@thebassclef/lite 1.4.0 → 1.5.1

package/dist/lite/presence/install/bassclef-configs.template.jsonc

@@ -0,0 +1,76 @@
+{ "tier": "lite",
+  // Adopter-facing default for `.claude/bassclef-configs.jsonc`.
+  // Ships via lite manifest per bassclef-cli#104. `bassclef init` copies this
+  // file to `.claude/bassclef-configs.jsonc` on first-run. Adopters edit it
+  // to tune per-repo behavior.
+  //
+  // Full field catalog + validation: standards/state-spine/schemas/bassclef-configs.schema.json
+  // Field reference doc:              standards/bassclef-configs-schema.md
+  //
+  // Every field below is optional. Absent fields fall back to substrate defaults.
+  // ----- tech stack -----
+  // Declares your primary framework so per-stack skills (SDLC gates,
+  // dependency check, migration discipline) load the right sibling docs.
+  // Common values: "nextjs", "vite-react", "remix", "fastapi", "rails",
+  //                "express", "go-http", or omit for framework-agnostic.
+  //
+  // "tech_stack": {
+  //   "frontend": "nextjs",
+  //   "pkg_manager": "pnpm",
+  //   "orm": "prisma",
+  //   "lang": "typescript"
+  // },
+
+  // ----- prose discipline -----
+  // Controls the /kiss words Stop hook. Values:
+  //   true      — advisory (default; findings to stderr, session continues)
+  //   "strict"  — blocks the stop on jargon findings, forces a rewrite turn
+  //   false     — disabled
+  //
+  // "prose_discipline": {
+  //   "kiss_words_turn_prose": true
+  // },
+
+  // ----- testing tier per path -----
+  // Extends .claude/rules/testing-tier-config.md with per-repo path matchers.
+  // Tier 0 = strict TDD (test mtime <= source mtime, BLOCK at pre-commit)
+  // Tier 1 = test-with (WARN at pre-commit if new source has no matching test)
+  // Tier 2 = smoke (advisory)
+  // Tier 3 = manual verify (silent)
+  //
+  // "testing": {
+  //   "global_floor": 1,
+  //   "path_matchers": [
+  //     { "match": "src/middleware.ts", "tier": 0 },
+  //     { "match": "src/lib/auth/**",   "tier": 0 },
+  //     { "match": "src/app/**",        "tier": 2 }
+  //   ]
+  // },
+
+  // ----- /promote target -----
+  // Where /promote sends substrate proposals. Two shapes:
+  //   "<owner>/<repo>"  — gh issue create --repo <value>
+  //   "email:<address>" — mailto: URL printed for you to send
+  // Absent — /promote falls back to current-repo filing.
+  //
+  // "promote_target": "your-org/your-substrate-fork",
+
+  // ----- longrun orchestrator merge mode -----
+  // Controls how /longrun handles PR merges within its bet scope.
+  //   "operator-gated"           — every PR pauses for your review (default)
+  //   "agent-merges-within-scope" — orchestrator merges autonomously within
+  //                                 bet scope; hard_ceilings stay blocking
+  //
+  // "longrun": {
+  //   "orchestrator_merge": {
+  //     "mode": "operator-gated",
+  //     "hard_ceilings": ["auth", "schema", "security", "prod-deploy", "blast-radius-floor"]
+  //   }
+  // },
+
+  // ----- adopter defaults -----
+  // Per-adopter tunings. See standards/bassclef-configs-schema.md
+  // for the full field list.
+  //
+  // "adopter_defaults": {}
+}

package/dist/lite/presence/install/bassclef-sync.template.sh

@@ -2178,10 +2178,13 @@ echo ""
 # === 6. Boot check — only report what's missing ===
 MISSING=""
 
-# Google service account (needed for LinkedIn → Google Docs)
-SA_KEY="$HOME/.config/gcloud/sunjay-google-ops.json"
-if [ ! -f "$SA_KEY" ]; then
-  MISSING="${MISSING}\n- Google Docs service account key missing at $SA_KEY (needed for /journal → Google Doc push)"
+# Google service account (needed for journal → Google Docs)
+# Ship 1 (#1816): env var lookup; unset = feature disabled.
+# Operator sets BASSCLEF_GCLOUD_KEY in their shell profile pointing at their
+# service-account JSON. Adopters without a Google Docs pipeline leave it unset.
+SA_KEY="${BASSCLEF_GCLOUD_KEY:-}"
+if [ -n "$SA_KEY" ] && [ ! -f "$SA_KEY" ]; then
+  MISSING="${MISSING}\n- Google Docs service account key missing at \$BASSCLEF_GCLOUD_KEY (needed for /journal → Google Doc push)"
 fi
 
