@thebassclef/lite 1.9.16 → 1.9.19

package/dist/lite/.claude/hooks/reviewer-dispatch-check.sh

@@ -0,0 +1,153 @@
+#!/bin/bash
+# tier: lite
+# reviewer-dispatch-check.sh — Stop hook on code-shipping sessions
+#
+# Refuses to let a session end if it shipped source code (>0 src/ file
+# changes per git diff) without a reviewer marker at
+# state/markers/reviewer/<session-id>.md or *.md naming the session.
+#
+# Mode-agnostic: orchestrator-gated dispatches Reviewer agent; sequential
+# mode self-invokes Reviewer responsibilities and writes the marker.
+#
+# Per bassclef#1146 + WU-12 of bet 2026-06-20e.
+# Override: SKIP_REVIEWER_CHECK=1 (logged via trace-helper).
+
+set -euo pipefail
+
+# ============================================================================
+# Read stdin JSON from Claude Code harness (Stop event payload)
+# ============================================================================
+PAYLOAD=$(cat 2>/dev/null || echo '{}')
+
+# ============================================================================
+# Override check (FIRST — before any work)
+# ============================================================================
+if [ "${SKIP_REVIEWER_CHECK:-0}" = "1" ]; then
+  TRACE_HELPER="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/trace-helper.sh"
+  if [ -f "$TRACE_HELPER" ]; then
+    bash "$TRACE_HELPER" override "reviewer-dispatch-check" "SKIP_REVIEWER_CHECK=1" 2>/dev/null || true
+  fi
+  exit 0
+fi
+
+# ============================================================================
+# Repo root + check if we're in a git repo
+# ============================================================================
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+
+# If REVIEWER_CHECK_REPO is set, override (for tests)
+if [ -n "${REVIEWER_CHECK_REPO:-}" ]; then
+  REPO_ROOT="$REVIEWER_CHECK_REPO"
+fi
+
+if ! (cd "$REPO_ROOT" && git rev-parse --git-dir >/dev/null 2>&1); then
+  # Not a git repo — skip
+  exit 0
+fi
+
+# ============================================================================
+# Detect source-file changes in this session
+# Uses git diff against origin/main as proxy for session changes; this is a
+# heuristic — a more precise version would track session-start ref.
+# ============================================================================
+cd "$REPO_ROOT"
+
+# Define source-file path matchers — files that count as "shipped code"
+SOURCE_MATCHERS=(
+  'src/'
+  'apps/'
+  'packages/'
+  'lib/'
+  'app/'
+)
+
+# Count source files changed (uncommitted + committed-since-origin)
+SHIPPED_SOURCE_COUNT=0
+
+# Uncommitted changes
+for matcher in "${SOURCE_MATCHERS[@]}"; do
+  count=$(git diff --name-only -- "$matcher" 2>/dev/null | wc -l | tr -d ' ')
+  SHIPPED_SOURCE_COUNT=$((SHIPPED_SOURCE_COUNT + count))
+done
+
+# Committed-since-origin/main
+if git rev-parse origin/main >/dev/null 2>&1; then
+  for matcher in "${SOURCE_MATCHERS[@]}"; do
+    count=$(git diff --name-only origin/main..HEAD -- "$matcher" 2>/dev/null | wc -l | tr -d ' ')
+    SHIPPED_SOURCE_COUNT=$((SHIPPED_SOURCE_COUNT + count))
+  done
+fi
+
+# No source files changed — session is non-code (docs, config, etc.); pass
+if [ "$SHIPPED_SOURCE_COUNT" -eq 0 ]; then
+  exit 0
+fi
+
+# ============================================================================
+# Marker check: state/markers/reviewer/*.md
+# ============================================================================
+MARKER_DIR="$REPO_ROOT/state/markers/reviewer"
+
+if [ -d "$MARKER_DIR" ] && find "$MARKER_DIR" -maxdepth 1 -name "*.md" 2>/dev/null | grep -q .; then
+  # At least one reviewer marker exists — pass
+  exit 0
+fi
+
+# ============================================================================
+# Block: source shipped + no reviewer marker
+# ============================================================================
+cat >&2 <<EOF
+🛑 reviewer-dispatch-check — BLOCK (bassclef#1146)
+
+This session shipped source code (${SHIPPED_SOURCE_COUNT} source files
+changed across src/ apps/ packages/ lib/ app/) but no reviewer marker
+exists at state/markers/reviewer/.
+
+Reviewer responsibilities (per ~/.claude/agents/reviewer.md):
+- Verify spec acceptance criteria met
+- Verify tests present + green
+- Check for TDD test-after pattern (Kent Beck)
+- Verify ADR compliance for architectural decisions
+- Verify Designer sign-off for UX changes
+- Verify /architect-review invoked for Construction work
+
+Resolve via one of:
+
+1. Orchestrator-gated mode — dispatch Reviewer agent + capture marker:
+   /reviewer-pass
+   (or invoke via your orchestrator's handoff to Reviewer)
+
+2. Sequential mode — self-invoke Reviewer responsibilities + write marker:
+   mkdir -p $MARKER_DIR
+   cat > $MARKER_DIR/<session-id>.md <<MARKER
+   # Reviewer pass — <session-id>
+
+   mode: sequential
+   reviewed_at: $(date -u +%Y-%m-%dT%H:%M:%SZ)
+   source_files_changed: $SHIPPED_SOURCE_COUNT
+
+   ## Checks
+   - spec acceptance criteria: PASS | FAIL | N/A
+   - tests present + green: PASS | FAIL
+   - test-after pattern check: NONE FOUND | FOUND (list)
+   - ADR compliance: PASS | N/A
+   - Designer sign-off: PRESENT | N/A
+   - architect-review: INVOKED | N/A
+
+   ## Findings
+   - <severity>: <description>  # BLOCK / WARN / NOTE
+
+   acknowledged: true
+   MARKER
+
+3. Defer to next session — write marker NOW with "deferred to next session"
+   note + commit; resolve at next session start per deferred-actions protocol.
+
+Override (logged): SKIP_REVIEWER_CHECK=1 <command>
+
+When to use override:
+- Documentation-only session that accidentally touched a src/ comment
+- Emergency rescue when hook itself misclassifies
+EOF
+
+exit 2

