROOT/lib/workflow-metrics.sh"
+
+if [ ! -f "$LIB" ]; then
+  echo "workflow-metrics-query: lib not found at $LIB" >&2
+  exit 1
+fi
+
+# shellcheck source=/dev/null
+source "$LIB"
+
+if [ -z "$STORE_DIR" ]; then
+  STORE_DIR=$(_workflow_metrics_default_store)
+fi
+
+if [ "$MEDIAN" = "1" ]; then
+  compute_median "$STORE_DIR" "$WORKFLOW"
+else
+  query_metrics "$STORE_DIR" "$WORKFLOW"
+fi

package/dist/lite/standards/lite-manifest-schema-changes.md

@@ -34,6 +34,30 @@ Every entry stays in this file for the life of the manifest. Never pruned. When
 
 ## Entries (newest first)
 
+### Ship 1 — install-class boundary + retag rollout (v1.8.7 → v1.9.0, 2026-09-20)
+
+- **Change type:** entry-removal (3 entries drop) + entry-add (1 template ships) + policy-change (Gate B install-class filter + Gate C wiring/file symmetry check added to generator)
+- **Fields:** none changed at manifest schema layer. Emission behavior extends.
+- **Version bump:** v1.8.7 → v1.9.0 (MINOR; entries removed + new emission surface + generator behavior extended).
+- **Rationale:** bassclef-upstream#1825 + #1827 + #1824 + #1816 + #1828 + #1728. Five sisters from the cli 1.2.1 smoke and one coordinator from the cli 1.1.1 smoke. Generator gains three gates — tier filter, install-class filter, wiring/file symmetry. Adopters at cli 1.2.x stop seeing PreToolUse errors on every bash tool call once cli picks up.
+- **Retagged out of lite (drop from adopter bundle):**
+  - the `/release` skill (substrate concern; operator-only)
+  - the `/journal-export` skill (substrate concern; operator-only)
+  - the operator sync hook (`install-class: operator`; adopters use the dispatcher)
+- **Added to lite (new adopter file):**
+  - `presence/install/bassclef-configs.template.jsonc` — `bassclef init` copies to `.claude/bassclef-configs.jsonc`
+- **Wiring cleanup:** 33 dead-wired hook entries pruned from `presence/install/public-bassclef-settings.template.json`. Each named a hook whose source did not ship in the lite bundle (mostly `tier: standard` hooks). PreToolUse errors on every bash tool call resolve.
+- **Path sanitization:** 27 hardcoded `~/src/sunj-labs/bassclef` occurrences in 2 skill bodies replaced with `${BASSCLEF_DIR:-$CLAUDE_PROJECT_DIR}` pattern. 3 `sunjay-google-ops` gcloud path leaks replaced with `${BASSCLEF_GCLOUD_KEY:-}` env var lookup.
+- **New generator gates:**
+  - Gate A — tier filter (strict; upstream/archive/unknown never enter lite)
+  - Gate B — install-class filter (operator scope excluded from adopter bundles)
+  - Gate C — wiring/file symmetry (ADVISORY V1 per ADR-031 grace window; flip to BLOCK V2)
+  - Allowlist file `scripts/generate-lite-manifest-symmetry-allowlist.txt` grants grace exceptions during rollout
+  - Overrides: `SKIP_INSTALL_CLASS_FILTER=1`, `SKIP_MANIFEST_SYMMETRY=1`
+- **Downstream cure:** bassclef-cli picks up on next 1.2.x publish. Fresh `bassclef init` on cli 1.2.x sees zero PreToolUse errors, gets a copy of `bassclef-configs.template.jsonc` at `.claude/bassclef-configs.jsonc`, and has `/onboard-repo` with the new top-up path.
+- **Old shape retired:** dead-wired hook entries in the adopter settings template. Adopters who ran cli 1.2.1 still have those entries in their `.claude/settings.json` locally; the sync run picks up the pruned template.
+- **Closes:** #1825, #1827, #1824, #1816, #1828, #1728 upstream; delivers bassclef-cli#101, #104 (new); rides delivery of cli#105, #106, #108, #102, #107 (already cured upstream). cli#103 stays cli-side per cli#96.
