@thebassclef/lite 1.9.16 → 1.9.19

package/dist/lite/.claude/skills/build/SKILL.md

@@ -214,13 +214,28 @@ if echo "$@" | grep -q -- '--explain'; then
   EXPLAIN_MODE=true
 fi
 
-# Resolve goal via accessor
+# Resolve goal via accessor. #2132 — capture stderr so parse errors surface
+# instead of masquerading as "not found". Map accessor return codes:
+#   1 → goal file not found; 3 → goal file could not be parsed.
 source lib/state.sh
 BET_SLUG="$1"
-BET_JSON=$(state_iteration_bet_get "$BET_SLUG" 2>/dev/null) || {
-  echo "/build: goal '$BET_SLUG' not found via state_iteration_bet_get" >&2
-  exit 1
-}
+BET_JSON=$(state_iteration_bet_get "$BET_SLUG" 2>&1)
+BET_RC=$?
+if [ "$BET_RC" -ne 0 ]; then
+  case "$BET_RC" in
+    1)
+      echo "/build: goal file not found: $BET_SLUG" >&2
+      ;;
+    3)
+      echo "/build: goal file could not be parsed: $BET_SLUG" >&2
+      ;;
+    *)
+      echo "/build: goal '$BET_SLUG' lookup failed (rc=$BET_RC)" >&2
+      ;;
+  esac
+  echo "$BET_JSON" >&2
+  exit "$BET_RC"
+fi
 
 # Check status active
 STATUS=$(echo "$BET_JSON" | jq -r '.status // empty')
@@ -234,6 +249,15 @@ SPEC_PATH=$(echo "$BET_JSON" | jq -r '.references[]? | select(.type == "spec") |
 DECOMP_PATH=$(echo "$BET_JSON" | jq -r '.references[]? | select(.type == "decomposition") | .id // empty')
 UX_MIG_PATH=$(echo "$BET_JSON" | jq -r '.references[]? | select(.type == "ux-migration") | .id // empty')
 
+# #2132 — goal MUST declare a spec reference. Empty SPEC_PATH means Phase 1
+# would awk against docs/specs/.md and silently find nothing; cure refuses
+# at Phase 0 instead with a clear error.
+if [ -z "$SPEC_PATH" ]; then
+  echo "/build: goal '$BET_SLUG' has no spec reference — refusing" >&2
+  echo "Add a {type: spec, id: <spec-slug>} entry to goal frontmatter references[]." >&2
+  exit 4
+fi
+
 # Validate references exist
 for ref_type in spec decomposition; do
   ref_id=$(echo "$BET_JSON" | jq -r --arg t "$ref_type" '.references[]? | select(.type == $t) | .id // empty')
@@ -349,6 +373,16 @@ WU_LIST=$(awk '
 
 # Each step should reference at least one story (US-NNN)
 WU_COUNT=$(echo "$WU_LIST" | grep -cE '^### (Step|WU)-' || echo 0)
+
+# #2132 — refuse zero-step specs. The Phase 2 orphan check does not fire
+# on empty WU_LIST (no steps → no orphans → silent pass). Phase 1 refuses
+# so adopters see the real problem.
+if [ "$WU_COUNT" = "0" ]; then
+  echo "/build: spec has zero steps — refusing" >&2
+  echo "Spec file: $SPEC_FILE" >&2
+  echo "Need a Steps enumerated section with Step-N or WU-N entries." >&2
+  exit 4
+fi
 ```
 
 Build structured object: `{ bet, spec_path, decomp_path, ux_migration_path, wus[] }`.
@@ -483,6 +517,23 @@ Operator can force adopter-mode via `--adopter-mode` flag (V2). Operator can for
 
 ### Phase 3 — DryRunPlanner
 
+**Read the pre-mortem marker first (per bassclef-upstream#2175 Batch B — F5).** Before enumerating steps, read `state/markers/pre-mortem/<branch-slug>.marker` if present. The marker names the risk ledger file plus top-5 risks. Surface the ledger path + top-5 risks in the dry-run output. Builder dispatches in future LIVE mode read the ledger before writing code.
+
+<!-- FKGL-EXEMPT: bash command block; shell commands are not graded prose. -->
+
+```bash
+BRANCH_SLUG=$(git branch --show-current | tr '/' '-')
+MARKER="state/markers/pre-mortem/${BRANCH_SLUG}.marker"
+if [ -f "$MARKER" ]; then
+  echo "Pre-mortem ledger — reading top-5 risks:"
+  cat "$MARKER"
+fi
+```
+
+<!-- /FKGL-EXEMPT -->
+
+When the marker is absent, `/build` emits a one-line note that no pre-mortem fired for this branch and proceeds. `/pre-mortem` is mandatory on always-fire domains per its SKILL body; Phase 3 does not re-enforce that gate.
+
 Walk step enumeration; for each, plan what would happen in live mode:
 