package/dist/lite/.claude/hooks/session-reflection.d/83-install-written-paths-rebuild.sh

@@ -66,43 +66,26 @@ _iwp_fragment_main() {
     return 0
   fi
 
-  # Source lib — subshell so caller scope stays clean
+  # Source lib — subshell so caller scope stays clean.
+  # Per bassclef-upstream#2200 — bulk-rebuild verb replaces the prior
+  # 451×700ms serial register loop that timed out before completion.
+  # New verb builds one jq write + one ajv validate at the end.
   (
     # shellcheck source=/dev/null
     . "$lib" 2>/dev/null || exit 0
 
-    if ! declare -F install_written_paths_register >/dev/null 2>&1; then
-      _iwp_fragment_log "skip reason=lib-missing-verb"
-      exit 0
-    fi
-
-    # Reset manifest to empty, then walk lite-manifest entries
-    rm -f "$write_manifest" 2>/dev/null || true
-    install_written_paths_rebuild 2>/dev/null || true
-
-    local registered=0
-    local skipped=0
-
-    # Each lite-manifest entry has .path field — register when file exists on disk
-    while IFS= read -r path; do
-      [ -z "$path" ] && continue
-      local full
-      case "$path" in
-        /*) full="$path" ;;
-        *) full="$project_root/$path" ;;
-      esac
-      if [ -f "$full" ]; then
-        if install_written_paths_register "$path" "bassclef-sync-template" 2>/dev/null; then
-          registered=$((registered + 1))
-        else
-          skipped=$((skipped + 1))
-        fi
-      else
-        skipped=$((skipped + 1))
+    if declare -F install_written_paths_rebuild_from_lite_manifest >/dev/null 2>&1; then
+      # Preserve verb's stderr (ajv-fail warnings etc.) by piping to trace
+      # instead of swallowing with 2>/dev/null (architect-review F3).
+      local verb_stderr
+      verb_stderr=$(install_written_paths_rebuild_from_lite_manifest "$lite_manifest" 2>&1 >/dev/null) || true
+      if [ -n "$verb_stderr" ]; then
+        _iwp_fragment_log "bulk-rebuild stderr=$verb_stderr"
       fi
-    done < <(jq -r '.entries[]?.path // empty' "$lite_manifest" 2>/dev/null)
-
-    _iwp_fragment_log "rebuild complete registered=$registered skipped=$skipped"
+      _iwp_fragment_log "bulk-rebuild dispatched lite=$lite_manifest"
+    else
+      _iwp_fragment_log "skip reason=lib-missing-bulk-rebuild-verb"
+    fi
   ) || true
 
