@thebassclef/lite 1.9.7 → 1.9.9

package/README.md

@@ -1,6 +1,10 @@
 # @thebassclef/lite
 
-Install bassclef in your project. Two commands.
+**Security posture.** @thebassclef/lite ships with zero install-time scripts, SLSA v1 build provenance, Apache-2.0 license, and zero runtime dependencies. The CLI writes to `~/.claude` and `$CLAUDE_PROJECT_DIR` at runtime, not at install. See [SECURITY.md](SECURITY.md) for disclosure.
+
+## Install
+
+Two commands.
 
 ```bash
 npm install -g @thebassclef/lite
@@ -63,7 +67,7 @@ your browser.
 
 ## Current release
 
-<!-- version-start -->1.9.7<!-- version-end -->
+<!-- version-start -->1.9.9<!-- version-end -->
 
 See [CHANGELOG.md](CHANGELOG.md) for the full changelog. Adopter-facing
 release notes live at [docs.bassclef.dev/docs/whats-new/releases](https://docs.bassclef.dev/docs/whats-new/releases).

package/dist/cli.cjs

@@ -810,15 +810,19 @@ function dirExists(p) {
 }
 const STATUSLINE_FIELD = {
   type: "command",
-  command: "bash ~/.claude/bassclef-statusline.sh"
+  command: "bash ~/.claude/bassclef-statusline-dispatcher.sh"
 };
+const LEGACY_STATUSLINE_COMMAND = "bash ~/.claude/bassclef-statusline.sh";
 const DISPATCHER_REL = ["dist", "lite", "presence", "cli", "bassclef-statusline.dispatcher.sh"];
-const USER_DISPATCHER_REL = [".claude", "bassclef-statusline.sh"];
+const RICH_IMPL_REL = ["dist", "lite", "presence", "cli", "bassclef-statusline.sh"];
+const USER_DISPATCHER_REL = [".claude", "bassclef-statusline-dispatcher.sh"];
+const USER_RICH_IMPL_REL = [".claude", "bassclef-statusline.sh"];
 const PROJECT_SETTINGS_REL = [".claude", "settings.json"];
 function installStatusline(opts) {
   if (opts.skip) {
     return {
       dispatcher: skipped(node_path.join(opts.home, ...USER_DISPATCHER_REL)),
+      rich: skipped(node_path.join(opts.home, ...USER_RICH_IMPL_REL)),
       settings: skipped(node_path.join(opts.projectDir, ...PROJECT_SETTINGS_REL))
     };
   }
@@ -828,10 +832,18 @@ function installStatusline(opts) {
       `bassclef init: cannot install statusline — bundled dispatcher missing at ${dispatcherSource}. Reinstall @thebassclef/lite or file a bug.`
     );
   }
-  const sourceBody = node_fs.readFileSync(dispatcherSource, "utf8");
-  const dispatcher = handleDispatcher(opts, dispatcherSource, sourceBody);
+  const richImplSource = node_path.join(opts.packageDir, ...RICH_IMPL_REL);
+  if (!node_fs.existsSync(richImplSource)) {
+    throw new Error(
+      `bassclef init: cannot install statusline — bundled bassclef-statusline.sh missing at ${richImplSource}. Reinstall @thebassclef/lite or file a bug.`
+    );
+  }
+  const dispatcherBody = node_fs.readFileSync(dispatcherSource, "utf8");
+  const richBody = node_fs.readFileSync(richImplSource, "utf8");
+  const dispatcher = handleDispatcher(opts, dispatcherSource, dispatcherBody);
+  const rich = handleRichImpl(opts, richImplSource, richBody);
   const settings = handleSettings(opts);
-  return { dispatcher, settings };
+  return { dispatcher, rich, settings };
 }
 function handleDispatcher(opts, sourcePath, sourceBody) {
   const target = node_path.join(opts.home, ...USER_DISPATCHER_REL);
@@ -873,6 +885,57 @@ function handleDispatcher(opts, sourcePath, sourceBody) {
   writeExec(target, sourceBody);
   return { kind: "replaced", path: target, detail: `Overwrote ${target} (--force) with bundled dispatcher.` };
 }
+function handleRichImpl(opts, sourcePath, sourceBody) {
+  const target = node_path.join(opts.home, ...USER_RICH_IMPL_REL);
+  if (opts.dryRun) {
+    return {
+      kind: "would-install",
+      path: target,