 # gh CLI auth (needed for /promote, issue creation)

package/dist/lite/scripts/generate-lite-manifest.sh

@@ -30,7 +30,11 @@
 
 set -euo pipefail
 
-MANIFEST_VERSION="1.8.2"
+# Bug 2 fix (#1829): MANIFEST_VERSION was hardcoded here; dry-run always
+# emitted the compile-time value regardless of on-disk manifest state,
+# so the pre-commit auto-regen hook saw phantom version drift on every
+# commit and bumped needlessly. Now resolved dynamically from the on-disk
+# manifest AFTER OUTPUT_PATH is set (see below).
 
 # --- arg parse ---
 DRY_RUN=0
@@ -94,6 +98,16 @@ if [[ -z "$OUTPUT_PATH" ]]; then
   OUTPUT_PATH="${REPO_ROOT}/${TARGET_TIER}-manifest.json"
 fi
 
+# --- resolve MANIFEST_VERSION dynamically (Bug 2 fix per #1829) ---
+# Read from on-disk manifest so dry-run + write emit the SAME version.
+# Callers that need to bump the version (pre-commit auto-regen hook)
+# apply the bump AFTER regen via jq. Default 0.0.0 when no manifest exists.
+if [[ -f "$OUTPUT_PATH" ]]; then
+  MANIFEST_VERSION=$(jq -r '.manifest_version // "0.0.0"' "$OUTPUT_PATH" 2>/dev/null || echo "0.0.0")
+else
+  MANIFEST_VERSION="0.0.0"
+fi
+
 # --- generation metadata ---
 GENERATED_AT="$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
 UPSTREAM_COMMIT="$(cd "$REPO_ROOT" && git rev-parse HEAD 2>/dev/null || echo '0000000000000000000000000000000000000000')"
@@ -140,6 +154,49 @@ count_hook_tier_declarations() {
     || true
 }
 
+# Extract install-class from bash hook file # install-class: header.
+# Ship 1 (#1825): the install-class boundary Gate B reads this per hook
+# to filter operator-scope files from adopter bundles. Values per
+# standards/hook-install-class.md — operator | project | dual.
+# Missing header — grace-window default is "dual" per docs/risk-ledgers/
+# 2026-09-20-ship-1-install-class-boundary.md pre-mortem N2.
+extract_hook_install_class() {
+  local val
+  val=$(grep -m1 -E '^#[[:space:]]*install-class:[[:space:]]' "$1" 2>/dev/null \
+    | sed -E 's/^#[[:space:]]*install-class:[[:space:]]*//' \
+    | sed -E 's/[[:space:]]*$//' \
+    || true)
+  # Grace-window default per pre-mortem N2 fold — missing header treated as dual.
+  echo "${val:-dual}"
+}
+
+# Gate B — install-class admission check.
+# Returns 0 (admit) when the file belongs in the current TARGET_TIER's bundle
+# based on install-class alone. Returns 1 (reject) when operator-scope in an
+# adopter target. Ship 1 (#1825, #1827, #1828) closes the boundary here.
+check_install_class_admission() {
+  local install_class="$1"
+  local surface_type="$2"
+  # Only enforce on hook + script + presence-template + lib surfaces —
+  # skill + rule + luminary + agent + standard + adr do not carry
+  # install-class semantics (they are content, not wiring).
+  case "$surface_type" in
+    hook|script|lib|presence-template) ;;
+    *) return 0 ;;
+  esac
+  # Operator-class always excluded from adopter bundles.
+  # Ship 1 grace window (through 2026-10-31 per ADR-031) — allow override
+  # for legacy files during rollout via SKIP_INSTALL_CLASS_FILTER.
+  if [ "${SKIP_INSTALL_CLASS_FILTER:-0}" = "1" ]; then
+    return 0
+  fi
+  case "$install_class" in
+    operator) return 1 ;;
+    project|dual) return 0 ;;
+    *) return 0 ;;
+  esac
+}
+
 # Normalize `—` YAML escape to literal em-dash character. Closes
 # bassclef-upstream#1548 — YAML frontmatter with double-quoted strings can
 # carry `—` as a 6-char literal; jq preserves it as `\\u2014` in JSON
@@ -313,6 +370,21 @@ emit_entries() {
       *) continue ;;
     esac
 