   return 0

package/dist/lite/.claude/hooks/turn-prose-density-measure.sh

@@ -0,0 +1,109 @@
+#!/bin/bash
+# tier: lite
+# install-class: dual
+# Turn-prose density measure — Stop hook that reads the last assistant message
+# from the transcript, counts non-standard hyphenated compounds, and writes
+# the number to a marker file at state/markers/turn-prose-density/last-turn.json
+# via lib/prose-marker.sh per standards/prose-marker-format.md.
+#
+# Density = count of [a-z]{2,}-[a-z]{2,}(?:-[a-z]{2,})? matches MINUS the
+# 25-entry standard-tech allowlist. Proxy for jargon load distinct from
+# grade-measure's existing hyphen_words count (which includes standard tech).
+#
+# The pre-turn plain-english-steering.sh reads the marker on next turn
+# (extended at Step 2d) and injects the density number into the steering
+# block alongside grade + appositive misses.
+#
+# Sibling scorers:
+#   - turn-prose-grade-measure.sh — grade metric
+#   - turn-prose-kiss-check.sh    — appositive miss count (Step 2c extension)
+#
+# Input (stdin): JSON with transcript_path + session_id
+# Output: writes state/markers/turn-prose-density/last-turn.json
+# Exit: 0 always (measurement only, no gate)
+#
+# Override: SKIP_TURN_PROSE_DENSITY=1
+
+set +e
+
+# === Override path ===
+if [ "${SKIP_TURN_PROSE_DENSITY:-0}" = "1" ]; then
+  exit 0
+fi
+
+# === Parse stdin JSON ===
+STDIN_JSON=$(cat 2>/dev/null || echo '{}')
+if ! command -v jq >/dev/null 2>&1; then
+  exit 0
+fi
+TRANSCRIPT_PATH=$(echo "$STDIN_JSON" | jq -r '.transcript_path // ""' 2>/dev/null)
+
+[ -z "$TRANSCRIPT_PATH" ] && exit 0
+[ ! -f "$TRANSCRIPT_PATH" ] && exit 0
+
+# === Resolve lib path (install-class: dual) ===
+# Project install — lib relative to this hook. Operator install — lib under $HOME.
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+LIB_PATH=""
+for candidate in \
+  "${SCRIPT_DIR}/../../lib/prose-marker.sh" \
+  "${HOME:-/}/lib/prose-marker.sh" \
+  "${CLAUDE_PROJECT_DIR:-}/lib/prose-marker.sh"; do
+  if [ -f "$candidate" ]; then
+    LIB_PATH="$candidate"
+    break
+  fi
+done
+
+[ -z "$LIB_PATH" ] && exit 0
+# shellcheck disable=SC1090
+source "$LIB_PATH" 2>/dev/null || exit 0
+
+# === Extract last assistant text ===
+LAST_ASSISTANT_LINE=$(grep '"type":"assistant"' "$TRANSCRIPT_PATH" 2>/dev/null | tail -1)
+[ -z "$LAST_ASSISTANT_LINE" ] && exit 0
+
+MESSAGE_TEXT=$(echo "$LAST_ASSISTANT_LINE" \
+  | jq -r '.message.content[]? | select(.type == "text") | .text' 2>/dev/null)
+[ -z "$MESSAGE_TEXT" ] && exit 0
+
+# === Strip code blocks + inline backticks + URLs (prose only) ===
+SCRUBBED=$(echo "$MESSAGE_TEXT" | awk '
+  BEGIN { in_code = 0 }
+  /^```/ { in_code = !in_code; next }
+  in_code { next }
+  { print }
+' | sed -E 's/`[^`]*`//g; s|https?://[^ )]+||g')
+
+# Short message after strip → density=0
+STRIPPED_LEN=${#SCRUBBED}
+if [ "$STRIPPED_LEN" -lt 50 ]; then
+  write_prose_marker "turn-prose-density" "0" "short message under 50 chars"
+  exit 0
+fi
+
+# === Compute density via python ===
+# Standard-tech allowlist excluded. Pattern per standards/prose-marker-format.md.
+DENSITY=$(printf '%s' "$SCRUBBED" | python3 -c '
+import sys, re
+
+STANDARD_TECH = {
+    "pre-commit", "real-time", "data-driven", "end-to-end", "fire-and-forget",
+    "run-time", "compile-time", "read-only", "write-only", "fail-soft",
+    "fail-fast", "post-commit", "pre-push", "post-merge", "op-ed",
+    "self-test", "self-check", "re-read", "re-run", "re-fire",
+    "op-cost", "copy-paste", "cut-off", "set-up", "built-in",
+}
+
+text = sys.stdin.read().lower()
+pattern = re.compile(r"\b[a-z]{2,}-[a-z]{2,}(?:-[a-z]{2,})?\b")
+matches = pattern.findall(text)
+density = sum(1 for m in matches if m not in STANDARD_TECH)
+print(density)
+' 2>/dev/null)
+
+[ -z "$DENSITY" ] && DENSITY=0
+
+# === Write density marker via lib ===
+write_prose_marker "turn-prose-density" "$DENSITY" 2>/dev/null
+exit 0

