@thebassclef/lite 1.9.16 → 1.9.19

package/dist/lite/standards/bassclef-wiring-manifest.json

@@ -171,6 +171,12 @@
             "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/git-stash-u-guard.sh",
             "timeout": 5,
             "tier": "lite"
+          },
+          {
+            "type": "command",
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/pre-push-shellcheck.sh",
+            "timeout": 60,
+            "tier": "lite"
           }
         ]
       },
@@ -392,6 +398,12 @@
             "timeout": 10,
             "tier": "lite"
           },
+          {
+            "type": "command",
+            "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/turn-prose-density-measure.sh",
+            "timeout": 10,
+            "tier": "lite"
+          },
           {
             "type": "command",
             "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/reviewer-dispatch-check.sh",

package/dist/lite/standards/lite-manifest-schema-changes.md

@@ -34,6 +34,55 @@ Every entry stays in this file for the life of the manifest. Never pruned. When
 
 ## Entries (newest first)
 
+### bassclef-upstream#2096 amendment 3 — pin hard stack rank in /eisenhower output (PATCH, 2026-10-13)
+
+- **Change type:** content-change (`.claude/skills/eisenhower/SKILL.md` content_hash shift; new Step 4b section added)
+- **Contracts affected:** `/eisenhower` SKILL body — adds Step 4b emitting cross-repo stack-rank table after per-quadrant tables
+- **Version bump:** PATCH per content-only policy
+- **Rationale:** bassclef-upstream#2096 amendment 3. The operator asked twice in-session for the hard stack rank with a repo column. The amendment pins the four-column shape (Rank · Ticket · Repo · Why this rank) and the Q1 → Q4 row order.
+- **Downstream cure:** nothing required; adopters that invoke `/eisenhower` see the new table automatically next run.
+- **Old shape retired:** nothing retired; this is a pure add.
+
+### bassclef-upstream#2110 step 1 — add scripts/update-lite-manifest.sh wrapper + rule amendment (PATCH, 2026-10-13)
+
+- **Change type:** content-change (two tier:lite files edited; one new tier:upstream script + test added)
+- **Contracts affected:** `.claude/rules/lite-manifest-schema-change-discipline.md` entry — content_hash shift (added "Ledger-edit-then-regen order" section)
+- **Version bump:** PATCH per content-only policy
+- **Rationale:** bassclef-upstream#2110 — the natural authoring instinct is "regen first, then write ledger explaining the change." That order ships a stale ledger hash in the manifest because the ledger file is itself in the manifest. The wrapper `scripts/update-lite-manifest.sh` forces ledger-edit-then-regen order. Tier 0 tests at `scripts/tests/update-lite-manifest.test.sh` pin 10 cases.
+- **Downstream cure:** nothing required; the wrapper is operator-side authoring convenience. Adopters do not run it. The rule amendment documents the preferred authoring path.
+- **Old shape retired:** nothing retired; this is a pure add.
+
+### bassclef-upstream#2157 step 6 — install-written-paths ajv-runtime content shift (v1.17.1 → v1.17.2, 2026-10-10)
+
+- **Change type:** content-change (lib/install-written-paths.sh content_hash shift; no entry add/remove)
+- **Contracts affected:** `lib/install-written-paths` entry — content_hash sha256 old `504f4f73...` → new `3c029eb9...`
+- **Version bump:** v1.17.1 → v1.17.2 (PATCH per policy — content_hash change only)
+- **Rationale:** bassclef-upstream#2157 step 6 adds `_iwp_ajv_validate` + `_iwp_schema_path` helpers (73 lines) in `lib/install-written-paths.sh` + extends `install_written_paths_verify` with strict ajv reject + `install_written_paths_register` with post-write advisory warning. All 5 public verbs retain signatures (Parnas information hiding). Reads via `is_install_written_path` stay cheap. Fail-soft when ajv missing.
+- **Downstream cure:** no action for lite adopters. The lib stays backward-compatible — ajv-missing fail-soft keeps adopter machines working without ajv-cli. New verify-side strict reject only fires on explicit `install_written_paths_verify` calls, not on hot-path `is_install_written_path`.
+- **Old shape retired:** nothing retired. PR #2149 CLI init.manifest.json fallback at L250-282 preserved per ADR-031 three-release-cycle rule — the cross-repo contracts registry ledger v1.0.1 entry names the retire schedule.
+- **Refs:** `architecture/decisions/ADR-059-cross-repo-contract-drift-prevention.md`, bassclef-upstream#2157, bassclef-cli#415 (CLOSED via PR #416 SHA 9cf9014). See cross-repo contracts registry ledger v1.0.1 entry for the paired stage flip.
+
+### bassclef-upstream v1.9.3 hotfix — manifest_version regression cure (v1.17.0 → v1.17.1, 2026-10-08)
+
+- **Change type:** version-field-correction (0 content shift, 0 schema shape change). Prior v1.9.2 release shipped `manifest_version: "0.0.0"` due to a generator fallback bug — chained rebase regens compounded a null read into 0.0.0. cli bundler strict major=1 check rejected the shipped manifest.
+- **Fields:** 449 entries (unchanged). manifest_version field only.
+- **Version bump:** v1.17.0 → v1.17.1 (patch — version-field correction with no content shift; per policy f).