+    # Ship 1 (#1825) Gate B — install-class filter.
+    # Excludes operator-scope files from adopter bundles.
+    # Only fires on wiring-carrying surface types (hook, script, lib,
+    # presence-template). Content surfaces (skill, rule, luminary, agent,
+    # standard, adr) pass through.
+    case "$surface_type" in
+      hook|script|lib|presence-template)
+        local install_class
+        install_class=$(extract_hook_install_class "$f" || echo "dual")
+        if ! check_install_class_admission "$install_class" "$surface_type"; then
+          continue
+        fi
+        ;;
+    esac
+
     case "$slug_from" in
       dirname)
         slug=$(basename "$(dirname "$f")")
@@ -441,6 +513,13 @@ while IFS= read -r f; do
   PRESENCE_TEMPLATE_MD_FILES+=("$f")
 done < <(find "$REPO_ROOT/presence/install" -maxdepth 1 -type f -name '*.md' 2>/dev/null | sort)
 
+# Presence templates (jsonc) — Ship 1 (bassclef-cli#104) — configs template
+# ships so `bassclef init` can copy it to adopter's `.claude/bassclef-configs.jsonc`.
+PRESENCE_TEMPLATE_JSONC_FILES=()
+while IFS= read -r f; do
+  PRESENCE_TEMPLATE_JSONC_FILES+=("$f")
+done < <(find "$REPO_ROOT/presence/install" -maxdepth 1 -type f -name '*.jsonc' 2>/dev/null | sort)
+
 # Templates (md) — per #1392 Shape 3; chronicle-template + iteration-goal etc adopters copy
 TEMPLATE_FILES=()
 while IFS= read -r f; do
@@ -556,6 +635,9 @@ ENTRIES_JSON=$(
     if [[ ${#PRESENCE_TEMPLATE_MD_FILES[@]} -gt 0 ]]; then
       emit_entries "presence-template" extract_yaml_tier extract_yaml_description basename "${PRESENCE_TEMPLATE_MD_FILES[@]}"
     fi
+    if [[ ${#PRESENCE_TEMPLATE_JSONC_FILES[@]} -gt 0 ]]; then
+      emit_entries "presence-template" extract_json_tier extract_json_description basename "${PRESENCE_TEMPLATE_JSONC_FILES[@]}"
+    fi
     if [[ ${#TEMPLATE_FILES[@]} -gt 0 ]]; then
       emit_entries "template" extract_yaml_tier extract_yaml_description basename "${TEMPLATE_FILES[@]}"
     fi
@@ -644,3 +726,71 @@ else
   echo "$MANIFEST_JSON" > "$OUTPUT_PATH"
   echo "Wrote $OUTPUT_PATH ($ENTRY_COUNT entries; commit ${UPSTREAM_COMMIT:0:7})" >&2
 fi
+
+# =============================================================
+# Ship 1 (#1827) — Gate C: wiring/file symmetry check
+# =============================================================
+# Post-emit — cross-reference hooks wired in the adopter settings template
+# against hooks emitted in the manifest. Any wiring entry without a
+# matching file entry is a "dead-wired hook" (per #1827). Emits WARNING
+# in V1 (ADVISORY per ADR-031 grace window); flips to BLOCK in V2 after
+# one calibration cycle.
+#
+# Per @luminary linus-torvalds — adopter contract at the boundary.
+# Per @luminary saltzer-schroeder — complete mediation.
+# Per @luminary michael-nygard — stability pattern (fail-visible not fail-silent).
+#
+# Only fires for TARGET_TIER=lite. Other tiers have their own settings templates
+# tracked in follow-on work. Skips when settings template absent (adopter has
+# not published it yet — early Ship 1 dev state).
+if [ "$TARGET_TIER" = "lite" ] && [ "${SKIP_MANIFEST_SYMMETRY:-0}" != "1" ]; then
+  SETTINGS_TEMPLATE="$REPO_ROOT/presence/install/public-bassclef-settings.template.json"
+  ALLOWLIST="$REPO_ROOT/scripts/generate-lite-manifest-symmetry-allowlist.txt"
+  if [ -f "$SETTINGS_TEMPLATE" ] && command -v jq >/dev/null 2>&1; then
+    # Extract hook basenames wired in settings template.
+    WIRED_TMP=$(mktemp -t bassclef-wired.XXXXXX)
+    MANIFEST_HOOKS_TMP=$(mktemp -t bassclef-manifest-hooks.XXXXXX)
+    ALLOWLIST_TMP=$(mktemp -t bassclef-allowlist.XXXXXX)
+    trap 'rm -f "$WIRED_TMP" "$MANIFEST_HOOKS_TMP" "$ALLOWLIST_TMP"' EXIT
+
+    jq -r '.hooks | to_entries[] | .value[] | .hooks[] | .command' "$SETTINGS_TEMPLATE" 2>/dev/null \
+      | grep -oE '[a-zA-Z0-9_-]+\.sh' | sort -u > "$WIRED_TMP"
+
+    # Extract hook slugs from the manifest we just emitted.
+    if [[ "$DRY_RUN" == "1" ]]; then
+      echo "$MANIFEST_JSON" | jq -r '.entries[] | select(.type=="hook") | .slug + ".sh"' 2>/dev/null | sort -u > "$MANIFEST_HOOKS_TMP"
+    else
+      jq -r '.entries[] | select(.type=="hook") | .slug + ".sh"' "$OUTPUT_PATH" 2>/dev/null | sort -u > "$MANIFEST_HOOKS_TMP"
+    fi
+
+    # Load allowlist (empty file OK — grep -v exits 1 when all lines match; guard for set -e).
+    if [ -f "$ALLOWLIST" ]; then
+      grep -vE '^\s*#|^\s*$' "$ALLOWLIST" 2>/dev/null > "$ALLOWLIST_TMP" || : > "$ALLOWLIST_TMP"
+      sort -u "$ALLOWLIST_TMP" -o "$ALLOWLIST_TMP" 2>/dev/null || true
+    else
+      : > "$ALLOWLIST_TMP"
+    fi
+
+    # Wired minus manifest, minus allowlist.
+    DEAD_WIRED=$(comm -23 "$WIRED_TMP" "$MANIFEST_HOOKS_TMP" | comm -23 - "$ALLOWLIST_TMP" || true)
+    if [ -z "$DEAD_WIRED" ]; then
+      DEAD_COUNT=0
+    else
+      DEAD_COUNT=$(echo "$DEAD_WIRED" | wc -l | tr -d ' ')
+    fi
+
+    if [ "$DEAD_COUNT" -gt 0 ]; then
+      echo "" >&2
+      echo "generate-lite-manifest: SYMMETRY WARNING — $DEAD_COUNT hook(s) wired in settings template but absent from manifest:" >&2
+      echo "$DEAD_WIRED" | sed 's/^/  - /' >&2
+      echo "" >&2
+      echo "Resolution paths:" >&2
+      echo "  1. Retag source hook so it enters lite (tier: lite + install-class: project or dual)" >&2
+      echo "  2. Remove the wiring entry from $SETTINGS_TEMPLATE" >&2
+      echo "  3. Add the hook basename to $ALLOWLIST (grace window through 2026-10-31)" >&2
+      echo "" >&2
+      echo "Per .claude/rules/we-dont-break-adopters.md (ADR-031). SKIP_MANIFEST_SYMMETRY=1 bypasses one call." >&2
+      # V1 ADVISORY — exit 0 with warning. V2 flips to exit 4 (BLOCK).
+    fi
+  fi
+fi