 ```
@@ -534,6 +585,8 @@ TODO: live execution — operator-supervised first run only.
 - Operator-tap moments: 1 (prod deploy approval via GitHub Environment)
 ```
 
+<!-- FKGL-EXEMPT: Phase 4 stub — technical dispatch TODO; OOAD artifact names + branch slug template resist short SVO rewrites. Per bassclef-upstream#2175 Batch A — slug canon matches Phase 3. -->
+
 ### Phase 4 — BuilderDispatcher (LIVE — STUBBED)
 
 **Amendment per #1171 — Builder inputs name OOAD artifacts.**
@@ -545,7 +598,7 @@ TODO: live execution — operator-supervised first run only. Would:
 dispatch Builder against step <slug> with context from spec section
 <X> + decomp matrix entry <Y> + paired OOAD artifacts (decomposition
 + interaction-design + use-case per goal doc references). Branch:
-feature/<goal-slug>-stack-<N>.
+feature/<goal-slug>-stack-<N>-<wu-slug>.
 ```
 
 The string `TODO: live execution` is grep-able for audit. Live mode
@@ -556,6 +609,10 @@ in the goal doc `references` array — decomposition (grep for
 `type: interaction-design`), use-case (grep for `type: use-case`).
 Per #1171 — every OOAD artifact consulted for any engineering change.
 
+<!-- /FKGL-EXEMPT -->
+
+<!-- FKGL-EXEMPT: Phase 5 stub + Phase 5a Reviewer dispatch — technical TODO blocks for live-mode scaffolding. F10 cure per bassclef-upstream#2175 Batch D. -->
+
 ### Phase 5 — VerifyOrchestrator (LIVE — STUBBED)
 
 Tonight emits literal:
@@ -566,6 +623,24 @@ Match change type (UI smoke / unit / integration) and BLOCK on
 failure with line-numbered output.
 ```
 
+### Phase 5a — Reviewer dispatch (per bassclef-upstream#2175 Batch D — F10)
+
+After `/verify` passes, Phase 5 adds a Reviewer dispatch step. Running `/verify` alone catches test failures. The Reviewer agent (`.claude/agents/reviewer.md`) catches spec-acceptance drift, missing-test patterns, ADR deviations, and friction the Builder did not surface. One review step per PR before merge.
+
+Tonight emits literal:
+
+```
+TODO: live execution — would dispatch Reviewer agent against branch <name>.
+Reviewer reads: spec acceptance criteria, decomposition matrix entry, PR
+body friction report. Reviewer writes: state/markers/reviewer/<branch>.md
+with PASS / FAIL / NOTE findings. BLOCK merge on FAIL; NOTE findings file
+as follow-on tickets.
+```
+
+The Reviewer dispatch is MANDATORY per `.claude/rules/reviewer-dispatch.md` for any session shipping source code. Phase 5a is the Phase-level wiring. Live mode consumes the Reviewer marker before Phase 6 opens the PR.
+
+<!-- /FKGL-EXEMPT -->
+
 ### Phase 5.5 — Amendment B2: /pattern-review trigger reads decomposition (per #1150 + #1167)
 
 When the goal references a decomposition doc AND that doc contains `@pattern` references, dispatch `/pattern-review` with the decomposition path as input. Skip when the decomposition names no `@pattern`. Contract per `.claude/rules/pattern-annotation.md` L57-62.

package/dist/lite/.claude/skills/eisenhower/SKILL.md

@@ -151,6 +151,32 @@ Individual items: ...
 - #127 — title — no path to advance the goal — CLOSE
 ```
 