+
 ### Goal 2026-09-17c — one tier declaration per file (v1.8.1 → v1.8.2, 2026-09-17)
 
 - **Change type:** content-change (27 content hashes; no entries added or removed)

package/dist/lite/standards/lite-manifest.json

@@ -1,7 +1,7 @@
 {
   "tier": "lite",
-  "manifest_version": "1.8.5",
-  "generated_at": "2026-09-18T12:53:51Z",
+  "manifest_version": "1.9.1",
+  "generated_at": "2026-09-21T00:38:33Z",
   "entries": [
     {
       "slug": "029-release-pipeline",
@@ -104,7 +104,7 @@
       "type": "hook",
       "path": ".claude/hooks/session-reflection.d/08-settings-drift.sh",
       "tier": "lite",
-      "content_hash": "sha256:610c46bab04ca47af207824cc5faa24c7754c00b976b71d9be77057e9ea87a63",
+      "content_hash": "sha256:8c2884630f16301023b943b08f8e12b17eb1d7ea6e04bec838198dca2ec0ba05",
       "description": "Drift detector — fires at every SessionStart via session-reflection.sh."
     },
     {
@@ -136,7 +136,7 @@
       "type": "hook",
       "path": ".claude/hooks/session-reflection.d/20-artifact-staleness.sh",
       "tier": "lite",
-      "content_hash": "sha256:5a406be60669e106c99e98da00d7acb8e9ce834a84e1145d244f5121cfd0f9a9",
+      "content_hash": "sha256:24d1c0513b88bde625ab0bdbd7e4bd6678cdfc47ba76900bc06e3fbfe543f24c",
       "description": "Artifact-staleness checks: chronicle, danger-mode summary,"
     },
     {
@@ -144,7 +144,7 @@
       "type": "hook",
       "path": ".claude/hooks/session-reflection.d/30-metrics-staleness.sh",
       "tier": "lite",
-      "content_hash": "sha256:6a296054a37741db7a9161a11e8582ce31f489f8fb1683d3c2cf2daf981242a7",
+      "content_hash": "sha256:a4b2f436c218c15230c126fa2f2748fca36cdf9778185cab90a8aac4a6416f41",
       "description": "Metrics-staleness check: version tags, iteration closeouts, metrics"
     },
     {
@@ -208,7 +208,7 @@
       "type": "hook",
       "path": ".claude/hooks/session-reflection.d/60-deferred-actions.sh",
       "tier": "lite",
-      "content_hash": "sha256:b119d0700df5823afeed631a6f4ddfb9cb0f302577e3b3977a30c8ddb85acd60",
+      "content_hash": "sha256:ae167ab6b1626b9155a0539618678ca7a08d1f619cb054f94476df3ad9f7dff9",
       "description": "Deferred-actions scan: enumerate docs/deferred-actions/*.md, detect current"
     },
     {
@@ -232,7 +232,7 @@
       "type": "hook",
       "path": ".claude/hooks/session-reflection.d/80-hook-heartbeat-check.sh",
       "tier": "lite",
-      "content_hash": "sha256:4467390bb6f7dfa418c799ce175a9febc395e3b883c720c562e2c42ffdb1ff81",
+      "content_hash": "sha256:9f20ebd080a1a7364fe6e6c16266547b56b95c820297310cdd5be559852bab5f",
       "description": "Hook heartbeat check — reads standards/hook-cadence.json, calls"
     },
     {
@@ -339,14 +339,6 @@
       "content_hash": "sha256:6981fedc02dc0b683db7872519e06bd16b68fd346a2e566a7e8503f28822db10",
       "description": "bassclef-source-config-validate.sh — PreToolUse hook validating"
     },
-    {
-      "slug": "bassclef-sync",
-      "type": "hook",
-      "path": ".claude/hooks/bassclef-sync.sh",
-      "tier": "lite",
-      "content_hash": "sha256:03c813d942e42a8a4a37744e3cb14219fa4364ce18e2269957dc3a2f954fa983",
-      "description": "Bassclef Substrate Sync — fires on SessionStart."
