@thebassclef/lite 1.9.8 → 1.9.10

package/dist/lite/standards/lite-manifest.json

@@ -1,7 +1,7 @@
 {
   "tier": "lite",
-  "manifest_version": "1.13.2",
-  "generated_at": "2026-09-28T01:00:57Z",
+  "manifest_version": "1.15.5",
+  "generated_at": "2026-10-04T22:12:41Z",
   "entries": [
     {
       "slug": "029-release-pipeline",
@@ -259,6 +259,14 @@
       "content_hash": "sha256:f4db0541d27a06e3f94ba557e7c8a39e747601b8ca9fd7af7313891b69548afd",
       "description": "Hook manifest staleness — flags standards/hook-cadence.json when it"
     },
+    {
+      "slug": "83-install-written-paths-rebuild",
+      "type": "hook",
+      "path": ".claude/hooks/session-reflection.d/83-install-written-paths-rebuild.sh",
+      "tier": "lite",
+      "content_hash": "sha256:3b8268e67f0eb25b84dd8cb010cfa02912c50c3c8eba73302341e445d19f97c5",
+      "description": "Session-start fragment: rebuild install-written-paths manifest when missing/stale."
+    },
     {
       "slug": "90-release-backlog",
       "type": "hook",
@@ -400,7 +408,7 @@
       "type": "hook",
       "path": ".claude/hooks/git-stash-u-guard.sh",
       "tier": "lite",
-      "content_hash": "sha256:23e45017aa058d6110a327e5e74a70233333b64a0d9c09c5f03549fb58c42add",
+      "content_hash": "sha256:d478d64cdda57b9931f558ca8654863b09b48b35794ddadb9f91abe026031d94",
       "description": "PreToolUse: Bash"
     },
     {
@@ -427,14 +435,6 @@
       "content_hash": "sha256:7cb4c033003b987c4dddc74f9f24d9b28f111ee73622a2fa9f9a34d786191aad",
       "description": "kiss-expansion-inject.sh — UserPromptExpansion hook that injects"
     },
-    {
-      "slug": "longrun-prep-compounding-axis-check",
-      "type": "hook",
-      "path": ".claude/hooks/longrun-prep-compounding-axis-check.sh",
-      "tier": "lite",
-      "content_hash": "sha256:9703ca8f6582f5cc2551ea3a22621c2103162c8cdc8ad49940202667c23cb2f6",
-      "description": "longrun-prep-compounding-sequence-check.sh — Stop hook that fires when"
-    },
     {
       "slug": "longrun-prep-compounding-sequence-check",
       "type": "hook",
@@ -504,7 +504,7 @@
       "type": "hook",
       "path": ".claude/hooks/post-skill-friction-check.sh",
       "tier": "lite",
-      "content_hash": "sha256:3e47245950723da47246452ad448e5339e7f0939f9c9c297fa6f43f718ccc170",
+      "content_hash": "sha256:6cec7025448fa0b9ab97dbf82e91b53cb39b31c802f292c3f979d6cd44a5ec11",
       "description": "Post-Skill Friction Check — fires on PostToolUse for Skill tool."
     },
     {
@@ -544,7 +544,7 @@
       "type": "hook",
       "path": ".claude/hooks/pre-commit-gate.sh",
       "tier": "lite",
-      "content_hash": "sha256:6a825617f0cde4d3a77590ad9907667ee181539fee35badce87bfa27fb94a3c1",
+      "content_hash": "sha256:5b0385b5c3ab415c522285e70c710ef2351e5843a86867bd4a73b138e0e12e02",
       "description": "Observable failure trap — closes bassclef-upstream#1075 (silent-stderr class)."
     },
     {
@@ -552,7 +552,7 @@
       "type": "hook",
       "path": ".claude/hooks/pre-commit-identifier-leak-scrub.sh",
       "tier": "lite",
-      "content_hash": "sha256:38665938cb3bac6d249d94b814cc3f43600456abcbb045bff5a5d0d0128a7cbb",
+      "content_hash": "sha256:ea0f5430017f00b4cfe45e02f1c5232ab0532784258905dec28cc93eff1dfc65",
       "description": "PreToolUse: Bash"
     },
     {
@@ -560,7 +560,7 @@
       "type": "hook",
       "path": ".claude/hooks/pre-commit-manifest-autoregen.sh",
       "tier": "lite",
-      "content_hash": "sha256:b3641c5c2402fdedb9fb23b812548e94809dcc732e8d5e19af4fd5b488b023e0",