+### Step 4b — Emit the hard stack rank
+
+After the per-quadrant tables, emit one final table. Columns fixed:
+
+1. **Rank** — 1 to N, cross-repo, top-down
+2. **Ticket** — `<repo>#<number>` form
+3. **Repo** — the owning repo. Bold the repo name when work ships somewhere other than the filed repo.
+4. **Why this rank** — one plain-English sentence. Grade-8 target. Cite the Depen. tie or class fit.
+
+Row order:
+
+- Q1 first, then Q2, then Q3, then Q4
+- Within quadrant, sort by Depen. first (independents at top), then class, then ticket number
+- Flag cross-repo work in the Repo column
+
+Example row shape:
+
+```
+| Rank | Ticket | Repo              | Why this rank                        |
+|------|--------|-------------------|--------------------------------------|
+| 1    | #2008  | **bassclef-web**  | Q1 lead. Live Sam bounce.            |
+| 2    | #2011  | **bassclef-web**  | Q1 rider. Same PR as #2008.          |
+```
+
+Per bassclef-upstream#2096 amendment 3.
+
 ### Step 5 — Optional follow-on
 
 If Q3 surfaces 5+ items in the same shape, the skill offers to draft one `/promote` ticket. That ticket proposes automating the class. You accept, edit, or skip.

package/dist/lite/.claude/skills/launch/SKILL.md

@@ -264,6 +264,8 @@ fi
 
 **Local mode (`--local`) — bassclef#923 A2:**
 
+**Issue-per-branch exemption (per bassclef-upstream#2175 Batch A — F2).** `/launch --local` creates adopter prototype branches that are exempt from the `.claude/rules/branching.md` "every branch ties to a GitHub Issue" rule. Local prototype mode exists for adopters who do not yet have a GitHub repo. No issue is required for `--local` branches. All other `/launch` modes (full, scratch, operator-mode) still require an issue.
+
 `/launch --local` prints a banner first. The banner shows which picker is active:
 
 ```
@@ -546,6 +548,43 @@ The gallery is THE cameo-review surface. Luminary perspectives
 agent runtime per roadmap Stage 3) consume the gallery + spec + decomp
 to produce reviews per perspective. Reviews surface in PR body.
 
+### Phase 10a — Stack-choice ask (per bassclef-upstream#2175 Batch D — F13)
+
+<!-- FKGL-EXEMPT: Phase 10a — technical ask step with config-key contract. Short SVO loses the stack-key list. Fires before Phase 11 /ux-migration so the migration plan picks the right adapter. -->
+
+Before Phase 11 runs, ask the operator which frontend stack the migration targets. Today `/launch` silently assumes Next.js — nine SKILL bodies lean on Next.js examples. Non-React adopters hit the silent pick at Phase 11 and must rework. The ask fires once per `/launch` dispatch; the answer writes to `substrate.config.md` key `frontend_stack` for Phase 11 to read.
+
+Read `substrate.config.md` for `frontend_stack`. If set, skip the ask. If unset, ask:
+
+```
+Which stack is this app?
+
+  a. Next.js — React + App Router (bassclef default; nine SKILL bodies lean on Next.js examples)
+  b. Vite + React — React + Vite dev server
+  c. Remix — React + Remix
+  d. SvelteKit — Svelte + Kit
+  e. SolidStart — Solid + Start
+  f. none — static HTML + CSS, no framework
+  g. other — operator names it
+
+[a-g]
+```
+
+Write the answer to `substrate.config.md` `frontend_stack`:
+- `a` → `frontend_stack: nextjs`
+- `b` → `frontend_stack: vite-react`
+- `c` → `frontend_stack: remix`
+- `d` → `frontend_stack: sveltekit`
+- `e` → `frontend_stack: solidstart`
+- `f` → `frontend_stack: none`
+- `g` → `frontend_stack: <operator-named>`
+
+Default on Enter → `a` (Next.js) to preserve the historical silent pick. Operator can edit `substrate.config.md` directly at any time.
+
+Phase 11 reads `frontend_stack` and picks the matching migration adapter. When unset at Phase 11 fire, Phase 11 BLOCKs with a one-line note citing this ask.
+
+<!-- /FKGL-EXEMPT -->
+
 ### Phase 11 — `/ux-migration` (chosen variant → production migration plan)
 