package/dist/lite/.claude/hooks/turn-prose-kiss-check.sh

@@ -83,6 +83,20 @@ for _candidate in \
 done
 unset _candidate
 
+# === Source lib/prose-marker.sh (deep module per Longrun 2 Step 2b #2197) ===
+# Provides write_prose_marker for appositive-miss count persistence.
+# Silent-fail — no lib = no marker write; existing stderr display path unchanged.
+for _candidate in \
+  "${SCRIPT_DIR}/../../lib/prose-marker.sh" \
+  "${HOME_OVERRIDE:-${HOME:-/}}/lib/prose-marker.sh"; do
+  if [ -f "$_candidate" ]; then
+    # shellcheck disable=SC1090
+    source "$_candidate"
+    break
+  fi
+done
+unset _candidate
+
 # === Parse stdin JSON ===
 STDIN_JSON=$(cat 2>/dev/null || echo '{}')
 TRANSCRIPT_PATH=$(echo "$STDIN_JSON" | jq -r '.transcript_path // ""' 2>/dev/null)
@@ -417,8 +431,15 @@ for pattern, label in patterns:
 
 for f in flagged[:5]:  # cap at 5 findings per turn to avoid noise
     print(f)
+# Emit total count on final line as sentinel — bash strips before display.
+# Per Longrun 2 Step 2c (#2197) — scorer-stack appositive marker.
+print(f"__APPOSITIVE_COUNT__={len(flagged)}")
 ' 2>/dev/null)
 
+  # Extract the count sentinel; strip it from the display output.
+  APPOSITIVE_COUNT=$(echo "$APPOSITIVE_FINDINGS" | grep '^__APPOSITIVE_COUNT__=' | tail -1 | sed 's/^__APPOSITIVE_COUNT__=//')
+  APPOSITIVE_FINDINGS=$(echo "$APPOSITIVE_FINDINGS" | grep -v '^__APPOSITIVE_COUNT__=')
+
   if [ -n "$APPOSITIVE_FINDINGS" ]; then
     cat >&2 <<EOF
 [turn-prose-kiss-check: ADVISORY — appositive discipline (bassclef-upstream#1313)]
@@ -434,6 +455,13 @@ Override one-time: SKIP_APPOSITIVE_CHECK=1.
 V1 advisory; V2 (deferred) BLOCKs after calibration.
 EOF
   fi
+
+  # === Write appositive-miss marker via lib/prose-marker.sh (Longrun 2 Step 2c) ===
+  # Count is total matches (not capped at 5 — that cap is display-only).
+  # Silent-fail — missing lib or write error does not affect existing path.
+  if declare -f write_prose_marker >/dev/null 2>&1 && [ -n "$APPOSITIVE_COUNT" ]; then
+    write_prose_marker "turn-prose-appositive" "$APPOSITIVE_COUNT" 2>/dev/null
+  fi
 fi
 
 # === Emit findings + exit per mode ===

package/dist/lite/.claude/rules/branching.md

@@ -13,6 +13,8 @@ Branch naming:
 
 Every branch ties to a GitHub Issue. No branch without an issue.
 