+- **Rationale:** bassclef-cli-63 peer blocker report 2026-10-08 — v1.9.2 shipped `manifest_version: "0.0.0"`; `@thebassclef/lite@1.9.11` (2026-09-15) shipped `manifest_version: "1.6.1"`. Regression traced to commit `d59a3dfe` (PR #2135 prior session). cli bundler at `scripts/prepublish-bundle-substrate.mjs:69` enforces EXPECTED_LITE_MANIFEST_MAJOR=1; rejects v1.9.2.
+- **Downstream cure:** no action for adopters at non-pin. cli bundler now reads a valid major digit; downstream readers that keyed on `manifest_version` get a non-zero value again.
+- **Old shape retired:** nothing retired. v1.9.2's broken shape stays on tag v1.9.2; v1.9.3 supersedes.
+- **Follow-on filed:** regression class caught by Tier 0 Test 50 in `.claude/hooks/tests/generate-lite-manifest.test.sh`. Generator fallback safety guard filed as sister ticket (prevents 0.0.0 from compounding across chained regens again).
+
+
+### bassclef-upstream#2140 — generator scans skill-helper subscripts (v1.16.10 → v1.17.0, 2026-10-08)
+
+- **Change type:** content-add (1 new lite entry: `.claude/skills/onboard-repo/write-state-marker.sh` as type=script). Generator extended to scan `.claude/skills/*/*.sh` for skill-helper subscripts; emits them as existing type=script (no schema enum change).
+- **Fields:** 448 → 449 entries (+1 at lite tier). Schema shape unchanged. The 2 sibling helpers at `.claude/skills/onboard-repo/` stay at `# tier: standard` so they don't ride into lite.
+- **Version bump:** v1.16.10 → v1.17.0 (minor — adds an entry to entries[] per policy a).
+- **Rationale:** bassclef-upstream#2140 — cold adopter 2026-10-07 ran /onboard-repo at lite tier; Phase 2.3.9 saw `cat: write-state-marker.sh: No such file` because the file was tagged standard and absent from lite manifest. Retag to lite + generator extension so lite adopters receive the helper.
+- **Downstream cure:** no action for adopters at exact-pin. Downstream readers see one additional lite-tier entry under type=script. Adopters that iterate entries[] get the extra entry without any code change.
+- **Old shape retired:** nothing retired. Content addition is additive.
+
+
 ### cli#319 — interpret-input writes intent field (v1.16.9 → v1.16.10, 2026-10-07)
 
 - **Change type:** content-change (1 file: `scripts/interpret-input.sh`). Script now emits `intent` field in input-artifact JSON. Prior shape omitted it.
@@ -468,3 +517,38 @@ Every entry stays in this file for the life of the manifest. Never pruned. When
 ## Retirement condition
 
 This ledger retires only if bassclef stops shipping a lite manifest. Adopter count and schema change cadence may evolve; the discipline of documenting every change persists.
+### bassclef-upstream#2253 + #2254 — pre-push-shellcheck adopter cures (PATCH, 2026-10-18)
+
+- **Change type:** content-change (`.claude/hooks/pre-push-shellcheck.sh` + `.claude/rules/install-written-paths-mediation.md` content_hash shifts; no entry add/remove)
+- **Contracts affected:** `pre-push-shellcheck.sh` now consults `lib/install-written-paths.sh` + reads `state/markers/skip/pre-push-shellcheck.marker` as agent-reachable bypass. Mediation rule names `pre-push-shellcheck` as adopter 2.
+- **Version bump:** PATCH per policy — content_hash change only; no schema shift
+- **Rationale:** Peer bassclef-cli-06 cold-adopter smoke on `giveisusfree` profile caught v1.11.0's `pre-push-shellcheck.sh` (shipped #2108) BLOCKing first push after `bassclef init` on 72 shellcheck findings in bassclef-shipped `.sh` files — Linus adopter contract break. Hook now exempts install-written content via lib's `is_install_written_path` accessor (hash-match discriminates adopter edits from untouched install-written). State-marker bypass closes #2254 — `SKIP_PRE_PUSH_SHELLCHECK=1` env may not propagate from the Claude Code harness to the hook; marker is reachable from the Write tool.
+- **Downstream cure:** nothing required for adopters that sync normally. Adopters stuck on v1.11.0 can bypass per-session via `mkdir -p state/markers/skip && touch state/markers/skip/pre-push-shellcheck.marker` OR `SKIP_PRE_PUSH_SHELLCHECK=1` prefix in a shell outside the agent.
+- **Old shape retired:** nothing retired; this is a pure cure of adopter break.
+
+### bassclef-upstream#2256 — Concise prompt informed-consent preamble (PATCH, 2026-10-18)
+
+- **Change type:** content-change (`.claude/skills/onboard-repo/SKILL.md` Phase 2.7 content_hash shift)
+- **Contracts affected:** Phase 2.7 adopter-visible prompt now carries a 2-line preamble naming what Concise does + how to turn it off + docs link. Default flipped Y → n per ADR-049 opt-in default off.