-    },
     {
       "slug": "bet-doc-gate",
       "type": "hook",
@@ -547,6 +539,14 @@
       "content_hash": "sha256:38665938cb3bac6d249d94b814cc3f43600456abcbb045bff5a5d0d0128a7cbb",
       "description": "PreToolUse: Bash"
     },
+    {
+      "slug": "pre-commit-manifest-autoregen",
+      "type": "hook",
+      "path": ".claude/hooks/pre-commit-manifest-autoregen.sh",
+      "tier": "lite",
+      "content_hash": "sha256:34dc76e61307d79da11bb38460823a8945a144f322ea2cf74b0cbfac75118ec2",
+      "description": "PreToolUse: Bash"
+    },
     {
       "slug": "pre-gh-pr-body-scrub",
       "type": "hook",
@@ -592,7 +592,7 @@
       "type": "hook",
       "path": ".claude/hooks/session-reflection.sh",
       "tier": "lite",
-      "content_hash": "sha256:a9f2492fcf1ae86da3da2e0b6311d8e68a01472e9d68e9504fe6044a5f55d99d",
+      "content_hash": "sha256:ece32cd8261bafe4597563aa18237b504bba335c0a1e8d94e1d8d69f4a8e97ae",
       "description": "Session Start hook coordinator. Injects reflection prompt and iterates"
     },
     {
@@ -699,6 +699,22 @@
       "content_hash": "sha256:867d05c8da773e8aef3d077ec7c171d8e9a208b579596f77dd73e18cc8fcf2e2",
       "description": "whereami-utc-gate.sh — PreToolUse hook that BLOCKs Edit|Write|MultiEdit"
     },
+    {
+      "slug": "wirings",
+      "type": "hook",
+      "path": ".claude/hooks/_lib/wirings.sh",
+      "tier": "lite",
+      "content_hash": "sha256:65fb14b5c7b4a919516c96f4587b492d5eb3bcf6f939bbc7c1809205de49498d",
+      "description": "Shared accessor library for hook-wiring inspection."
+    },
+    {
+      "slug": "ancestor-claude-check",
+      "type": "lib",
+      "path": "lib/ancestor-claude-check.sh",
+      "tier": "lite",
+      "content_hash": "sha256:f84c7b57ae28ef15b0c4c138ee4781030e04e7bb858ff0c53a80a538672d64dd",
+      "description": "ancestor-claude-check.sh — walks up from a starting directory to $HOME"
+    },
     {
       "slug": "bassclef-dir-resolver",
       "type": "lib",
@@ -752,7 +768,7 @@
       "type": "lib",
       "path": "lib/fixture-builder.sh",
       "tier": "lite",
-      "content_hash": "sha256:85a59597e8898ea38e7d7442423381f0c4caa5ecf6780bbd0a71d63b819d3b13",
+      "content_hash": "sha256:5831bcd49c162ec131cf14d402150821bd8f623e87eb3c1bcdc545fc701aaefd",
       "description": "Deep module for adopter-environment fixtures used by bassclef Tier 0 tests."
     },
     {
@@ -899,6 +915,14 @@
       "content_hash": "sha256:7ee5cc3c7372ca6aef3c81f614ec119ffed8874e00a78d441ce8d0304c7b6308",
       "description": "lib/tier-dependency-audit.sh"
     },
+    {
+      "slug": "workflow-metrics",
+      "type": "lib",
+      "path": "lib/workflow-metrics.sh",
+      "tier": "lite",
+      "content_hash": "sha256:4615d673185021f484887b6a674b08f209e8f93db195189f77aff58c618ccf3e",
+      "description": "Workflow metrics measurement library — Module B4 per"
+    },
     {
       "slug": "alan-cooper",
       "type": "luminary",
@@ -971,6 +995,14 @@
       "content_hash": "sha256:ec2bb153111b28d5f505825f107fb0ac5da354a4cc3a6a474e1d1b153c81eafb",
       "description": "\\\"The whole idea was to imagine what it's like to be inside someone else's head."
     },
+    {
+      "slug": "david-farley",
+      "type": "luminary",
+      "path": ".claude/luminaries/david-farley.md",
+      "tier": "lite",
+      "content_hash": "sha256:db45f22a2e893137ad0a09ed7a090dc145b3e92dd0c3a5db718e63305921ca91",
+      "description": "Continuous Delivery co-author; deployment pipeline mechanics; author of Modern Software Engineering."
+    },
     {
       "slug": "david-ogilvy",
       "type": "luminary",
@@ -1067,6 +1099,14 @@
       "content_hash": "sha256:8275c70d25fb8e8acad9dc68ade399993d5f1432ae82449fe14db8533342fd70",
       "description": "\\\"Every user experience has five planes: strategy, scope, structure, skeleton, surface."