+      detail: `Dry-run: would copy ${sourcePath} → ${target} (0755).`
+    };
+  }
+  if (!node_fs.existsSync(target)) {
+    writeExec(target, sourceBody);
+    return { kind: "installed", path: target, detail: `Wrote ${target} (0755) from bundled rich impl.` };
+  }
+  const st = node_fs.lstatSync(target);
+  if (st.isSymbolicLink()) {
+    if (!opts.force) {
+      return {
+        kind: "preserved",
+        path: target,
+        detail: `${target} is a symlink; refusing to follow. Pass --force to replace.`
+      };
+    }
+    node_fs.unlinkSync(target);
+    writeExec(target, sourceBody);
+    return { kind: "replaced", path: target, detail: `Replaced symlink at ${target} with bundled rich impl.` };
+  }
+  const existing = node_fs.readFileSync(target, "utf8");
+  if (existing === sourceBody) {
+    return { kind: "unchanged", path: target, detail: `${target} already matches bundled rich impl.` };
+  }
+  if (isLegacyDispatcher(existing)) {
+    writeExec(target, sourceBody);
+    return {
+      kind: "replaced",
+      path: target,
+      detail: `Migrated ${target} from legacy dispatcher to rich impl (cli#281 upgrade path).`
+    };
+  }
+  if (!opts.force) {
+    return {
+      kind: "preserved",
+      path: target,
+      detail: `${target} differs from bundled rich impl. Pass --force to overwrite.`
+    };
+  }
+  writeExec(target, sourceBody);
+  return { kind: "replaced", path: target, detail: `Overwrote ${target} (--force) with bundled rich impl.` };
+}
+function isLegacyDispatcher(body) {
+  return body.includes("BASSCLEF_SYNC_VERSION=thin-pointer-statusline-");
+}
 function handleSettings(opts) {
   const target = node_path.join(opts.projectDir, ...PROJECT_SETTINGS_REL);
   if (opts.settingsPreserved) {
@@ -900,6 +963,15 @@ function handleSettings(opts) {
   if (matchesDesired(current)) {
     return { kind: "unchanged", path: target, detail: `${target} already carries the bassclef statusLine.` };
   }
+  if (isLegacyStatuslineCommand(current)) {
+    const next2 = { ...existing, statusLine: desired };
+    writeSettings(target, next2);
+    return {
+      kind: "replaced",
+      path: target,
+      detail: `Migrated statusLine in ${target} from legacy dispatcher path to new dispatcher path (cli#281 upgrade).`
+    };
+  }
   if (!opts.force) {
     return {
       kind: "preserved",
@@ -911,6 +983,11 @@ function handleSettings(opts) {
   writeSettings(target, next);
   return { kind: "replaced", path: target, detail: `Overwrote statusLine in ${target} (--force).` };
 }
+function isLegacyStatuslineCommand(current) {
+  if (!current || typeof current !== "object" || Array.isArray(current)) return false;
+  const c = current;
+  return c.type === "command" && c.command === LEGACY_STATUSLINE_COMMAND;
+}
 function skipped(path) {
   return {
     kind: "skipped",
@@ -1647,15 +1724,16 @@ function maybeEmitStatuslinePlan(opts) {
     return;
   }
   const dv = report.dispatcher.kind;
+  const rv = report.rich.kind;
   const sv = report.settings.kind;
-  if (dv === "skipped" && sv === "skipped") {
+  if (dv === "skipped" && rv === "skipped" && sv === "skipped") {
     opts.say(`bassclef init: statusline install skipped (--skip-statusline).
 `);
     return;
   }
   if (opts.dryRun) {
     opts.say(
-      `bassclef init: would install statusline dispatcher at ${report.dispatcher.path} and set statusLine in ${report.settings.path}.
+      `bassclef init: would install statusline dispatcher at ${report.dispatcher.path}, rich impl at ${report.rich.path}, and set statusLine in ${report.settings.path}.