package/dist/lite/scripts/workflow-metrics-query.sh

@@ -0,0 +1,57 @@
+#!/bin/bash
+# tier: lite
+# CLI wrapper for lib/workflow-metrics.sh — Module B4 query helper.
+#
+# Used at Phase checkpoints per canvas activity diagram to sample the
+# median bassclef-pr-ci run duration over the last N days.
+#
+# Closes sunj-labs/bassclef-upstream#1307 (parent epic #1750).
+#
+# Usage:
+#   scripts/workflow-metrics-query.sh                        # list all entries
+#   scripts/workflow-metrics-query.sh --workflow <name>      # filter by workflow
+#   scripts/workflow-metrics-query.sh --median               # emit median
+#   scripts/workflow-metrics-query.sh --workflow <name> --median  # median for one workflow
+
+set -e
+
+WORKFLOW=""
+MEDIAN=0
+STORE_DIR=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --workflow) WORKFLOW="${2:-}"; shift 2 ;;
+    --median) MEDIAN=1; shift ;;
+    --store-dir) STORE_DIR="${2:-}"; shift 2 ;;
+    -h|--help)
+      grep -E '^# ' "$0" | sed 's/^# \?//'
+      exit 0
+      ;;
+    *)
+      echo "unknown arg: $1" >&2
+      exit 1
+      ;;
+  esac
+done
+
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || echo "$PWD")
+LIB="$REPO_ROOT/lib/workflow-metrics.sh"
+
+if [ ! -f "$LIB" ]; then
+  echo "workflow-metrics-query: lib not found at $LIB" >&2
+  exit 1
+fi
+
+# shellcheck source=/dev/null
+source "$LIB"
+
+if [ -z "$STORE_DIR" ]; then
+  STORE_DIR=$(_workflow_metrics_default_store)
+fi
+
+if [ "$MEDIAN" = "1" ]; then
+  compute_median "$STORE_DIR" "$WORKFLOW"
+else
+  query_metrics "$STORE_DIR" "$WORKFLOW"
+fi