 ```bash
@@ -699,8 +738,8 @@ Two templates — adopter-mode and operator-mode. Default is adopter when `--loc
 After Phase 12-alt (`local-serve.sh` running) + Phase 13 (preview-state.yml on disk), emit this template directly to the adopter — no YAML edits, no frontmatter flip, no command-soup:
 
 ```
-I made you N directions for your family recipe wiki. Walk through them on
-your phone or laptop at <LOCAL_URL> and tell me which one feels right.
+I made you N directions for your family recipe wiki. Walk through them
+on this computer at <LOCAL_URL> and tell me which one feels right.
 
 When you've picked, just tell me — "I like variant 2" or "#3 looks
 great".
@@ -740,8 +779,12 @@ None of them feel right? Tell me what's off and I'll generate new
 directions for you. (See /launch --refine, bassclef#942.)
 ```
 
+<!-- FKGL-EXEMPT: substitution instructions name three distinct placeholders; short SVO loses the mapping precision -->
 Substitute `<LOCAL_URL>` with the URL returned by Phase 12-alt. Substitute the actual variant count (`I made you N directions...`). Substitute the actual app description (`your family recipe wiki` etc.) from the InputArtifact's `intent` field.
 
+**Phone or iPad reach — opt-in with `--lan`.** The default URL binds `127.0.0.1`. Only this computer can open it. The adopter may want the gallery on a phone or iPad on the same Wi-Fi. Re-run Phase 12-alt with `--lan`: `bash scripts/launch/local-serve.sh --lan <gallery-dir>`. The script binds `0.0.0.0` and prints a one-line warning. Any device on the Wi-Fi can then reach the URL. Swap the handoff line to "on your phone, laptop, or iPad at <LOCAL_URL>" when `--lan` fires.
+<!-- /FKGL-EXEMPT -->
+
 The adopter-mode template **surfaces** (per bassclef#969):
 - The formal artifacts the chain will produce post-pick, in plain English (use case, user stories, IA, interaction design, responsibility map, build spec, migration plan)
 - The chain-ordering rationale (variants are cheap shared data; formal artifacts are expensive per-direction; cheap first → commit → expensive once)

package/dist/lite/.claude/skills/onboard-repo/SKILL.md

@@ -356,7 +356,82 @@ this divider.
 Run each phase in order. Operator confirms before destructive or
 cross-repo actions. Each phase is independently re-runnable.
 