+**Exception — `/launch --local`.** Adopter prototype branches created by `/launch --local` are exempt from the issue-per-branch rule. Local prototype mode exists for adopters who do not yet have a GitHub repo or who iterate ahead of filing issues. Per bassclef-upstream#2175 Batch A (F2) + bassclef-cli#328 Finding 2.
+
 Flow: issue → branch from main → work → PR → CI passes → squash merge → delete branch
 
 Rules:

package/dist/lite/.claude/rules/identifier-leak-prevention.md

@@ -30,8 +30,9 @@ No commit lands with these patterns in message OR staged content:
 
 - **Hostname shapes**: `[A-Za-z][A-Za-z0-9]*-MacBook-(Air|Pro)`, `DESKTOP-[A-Z0-9]{4,}`, `*-server-*`, `*-desktop-*`
 - **Absolute paths**: `/Users/<name>`, `/home/<name>`
+- **GitHub no-reply derived slug**: `operator-[0-9]+\+[a-zA-Z0-9][a-zA-Z0-9-]*` — the shape `/personas` historically derived from a GitHub no-reply email local part (`<id>+<handle>`), leaking account ID plus handle into committed persona + use-case + jobs docs. Per bassclef-upstream#2146. Scope-safe — the pattern targets the derived slug only; the raw email format `<id>+<handle>@users.noreply.github.com` stays allowed as a git author (Check 3 pins that in Test 22) because GitHub recommends no-reply as the privacy format for commit identity.
 
-Extension mechanism — future pattern classes added to the hook's `IDENTIFIER_PATTERNS` regex + a corresponding Tier 0 test.
+Extension mechanism — future pattern classes added to `standards/identifier-leak-patterns.txt` + a corresponding Tier 0 test. The hook reads the pattern file at run time; adding a line there extends the scrub without a hook edit.
 
 ## Anti-patterns
 

package/dist/lite/.claude/rules/install-written-paths-mediation.md

@@ -13,6 +13,7 @@ The lib + manifest ship per bassclef-upstream#2036 Finding #8 (Kunal cold-adopte
 Any discipline hook that currently fires on file content without discriminating install-written from author-edited. Candidate hooks:
 
 - `.claude/hooks/pre-commit-gate.sh` — lead-lens 3-marker gate section (consumer wired per this cure's V1 PR)
+- `.claude/hooks/pre-push-shellcheck.sh` — adopter 2; retrofitted per bassclef-upstream#2253 (cold-adopter first-push BLOCKed on 72 install-written findings)
 - `.claude/hooks/pre-commit-identifier-leak-scrub.sh` — identifier-leak sister per Kunal #1 (future adopter per R2 risk ledger)
 - Any new discipline hook authored under the loop discipline (`.claude/rules/loop-discipline.md`) that assumes author-edit
 
@@ -67,6 +68,12 @@ INSTEAD of overriding routinely: trust the lib. Overrides are for one-shot debug
 - `presence/install/bassclef-sync.template.sh` — registers each path on sync
 - `.claude/hooks/session-reflection.d/83-install-written-paths-rebuild.sh` — regenerates manifest when missing at session-start
 
+## Adopter 2 — pre-push-shellcheck retrofit (bassclef-upstream#2253)
+
+Second mediation consumer landed under v1.11.1 hotfix. Peer bassclef-cli-06 cold-adopter smoke on `giveisusfree` profile caught v1.11.0's `pre-push-shellcheck.sh` (shipped #2108) BLOCKing first push after `bassclef init` on 72 shellcheck findings in bassclef-shipped `.sh` files — Linus adopter contract break.
+
+Cure retrofit — `pre-push-shellcheck.sh` now sources `lib/install-written-paths.sh` with fail-soft and filters `EXISTING_FILES` through `is_install_written_path` before shellcheck fires. Adopter edits to install-written files mismatch the recorded content_hash and still get scanned (lib's existing contract). The sister test `.claude/hooks/tests/pre-push-shellcheck.test.sh` added one real-lib integration test (Test 19) per Feathers characterization — the integration test caught a `set -u` leak the stub tests missed. Cure guards sourced block with `set +u` scope.
+
 ## Deferred to follow-on
 
 - `bassclef init` npm-side registration (lands in bassclef-cli; sources the lib via package symlink)

package/dist/lite/.claude/rules/lite-manifest-schema-change-discipline.md

@@ -36,6 +36,29 @@ When a PR changes the manifest schema OR output shape:
 3. **Downstream cure named** — the entry names what adopters need to do. If nothing (backward-compatible add), say so explicitly. If code change (like the v0.36.0 `upstream_commit` removal), name the pattern.
 4. **Release script pre-flight** — before every `/release`, the script reads the ledger and confirms an entry exists for the outgoing `manifest_version`. Missing entry BLOCKs the cascade.
 