 `
     );
     return;
@@ -1665,6 +1743,10 @@ function maybeEmitStatuslinePlan(opts) {
   else if (dv === "replaced") parts.push(`replaced ${report.dispatcher.path} (--force)`);
   else if (dv === "preserved") parts.push(`preserved ${report.dispatcher.path} (pass --force to overwrite)`);
   else if (dv === "unchanged") parts.push(`${report.dispatcher.path} already matches bundle`);
+  if (rv === "installed") parts.push(`wrote ${report.rich.path}`);
+  else if (rv === "replaced") parts.push(`replaced ${report.rich.path} (migration or --force)`);
+  else if (rv === "preserved") parts.push(`preserved ${report.rich.path} (pass --force to overwrite)`);
+  else if (rv === "unchanged") parts.push(`${report.rich.path} already matches bundle`);
   if (sv === "installed") parts.push(`set statusLine in ${report.settings.path}`);
   else if (sv === "replaced") parts.push(`replaced statusLine in ${report.settings.path} (--force)`);
   else if (sv === "preserved") parts.push(`preserved statusLine in ${report.settings.path} (pass --force to overwrite)`);

package/dist/cli.js

@@ -787,15 +787,19 @@ function dirExists(p) {
 }
 const STATUSLINE_FIELD = {
   type: "command",
-  command: "bash ~/.claude/bassclef-statusline.sh"
+  command: "bash ~/.claude/bassclef-statusline-dispatcher.sh"
 };
+const LEGACY_STATUSLINE_COMMAND = "bash ~/.claude/bassclef-statusline.sh";
 const DISPATCHER_REL = ["dist", "lite", "presence", "cli", "bassclef-statusline.dispatcher.sh"];
-const USER_DISPATCHER_REL = [".claude", "bassclef-statusline.sh"];
+const RICH_IMPL_REL = ["dist", "lite", "presence", "cli", "bassclef-statusline.sh"];
+const USER_DISPATCHER_REL = [".claude", "bassclef-statusline-dispatcher.sh"];
+const USER_RICH_IMPL_REL = [".claude", "bassclef-statusline.sh"];
 const PROJECT_SETTINGS_REL = [".claude", "settings.json"];
 function installStatusline(opts) {
   if (opts.skip) {
     return {
       dispatcher: skipped(join(opts.home, ...USER_DISPATCHER_REL)),
+      rich: skipped(join(opts.home, ...USER_RICH_IMPL_REL)),
       settings: skipped(join(opts.projectDir, ...PROJECT_SETTINGS_REL))
     };
   }
@@ -805,10 +809,18 @@ function installStatusline(opts) {
       `bassclef init: cannot install statusline — bundled dispatcher missing at ${dispatcherSource}. Reinstall @thebassclef/lite or file a bug.`
     );
   }
-  const sourceBody = readFileSync(dispatcherSource, "utf8");
-  const dispatcher = handleDispatcher(opts, dispatcherSource, sourceBody);
+  const richImplSource = join(opts.packageDir, ...RICH_IMPL_REL);
+  if (!existsSync(richImplSource)) {
+    throw new Error(
+      `bassclef init: cannot install statusline — bundled bassclef-statusline.sh missing at ${richImplSource}. Reinstall @thebassclef/lite or file a bug.`
+    );
+  }
+  const dispatcherBody = readFileSync(dispatcherSource, "utf8");
+  const richBody = readFileSync(richImplSource, "utf8");
+  const dispatcher = handleDispatcher(opts, dispatcherSource, dispatcherBody);
+  const rich = handleRichImpl(opts, richImplSource, richBody);
   const settings = handleSettings(opts);
-  return { dispatcher, settings };
+  return { dispatcher, rich, settings };
 }
 function handleDispatcher(opts, sourcePath, sourceBody) {
   const target = join(opts.home, ...USER_DISPATCHER_REL);
@@ -850,6 +862,57 @@ function handleDispatcher(opts, sourcePath, sourceBody) {
   writeExec(target, sourceBody);
   return { kind: "replaced", path: target, detail: `Overwrote ${target} (--force) with bundled dispatcher.` };
 }
+function handleRichImpl(opts, sourcePath, sourceBody) {
+  const target = join(opts.home, ...USER_RICH_IMPL_REL);
+  if (opts.dryRun) {
+    return {
+      kind: "would-install",
+      path: target,
+      detail: `Dry-run: would copy ${sourcePath} → ${target} (0755).`
+    };
+  }
+  if (!existsSync(target)) {
+    writeExec(target, sourceBody);
+    return { kind: "installed", path: target, detail: `Wrote ${target} (0755) from bundled rich impl.` };
+  }
+  const st = lstatSync(target);
+  if (st.isSymbolicLink()) {
+    if (!opts.force) {
+      return {
+        kind: "preserved",
+        path: target,
+        detail: `${target} is a symlink; refusing to follow. Pass --force to replace.`
+      };
+    }
+    unlinkSync(target);
+    writeExec(target, sourceBody);
+    return { kind: "replaced", path: target, detail: `Replaced symlink at ${target} with bundled rich impl.` };
+  }
+  const existing = readFileSync(target, "utf8");
+  if (existing === sourceBody) {
+    return { kind: "unchanged", path: target, detail: `${target} already matches bundled rich impl.` };