-#### Phase 0 — Refuse to run from main
+#### Phase 0 — Preflight checks (OAuth, git identity, branch)
+
+Phase 0 bundles three cheap preflight checks before any Phase 1 work runs. The checks fire together so adopter sees all gaps at once, not one at a time. Per bassclef-upstream#2242 preflight-first SKILL design + folds C1 + C4 from the 2026-10-14 pre-mortem.
+
+##### 0.1 Claude OAuth probe (per bassclef-upstream#2233)
+
+Cold adopters have hit `/onboard-repo` with expired OAuth tokens. The skill wastes an orientation turn, then returns `Login expired · Please run /login`. The adopter re-fires the skill after login. Preflight the probe so the login prompt lands before any phase work.
+
+Run the cheap-hello pattern (per memory `feedback_oauth_verify_via_cheap_hello`):
+
+```bash
+if ! command -v claude >/dev/null 2>&1; then
+  cat >&2 <<'EOF'
+
+🛑 /onboard-repo preflight — Claude CLI not found on PATH.
+
+Install Claude Code first. Then re-fire /onboard-repo.
+
+EOF
+  exit 1
+fi
+
+<!-- FKGL-EXEMPT: shell command with long path reads as a single dense "sentence" to the grader; backtick-safe here per bassclef-upstream#2255 -->
+if ! bash "$CLAUDE_PROJECT_DIR/.claude/skills/onboard-repo/claude-oauth-probe.sh" 10; then
+  cat >&2 <<'EOF'
+
+🛑 /onboard-repo preflight — Claude OAuth check failed.
+
+Run `/login` first. Then re-fire `/onboard-repo`.
+
+EOF
+  exit 1
+fi
+<!-- /FKGL-EXEMPT -->
+```
+
+Two checks: binary on PATH, then OAuth probe. Cost: ~2s on green path. The probe is portable. Closes bassclef-upstream#2255.
+
+##### 0.2 Git identity preflight (per bassclef-upstream#2232)
+
+`/onboard-repo` runs commit paths in Phase 2. Git fails with `Author identity unknown` when `user.name` or `user.email` is unset. The adopter sees the gap mid-flow and has to answer a 3-option prompt. Preflight the check so the question lands here, not later.
+
+```bash
+GIT_NAME=$(git config --get user.name 2>/dev/null || echo "")
+GIT_EMAIL=$(git config --get user.email 2>/dev/null || echo "")
+
+if [ -z "$GIT_NAME" ] || [ -z "$GIT_EMAIL" ]; then
+  cat >&2 <<'EOF'
+
+🛑 /onboard-repo preflight — git identity not set.
+
+Pick one option (then re-fire /onboard-repo):
+
+  1. GitHub no-reply address (private, derived from `gh api user`):
+       (requires `gh auth login` first — see Prerequisites)
+       GH_USER=$(gh api user --jq .login)
+       GH_ID=$(gh api user --jq .id)
+       git config --global user.name "$GH_USER"
+       git config --global user.email "${GH_ID}+${GH_USER}@users.noreply.github.com"
+
+  2. Your own name + email:
+       git config --global user.name "Your Name"
+       git config --global user.email "you@example.com"
+
+  3. Fixture smoke (keep repo-local identity for test runs):
+       git config user.name "fixture"
+       git config user.email "fixture@localhost"
+
+EOF
+  exit 1
+fi
+```
+
+Three options cover the common paths. GitHub no-reply is private and matches the pattern bassclef uses for its own commits.
+
+##### 0.3 Refuse to run from main
 
 Substrate changes go through PRs, same as feature work. If `/onboard-repo`
 runs from `main`, every scaffold (`.claude/`, `CLAUDE.md`,
@@ -427,6 +502,59 @@ operator-decision items.
 
 Idempotent API calls against the target repo via `gh`.
 