+- **Version bump:** PATCH per policy — content-change only
+- **Rationale:** Peer bassclef-cli-06 cold-adopter smoke on v1.11.0 caught the Phase 2.7 prompt firing as `· Turn on the Concise output style? → Yes` with zero explanation. Adopter answered blind. Broke informed-consent discipline on a global setting. Peer recommended cure A+B combined — preamble + default flip. Both land here.
+- **Downstream cure:** nothing required for adopters that sync normally. Operators who ran v1.11.0 and picked Y see no change (Concise still active). Operators who ran v1.11.0 and declined see no change (declined sentinel persists). New adopters see the preamble + n default.
+- **Old shape retired:** nothing retired; prose edit + default flip.
+
+### bassclef-upstream#2255 + #2257 — /onboard-repo cold-adopter cures (PATCH, 2026-10-18)
+
+- **Change type:** content-change + content-add (`.claude/skills/onboard-repo/SKILL.md` + `presence/install/schedule-auto-save.cron.sh` content_hash shifts; `.claude/skills/onboard-repo/claude-oauth-probe.sh` new entry)
+- **Contracts affected:** `/onboard-repo` Phase 0.1 OAuth probe now dispatched via portable helper `claude-oauth-probe.sh` instead of inline `timeout 10 claude -p`. `schedule-auto-save.cron.sh` probes `$CLAUDE_PROJECT_DIR/.claude/hooks/` before falling back to `~/src/sunj-labs/bassclef/.claude/hooks/`.
+- **Version bump:** PATCH per policy — content-change + content-add (helper is additive); no schema shift
+- **Rationale:** Peer bassclef-cli-06 cold-adopter smoke on `giveisusfree` profile caught two cold-adopter breaks in v1.11.0 — #2255 macOS adopters without GNU coreutils see false `OAUTH_FAIL` because inline `timeout` returns 127; #2257 auto-save installer hardcoded `$HOME/src/sunj-labs/bassclef/...` fails on adopters without the dev sibling. Both are Linus adopter contract breaks.
+- **Downstream cure:** nothing required for adopters that sync normally. Adopters stuck on v1.11.0 workaround: skip Phase 0.1 OAuth probe OR install `brew install coreutils` to get `gtimeout`.
+- **Old shape retired:** nothing retired; pure cure.
+
+### bassclef-upstream#2257 simulator cure — tilde → $HOME in comment (PATCH, 2026-10-18)
+
+- **Change type:** content-change (`presence/install/schedule-auto-save.cron.sh` comment edit; 2 lines)
+- **Contracts affected:** None. Pure prose edit. Replaces `~/src/sunj-labs/bassclef` with `$HOME/src/sunj-labs/bassclef` in a code comment so `adopter-simulator-lite.sh` Assertion 4 (no `~/src/sunj-labs/...`) passes.
+- **Version bump:** PATCH — content-only; zero behavior change.
+- **Rationale:** v1.11.1 PR B (#2259) added a cure comment explaining why the installer probes `$CLAUDE_PROJECT_DIR` first. Comment used `~` shorthand; adopter-simulator Assertion 4 regex matches `[~]/src/sunj-labs/bassclef` even in comments. `/release` dry-run flagged the file. Swap `~` → `$HOME` reads the same + passes the simulator.
+- **Downstream cure:** nothing required for adopters.
+- **Old shape retired:** nothing.

package/dist/lite/standards/lite-manifest.json

@@ -1,7 +1,7 @@
 {
   "tier": "lite",
-  "manifest_version": "1.16.10",
-  "generated_at": "2026-10-06T20:37:31Z",
+  "manifest_version": "1.17.4",
+  "generated_at": "2026-10-18T14:30:54Z",
   "entries": [
     {
       "slug": "029-release-pipeline",
@@ -64,7 +64,7 @@
       "type": "agent",
       "path": ".claude/agents/builder.md",
       "tier": "lite",
-      "content_hash": "sha256:0b24f89c111cfe255bb25a567718d073b22088c4d8b20fed9b405c3a797b1e9b",
+      "content_hash": "sha256:b0f279027867310b2fdab217b6a072133b0f35a5bf306a35a3c108cdb4d0d64c",
       "description": "Executes against spec. Respects ADR constraints. Commits with conventional commits. Doesn't redesign mid-build. Raises blockers immediately."
     },
     {
@@ -264,7 +264,7 @@
       "type": "hook",
       "path": ".claude/hooks/session-reflection.d/83-install-written-paths-rebuild.sh",
       "tier": "lite",
-      "content_hash": "sha256:3b8268e67f0eb25b84dd8cb010cfa02912c50c3c8eba73302341e445d19f97c5",
+      "content_hash": "sha256:26afc563c1212ca472cb9c41af6d3cdbf95dd9d06ef634de95baf9337b39a28d",
       "description": "Session-start fragment: rebuild install-written-paths manifest when missing/stale."
     },
     {
@@ -328,7 +328,7 @@
       "type": "hook",
       "path": ".claude/hooks/artifact-ingestion-gate.sh",
       "tier": "lite",
-      "content_hash": "sha256:1d317b210ee902be6e60d47b94db5c265b24932e21d09623650a154cb5bda443",
+      "content_hash": "sha256:5946bdc740af1541e407aef397eb470166e00bef1ca87cdd47e7e08b7255cae1",
       "description": "Artifact Ingestion Gate — fires on Write/Edit to generative artifact paths."