+      "content_hash": "sha256:f5258e9f6ea636b7043c771b8931bbea270f4bbaad8e239bad31b28df2252fa0",
       "description": "PreToolUse: Bash"
     },
     {
@@ -592,7 +592,7 @@
       "type": "hook",
       "path": ".claude/hooks/save-state.sh",
       "tier": "lite",
-      "content_hash": "sha256:30487e789b2ed238a8e4915947d0a8ac8c59f44810028dd1bf5ddc0370aa48fb",
+      "content_hash": "sha256:b5bd5eb5d0e30f614c8afff6fd57380257413dfa08d7722b0e6e453bfa416e96",
       "description": "Save State — graceful checkpoint of all work in progress."
     },
     {
@@ -640,7 +640,7 @@
       "type": "hook",
       "path": ".claude/hooks/state-validate.sh",
       "tier": "lite",
-      "content_hash": "sha256:a8c6b3ffbf13008d238ad87f47ec6a132ac407849dac00c0f1367909d2ace593",
+      "content_hash": "sha256:89fd09175f45f55f3f61f75cf7f4ae13cd3c5e813e17424eba296849452d5aec",
       "description": "state-validate.sh — PreToolUse hook that validates state-spine entity"
     },
     {
@@ -680,7 +680,7 @@
       "type": "hook",
       "path": ".claude/hooks/trace-helper.sh",
       "tier": "lite",
-      "content_hash": "sha256:5e2b01a28c4a259949ef6878905d0692a89e19c2481eb602d38cc96150b663e6",
+      "content_hash": "sha256:15c81bba2b25f8d975b806371f6ca71be59e6339bebd9afe2074505c9b9fb436",
       "description": "SDLC Trace Log helper — sourced by all hooks."
     },
     {
@@ -744,7 +744,7 @@
       "type": "lib",
       "path": "lib/capability-probe.sh",
       "tier": "lite",
-      "content_hash": "sha256:2db9a81735980513eebc9712510cb3b615557a5ab1b48ace48840ed28bc1e4c1",
+      "content_hash": "sha256:f22929492ea24941e7652aeedaaeb136f9c646e72bb8528039717b8aaead36b4",
       "description": "lib/capability-probe.sh — capability probe deep module."
     },
     {
@@ -776,7 +776,7 @@
       "type": "lib",
       "path": "lib/composer-preflight.sh",
       "tier": "lite",
-      "content_hash": "sha256:e4b5a09f0908897bb2709d5e4f7e191e9503e104a4a54cf5f43abdef218fc572",
+      "content_hash": "sha256:70e8d5ac6a0c5c39c8e217206fe9e0d5bd3afe3ca402a98e095e5e041be5dc12",
       "description": "lib/composer-preflight.sh — shared pre-flight check for composer skills."
     },
     {
@@ -784,7 +784,7 @@
       "type": "lib",
       "path": "lib/deferred-actions.sh",
       "tier": "lite",
-      "content_hash": "sha256:838e4948aeef589e46519ee47791ded9ec5d5e92a1b8d551520ae493b0566752",
+      "content_hash": "sha256:d84e978bb4ec05d57ca5dadaf251fe4415f2759c45c536cb19a2cecbde69d887",
       "description": "lib/deferred-actions.sh — typed accessor for docs/deferred-actions/"
     },
     {
@@ -792,7 +792,7 @@
       "type": "lib",
       "path": "lib/fixture-builder.sh",
       "tier": "lite",
-      "content_hash": "sha256:5831bcd49c162ec131cf14d402150821bd8f623e87eb3c1bcdc545fc701aaefd",
+      "content_hash": "sha256:d4d4a7b4f17abab386b590d616c392a9f8b33934df366c5a505a10ad3bb77b85",
       "description": "Deep module for adopter-environment fixtures used by bassclef Tier 0 tests."
     },
     {
@@ -835,12 +835,28 @@
       "content_hash": "sha256:022fa4b6f1531813203e499ea84a15a8239ac1772ec506ac1e734b22fd626b5c",
       "description": "lib/hook-installer.sh — installs a hook file at its declared install-class scope"
     },
+    {
+      "slug": "identifier-leak-check",
+      "type": "lib",
+      "path": "lib/identifier-leak-check.sh",
+      "tier": "lite",
+      "content_hash": "sha256:5bc5b46f0478817665a77787e9b26997be3452572c7514e5ce540f37a9b9188a",