+  }
+  if (isLegacyDispatcher(existing)) {
+    writeExec(target, sourceBody);
+    return {
+      kind: "replaced",
+      path: target,
+      detail: `Migrated ${target} from legacy dispatcher to rich impl (cli#281 upgrade path).`
+    };
+  }
+  if (!opts.force) {
+    return {
+      kind: "preserved",
+      path: target,
+      detail: `${target} differs from bundled rich impl. Pass --force to overwrite.`
+    };
+  }
+  writeExec(target, sourceBody);
+  return { kind: "replaced", path: target, detail: `Overwrote ${target} (--force) with bundled rich impl.` };
+}
+function isLegacyDispatcher(body) {
+  return body.includes("BASSCLEF_SYNC_VERSION=thin-pointer-statusline-");
+}
 function handleSettings(opts) {
   const target = join(opts.projectDir, ...PROJECT_SETTINGS_REL);
   if (opts.settingsPreserved) {
@@ -877,6 +940,15 @@ function handleSettings(opts) {
   if (matchesDesired(current)) {
     return { kind: "unchanged", path: target, detail: `${target} already carries the bassclef statusLine.` };
   }
+  if (isLegacyStatuslineCommand(current)) {
+    const next2 = { ...existing, statusLine: desired };
+    writeSettings(target, next2);
+    return {
+      kind: "replaced",
+      path: target,
+      detail: `Migrated statusLine in ${target} from legacy dispatcher path to new dispatcher path (cli#281 upgrade).`
+    };
+  }
   if (!opts.force) {
     return {
       kind: "preserved",
@@ -888,6 +960,11 @@ function handleSettings(opts) {
   writeSettings(target, next);
   return { kind: "replaced", path: target, detail: `Overwrote statusLine in ${target} (--force).` };
 }
+function isLegacyStatuslineCommand(current) {
+  if (!current || typeof current !== "object" || Array.isArray(current)) return false;
+  const c = current;
+  return c.type === "command" && c.command === LEGACY_STATUSLINE_COMMAND;
+}
 function skipped(path) {
   return {
     kind: "skipped",
@@ -1624,15 +1701,16 @@ function maybeEmitStatuslinePlan(opts) {
     return;
   }
   const dv = report.dispatcher.kind;
+  const rv = report.rich.kind;
   const sv = report.settings.kind;
-  if (dv === "skipped" && sv === "skipped") {
+  if (dv === "skipped" && rv === "skipped" && sv === "skipped") {
     opts.say(`bassclef init: statusline install skipped (--skip-statusline).
 `);
     return;
   }
   if (opts.dryRun) {
     opts.say(
-      `bassclef init: would install statusline dispatcher at ${report.dispatcher.path} and set statusLine in ${report.settings.path}.
+      `bassclef init: would install statusline dispatcher at ${report.dispatcher.path}, rich impl at ${report.rich.path}, and set statusLine in ${report.settings.path}.
 `
     );
     return;
@@ -1642,6 +1720,10 @@ function maybeEmitStatuslinePlan(opts) {
   else if (dv === "replaced") parts.push(`replaced ${report.dispatcher.path} (--force)`);
   else if (dv === "preserved") parts.push(`preserved ${report.dispatcher.path} (pass --force to overwrite)`);
   else if (dv === "unchanged") parts.push(`${report.dispatcher.path} already matches bundle`);
+  if (rv === "installed") parts.push(`wrote ${report.rich.path}`);
+  else if (rv === "replaced") parts.push(`replaced ${report.rich.path} (migration or --force)`);
+  else if (rv === "preserved") parts.push(`preserved ${report.rich.path} (pass --force to overwrite)`);
+  else if (rv === "unchanged") parts.push(`${report.rich.path} already matches bundle`);
   if (sv === "installed") parts.push(`set statusLine in ${report.settings.path}`);
   else if (sv === "replaced") parts.push(`replaced statusLine in ${report.settings.path} (--force)`);
   else if (sv === "preserved") parts.push(`preserved statusLine in ${report.settings.path} (pass --force to overwrite)`);

package/dist/index.cjs

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const version = "1.9.7";
+const version = "1.9.9";
 exports.version = version;

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-export declare const version: "1.9.7";
+export declare const version: "1.9.9";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,4 +1,4 @@
-const version = "1.9.7";
+const version = "1.9.9";
 export {
   version
 };

package/dist/lite/.claude/hooks/git-stash-u-guard.sh

@@ -50,7 +50,10 @@ if ! echo "$CMD" | grep -qE '(^|[[:space:]])git[[:space:]]+stash([[:space:]]+pus
 fi
 
 # --- Override — SKIP_GIT_STASH_U_GUARD=1 bypasses (logged) ---
-if [ "${SKIP_GIT_STASH_U_GUARD:-0}" = "1" ]; then
+# Honors inline SKIP per #2036 Finding #4 (recipe must reach the hook).