+## Ledger-edit-then-regen order (bassclef-upstream#2110)
+
+The ledger file at `standards/lite-manifest-schema-changes.md` is ITSELF a `tier: lite` artifact. Its content_hash lives inside the manifest. So the regen must capture the FINAL ledger state. Order matters:
+
+1. **Edit ledger first.** Write the entry explaining the schema change.
+2. **Regen second.** Run `scripts/generate-lite-manifest.sh`.
+
+Natural authoring instinct is "regen first (see the hashes), then explain." That order ships a stale ledger hash in the manifest. CI drift check fails. A second regen commit is then needed.
+
+**Preferred cure — use the wrapper.** `scripts/update-lite-manifest.sh` enforces the order:
+
+```bash
+# Append a pre-written entry
+scripts/update-lite-manifest.sh --entry-file path/to/entry.md
+
+# Open $EDITOR on the ledger
+scripts/update-lite-manifest.sh --edit
+```
+
+Both modes hash the ledger before and after. The wrapper refuses to regen when the ledger is unchanged. Then it dispatches `scripts/generate-lite-manifest.sh` + the renderer when present.
+
+Per `.claude/rules/bootstrap-pair-discipline.md` — the wrapper ships with Tier 0 tests at `scripts/tests/update-lite-manifest.test.sh`.
+
 ## Retirements
 
 Retirement-class changes (content-remove: a file previously shipped in the lite manifest gets deleted intentionally) ship with the same discipline shape as additions. Three paired artifacts, same PR:

package/dist/lite/.claude/rules/reviewer-dispatch.md

@@ -0,0 +1,95 @@
+---
+tier: lite
+description: Any session that ships source code (files under src/, apps/, packages/, lib/, app/) MUST invoke Reviewer responsibilities before the session ends.
+---
+
+# Reviewer Dispatch
+
+Any session that ships source code (files under `src/`, `apps/`, `packages/`, `lib/`, `app/`) MUST invoke Reviewer responsibilities before the session ends. Mode-agnostic — orchestrator-gated mode dispatches the Reviewer agent; sequential mode self-invokes Reviewer responsibilities (read against spec, check tests, validate ADR compliance, flag TDD test-after patterns per Kent Beck).
+
+The discipline lives at the rule layer (this file) plus the mechanical layer (`.claude/hooks/reviewer-dispatch-check.sh` — Stop hook). Both required for adopter code quality.
+
+## When this rule fires
+
+At session end (Stop event), the hook:
+
+1. Counts source files changed since session-start (heuristic: `git diff` against `origin/main`; uncommitted + committed changes both count)
+2. Path matchers for "source": `src/`, `apps/`, `packages/`, `lib/`, `app/`
+3. When source count > 0, the hook checks for any marker at `state/markers/reviewer/*.md`
+4. When no marker exists, the hook BLOCKs with reviewer-checklist remediation
+
+## Reviewer marker contract
+
+The marker captures the Reviewer pass per the agent definition (`~/.claude/agents/reviewer.md`):
+
+```markdown
+# Reviewer pass — <session-id>
+
+mode: sequential | orchestrator-gated
+reviewed_at: <ISO-8601>
+source_files_changed: <count>
+wu_id: <e.g., bet-2026-06-25k WU-3>      # bet 25k WU-5 extension
+iteration_count: <N>                     # bet 25k WU-5 extension
+lens_used: [<luminary-slug>, ...]        # bet 25k WU-5 extension
+
+## Checks
+- spec acceptance criteria: PASS | FAIL | N/A
+- tests present + green: PASS | FAIL
+- test-after pattern check: NONE FOUND | FOUND (list)
+- ADR compliance: PASS | N/A
+- Designer sign-off: PRESENT | N/A
+- architect-review: INVOKED | N/A
+
+## Findings
+- <severity>: <description>  # BLOCK / WARN / NOTE
+
+acknowledged: true
+```
+
+### Field extensions per bassclef-upstream#366 (bet 25k WU-5)
+
+Three fields extend the prior contract to make the /loop discipline auditable per step:
+
+- **`wu_id`** — goal identifier + WU number (e.g., `bet-2026-06-25k WU-3`). Lets future audits grep markers by WU. Required when the marker is written under /longrun dispatch; optional for ad-hoc reviews.
+- **`iteration_count`** — number of /loop iterations the step ran before landing GREEN. Iteration 1 GREEN is the cleanest path; counts above 1 record rework cycles (RED → fix → GREEN). Required under /longrun dispatch.
+- **`lens_used`** — YAML list of luminary slugs that drove the review. Mirrors the goal doc's `authoring_luminaries` for the relevant WU. Required under /longrun dispatch.
+
+The three fields together let future operators answer questions like "which WUs in bet 25k ran more than one /loop iteration" or "which luminary lens caught the most rework" by greppable markers, not by chronicle archaeology. The mechanical layer (greppable fields) compounds across every goal; the bar (`## /temperance + /luminary + /loop discipline` section in the PR body) gives the immediate operator-visible read.
+
+Forward-only enforcement. Markers written before WU-5 stay as-is; markers written from WU-5 onwards carry the three new fields under /longrun dispatch.
+
+## Mode behavior
+
+**Orchestrator-gated mode** — orchestrator dispatches Reviewer agent at code-shipping handoffs. Reviewer agent reads against spec, runs checks, writes the marker per the contract above, returns PASS/FAIL/WARN findings to orchestrator.
+
+**Sequential mode** — agent self-invokes Reviewer responsibilities. Read the Reviewer agent definition. Apply checks against the session's source diff. Write the marker. The self-invocation is honor-system at the methodology layer; the marker is the mechanical evidence the hook reads.
+
+## Override path
+
+`SKIP_REVIEWER_CHECK=1 <command>` — logged via trace-helper. Use rarely:
+
+- Documentation-only session that accidentally touched a comment in src/ (operator confirms the source touch is non-behavioral)
+- Emergency rescue when the hook itself misclassifies (file substrate-defect)
+- One-shot migration script that ships hundreds of source files (operator has reviewed externally)
+- Bulk dependency-bump where the package-manager touched lockfile entries only
+
+INSTEAD of overriding for routine work: write the marker. The Reviewer-self-invocation cost is small (~5 minutes); the audit trail compounds across every adopter session.
+
+## What the rule does NOT cover
+
+- Code review process content (covered in `~/.claude/agents/reviewer.md`)
+- TDD test-list discipline (covered in `.claude/rules/test-list-discipline.md`)
+- Sufficiency rubric for tests (covered in `.claude/rules/test-sufficiency.md`)
+- ADR discipline (covered in `.claude/rules/adr-discipline.md`)
+- Architect review timing (covered in `.claude/skills/architect-review/SKILL.md`)
+
+This rule is the gate. Sister rules + skills carry the content.
+
+## Composition with other rules
+
+- `.claude/rules/testing-tier-config.md` — Tier 0 strict-TDD on hook + tests (this hook + its test file land Tier 0)
+- `.claude/rules/blocked-items.md` — BLOCK protocol the hook fires
+- `.claude/rules/test-sufficiency.md` — what Reviewer checks for under "tests present + green"
+- `.claude/rules/test-list-discipline.md` — what Reviewer checks for under "test-after pattern check" (Beck's test-list-as-planning-artifact)
+- `.claude/rules/adr-discipline.md` — what Reviewer checks for under "ADR compliance"
+- `~/.claude/agents/reviewer.md` — the full Reviewer responsibilities definition

package/dist/lite/.claude/settings.json

@@ -52,6 +52,11 @@
             "type": "command",
             "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/git-stash-u-guard.sh",
             "timeout": 5
+          },
+          {
+            "type": "command",
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/pre-push-shellcheck.sh",
+            "timeout": 60
           }
         ]
       },
@@ -167,6 +172,11 @@
             "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/turn-prose-grade-measure.sh",
             "timeout": 10
           },
+          {
+            "type": "command",
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/turn-prose-density-measure.sh",
+            "timeout": 10
+          },
           {
             "type": "command",
             "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/longrun-prep-compounding-sequence-check.sh",