@thebassclef/lite 1.4.1 → 1.5.1

package/README.md

@@ -35,7 +35,7 @@ See [`standards/os-support.md`](standards/os-support.md) for the full policy.
 
 ## Current release
 
-<!-- version-start -->1.4.1<!-- version-end -->
+<!-- version-start -->1.5.1<!-- version-end -->
 
 See [CHANGELOG.md](CHANGELOG.md) for release notes.
 

package/dist/index.cjs

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const version = "1.4.1";
+const version = "1.5.1";
 exports.version = version;

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-export declare const version: "1.4.1";
+export declare const version: "1.5.1";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,4 +1,4 @@
-const version = "1.4.1";
+const version = "1.5.1";
 export {
   version
 };

package/dist/lite/.claude/hooks/pre-commit-manifest-autoregen.sh

@@ -80,7 +80,14 @@ LITE_STAGED=0
 while IFS= read -r file; do
   [ -z "$file" ] && continue
 
-  # Quick path-class filter (avoids frontmatter reads for obviously non-lite files)
+  # Quick path-class filter (avoids frontmatter reads for obviously non-lite files).
+  # Covers all 11 manifest types per bassclef-upstream#1872 widen (2026-09-21):
+  #   skills, rules, hooks, luminaries, agents, standards, ADRs,
+  #   lib, scripts, templates, presence-templates, root-docs.
+  # Note: bash case-pattern `*` matches slashes, so `.claude/hooks/*.sh` already
+  # covers subdirs like `.claude/hooks/session-reflection.d/foo.sh`. Same for
+  # `standards/*.md`. No separate subdir patterns needed.
+  # Sister refactor to path-agnostic marker check tracked at #1873.
   case "$file" in
     .claude/skills/*/SKILL.md \
     | .claude/rules/*.md \
@@ -88,8 +95,21 @@ while IFS= read -r file; do
     | .claude/luminaries/*.md \
     | .claude/agents/*.md \
     | standards/*.md \
-    | architecture/decisions/ADR-*.md)
-      # Path class matches; check frontmatter for tier: lite
+    | architecture/decisions/ADR-*.md \
+    | lib/*.sh \
+    | scripts/*.sh \
+    | templates/*.md \
+    | presence/install/*.sh \
+    | presence/install/*.md \
+    | presence/install/*.jsonc \
+    | AGENTS.md \
+    | README.md \
+    | CLAUDE-lite.md \
+    | CODE_OF_CONDUCT.md \
+    | CONTRIBUTING.md \
+    | SECURITY.md \
+    | .claude/bassclef-orientation.md)
+      # Path class matches; check frontmatter for tier: lite (markdown YAML)
       if [ -f "$REPO_ROOT/$file" ] && head -20 "$REPO_ROOT/$file" 2>/dev/null | grep -q '^tier: lite'; then
         LITE_STAGED=1
         break
@@ -99,6 +119,11 @@ while IFS= read -r file; do
         LITE_STAGED=1
         break
       fi
+      # JSON root-key shape for .jsonc / .json files: `"tier": "lite"` — #1872 addition
+      if [ -f "$REPO_ROOT/$file" ] && head -3 "$REPO_ROOT/$file" 2>/dev/null | grep -q '"tier": "lite"'; then
+        LITE_STAGED=1
+        break
+      fi
       ;;
   esac
 done <<< "$STAGED"

package/dist/lite/lib/mechanism-fidelity.sh

@@ -444,6 +444,20 @@ _classify_via_patterns_json() {
           fi
         fi
         ;;
+      basename_in_file)
+        # bassclef-upstream#1867 — match when hook basename appears as
+        # a whole line in the file at $arg. Missing file falls through
+        # (fail-safe default per @luminary michael-nygard). Comments
+        # (lines starting with #) and blank lines never equal a valid
+        # .sh basename, so -qxF is safe without pre-filtering.
+        local list_file="$project_root/$arg"
+        if [ -f "$list_file" ]; then
+          if grep -qxF "$hook_name" "$list_file" 2>/dev/null; then
+            echo "$name"
+            return 0
+          fi
+        fi
+        ;;
       default)
         echo "$name"
         return 0