+# shellcheck source=/dev/null
+source "${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "$0")/../.." && pwd)}/lib/skip-env-inline-check.sh" 2>/dev/null || true
+if declare -F skip_var_set >/dev/null && skip_var_set "SKIP_GIT_STASH_U_GUARD" "$CMD"; then
   TRACE_LOG="${BASSCLEF_TRACE_LOG:-${BASSCLEF_TRACE_FILE:-$HOME/.claude/state/trace.log}}"
   mkdir -p "$(dirname "$TRACE_LOG")" 2>/dev/null || true
   echo "$(date -u +%FT%TZ) SKIP_GIT_STASH_U_GUARD $CMD" >> "$TRACE_LOG" 2>/dev/null || true

package/dist/lite/.claude/hooks/post-skill-friction-check.sh

@@ -45,7 +45,12 @@ SKILL_NAME=$(jq <<< "$TOOL_INPUT" -r '.skill // ""' 2>/dev/null)
 
 # Major composer skills — these chain other skills or do heavy work.
 # Friction surfaces best at their boundaries.
-MAJOR_SKILLS_PATTERN="^(preview|preview-build|build|shape|longrun|decompose|spec|architect-review|frontend-design|prototype-variants|prototype-gallery|interpret-input|objectory-decompose|ux-migration|ia-model|interaction-design|use-case|user-stories|jtbd-tasks|task-scenarios)$"
+# Per ADR-040 D1 vocabulary rename (grace window through 2026-10-31 per
+# .claude/rules/we-dont-break-adopters.md): new names stage/launch added;
+# old names preview/preview-build preserved for grace-window compat.
+# Fix for bassclef-upstream#1777 (friction log never created because current
+# vocabulary skipped the gate).
+MAJOR_SKILLS_PATTERN="^(preview|preview-build|stage|launch|build|shape|longrun|decompose|spec|architect-review|frontend-design|prototype-variants|prototype-gallery|interpret-input|objectory-decompose|ux-migration|ia-model|interaction-design|use-case|user-stories|jtbd-tasks|task-scenarios)$"
 
 if ! echo "$SKILL_NAME" | grep -qE "$MAJOR_SKILLS_PATTERN"; then
   exit 0

package/dist/lite/.claude/hooks/pre-commit-gate.sh

@@ -41,7 +41,16 @@ trace_log "pre-commit" "git commit"
 # Exempt: rules/hooks/skills/standards/docs/strategy/chronicle/scripts/tests
 # (places where the policy itself is documented or test fixtures live).
 # Override: SKIP_OPERATOR_PATHS=1 git commit  (logged via trace-helper)
-if [ "${SKIP_OPERATOR_PATHS:-0}" != "1" ]; then
+#
+# Env-reach fix per #2036 Finding #4: the inline recipe sets the var in
+# the git subshell env, not the hook env. Source the helper lib so the
+# recipe reaches the check reliably across harness setups.
+# shellcheck source=/dev/null
+source "${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "$0")/../.." && pwd)}/lib/skip-env-inline-check.sh" 2>/dev/null || true
+if declare -F skip_var_set >/dev/null && skip_var_set "SKIP_OPERATOR_PATHS" "$COMMAND"; then
+  # Override honored; skip the check.
+  :
+else
   STAGED_NONEXEMPT=$(git diff --cached --name-only --diff-filter=AM 2>/dev/null | \
     grep -vE '^\.claude/(rules|hooks|skills|luminaries|agents)/' | \
     grep -vE '^standards/' | \
@@ -50,7 +59,8 @@ if [ "${SKIP_OPERATOR_PATHS:-0}" != "1" ]; then
     grep -vE '^docs/' | \
     grep -vE '^chronicle/' | \
     grep -vE '^strategy/' | \
-    grep -vE '^scripts/tests/' || true)
+    grep -vE '^scripts/tests/' | \
+    grep -vE '^lib/tests/' || true)
   if [ -n "$STAGED_NONEXEMPT" ]; then
     LEAKED=""
     while IFS= read -r f; do
@@ -110,7 +120,8 @@ fi
 # fast-fail layer per Saltzer-Schroeder complete mediation.
 #
 # Override: SKIP_COLD_ADOPTER_HARNESS=1 git commit (logged via trace-helper)
-if [ "${SKIP_COLD_ADOPTER_HARNESS:-0}" != "1" ]; then
+# Env-reach via skip_var_set helper per #2036 Finding #4.