+      "description": "Operator-identifier leak check for staged git content."
+    },
+    {
+      "slug": "install-written-paths",
+      "type": "lib",
+      "path": "lib/install-written-paths.sh",
+      "tier": "lite",
+      "content_hash": "sha256:38148e8de456928b13846c2999377c30ac303cf0369cc7755ecc0ba9a8f899fb",
+      "description": "Install-written-paths manifest + accessor lib."
+    },
     {
       "slug": "luminary-pick",
       "type": "lib",
       "path": "lib/luminary-pick.sh",
       "tier": "lite",
-      "content_hash": "sha256:ad6e909a84c3371260377a98a94575a6cac2efbb6ff331bb1164e0ca42748a65",
+      "content_hash": "sha256:4d6d60d11a56c79e894a843a90550f10ee6f0160eebfd4e55402c840f2666741",
       "description": "andon-allow: docs/operator-private/[a-z-]+/20[0-9][0-9]-[0-9]{2}"
     },
     {
@@ -872,7 +888,7 @@
       "type": "lib",
       "path": "lib/preview-state.sh",
       "tier": "lite",
-      "content_hash": "sha256:e5423edd6dd48a3fe7aeaa9d56a2bfa903f706a7144ca1c6119789394d71f2f2",
+      "content_hash": "sha256:0e1e0765acfad9826b9a042eed2215eb0c71b8f5f077283a5abab7d8fd40e5e7",
       "description": "lib/preview-state.sh — typed accessor for docs/preview-state/<slug>.yml"
     },
     {
@@ -899,6 +915,14 @@
       "content_hash": "sha256:d2205a32885bf29420a7f4d420ab2d5994bc73ad2ed9d1faf150bcf8f17a52c4",
       "description": "lib/session-rescue.sh — sweep resolved session-rescue entries to completed/."
     },
+    {
+      "slug": "skip-env-inline-check",
+      "type": "lib",
+      "path": "lib/skip-env-inline-check.sh",
+      "tier": "lite",
+      "content_hash": "sha256:88846c09dcf4dd25e048d02338f8c09c1c2dd03be36e101d856d5e3538c83980",
+      "description": "SKIP_* env-reach check for PreToolUse Bash hooks."
+    },
     {
       "slug": "source-graph-walker",
       "type": "lib",
@@ -912,7 +936,7 @@
       "type": "lib",
       "path": "lib/state.sh",
       "tier": "lite",
-      "content_hash": "sha256:38b6cfa82123e75bb1046b97887060962a62d90ba9d089764529207ebf8c8194",
+      "content_hash": "sha256:e8482e2cf41f90adfedb3dc58dc585547db93983a6ca71bb19ae3b0507a76307",
       "description": "lib/state.sh — typed accessor library over bassclef's state spine."
     },
     {
@@ -936,7 +960,7 @@
       "type": "lib",
       "path": "lib/tier-check.sh",
       "tier": "lite",
-      "content_hash": "sha256:c8b5ca9c7af75a49727612792e423ca0209b643039d08cfd99084707043dae75",
+      "content_hash": "sha256:33ccb844a171b1334d98a7dceaf13e1a1beb7952072b8d49a3429618dc2a4e26",
       "description": "lib/tier-check.sh — adopter tier resolution + gate."
     },
     {
@@ -944,7 +968,7 @@
       "type": "lib",
       "path": "lib/tier-dependency-audit.sh",
       "tier": "lite",
-      "content_hash": "sha256:7ee5cc3c7372ca6aef3c81f614ec119ffed8874e00a78d441ce8d0304c7b6308",
+      "content_hash": "sha256:aea0c465ff0699e68977e8ff4a80a1f0d3455b9a9f3108888bc82a2eb84a2ee2",
       "description": "lib/tier-dependency-audit.sh"
     },
     {
@@ -1343,7 +1367,7 @@
       "type": "presence-template",
       "path": "presence/install/schedule-auto-save.taskscheduler.md",
       "tier": "lite",
-      "content_hash": "sha256:d642cdd842320ba3f7ac714da5cfbd55a594805d3ff3f144de1b7005bb1ebff6"
+      "content_hash": "sha256:fd9dcc8fbcf08a812fc2dfe615c0c173971949fd2799e752fa161160232c3a5d"
     },
     {
       "slug": "agents",
@@ -1520,14 +1544,6 @@
       "content_hash": "sha256:69ae0083d62003eb70442ef3d5fcffd0061723a18da931f823795123ff7fc312",