     },
+    {
+      "slug": "jez-humble",
+      "type": "luminary",
+      "path": ".claude/luminaries/jez-humble.md",
+      "tier": "lite",
+      "content_hash": "sha256:312d4e5cbf21824a50f120c9f7b54b30e00afb4b33782537eda67500269fb7f3",
+      "description": "Continuous Delivery co-author; deployment pipeline framework; DORA metrics researcher."
+    },
     {
       "slug": "john-ousterhout",
       "type": "luminary",
@@ -1128,7 +1168,7 @@
       "type": "luminary",
       "path": ".claude/luminaries/martin-fowler.md",
       "tier": "lite",
-      "content_hash": "sha256:7fbf6ec65206fcbb6dbf2df1d24fed37555d495c6597885ff1a7f201ce3c2544",
+      "content_hash": "sha256:c81089dbc3aaeb9d67a91cf19517571452ecc6505fe6ffd065e4029698ae39ec",
       "description": "\\\"Any fool can write code that a computer can understand."
     },
     {
@@ -1227,6 +1267,13 @@
       "content_hash": "sha256:9b5d51d106b5f4398c15c1412c781b81f2cde55fecc294c120479a06b8de92a9",
       "description": "\\\"A bad system will beat a good person every time.\\\""
     },
+    {
+      "slug": "bassclef-configs-template-jsonc",
+      "type": "presence-template",
+      "path": "presence/install/bassclef-configs.template.jsonc",
+      "tier": "lite",
+      "content_hash": "sha256:e796b9736e9b00468822bfed2e2cdbed220c25ee8541f66fe7b743fe50d1a893"
+    },
     {
       "slug": "bassclef-hook-connect",
       "type": "presence-template",
@@ -1248,7 +1295,7 @@
       "type": "presence-template",
       "path": "presence/install/bassclef-sync.template.sh",
       "tier": "lite",
-      "content_hash": "sha256:f202c2bb2d252e72e3c2f80a99fea4fece95b9db3744721ce4fea12e3a4b4eb1",
+      "content_hash": "sha256:0a689f73d94bb78d1a3e7fdb3cda760e093db1d7536548cb05cf3a9ea9fb4c6c",
       "description": "description: BASSCLEF_SYNC_VERSION=2026-09-06-1496-sessionstart-heal-v1"
     },
     {
@@ -1958,7 +2005,7 @@
       "type": "script",
       "path": "scripts/generate-lite-manifest.sh",
       "tier": "lite",
-      "content_hash": "sha256:950c701995965d543a692cfba919593bb6ae36c2103b5b93a7217d41bb9f0009",
+      "content_hash": "sha256:6342c768c91af054a4dcb6ea3e63228f0c7b4ff0e188867026fe0cdd333e3fe5",
       "description": "Generate lite-manifest.json at repo root."
     },
     {
@@ -1993,6 +2040,14 @@
       "content_hash": "sha256:30dc5eaff11fafc08b0845d8c4ce329a51b6ca0e89136638d335b58af41c7c0f",
       "description": "Render human-readable companion doc from lite-manifest.json."
     },
+    {
+      "slug": "workflow-metrics-query",
+      "type": "script",
+      "path": "scripts/workflow-metrics-query.sh",
+      "tier": "lite",
+      "content_hash": "sha256:9d9ad4a997e2820046802796f81a5d064b14f951cdade6f6c252db64d2afae89",
+      "description": "CLI wrapper for lib/workflow-metrics.sh — Module B4 query helper."
+    },
     {
       "slug": "agent-research-spawn",
       "type": "skill",
@@ -2434,24 +2489,6 @@
       "problem": "Session work fades from memory. Insight worth sharing with PE partners or eng leaders never gets written.",
       "value": "Drafts a journal entry from this session's work. Tuned for PE, search, and board audiences."
     },
-    {
-      "slug": "journal-export",
-      "type": "skill",
-      "path": ".claude/skills/journal-export/SKILL.md",
-      "tier": "lite",
-      "content_hash": "sha256:e63ffd119880230749701b9e484538bfe4a766a8e53ab2778c03f0cdb0762bc9",
-      "description": "Generate a structured journal-entry corpus for a brand team or your own archive — chronicle digest, draft index, moment inventory. Supports incremental updates.",
-      "inputs": [
-        "Time range or theme filter"
-      ],
-      "outputs": [
-        "Corpus JSON",
-        "Google Doc export",
-        "Archive-ready file"
-      ],
-      "problem": "Journal drafts pile up locally. Brand teams and archives don't get them systematically.",
-      "value": "Structured journal-entry corpus for a brand team or your own archive. Chronicle digest included."