     },
     {
@@ -336,7 +336,7 @@
       "type": "hook",
       "path": ".claude/hooks/assert-verify-steering.sh",
       "tier": "lite",
-      "content_hash": "sha256:7a421558661225ee7d6b3b0dcc45a1ca5171f530093a87420c8bd88b7ca0f620",
+      "content_hash": "sha256:a554079add7826aef3286ab28f8f1f28cb6d495c196aec002c15d4d1be425362",
       "description": "assert-verify-steering.sh — UserPromptSubmit hook that injects"
     },
     {
@@ -504,7 +504,7 @@
       "type": "hook",
       "path": ".claude/hooks/plain-english-steering.sh",
       "tier": "lite",
-      "content_hash": "sha256:4a6e092731d6d6e11618e6eb3557419b7e7d193c3f19bdacbf138d951d39f1a1",
+      "content_hash": "sha256:43c94eb70b04b1de950e0928b151b8a9ecc30b6dd23d65ae1f2175a3edf993f8",
       "description": "plain-english-steering.sh — UserPromptSubmit hook that injects"
     },
     {
@@ -552,7 +552,7 @@
       "type": "hook",
       "path": ".claude/hooks/pre-commit-gate.sh",
       "tier": "lite",
-      "content_hash": "sha256:5b0385b5c3ab415c522285e70c710ef2351e5843a86867bd4a73b138e0e12e02",
+      "content_hash": "sha256:44ee55c1c8ba834b0b1e99209cfd86659921ebade01f18981fae3461ed3574f3",
       "description": "Observable failure trap — closes bassclef-upstream#1075 (silent-stderr class)."
     },
     {
@@ -587,6 +587,22 @@
       "content_hash": "sha256:d1c01e63e69d5081812c6a689b881c318667152509383fa09feeddb72e997313",
       "description": "pre-gh-pr-title-scrub — PreToolUse hook that runs the body scrub logic"
     },
+    {
+      "slug": "pre-push-shellcheck",
+      "type": "hook",
+      "path": ".claude/hooks/pre-push-shellcheck.sh",
+      "tier": "lite",
+      "content_hash": "sha256:a65650498b13a6195fd9c757b4bdf37dff334ce462b40a49b58dbc4ba4c8d5f7",
+      "description": "pre-push-shellcheck — PreToolUse Bash hook that scans .sh files going"
+    },
+    {
+      "slug": "reviewer-dispatch-check",
+      "type": "hook",
+      "path": ".claude/hooks/reviewer-dispatch-check.sh",
+      "tier": "lite",
+      "content_hash": "sha256:0b487dc434c96333aadbc4893c46a3aee07a4f51181fb3cec050acda82ed5b9a",
+      "description": "reviewer-dispatch-check.sh — Stop hook on code-shipping sessions"
+    },
     {
       "slug": "role-entry-gate",
       "type": "hook",
@@ -691,6 +707,14 @@
       "content_hash": "sha256:15c81bba2b25f8d975b806371f6ca71be59e6339bebd9afe2074505c9b9fb436",
       "description": "SDLC Trace Log helper — sourced by all hooks."
     },
+    {
+      "slug": "turn-prose-density-measure",
+      "type": "hook",
+      "path": ".claude/hooks/turn-prose-density-measure.sh",
+      "tier": "lite",
+      "content_hash": "sha256:5124aefce9ef1328364e38db13f0b3cb36df013d8b059bc94a57f972f3c8af80",
+      "description": "Turn-prose density measure — Stop hook that reads the last assistant message"
+    },
     {
       "slug": "turn-prose-grade-measure",
       "type": "hook",
@@ -704,7 +728,7 @@
       "type": "hook",
       "path": ".claude/hooks/turn-prose-kiss-check.sh",
       "tier": "lite",
-      "content_hash": "sha256:ac0ffe20336df8a4574da133cd4de6b7b8d5442e55893d4f8bdd2f4aea1aafbf",
+      "content_hash": "sha256:5e039dc5864f02193305a0c24ad4fb014f63e4979f57cd3364620cbea2029b75",
       "description": "Turn-prose /kiss check — Stop hook that scans the most recent assistant"
     },
     {
@@ -856,7 +880,7 @@
       "type": "lib",
       "path": "lib/install-written-paths.sh",
       "tier": "lite",
-      "content_hash": "sha256:38148e8de456928b13846c2999377c30ac303cf0369cc7755ecc0ba9a8f899fb",
+      "content_hash": "sha256:a05af07492ef548781b0f206d1d51cc0926a3957e61cded77e41d99a038d32ab",
       "description": "Install-written-paths manifest + accessor lib."