+if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_COLD_ADOPTER_HARNESS" "$COMMAND"; }; then
   # The 12-pattern matcher mirrors .claude/rules/cold-adopter-harness-discipline.md
   # § "When this rule fires". Keep these patterns in sync; a future WU may
   # centralize the list via a sourced library function.
@@ -173,7 +184,8 @@ fi
 #   state/markers/lead-lens-signoff/<branch-slug>.marker
 # Discipline lives in .claude/rules/loop-discipline.md Step 0.5 + 2a + 5.5.
 # Override: SKIP_LEAD_LENS_SIGNOFF=1 git commit (logged via trace-helper)
-if [ "${SKIP_LEAD_LENS_SIGNOFF:-0}" != "1" ]; then
+# Env-reach via skip_var_set helper per #2036 Finding #4.
+if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_LEAD_LENS_SIGNOFF" "$COMMAND"; }; then
   # Reuse the substrate-affecting matcher shape from cold-adopter fast-path.
   STAGED_SUBSTRATE_LL=$(git diff --cached --name-only --diff-filter=AM 2>/dev/null | grep -E \
     -e '^\.claude/hooks/[^/]+\.sh$' \
@@ -305,7 +317,7 @@ fi
 
 # --- Reserved skill names check (collision with Claude Code built-ins) ---
 # See .claude/rules/reserved-skill-names.md + standards/reserved-skill-names.md
-if [ "${SKIP_RESERVED_NAMES:-0}" != "1" ]; then
+if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_RESERVED_NAMES" "$COMMAND"; }; then
   STAGED_NEW_SKILLS=$(git diff --cached --name-only --diff-filter=A -- '.claude/skills/*/SKILL.md' 2>/dev/null || true)
   if [ -n "$STAGED_NEW_SKILLS" ]; then
     # Extract reserved names from the standards table (Name column values inside backticks)
@@ -351,7 +363,7 @@ fi
 # counter, silencing the compliance signal (the failure mode that motivated
 # this gate). Block commits to chronicle/*.md or docs/chronicle/*.md that
 # lack the section. Override: SKIP_CHRONICLE_GATE_EVIDENCE=1 git commit.
-if [ "${SKIP_CHRONICLE_GATE_EVIDENCE:-0}" != "1" ]; then
+if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_CHRONICLE_GATE_EVIDENCE" "$COMMAND"; }; then
   STAGED_CHRONICLES=$(git diff --cached --name-only --diff-filter=AM -- 'chronicle/*.md' 'docs/chronicle/*.md' 2>/dev/null || true)
   # Source spine accessor library when available — preferred frontmatter
   # check route per state-spine-contract.md. Graceful fallback for repos

package/dist/lite/.claude/hooks/pre-commit-identifier-leak-scrub.sh

@@ -33,12 +33,6 @@
 
 set -u
 
-# Override path — logged via trace-helper per bassclef discipline
-if [ "${SKIP_IDENTIFIER_LEAK_SCRUB:-0}" = "1" ]; then
-  echo "  identifier-leak-scrub: SKIP_IDENTIFIER_LEAK_SCRUB=1 — bypassing scrub" >&2
-  exit 0
-fi
-
 # R-N1 fail-soft: if grep is unavailable, warn to stderr and exit 0
 if ! command -v grep >/dev/null 2>&1; then
   echo "  identifier-leak-scrub: warn — grep unavailable; skipping scrub" >&2
@@ -59,6 +53,16 @@ else
   COMMAND=$(echo "$INPUT" | grep -oE '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/^"command"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
 fi
 
+# Override path — honors inline SKIP_FOO=1 cmd per #2036 Finding #4.
+# PreToolUse hooks run in Claude Code's env, not the git subshell env.
+# The helper lib parses $COMMAND for the inline prefix + falls back to env.
+# shellcheck source=/dev/null
+source "${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "$0")/../.." && pwd)}/lib/skip-env-inline-check.sh" 2>/dev/null || true
+if declare -F skip_var_set >/dev/null && skip_var_set "SKIP_IDENTIFIER_LEAK_SCRUB" "$COMMAND"; then
+  echo "  identifier-leak-scrub: SKIP_IDENTIFIER_LEAK_SCRUB=1 — bypassing scrub" >&2
+  exit 0
+fi
+
 # Pass through non-git-commit commands
 if ! echo "$COMMAND" | grep -qE '^[[:space:]]*git[[:space:]]+commit'; then
   exit 0

package/dist/lite/.claude/hooks/pre-commit-manifest-autoregen.sh

@@ -38,8 +38,10 @@ if ! echo "$COMMAND" | grep -q 'git commit'; then
   exit 0
 fi
 
-# Override path
-if [ "${SKIP_MANIFEST_AUTOREGEN:-0}" = "1" ]; then
+# Override path — honors inline SKIP_FOO=1 cmd per #2036 Finding #4.