+##### 1.0a Repo-name collision helper (per bassclef-upstream#2236)
+
+When an agent or adopter runs `gh repo create` on behalf of `/onboard-repo` and the name is taken, iterate the suffix one-by-one is slow. A cold adopter on 2026-10-13 hit three round-trips before landing on `-4`. Enumerate the taken set in ONE call. Propose the lowest free name up front.
+
+Use this helper whenever the flow creates a new repo:
+
+```bash
+basename="bassclef-smoke-test"   # or whatever the adopter picked
+owner=$(gh api user --jq .login)
+
+# Pull every repo under $owner starting with $basename in ONE call
+taken=$(gh repo list "$owner" --json name --jq "[.[].name | select(startswith(\"$basename\"))] | sort" 2>/dev/null)
+
+# Find lowest free suffix
+suffix=""
+for i in '' $(seq 2 100); do
+  candidate="${basename}$([ -n "$i" ] && echo "-$i")"
+  if ! jq -e --arg c "$candidate" '.[] | select(. == $c)' <<<"$taken" >/dev/null 2>&1; then
+    suffix="$i"
+    break
+  fi
+done
+
+proposed="${basename}$([ -n "$suffix" ] && echo "-$suffix")"
+echo "Taken under $owner matching ${basename}*: $taken"
+echo "Proposed free name: $proposed"
+echo "Accept '$proposed'? Or type your own:"
+```
+
+One `gh repo list` call enumerates every conflict. One prompt proposes the next free name. Adopter accepts or renames in one turn.
+
+##### 1.0 Write the temperance marker up-front (per bassclef-upstream#2237)
+
+`/onboard-repo` is the scope decision. Running it means the operator picked this plan. The `pre-build-gate.sh` BLOCK on first Edit is a false positive. The scope landed at skill dispatch, not mid-skill.
+
+Write the marker now, before any Edit tool call fires:
+
+```bash
+mkdir -p state/markers/temperance
+BRANCH=$(git branch --show-current)
+cat > "state/markers/temperance/${BRANCH}.marker" <<EOF
+# Temperance marker — /onboard-repo
+- date: $(date -u +%Y-%m-%d)
+- branch: ${BRANCH}
+- scope-decision: scaffold bassclef setup via /onboard-repo
+- right-thing: adopter needs .claude/ + .gitignore + .bassclef/ wiring
+- right-way: idempotent API calls + file writes contained to adopter repo
+- drift-trigger: operator asks for scope outside the standard bootstrap set
+EOF
+```
+
+The marker satisfies `pre-build-gate.sh` at the right scope boundary. Phase 2's first Edit (settings.json, bassclef-configs.jsonc, .gitignore) proceeds clean. No mid-flow BLOCK banner.
+
 ##### 1.1 Create the 11 standard labels
 
 ```bash
@@ -462,31 +590,33 @@ immediately without waiting for a sync cycle.
 
 ##### 1.2 Protect main from force-push and deletion
 
-**Heads up — GitHub free-tier adopters on PRIVATE repos:** the API call
-below returns HTTP 403 ("Upgrade to GitHub Pro or make this repository
-public") on free-tier accounts, because branch protection is a paid
-feature for private repos. Public repos get branch protection on every
-plan, free included. Pick a path below BEFORE running the call.
+Branch protection on private repos is a paid GitHub feature. Free plan + private repo returns HTTP 403 on the API call. Public repos get branch protection on every plan.
 
-Three ways to clear this step:
-
-1. **Make the repo public** — simplest; free plan includes branch
-   protection on public repos. Good fit when the code is open source
-   or ships to adopters anyway.
-2. **Upgrade the GitHub plan** — Pro / Team / Enterprise includes
-   branch protection on private repos.
-3. **Skip the API call** — rely on local safety (no `git push --force`
-   habits, PR review, pre-commit hooks). Mark the repo config so later
-   phases know branch protection is operator-managed, not substrate-
-   managed. See the fallback block below.
+Preflight the plan + visibility pair. Skip the API call cleanly when free + private (per bassclef-upstream#2235). No adopter prompt, no 403 noise:
 
 ```bash
 DEFAULT_BRANCH=$(gh repo view "$REPO" --json defaultBranchRef -q '.defaultBranchRef.name')
+PLAN=$(gh api /user --jq .plan.name 2>/dev/null || echo "unknown")
+VISIBILITY=$(gh repo view "$REPO" --json visibility --jq .visibility 2>/dev/null || echo "UNKNOWN")
 