     },
     {
@@ -907,6 +931,14 @@
       "content_hash": "sha256:0e1e0765acfad9826b9a042eed2215eb0c71b8f5f077283a5abab7d8fd40e5e7",
       "description": "lib/preview-state.sh — typed accessor for docs/preview-state/<slug>.yml"
     },
+    {
+      "slug": "prose-marker",
+      "type": "lib",
+      "path": "lib/prose-marker.sh",
+      "tier": "lite",
+      "content_hash": "sha256:1ced5ff7c2156bf0168673476c9a1579d9572a5206f1305e5f447c2126e72b06",
+      "description": "lib/prose-marker.sh — shared marker write + read helpers for the bassclef"
+    },
     {
       "slug": "prose-scan-boundary",
       "type": "lib",
@@ -984,7 +1016,7 @@
       "type": "lib",
       "path": "lib/tier-dependency-audit.sh",
       "tier": "lite",
-      "content_hash": "sha256:aea0c465ff0699e68977e8ff4a80a1f0d3455b9a9f3108888bc82a2eb84a2ee2",
+      "content_hash": "sha256:9b65ecf00ff584c573e84ca9e7d980e492e9673a11669ba3e1c3ecb5cd1ef2da",
       "description": "lib/tier-dependency-audit.sh"
     },
     {
@@ -1367,7 +1399,7 @@
       "type": "presence-template",
       "path": "presence/install/bassclef-sync.template.sh",
       "tier": "lite",
-      "content_hash": "sha256:92fa84059bd69964a35887b9b77812bfb3acc58c9ca4c9618bacf11d56079c2a",
+      "content_hash": "sha256:a33dd77165b005cfe639ea5093e5af4620c49022bcef6ad5d8cb0670129814d8",
       "description": "description: BASSCLEF_SYNC_VERSION=2026-09-06-1496-sessionstart-heal-v1"
     },
     {
@@ -1375,7 +1407,7 @@
       "type": "presence-template",
       "path": "presence/install/schedule-auto-save.cron.sh",
       "tier": "lite",
-      "content_hash": "sha256:1cf543999e8fb8acc013439c9f3034f21f64604dc334321e97d9be60c6ac8bd3",
+      "content_hash": "sha256:2b84a5e3abadbaa7ded77a6801c5624b6d04ba75a93caa2a86cf83d7c975f53f",
       "description": "description: schedule-auto-save.cron.sh — install a cron entry that fires auto-save-idle.sh"
     },
     {
@@ -1398,7 +1430,7 @@
       "type": "root-doc",
       "path": ".claude/bassclef-orientation.md",
       "tier": "lite",
-      "content_hash": "sha256:25270e2b752a37c485b824c09b72352d264d5f2febc77b85ba5f8087db1d63b2"
+      "content_hash": "sha256:9e98b2a6fe7038d46642ef22061b22660ebf8fb0a0ae719af6b928655c997804"
     },
     {
       "slug": "claude-lite",
@@ -1429,7 +1461,7 @@
       "type": "root-doc",
       "path": "README.md",
       "tier": "lite",
-      "content_hash": "sha256:856e387d438bfc8c6094464ac457271039848ec1eda457bf5ba51a035c91b6a0",
+      "content_hash": "sha256:a27a7b9d211fc1cd92864d56bd05fe5912dcd27781bf8d5229844ac909421765",
       "description": "A shared substrate for working with AI coding agents."
     },
     {
@@ -1541,7 +1573,7 @@
       "type": "rule",
       "path": ".claude/rules/branching.md",
       "tier": "lite",
-      "content_hash": "sha256:292de9c9fda44c0c9e92bd2fd0551d04a686ed60607b094635bf5db74465c57d",
+      "content_hash": "sha256:ce380a635aa65ba6087e560bb29335e7011f855884c94702b3414aa51ea8e3d0",
       "description": "Trunk-based development — branch naming and flow"
     },
     {
@@ -1669,7 +1701,7 @@
       "type": "rule",
       "path": ".claude/rules/identifier-leak-prevention.md",
       "tier": "lite",
-      "content_hash": "sha256:31df845d034bbd756172ad7895ff561cbfeab38aa0b744f29862ff4095e4300b",
+      "content_hash": "sha256:5653d1e6449eb982b73ddad4f9e099a4eb5352423f955067887c60f2af9de2e5",
       "description": "Bassclef commits stay free of operator machine identifiers."
     },
     {
@@ -1677,7 +1709,7 @@
       "type": "rule",
       "path": ".claude/rules/install-written-paths-mediation.md",
       "tier": "lite",
-      "content_hash": "sha256:282a2c4303315417afa75efb02724bc0913d9b3aa77d53fcfe4a7eb88ef65137"
+      "content_hash": "sha256:deef48bc21ddbebd8e553eaa9bb021cf0c8759df320529552c9c9d766b56ed4a"
     },
     {
       "slug": "iteration-bet-brief-completeness",
@@ -1699,7 +1731,7 @@
       "type": "rule",
       "path": ".claude/rules/lite-manifest-schema-change-discipline.md",
       "tier": "lite",
-      "content_hash": "sha256:730cde99f460fb259896e9f9aed268b4a116599a5a2b397a92196f95b9d4af5d",
+      "content_hash": "sha256:558817a99e902b35d6857129ce3b63ac3f1a66b9a7c97049a74f3b6c5ce2d6cc",
       "description": "Every lite-manifest schema change ships a migration-note ledger entry in the same PR. Adopters read the ledger before sync."
     },
     {
@@ -1870,6 +1902,14 @@
       "content_hash": "sha256:c6abf0895c5edb60c8b42c741f39c407b6145a63453fe584b7e63559d2bd7e7e",
       "description": "Bassclef MUST NOT create a skill (.claude/skills/<name>/SKILL.md) with a name Claude Code's harness already claims."