+# shellcheck source=/dev/null
+source "${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "$0")/../.." && pwd)}/lib/skip-env-inline-check.sh" 2>/dev/null || true
+if declare -F skip_var_set >/dev/null && skip_var_set "SKIP_MANIFEST_AUTOREGEN" "$COMMAND"; then
   # Best-effort trace log; ignore failure so hook stays exit 0
   if command -v bash >/dev/null 2>&1 && [ -f ".claude/hooks/trace-helper.sh" ]; then
     bash .claude/hooks/trace-helper.sh "skip" "manifest-autoregen" "SKIP_MANIFEST_AUTOREGEN=1" 2>/dev/null || true

package/dist/lite/.claude/hooks/save-state.sh

@@ -216,6 +216,30 @@ if [ -n "$DIRTY" ]; then
   git add 'state/' ':!state/markers' ':!state/markers/**' 2>/dev/null || true
   git add .claude/projects/*/memory/ 2>/dev/null || true
 
+  STAGED=$(git diff --cached --name-only 2>/dev/null)
+  if [ -n "$STAGED" ]; then
+    # Operator-identifier leak check per #2036 Finding #1.
+    # save-state runs `git commit` directly, bypassing the PreToolUse
+    # pre-commit-gate.sh CCF-3 check. Even if CCF-3 fired, its grep
+    # exempts docs/ paths — so docs/sdlc-traces/*.log carrying absolute
+    # /Users/<name>/ paths would still get committed.
+    # Shared lib so this check matches pre-commit-gate CCF-3 shape.
+    REPO_ROOT_FOR_LIB="$(git rev-parse --show-toplevel 2>/dev/null)"
+    LEAK_LIB="${REPO_ROOT_FOR_LIB}/lib/identifier-leak-check.sh"
+    if [ -f "$LEAK_LIB" ]; then
+      # shellcheck source=/dev/null
+      source "$LEAK_LIB"
+      if ! check_staged_for_leaks; then
+        log "BLOCKED: auto-save detected operator paths in staged content; resetting stage"
+        git reset HEAD -- . 2>/dev/null || true
+        # Fall through — SESSION_LOCK cleanup below still fires, push is skipped
+        # because STAGED check below sees empty stage.
+        STAGED=""
+      fi
+    fi
+  fi
+
+  # Re-check STAGED after possible reset
   STAGED=$(git diff --cached --name-only 2>/dev/null)
   if [ -n "$STAGED" ]; then
     TIMESTAMP=$(date +%Y-%m-%dT%H:%M:%S)

package/dist/lite/.claude/hooks/trace-helper.sh

@@ -5,9 +5,28 @@
 #
 # Usage: source this file, then call:
 #   trace_log "hook-name" "trigger-description"
+#
+# Privacy — relative paths (#2036 Finding #1 — adopter report 2026-10-02):
+# The ${trigger} field can carry filesystem paths from caller args
+# (e.g., $FILE_PATH from PreToolUse hooks). We strip repo-root prefix
+# so adopter traces never leak /Users/<name>/ or /home/<name>/ paths
+# to adopter git. Fallback chain: $CLAUDE_PROJECT_DIR → git rev-parse
+# --show-toplevel → no-strip (silent — trigger lands as-is).
 
 TRACE_DIR="docs/sdlc-traces"
 
+# _trace_repo_root — resolve repo root for prefix-strip.
+# Precondition fallback per @luminary tony-hoare — Hoare R1 risk ledger.
+_trace_repo_root() {
+  if [ -n "${CLAUDE_PROJECT_DIR:-}" ]; then
+    echo "$CLAUDE_PROJECT_DIR"
+    return 0
+  fi
+  local root
+  root=$(git rev-parse --show-toplevel 2>/dev/null) || return 1
+  echo "$root"
+}
+
 trace_log() {
   local hook="$1"
   local trigger="$2"
@@ -17,6 +36,16 @@ trace_log() {
   today=$(date +%Y-%m-%d)
   local log_file="${TRACE_DIR}/${today}.log"
 
+  # Strip repo-root prefix from trigger before writing.
+  # Only strips when root is a non-empty prefix of trigger — leaves
+  # unrelated absolute paths (/opt/anthropic/..., /usr/bin/...) intact.