       "description": "Commit message format — Conventional Commits"
     },
-    {
-      "slug": "compounding-axis-fresh-analysis",
-      "type": "rule",
-      "path": ".claude/rules/compounding-axis-fresh-analysis.md",
-      "tier": "lite",
-      "content_hash": "sha256:256fdb64c4703d7e492527c1dd7dbbed8325baf7c29f0c7c06d10563cc472852",
-      "description": "When /longrun prep proposes scope shapes, each shape's compounding-sequence row comes from fresh analysis."
-    },
     {
       "slug": "compounding-sequence-fresh-analysis",
       "type": "rule",
@@ -1640,6 +1656,13 @@
       "content_hash": "sha256:31df845d034bbd756172ad7895ff561cbfeab38aa0b744f29862ff4095e4300b",
       "description": "Bassclef commits stay free of operator machine identifiers."
     },
+    {
+      "slug": "install-written-paths-mediation",
+      "type": "rule",
+      "path": ".claude/rules/install-written-paths-mediation.md",
+      "tier": "lite",
+      "content_hash": "sha256:282a2c4303315417afa75efb02724bc0913d9b3aa77d53fcfe4a7eb88ef65137"
+    },
     {
       "slug": "iteration-bet-brief-completeness",
       "type": "rule",
@@ -1653,7 +1676,7 @@
       "type": "rule",
       "path": ".claude/rules/lite-manifest-schema-change-discipline.md",
       "tier": "lite",
-      "content_hash": "sha256:7d6652791a3e1f4fa6fc33420b90c1f9c0cf379f52bc31b7002ee496064b150d",
+      "content_hash": "sha256:730cde99f460fb259896e9f9aed268b4a116599a5a2b397a92196f95b9d4af5d",
       "description": "Every lite-manifest schema change ships a migration-note ledger entry in the same PR. Adopters read the ledger before sync."
     },
     {
@@ -2187,7 +2210,7 @@
       "type": "skill",
       "path": ".claude/skills/autonomous/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:94c65a68b005979ac17d8c3bbbfa1c63704843b0a59955a725175d0124525273",
+      "content_hash": "sha256:731b6954a38c3735e13ff635d19a05178e739c5986384c48ffbf09121026b892",
       "description": "Start or check an autonomous SDLC session. Two axes: who approves handoffs (you vs. the agent) and how work runs (one session vs. parallel agents). Defaults to operator-gated + sequential. Entry point for shipping features hands-off.",
       "inputs": [
         "start or check mode",
@@ -2226,7 +2249,7 @@
       "type": "skill",
       "path": ".claude/skills/build/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:ef8f6b7872a29f74e8a9c181ab0b7c24f7c93bfc76b05baaf4cee4703318b10c",
+      "content_hash": "sha256:a9196b9d0b89d8ed8619be911d3cae31b7e15b9bbe5d43592848c4310180cffb",
       "description": "Take a plan from /launch and ship it. One builder per user story. Runs /verify. Opens PRs. Gates prod on a human. Refuses auth, schema, security, and tenant work. Two modes — full and degrade-with-note.",
       "inputs": [
         "A goal slug pointing to a spec on disk"
@@ -2327,7 +2350,7 @@
       "type": "skill",
       "path": ".claude/skills/deploy-prod/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:ff8921f0c5ad350c2428783ea7800ca90526400631f408660dd77f0a54fb45e5",
+      "content_hash": "sha256:fcc46296bbb82876be97882d08b6408b4fd6f0d0a32e2d0f9dfea1e2b05673b5",
       "description": "Production deployment procedure — test, build, push, CI, verify. Template for any project.",
       "inputs": [
         "Optional deploy-host override"
@@ -2614,7 +2637,7 @@
       "type": "skill",
       "path": ".claude/skills/launch/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:35763f40fe046500da02f8d37ff4e6984e18ab08b64ed0eaa3c4095d90a22225",