     },
+    {
+      "slug": "reviewer-dispatch",
+      "type": "rule",
+      "path": ".claude/rules/reviewer-dispatch.md",
+      "tier": "lite",
+      "content_hash": "sha256:78be083820e114ab2a940823ef47210bcdda7bed9b27d327a8724b4bbdd858f0",
+      "description": "Any session that ships source code (files under src/, apps/, packages/, lib/, app/) MUST invoke Reviewer responsibilities before the session ends."
+    },
     {
       "slug": "schema-management",
       "type": "rule",
@@ -2078,6 +2118,22 @@
       "content_hash": "sha256:d7a13ca4fb37283e50fc165bb5ebd6a65539d7dade005dcd38098e1d878c52b3",
       "description": "analyze-tier-dependencies.sh — orchestrator for the tier-dependency-audit subsystem"
     },
+    {
+      "slug": "claude-oauth-probe",
+      "type": "script",
+      "path": ".claude/skills/onboard-repo/claude-oauth-probe.sh",
+      "tier": "lite",
+      "content_hash": "sha256:974b52c28bbafb766c5c45a0beecd140714f4e9afa493d80c9a33e02d0a7a42b",
+      "description": "claude-oauth-probe.sh — portable \"is Claude signed in\" probe."
+    },
+    {
+      "slug": "concise-prompt",
+      "type": "script",
+      "path": ".claude/skills/onboard-repo/concise-prompt.sh",
+      "tier": "lite",
+      "content_hash": "sha256:75f0946c98992117722ea1f0839380f3aeb31f530aa823330a6129a660210d74",
+      "description": "concise-prompt.sh — handle Y/n/skip for Anthropic Concise output style."
+    },
     {
       "slug": "extract-repo",
       "type": "script",
@@ -2091,7 +2147,7 @@
       "type": "script",
       "path": "scripts/generate-lite-manifest.sh",
       "tier": "lite",
-      "content_hash": "sha256:8d2741d06181f41af3d30965cdfd655d20508807e3fc799877fa2564811e5608",
+      "content_hash": "sha256:f7c551500bdc4062993d50ca5ecb025491ca97980a7318047f6472a3fe091433",
       "description": "Generate lite-manifest.json at repo root."
     },
     {
@@ -2131,7 +2187,7 @@
       "type": "script",
       "path": "scripts/launch/local-serve.sh",
       "tier": "lite",
-      "content_hash": "sha256:5494f4b46308e4b799d4e3aa2accc1f0880c78280dc8e5f5bcb45537d40036ab",
+      "content_hash": "sha256:cb621e555f78862bf926f2ee5681be319f9f0308ca1726ff77f0f7e1237e5589",
       "description": "local-serve.sh — serve a /launch local-mode prototype gallery via python http.server"
     },
     {
@@ -2174,6 +2230,14 @@
       "content_hash": "sha256:9d9ad4a997e2820046802796f81a5d064b14f951cdade6f6c252db64d2afae89",
       "description": "CLI wrapper for lib/workflow-metrics.sh — Module B4 query helper."
     },
+    {
+      "slug": "write-state-marker",
+      "type": "script",
+      "path": ".claude/skills/onboard-repo/write-state-marker.sh",
+      "tier": "lite",
+      "content_hash": "sha256:1f99762804df32a74cb2b19e2930a96d8f8e206f0261795b26766a9cebf0a29a",
+      "description": "write-state-marker.sh — Phase 2.3.9 helper for /onboard-repo (bassclef-upstream#664)."
+    },
     {
       "slug": "agent-research-spawn",
       "type": "skill",
@@ -2272,7 +2336,7 @@
       "type": "skill",
       "path": ".claude/skills/build/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:739d409886adc42c0111d7fc21d6290ede7d4403d5b51a1050efd3799c9eb1c2",
+      "content_hash": "sha256:25931569f4d2aa77db69c03f2deb7cfe9cba3f03a4720fea2c4234a2b6d6918e",
       "description": "Take a plan from /launch and ship it. One builder per user story. Runs /verify. Opens PRs. Gates prod on a human. Refuses auth, schema, security, and tenant work. Two modes — full and degrade-with-note.",
       "inputs": [
         "A goal slug pointing to a spec on disk"
@@ -2429,7 +2493,7 @@
       "type": "skill",
       "path": ".claude/skills/eisenhower/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:b27bbd7433bce0a5c42650390615151c227d3c5f3e7b1d180b8a37e5b27664a9",
+      "content_hash": "sha256:cc8c006f3a40aa55d7572fb43c22f0403400cd2d86b82c84c244e7d2d94f2827",
       "description": "Turn open tickets and PRs into a scored Eisenhower matrix — do, schedule, delegate, delete. Anchors 'important' to a goal you name first, so the sort has meaning. Two modes: default (current repo) and --cross-repo.",
       "composes_with": [
         "value-prop",
@@ -2668,7 +2732,7 @@
       "type": "skill",
       "path": ".claude/skills/launch/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:2a950b16e8ef4cdfe2f7f418855c66f5566c48b392dd6e950f83a087669fcd6b",
+      "content_hash": "sha256:ff48cce4bffa2a7044fe009785f53b22a81a975fa8f3351eecb3947b4252a106",
       "description": "Compare variants of an idea. Get a mock gallery. Pick a direction. Get a spec, user stories, and a plan to build. Two sizes — medium and full. Three modes — full, local, scratch.",
       "inputs": [
         "A rough idea or ticket or canvas"
@@ -2791,7 +2855,7 @@
       "type": "skill",
       "path": ".claude/skills/onboard-repo/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:531b910cb45153b939b1f2a74dd1b214d2e87e4575ec3483624fe56510a4563c",