-# Pro / public-repo path — run the API call.
-gh api "repos/$REPO/branches/$DEFAULT_BRANCH/protection" \
-  --method PUT \
-  --input - <<EOF
+if [ "$PLAN" = "free" ] && [ "$VISIBILITY" = "PRIVATE" ]; then
+  echo "Preflight: free plan + private repo. GitHub free does not offer branch protection on private repos. Skipping API call."
+  mkdir -p docs
+  cat >> docs/onboard-notes.md <<'NOTE'
+## Branch protection — operator-managed
+
+GitHub free plan does not offer branch protection on private repos.
+This repo relies on:
+- Local discipline: no `git push --force` to main.
+- PR review before merge.
+- Pre-commit hooks shipped by bassclef.
+
+Revisit if the repo moves to public, or the plan upgrades to Pro+.
+NOTE
+else
+  gh api "repos/$REPO/branches/$DEFAULT_BRANCH/protection" \
+    --method PUT \
+    --input - <<EOF
 {
   "required_status_checks": null,
   "enforce_admins": false,
@@ -496,6 +626,7 @@ gh api "repos/$REPO/branches/$DEFAULT_BRANCH/protection" \
   "allow_deletions": false
 }
 EOF
+fi
 ```
 
 Minimum defense: no force-push or deletion of main. PR reviews NOT
@@ -503,25 +634,6 @@ required here — agent-created PRs (bassclef-sync) need to merge
 without human intervention for the mobile-sync story. Add stricter
 rules per-repo in `.github/branch-protection.yml` if the repo warrants.
 
-**Free-tier private-repo fallback (path 3 above).** If the API
-returned 403 and the operator picked "skip and manage locally":
-
-```bash
-# Record the choice so later audits know main is not API-protected.
-mkdir -p .claude
-cat >> .claude/onboard-notes.md <<'NOTE'
-## Branch protection — operator-managed
-
-GitHub free-tier does not include branch protection on private repos.
-This repo relies on:
-- Local discipline: no `git push --force` to main.
-- PR review before merge.
-- Pre-commit hooks shipped by bassclef.
-
-Revisit if the repo moves to public, or the plan upgrades to Pro+.
-NOTE
-```
-
 The adopter can revisit this step after switching to public OR
 upgrading the plan.
 
@@ -550,6 +662,25 @@ production deploy target.
 
 **Working directory: target repo.** All file writes happen here.
 
+##### 2.0 Opt-in prompt pattern — lead with VALUE (per bassclef-upstream#2234)
+
+Phase 2 fires four opt-in prompts: auto-update sync (2.1), auto-save cron (2.3.10), Concise output style (2.7), and deploy-host (3.5). The cold-adopter on 2026-10-13 wrote: "need to understand value of auto-save in the text". Current prompts render as 4-option tables with recommended labels but no VALUE row.
+
+Every opt-in prompt the agent dispatches via `AskUserQuestion` MUST prepend one plain-English sentence on what the adopter gets. Keep the multi-option schema. Add value to the option body text.
+
+**Pattern.** Each option description starts with the value sentence, then the mechanism:
+
+- `description: "What this is for: <one-sentence benefit>. <one-sentence mechanism>."`
+
+**Worked examples.** Agent composes these from the SKILL body text + the ticket semantics:
+
+- **auto_sync** → "What this is for: your repo pulls bassclef skills + rules every session so you stay current. Mechanism: SessionStart hook fetches the latest tarball."
+- **auto-save cron** → "What this is for: your work saves every 20 minutes so a crash or power loss costs minutes, not hours. Mechanism: launchd job (macOS) or Task Scheduler (Windows) commits uncommitted changes."
+- **Concise output style** → "What this is for: Claude Code leads replies with the result, skips step-by-step narration, and skips the closing recap. Mechanism: adds `outputStyle: Concise` to your `~/.claude/settings.json`."
+- **deploy-host** → "What this is for: your repo deploys to a live URL when main merges. Mechanism: AWS Amplify app + DNS + certificate via `/provision-deploy-host`."
+
+The agent uses these as templates. One sentence of value. One sentence of mechanism. Then the standard options list.
+
 ##### 2.1 Install the auto-update script (off by default per bassclef#939)
 
 ```bash
@@ -1357,6 +1488,43 @@ EOF
 The sync hook will add its managed symlink block on next run; this
 seeds the file with everything else.
 