+      "content_hash": "sha256:f0373719bb530dbdc5721c6d253dff7c628afb75a4f94112cf0a622ce039e4b0",
       "description": "Compare variants of an idea. Get a mock gallery. Pick a direction. Get a spec, user stories, and a plan to build. Two sizes — medium and full. Three modes — full, local, scratch.",
       "inputs": [
         "A rough idea or ticket or canvas"
@@ -2737,7 +2760,7 @@
       "type": "skill",
       "path": ".claude/skills/onboard-repo/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:03ff7fd35e3e7219d49ca69366d6e49d735a8e3199a36471a93084bdaf68fedc",
+      "content_hash": "sha256:531b910cb45153b939b1f2a74dd1b214d2e87e4575ec3483624fe56510a4563c",
       "description": "Bootstrap the bassclef framework in a new repo. Installs the sync hook. Scaffolds config, whereami, and CLAUDE.md. Modes: default, --with-deploy-host, --with-secrets, --full, --greenfield-from-intent (starts a new repo from a short intent paragraph).",
       "inputs": [
         "Optional flags — --with-deploy-host or --with-secrets or --full"
@@ -2773,7 +2796,7 @@
       "type": "skill",
       "path": ".claude/skills/personas/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:c03a2e1235ef7774fa014aff0e3690e6c81224887c46c8bcf7690ce7a80b5e19",
+      "content_hash": "sha256:fa3040d1a1c604cfa49dfa2de0993ee4242104040bc69659007e763711602749",
       "description": "Load, list, and manage user personas — the bassclef WHO record. Downstream skills (value-prop-canvas, synthetic-user, user-stories, jtbd-tasks) read from its output. Defaults to operator when no personas exist.",
       "inputs": [
         "Manage command — list or add or edit or delete"
@@ -2902,7 +2925,7 @@
       "type": "skill",
       "path": ".claude/skills/release-notes/SKILL.md",
       "tier": "lite",
-      "content_hash": "sha256:4fc630b0a7e318d06da7b2a9fc7a8b7eb3bb3c6582b4f3eb527188f1b5135921",
+      "content_hash": "sha256:21dc6101fc1bb115fb40a4157c7e1592a126d03f3641ec53a1c1d121b0c061ab",
       "description": "Draft a weekly changelog for two audiences — internal team (what shipped) and users (what's new for you). Pushes to Google Docs.",
       "inputs": [
         "Time range or release tag ref"
@@ -3817,7 +3840,7 @@
       "type": "standard",
       "path": "standards/lite-manifest-schema-changes.md",
       "tier": "lite",
-      "content_hash": "sha256:312775fd9c55feb4537a4346de309b73a37d8f3c44793aa62f43b14246f3a2cd",
+      "content_hash": "sha256:a3fb462a6061680fbb5416823055f0f7845d7b11c186479573bf7de7777a61ff",
       "description": "Chronological ledger of every lite-manifest schema change. Adopters read this before sync to know what shifted."
     },
     {
@@ -4097,7 +4120,7 @@
       "type": "standard",
       "path": "standards/state-spine.md",
       "tier": "lite",
-      "content_hash": "sha256:a3bccef9419e73b896bbf7dec3512530dd181654aae8769e255e90f3cfc682c0",
+      "content_hash": "sha256:c7081fbbd72b6eac299f811ea3862dd68ac0d255fd60ef602087f12d79fec5af",
       "description": "Schema'd JSON state spine for bassclef's substrate."
     },
     {
@@ -4304,7 +4327,7 @@
       "type": "template",
       "path": "templates/spec-template.md",
       "tier": "lite",
-      "content_hash": "sha256:68f85e21426157461613b2fc55dd0e447b1d6d3940b41830dd3b23c7bc2f1365"
+      "content_hash": "sha256:7096d6eb6479d7e4c9034247717675d3bba7d3e2c740c090b117cadf61674915"
     },
     {
       "slug": "use-case-template",