+      "content_hash": "sha256:46a89fb2165070ea6d4622fede69bd4939acdd99f1c9d63a6075e535fb5c72ea",
       "description": "Bootstrap the bassclef framework in a new repo. Installs the sync hook. Scaffolds config, whereami, and CLAUDE.md. Modes: default, --with-deploy-host, --with-secrets, --full, --greenfield-from-intent (starts a new repo from a short intent paragraph).",
       "inputs": [
         "Optional flags — --with-deploy-host or --with-secrets or --full"
@@ -2862,7 +2926,7 @@
       "type": "skill",
       "path": ".claude/skills/pre-mortem/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:1fa9299b4f49e8266337bc0923ae49a9a60f29e600486c4f546dec0c06e80088",
+      "content_hash": "sha256:32dcece733673d449bc931a0dd6cacb9ab473c338d7516ff2587b3e35f34113e",
       "description": "Draft a Klein pre-mortem risk ledger for a scope (goal, feature, PR). Two modes: light (3 luminary lenses, 30 min) and full (5-8 lenses, 90 min). Always fires on auth, schema, payments, or compliance work.",
       "inputs": [
         "A goal or feature or PR ref",
@@ -3243,7 +3307,7 @@
       "type": "skill",
       "path": ".claude/skills/sprint/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:01f4217fc9a43008aad80727e45c64a37cbf536685781391473d4ba6397b06ed",
+      "content_hash": "sha256:f9a83bfeacd95de10699fb06bf91aade2200546d2d3511fac2fe780d76d5030f",
       "description": "Show what's in flight and what's next. Reads project state, open issues, and the active goal. Proposes the next sprint at thread level, not just the nearest leaf. Run at session start.",
       "composes_with": [
         "value-prop",
@@ -3380,7 +3444,7 @@
       "type": "skill",
       "path": ".claude/skills/temperance/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:54574fba4e37ffe835a6c97d3123467b284b772a45cf6aed3602651d4739b728",
+      "content_hash": "sha256:ab1dbcb1bfcdb94d590ab32de13af96a155a4fba2f381b57f828b00e257eb161",
       "description": "Pause and think before you code. Asks — am I building the right thing AND building it the right way? Fires before every non-trivial action.",
       "inputs": [
         "Optional scope decision context"
@@ -3871,7 +3935,7 @@
       "type": "standard",
       "path": "standards/lite-manifest-schema-changes.md",
       "tier": "lite",
-      "content_hash": "sha256:94cb2a396222954fed8bc29bbf13dd379c46ae49b983f8d546a83adbc89b1285",
+      "content_hash": "sha256:9717e5237f4f2a3ed18e8202d5fbe273f9a92d609d0820665f515eb82e978a97",
       "description": "Chronological ledger of every lite-manifest schema change. Adopters read this before sync to know what shifted."
     },
     {
@@ -4034,6 +4098,13 @@
       "content_hash": "sha256:fec13744cd05f15144f313fe284c1d471be755bceb2b94e476e0629ffe231c50",
       "description": "Standard directory structure for sunj-labs repositories."
     },
+    {
+      "slug": "prose-marker-format",
+      "type": "standard",
+      "path": "standards/prose-marker-format.md",
+      "tier": "lite",
+      "content_hash": "sha256:8d31a3ddf3d728558650254b88d35552933d6539009faf264c793bc82559d9a8"
+    },
     {
       "slug": "prototype-gallery",
       "type": "standard",

package/dist/lite/standards/prose-marker-format.md

@@ -0,0 +1,105 @@
+---
+tier: lite
+name: prose-marker-format
+version: 1.0
+---
+
+# Prose marker format
+
+Shared marker shape for the bassclef prose scorer stack. Three producers write markers at Stop event. One consumer (`plain-english-steering.sh`) reads them at UserPromptSubmit and injects per-turn numbers.
+
+This standard pins the shape so each producer writes markers the steering injector reads cleanly. Hoare pre/postcondition contract makes the lib `lib/prose-marker.sh` verifiable per Tier 0 tests.
+
+## Sources read
+
+- `.claude/hooks/turn-prose-grade-measure.sh`:153-170 — existing marker shape for `state/markers/turn-grade/last-turn.json`
+- `.claude/hooks/turn-prose-grade-measure.sh`:171-217 — existing marker shape for `state/markers/turn-prose-flags/last-turn.json`
+- `docs/iteration-bets/2026-10-13-longrun-2-scorer-stack-v1.md` — Longrun 2 scope + 7-step plan + RFC folds
+- `docs/rfcs/2026-10-13-longrun-2-scorer-stack-v1-adversarial.md` — RFC O2 + O3 FOLDs (lib shape); N1 FOLD (glyph legend); F2 architect-review AMBER (Hoare contract fold)
+- `docs/audits/2026-10-13-plain-english-steering-baseline.md` — baseline numbers that pin the thresholds
+- `.claude/luminaries/tony-hoare.md` — pre/postcondition contract shape (anchor)
+- `.claude/luminaries/john-ousterhout.md` — deep module single interface (anchor)
+
+## Marker shape
+
+Each prose marker lands at `state/markers/<scorer-name>/last-turn.json` and conforms to this JSON shape:
+
+```json
+{
+  "metric": "<name>",
+  "value": <number>,
+  "measured_at": "<ISO-8601 UTC timestamp>",
+  "glyph": "🟢" | "🟡" | "🔴",
+  "threshold_green": <number>,
+  "threshold_amber": <number>,
+  "source": "<producer hook name>",
+  "notes": "<optional one-line note>"
+}
+```
+
+Required fields — `metric`, `value`, `measured_at`, `source`.