package/dist/lite/standards/lite-manifest.json

@@ -1,7 +1,7 @@
 {
   "tier": "lite",
-  "manifest_version": "1.9.1",
-  "generated_at": "2026-09-21T00:38:33Z",
+  "manifest_version": "1.9.4",
+  "generated_at": "2026-09-21T12:32:12Z",
   "entries": [
     {
       "slug": "029-release-pipeline",
@@ -544,7 +544,7 @@
       "type": "hook",
       "path": ".claude/hooks/pre-commit-manifest-autoregen.sh",
       "tier": "lite",
-      "content_hash": "sha256:34dc76e61307d79da11bb38460823a8945a144f322ea2cf74b0cbfac75118ec2",
+      "content_hash": "sha256:b3641c5c2402fdedb9fb23b812548e94809dcc732e8d5e19af4fd5b488b023e0",
       "description": "PreToolUse: Bash"
     },
     {
@@ -824,7 +824,7 @@
       "type": "lib",
       "path": "lib/mechanism-fidelity.sh",
       "tier": "lite",
-      "content_hash": "sha256:7ccd6751d3ff3c31b142aac3c1739cd1cb1863f5e13db29ce1eb8206def1b7ca",
+      "content_hash": "sha256:3253ce24b845e601486dea9dab4a9e27d11f7fc72f5b9084ab5fb473bea84826",
       "description": "lib/mechanism-fidelity.sh — shared scanner for the mechanism-fidelity"
     },
     {
@@ -3761,7 +3761,7 @@
       "type": "standard",
       "path": "standards/mechanism-fidelity.md",
       "tier": "lite",
-      "content_hash": "sha256:b212287354832a3613bf9bcdae7da6071df64d8c08f227e8d4233666ccea4d55",
+      "content_hash": "sha256:e0b14abf4a0331c96c488d52c6e3067f827b6ef4d506c19c83616184c53c3642",
       "description": "- ADR-035 — names the substrate-as-system foundational tenet that this standard's audit method verifies - architecture/audits/2026-06-24-closeout.md — bet 24c architect-review that missed this class; this standard's audit fills the lens-gap and…"
     },
     {
@@ -4025,7 +4025,7 @@
       "type": "standard",
       "path": "standards/substrate-config-schema.md",
       "tier": "lite",
-      "content_hash": "sha256:94931a2f1f0e08f4381ddbc464ecd1578170f832a41d263a42f67ac0dfafee48",
+      "content_hash": "sha256:dff6bec2527dfa1cb899fd907b4f802bd4ce7a1e4bb9621bdf3cdfcc05601804",
       "description": "substrate.config.md is the single source of truth for external resource references in any bassclef-substrate repo."
     },
     {

package/dist/lite/standards/mechanism-fidelity.md

@@ -67,6 +67,7 @@ The class fires when one or more of these hold:
 | `NOT-WIRED-BY-DESIGN-CI` | Hook lives on disk and is referenced from `.github/workflows/*.yml`; settings.json is not the right home for it | `pr-body-scrub-check.sh`, `pr-body-loop-discipline-check.sh` |
 | `NOT-WIRED-BY-DESIGN-LAUNCHD` | Hook is scheduled by macOS launchd (or cron); header comment names the scheduler; settings.json is not the right home | `auto-save-idle.sh` |
 | `NOT-WIRED-BY-DESIGN-LIB` | File is sourced by other hooks (library role); header comment says "sourced by"; settings.json is not the right home | `trace-helper.sh` |
+| `NOT-WIRED-BY-DESIGN-EXCLUSIONS` | Hook basename is listed in `presence/install/template-hook-exclusions.txt`; wired in bassclef-upstream settings.json but intentionally absent from the adopter-shipped template (bassclef-team-only or upstream-only substrate) | `lite-skill-key-gate-check.sh`, `user-global-hook-ref-guard-check.sh` |
 | `CLEAN` | All chain steps pass | most existing rules (audit will surface count) |
 
 ## The 5-step verification chain

package/dist/lite/standards/substrate-config-schema.md

@@ -83,7 +83,7 @@ uncommented defaults shown.
 # === Artifacts ===
 journal_doc_id: [per-repo draft Google Doc — pushes from /journal + session-end]
 changelog_doc_id: [per-repo weekly changelog Google Doc — pushes from /release-notes]
-brand_corpus_doc_id: [cross-repo brand team corpus — pushes from /journal-export]
+brand_corpus_doc_id: [cross-repo brand team corpus — pushes from an operator export skill]
 
 # === Environments ===
 deploy_targets:
@@ -213,7 +213,7 @@ reference the raw ID directly.
 
 ### Anti-pattern 2: hardcoded IDs in skills
 
-**Before** (in `.claude/skills/journal-export/SKILL.md`):
+**Before** (in a skill body):
 ```bash
 npx tsx scripts/push-to-gdoc.ts \
   --file docs/journal-corpus/corpus.md \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thebassclef/lite",
-  "version": "1.4.1",
+  "version": "1.5.1",
   "description": "Bassclef CLI — install and upgrade bassclef in your project with two commands.",
   "keywords": [
     "bassclef",