package/dist/lite/standards/lite-manifest-schema-changes.md

@@ -34,6 +34,30 @@ Every entry stays in this file for the life of the manifest. Never pruned. When
 
 ## Entries (newest first)
 
+### Ship 1 — install-class boundary + retag rollout (v1.8.7 → v1.9.0, 2026-09-20)
+
+- **Change type:** entry-removal (3 entries drop) + entry-add (1 template ships) + policy-change (Gate B install-class filter + Gate C wiring/file symmetry check added to generator)
+- **Fields:** none changed at manifest schema layer. Emission behavior extends.
+- **Version bump:** v1.8.7 → v1.9.0 (MINOR; entries removed + new emission surface + generator behavior extended).
+- **Rationale:** bassclef-upstream#1825 + #1827 + #1824 + #1816 + #1828 + #1728. Five sisters from the cli 1.2.1 smoke and one coordinator from the cli 1.1.1 smoke. Generator gains three gates — tier filter, install-class filter, wiring/file symmetry. Adopters at cli 1.2.x stop seeing PreToolUse errors on every bash tool call once cli picks up.
+- **Retagged out of lite (drop from adopter bundle):**
+  - the `/release` skill (substrate concern; operator-only)
+  - the `/journal-export` skill (substrate concern; operator-only)
+  - the operator sync hook (`install-class: operator`; adopters use the dispatcher)
+- **Added to lite (new adopter file):**
+  - `presence/install/bassclef-configs.template.jsonc` — `bassclef init` copies to `.claude/bassclef-configs.jsonc`
+- **Wiring cleanup:** 33 dead-wired hook entries pruned from `presence/install/public-bassclef-settings.template.json`. Each named a hook whose source did not ship in the lite bundle (mostly `tier: standard` hooks). PreToolUse errors on every bash tool call resolve.
+- **Path sanitization:** 27 hardcoded `~/src/sunj-labs/bassclef` occurrences in 2 skill bodies replaced with `${BASSCLEF_DIR:-$CLAUDE_PROJECT_DIR}` pattern. 3 `sunjay-google-ops` gcloud path leaks replaced with `${BASSCLEF_GCLOUD_KEY:-}` env var lookup.
+- **New generator gates:**
+  - Gate A — tier filter (strict; upstream/archive/unknown never enter lite)
+  - Gate B — install-class filter (operator scope excluded from adopter bundles)
+  - Gate C — wiring/file symmetry (ADVISORY V1 per ADR-031 grace window; flip to BLOCK V2)
+  - Allowlist file `scripts/generate-lite-manifest-symmetry-allowlist.txt` grants grace exceptions during rollout
+  - Overrides: `SKIP_INSTALL_CLASS_FILTER=1`, `SKIP_MANIFEST_SYMMETRY=1`
+- **Downstream cure:** bassclef-cli picks up on next 1.2.x publish. Fresh `bassclef init` on cli 1.2.x sees zero PreToolUse errors, gets a copy of `bassclef-configs.template.jsonc` at `.claude/bassclef-configs.jsonc`, and has `/onboard-repo` with the new top-up path.
+- **Old shape retired:** dead-wired hook entries in the adopter settings template. Adopters who ran cli 1.2.1 still have those entries in their `.claude/settings.json` locally; the sync run picks up the pruned template.
+- **Closes:** #1825, #1827, #1824, #1816, #1828, #1728 upstream; delivers bassclef-cli#101, #104 (new); rides delivery of cli#105, #106, #108, #102, #107 (already cured upstream). cli#103 stays cli-side per cli#96.
+
 ### Goal 2026-09-17c — one tier declaration per file (v1.8.1 → v1.8.2, 2026-09-17)
 
 - **Change type:** content-change (27 content hashes; no entries added or removed)