+##### 2.7 Prompt to enable Concise output style (ADR-049 opt-in)
+
+**Working directory: operator home.** Writes land in `~/.claude/`, not the target repo.
+
+Anthropic ships four output styles. Concise leads with the result. It skips step-by-step narration. It skips closing recap. Three bassclef steering dimensions line up with Concise. Five bassclef dimensions stay in play at the project layer. They are grade target, jargon wordlist, appositive discipline, metric feedback, writing-craft discipline. Concise at operator scope cuts per-turn reminders. It covers three bassclef dimensions on its own.
+
+Fire this phase only when `concise_prompt_should_fire` returns 0. That means no declined sentinel. It also means no outputStyle set to Concise yet.
+
+```bash
+HELPER="$CLAUDE_PROJECT_DIR/.claude/skills/onboard-repo/concise-prompt.sh"
+source "$HELPER"
+concise_prompt_should_fire || { echo "Concise prompt skipped (declined or already set)."; return 0 2>/dev/null || true; }
+```
+
+Prompt the adopter with a 2-line preamble first (per bassclef-upstream#2256):
+
+> **Concise is Anthropic's shorter output style.** Agents lead with the result and skip step-by-step narration. Turn off anytime via `/output-style default` or edit `~/.claude/settings.json`. Docs: https://code.claude.com/docs/en/output-styles
+>
+> Enable Concise output style? (Y/n/skip)
+> - **Y** — write `"outputStyle": "Concise"` to `~/.claude/settings.json`. jq read-modify-write. Every pre-existing field survives.
+> - **n** — keep Default style. Do not prompt again.
+> - **skip** — do not change settings. Re-prompt on next `/onboard-repo` run.
+
+Default is **n** per ADR-049 opt-in default off.
+
+Apply the pick via the helper:
+
+```bash
+concise_prompt_apply "$CHOICE"   # Y | n | skip
+```
+
+The helper writes atomically. On **Y** it uses `jq '. + {"outputStyle": "Concise"}'` plus `mktemp` plus `mv`. No partial write ever lands. On **n** it writes `~/.claude/state/concise-prompt-declined`. On **skip** it writes `~/.claude/state/concise-prompt-skipped` so the operator sees the prompt again next run.
+
+Characterization test at `.claude/skills/onboard-repo/tests/concise-prompt.test.sh` pins all three paths plus field preservation (T1-T11; 11 tests).
+
+Per ADR-049 opt-in default off. The prompt defaults to **n**. The adopter must type Y to opt in. The helper NEVER writes without an explicit choice.
+
 #### Phase 3 — Create starter docs (CLAUDE.md, whereami)
 
 **Working directory: target repo.**

package/dist/lite/.claude/skills/onboard-repo/claude-oauth-probe.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+# tier: lite
+# install-class: dual
+# claude-oauth-probe.sh — portable "is Claude signed in" probe.
+#
+# Replaces inline `timeout 10 claude -p "say hello"` in /onboard-repo
+# Phase 0.1. macOS BSD userland does not include GNU `timeout(1)`; the
+# inline call returned 127 and the `!` test inverted it, firing a false
+# OAUTH-FAIL banner on every macOS cold adopter. Closes bassclef-upstream#2255.
+#
+# Usage:
+#   bash claude-oauth-probe.sh [seconds-limit]
+#
+# Default seconds-limit: 10.
+#
+# Detection order:
+#   1. `timeout` (GNU coreutils; Linux + CI runners)
+#   2. `gtimeout` (brew coreutils on macOS)
+#   3. Bash background + kill shim (portable; needs nothing external)
+#
+# Exit codes:
+#   0  — claude -p "say hello" succeeded within the limit
+#   1+ — claude failed OR hung past the limit (killed)
+#
+# Per @luminary michael-nygard — fail-soft on `kill` errors; killer PID handled.
+# Per @luminary alan-cooper — adopter does not need to know timeout(1) is split.
+
+set +e  # never crash the caller
+
+SECONDS_LIMIT="${1:-10}"
+
+# Branch 1 — GNU timeout
+if command -v timeout >/dev/null 2>&1; then
+  timeout "$SECONDS_LIMIT" claude -p "say hello" >/dev/null 2>&1
+  exit $?
+fi
+
+# Branch 2 — brew gtimeout
+if command -v gtimeout >/dev/null 2>&1; then
+  gtimeout "$SECONDS_LIMIT" claude -p "say hello" >/dev/null 2>&1
+  exit $?
+fi
+
+# Branch 3 — bash background + kill shim (portable; no external bin)
+claude -p "say hello" >/dev/null 2>&1 &
+pid=$!
+
+# Killer process — sleep then kill the probe
+( sleep "$SECONDS_LIMIT" && kill -9 "$pid" 2>/dev/null ) &
+killer=$!
+
+# Wait for probe to finish (either on its own OR killed)
+wait "$pid" 2>/dev/null
+rc=$?
+
+# Clean up killer regardless of outcome
+kill -9 "$killer" 2>/dev/null
+wait "$killer" 2>/dev/null
+
+exit "$rc"