+Optional fields — `glyph`, `threshold_green`, `threshold_amber`, `notes`.
+
+## Hoare pre/postcondition contract
+
+Per `lib/prose-marker.sh`:
+
+### `write_prose_marker <scorer-name> <value> [notes]`
+
+- **Precondition** — `scorer-name` is a non-empty string matching `[a-z-]+`. `value` is a number (integer or float). Working directory is a bassclef repo root with `state/markers/` writable.
+- **Postcondition** — a file at `state/markers/<scorer-name>/last-turn.json` exists AND contains valid JSON matching the marker shape above AND has `measured_at` as a fresh ISO-8601 timestamp AND atomic write via `mv` from temp file (no partial writes visible).
+- **Invariant** — a prior marker at the same path is overwritten atomically; no race condition for concurrent writers (different scorer names write to different directories).
+
+### `read_prose_markers [--max-age-minutes N] <scorer-name> [<scorer-name> ...]`
+
+- **Precondition** — zero or more `scorer-name` arguments. Each is a non-empty string matching `[a-z-]+`. Working directory is a bassclef repo root.
+- **Postcondition** — stdout emits one JSON object. Keys are scorer names. Values are either the marker object (parsed from disk) OR `null` if the marker file does not exist OR is older than `max-age-minutes` (default 10) OR fails to parse as JSON.
+- **Invariant** — any read failure returns `null` for that scorer without crashing the whole call. Fail-soft per Nygard.
+
+## Scorer registry
+
+The initial scorer stack carries three metrics:
+
+| Scorer name | Metric | Marker path | Producer hook | Green threshold | Amber threshold |
+|---|---|---|---|---|---|
+| `grade` | Flesch-Kincaid grade level | `state/markers/turn-grade/last-turn.json` | `turn-prose-grade-measure.sh` | ≤8 | ≤10 |
+| `density` | Non-standard hyphenated-compound count per turn | `state/markers/turn-prose-density/last-turn.json` | `turn-prose-density-measure.sh` | 0 | ≤3 |
+| `appositive_misses` | Session-invented shorthand without adjacent appositive per turn | `state/markers/turn-prose-appositive/last-turn.json` | `turn-prose-kiss-check.sh` (Step 2c extension) | 0 | ≤2 |
+
+Thresholds grounded against baseline numbers at `docs/audits/2026-10-13-plain-english-steering-baseline.md`:
+
+- Grade — target band is 6-8; ceiling is 10 (baseline mean 7.6; 19% past ceiling)
+- Density — non-standard hyphen compounds; baseline mean 4.1/turn; green=0 reflects clean prose; amber=3 is the baseline mean floor
+- Appositive misses — baseline mean 0.95/turn; green=0 reflects every shorthand glossed; amber=2 picks up the 10-30% miss tail
+
+## Glyph legend
+
+- 🟢 — value at or below `threshold_green`; clean
+- 🟡 — value between `threshold_green` and `threshold_amber`; drift zone
+- 🔴 — value above `threshold_amber`; action needed
+
+Rendering at `plain-english-steering.sh` injection — one line per scorer:
+
+```
+[prose: grade 7.2 🟢 density 4 🟡 appositive 2 🟡]
+```
+
+Cap at 160 chars total per injection line. If a scorer marker reads `null` (missing or stale), its field omits from the injection line.
+
+## Density allowlist (standard-tech exclusions)
+
+The density scorer excludes 25 standard-tech hyphenated compounds. These never count toward density:
+
+```
+pre-commit, real-time, data-driven, end-to-end, fire-and-forget,
+run-time, compile-time, read-only, write-only, fail-soft,
+fail-fast, post-commit, pre-push, post-merge, op-ed,
+self-test, self-check, re-read, re-run, re-fire,
+op-cost, copy-paste, cut-off, set-up, built-in
+```
+
+**Follow-on refinement.** Architect-review AMBER F4 flagged this list as author-curated. Grounding sampled from top-20 hyphenated compounds across 10 session transcripts lands as a follow-on PR after `turn-prose-density-measure.sh` ships. Baseline list ships as above for V1.
+
+## Change log
+
+- 2026-10-12 — v1.0 initial format. Grade + density + appositive scorers. Hoare contract on lib. Glyph legend. Follow-on allowlist grounding.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thebassclef/lite",
-  "version": "1.9.16",
+  "version": "1.9.19",
   "description": "Bassclef CLI — install and upgrade bassclef in your project with two commands.",
   "keywords": [
     "bassclef",