-    },
     {
       "slug": "jtbd-tasks",
       "type": "skill",
@@ -2535,7 +2572,7 @@
       "type": "skill",
       "path": ".claude/skills/longrun/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:65c43c8b003cfe34787021a6c34c0b9686f4467269aed304cebba0b4cc1e5346",
+      "content_hash": "sha256:e11e395721186c5e5021266723b942ac8f330f17bff4b495adf316d05674ac01",
       "description": "Run a long autonomous session that paces itself. Prepares scope. Checkpoints at phase boundaries. Closes with session log and retrospective. Three modes: prep, checkpoint, closeout.",
       "composes_with": [
         "value-prop",
@@ -2620,7 +2657,7 @@
       "type": "skill",
       "path": ".claude/skills/onboard-repo/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:daaa194480170f0b4745ee5c72d267413d8dc249e4ece2711672118553121667",
+      "content_hash": "sha256:ff92c1539bbad449bbdcfc85430963ceeda8cae67a2eded953bc95dff24a3c75",
       "description": "Bootstrap the bassclef framework in a new repo. Installs the sync hook. Scaffolds config, whereami, and CLAUDE.md. Modes: default, --with-deploy-host, --with-secrets, --full, --greenfield-from-intent (cold-adopter magic demo).",
       "inputs": [
         "Optional flags — --with-deploy-host or --with-secrets or --full"
@@ -2749,7 +2786,7 @@
       "type": "skill",
       "path": ".claude/skills/provision-deploy-host/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:62000692c88b5ceb15d3a04ae3f8c45a97728061e1915368af11f67945643ee1",
+      "content_hash": "sha256:0fca55a7f73e23e0eee612597c9718ea58d020ddd61f81c3143f4ab8791a92a7",
       "description": "Run the consumer onboarding chain — read bassclef-platform.yml plus verify secrets, extend GHA scope, run aws amplify create-app with console-pivot fallback, open the consumer config PR, write an audit row. Replaces the 5-step flow.",
       "inputs": [
         "Consumer name and target host"
@@ -2780,32 +2817,6 @@
       "problem": "Trivial bugs get over-ceremonied by full /diagnose. Small edits shouldn't need the whole chain.",
       "value": "Compressed fix workflow for trivial bugs. Operator-in-loop with stated entry criteria."
     },
-    {
-      "slug": "release",
-      "type": "skill",
-      "path": ".claude/skills/release/SKILL.md",
-      "tier": "lite",
-      "content_hash": "sha256:17b931a7a5d3b69f57bc76f995af5c5c7a967df0389719c9fcbfc7f6677d09a9",
-      "description": "Ship framework files from bassclef-upstream to public bassclef, filtered by tier. Dry-runs first, reports tier counts plus andon scan plus sibling smoke evidence. On operator confirm runs the live release and opens a PR. Per ADR-029.",
-      "composes_with": [
-        "verify",
-        "state-a-problem",
-        "value-prop",
-        "kiss"
-      ],
-      "inputs": [
-        "Optional tier filter",
-        "Dry-run or apply flag"
-      ],
-      "outputs": [
-        "Files shipped",
-        "Dry-run diff",
-        "Public PR",
-        "Tag drop"
-      ],
-      "problem": "Framework files ship from upstream to public bassclef through many manual steps. Dry-run catches slip past.",
-      "value": "Ships framework files from bassclef-upstream to public bassclef. Filtered by tier. Dry-runs first."
-    },
     {
       "slug": "release-notes",
       "type": "skill",
@@ -3726,7 +3737,7 @@
       "type": "standard",
       "path": "standards/lite-manifest-schema-changes.md",
       "tier": "lite",
-      "content_hash": "sha256:1269fad0dfe006a4c52094d4efb441101d87cbd3a85b1a1de0e8ff724fa20e44",
+      "content_hash": "sha256:ba7d81b68af60e4df0e46fd7e0bb52ff756eaa13baf42b0dc679db37521b70a5",
       "description": "Chronological ledger of every lite-manifest schema change. Adopters read this before sync to know what shifted."
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thebassclef/lite",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Bassclef CLI — install and upgrade bassclef in your project with two commands.",
   "keywords": [
     "bassclef",