package/dist/lite/standards/state-spine.md

@@ -262,6 +262,7 @@ the schema doesn't constrain them.
 | InputArtifact | `docs/input-artifacts/<slug>.json` | whole file |
 | StackTemplate | `state/stack-templates/<slug>.json` | whole file |
 | SubstrateHardening | `state/substrate-hardening/inventory.json` (per bassclef bet 2026-06-17a Phase Z) | whole file |
+| InstallWrittenPaths | `state/install-written-paths.json` (per bassclef-upstream#2036 Finding #8 — manifest of install-written paths for discipline-hook mediation) | whole file |
 
 These entities are machine-consumed; operator-readability isn't
 load-bearing. Pure JSON; schema validates the whole file.

package/dist/lite/templates/spec-template.md

@@ -102,25 +102,29 @@ Based on the answers above:
 ## Acceptance Criteria
 How we know it's done. Testable statements.
 
-## Workunits enumerated
+## Steps enumerated
 
 REQUIRED for specs that feed `/build` (bassclef#335 + bassclef#367).
-Each WU traces to one INVEST user story and lands as one stacked-atomic
+Each step traces to one INVEST user story and lands as one stacked-atomic
 PR. /build's Phase 1 parser greps for this exact section heading.
 
-Format (one entry per WU):
+Per ADR-040 D1 vocabulary rename (grace window through 2026-10-31),
+`/build` also reads legacy specs that use `## Workunits enumerated` +
+`### WU-N` headings — new work writes the step vocabulary below.
+
+Format (one entry per step):
 
 ```markdown
-### WU-N — <imperative title>
+### Step-N — <imperative title>
 
 **Story refs:** US-NNN[, US-NNN]
-**Branch:** feature/<bet-slug>-stack-N-<wu-slug>
+**Branch:** feature/<goal-slug>-stack-N-<step-slug>
 **Acceptance:**
 - [ ] <inherited from story; testable; observable>
 - [ ] <edge case / extension>
 **Estimated:** ~Nt turns
 
-(per /preview-build Phase 9 contract per bassclef#367)
+(per /launch Phase 9 contract per bassclef#367)
 ```
 
 If the spec doesn't feed `/build` (e.g., bassclef-evolution shaping

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thebassclef/lite",
-  "version": "1.9.8",
+  "version": "1.9.10",
   "description": "Bassclef CLI — install and upgrade bassclef in your project with two commands.",
   "keywords": [
     "bassclef",