+  local root
+  root=$(_trace_repo_root 2>/dev/null) || root=""
+  if [ -n "$root" ] && [ "$root" != "/" ]; then
+    trigger="${trigger//$root\//}"
+    trigger="${trigger//$root/}"
+  fi
+
   mkdir -p "$TRACE_DIR" 2>/dev/null || true
   echo "${timestamp} | ${hook} | ${trigger} | — | —" >> "$log_file" 2>/dev/null || true
 }

package/dist/lite/.claude/rules/lite-manifest-schema-change-discipline.md

@@ -36,11 +36,41 @@ When a PR changes the manifest schema OR output shape:
 3. **Downstream cure named** — the entry names what adopters need to do. If nothing (backward-compatible add), say so explicitly. If code change (like the v0.36.0 `upstream_commit` removal), name the pattern.
 4. **Release script pre-flight** — before every `/release`, the script reads the ledger and confirms an entry exists for the outgoing `manifest_version`. Missing entry BLOCKs the cascade.
 
+## Retirements
+
+Retirement-class changes (content-remove: a file previously shipped in the lite manifest gets deleted intentionally) ship with the same discipline shape as additions. Three paired artifacts, same PR:
+
+1. **Ledger entry** under this ledger's `## Entries` section naming the removed slugs, the deletion SHA, the version bump (MINOR per content-remove policy), and the downstream cure (what adopters at an exact pin do).
+2. **Allowlist row** in `.claude/hooks/tests/fixtures/2026-09-16-lite-catalog-closure/retired-entries.txt` naming each removed `<type>/<slug>` + `retired-in=<SHA>` + `reason=<one-line>`. The Feathers v1.6.1 snapshot guard (Test 16 in `.claude/hooks/tests/generate-lite-manifest.test.sh`) subtracts allowlist rows before asserting zero drops. Without the allowlist row the test fails and main CI goes red.
+3. **Discipline amendment** when a new retirement class surfaces that this section does not cover (e.g., tier retirement, field retirement). Extend this `## Retirements` section rather than author a new rule, per Ousterhout's complexity-is-incremental principle.
+
+When this rule fires on retirement:
+
+- Any PR that deletes a file listed in the current `lite-manifest.json` under `.entries[].path`
+- Any PR that retires a schema field that previously shipped as REQUIRED
+
+Skips (same as additions):
+
+- Content-only changes where the file stays but its content_hash shifts
+- Comment-only edits
+
+**Anchor luminaries for retirement:**
+
+- `@luminary linus-torvalds` — retirement of a tier-tagged adopter-observable file is a userspace break; the ledger + allowlist + release-step6 check ship in one PR
+- `@luminary hyrum-wright` — observable behavior becomes dependency with enough adopters; the 2 removed slugs were cited in rule bodies, sister docs, and the fixture snapshot; every retirement needs observable-surface enumeration first
+- `@luminary michael-nygard` — current ledger discipline for additions is methodology at author time; retirement needs the same mechanical floor plus a stability-pattern gate (release-step6 pre-flight)
+- `@luminary michael-feathers` — the fixture snapshot is the characterization test; allowlist is the author-time hook that keeps it green
+- `@luminary vaughn-vernon` — `retired-entries.txt` is the anticorruption layer between the frozen snapshot and the current manifest
+- `@luminary john-ousterhout` — contrarian: extend the existing rule with this section, do not author a new rule; the mechanical pre-commit hook (`pre-retire-discipline-check.sh`) is deferred to a follow-on PR so this one stays scope-tight
+
 ## Anti-patterns
 
 **Schema field added but no ledger entry.** Release script pre-flight BLOCKs.
 INSTEAD: add the entry in the same PR.
 
+**File removed from the lite manifest without an allowlist row + ledger entry.** Test 16 (Feathers v1.6.1 snapshot guard) sees the drop and main CI goes red at the next run.
+INSTEAD: append a row to `retired-entries.txt` naming `<type>/<slug>  retired-in=<SHA>  reason=<one-line>` AND add a `## Retirements`-aware entry to `standards/lite-manifest-schema-changes.md` in the same PR.
+
 **Ledger entry written but wrong version bump.** Adopters plan their pin update against the wrong version.
 INSTEAD: correct the bump before merge. AJV validation of the entry format catches inconsistency.
 

package/dist/lite/.claude/settings.json

@@ -236,6 +236,6 @@
   "$schema": "https://bassclef.sunj-labs/state-spine/v0/schemas/bassclef-wiring-manifest.schema.json",
   "statusLine": {
     "type": "command",
-    "command": "bash ~/.claude/bassclef-statusline.sh"
+    "command": "bash ~/.claude/bassclef-statusline-dispatcher.sh"
   }
 }