@thebassclef/lite 1.9.8 → 1.9.9

package/README.md

@@ -1,6 +1,10 @@
 # @thebassclef/lite
 
-Install bassclef in your project. Two commands.
+**Security posture.** @thebassclef/lite ships with zero install-time scripts, SLSA v1 build provenance, Apache-2.0 license, and zero runtime dependencies. The CLI writes to `~/.claude` and `$CLAUDE_PROJECT_DIR` at runtime, not at install. See [SECURITY.md](SECURITY.md) for disclosure.
+
+## Install
+
+Two commands.
 
 ```bash
 npm install -g @thebassclef/lite
@@ -63,7 +67,7 @@ your browser.
 
 ## Current release
 
-<!-- version-start -->1.9.8<!-- version-end -->
+<!-- version-start -->1.9.9<!-- version-end -->
 
 See [CHANGELOG.md](CHANGELOG.md) for the full changelog. Adopter-facing
 release notes live at [docs.bassclef.dev/docs/whats-new/releases](https://docs.bassclef.dev/docs/whats-new/releases).

package/dist/index.cjs

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const version = "1.9.8";
+const version = "1.9.9";
 exports.version = version;

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-export declare const version: "1.9.8";
+export declare const version: "1.9.9";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,4 +1,4 @@
-const version = "1.9.8";
+const version = "1.9.9";
 export {
   version
 };

package/dist/lite/.claude/hooks/git-stash-u-guard.sh

@@ -50,7 +50,10 @@ if ! echo "$CMD" | grep -qE '(^|[[:space:]])git[[:space:]]+stash([[:space:]]+pus
 fi
 
 # --- Override — SKIP_GIT_STASH_U_GUARD=1 bypasses (logged) ---
-if [ "${SKIP_GIT_STASH_U_GUARD:-0}" = "1" ]; then
+# Honors inline SKIP per #2036 Finding #4 (recipe must reach the hook).
+# shellcheck source=/dev/null
+source "${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "$0")/../.." && pwd)}/lib/skip-env-inline-check.sh" 2>/dev/null || true
+if declare -F skip_var_set >/dev/null && skip_var_set "SKIP_GIT_STASH_U_GUARD" "$CMD"; then
   TRACE_LOG="${BASSCLEF_TRACE_LOG:-${BASSCLEF_TRACE_FILE:-$HOME/.claude/state/trace.log}}"
   mkdir -p "$(dirname "$TRACE_LOG")" 2>/dev/null || true
   echo "$(date -u +%FT%TZ) SKIP_GIT_STASH_U_GUARD $CMD" >> "$TRACE_LOG" 2>/dev/null || true

package/dist/lite/.claude/hooks/post-skill-friction-check.sh

@@ -45,7 +45,12 @@ SKILL_NAME=$(jq <<< "$TOOL_INPUT" -r '.skill // ""' 2>/dev/null)
 
 # Major composer skills — these chain other skills or do heavy work.
 # Friction surfaces best at their boundaries.
-MAJOR_SKILLS_PATTERN="^(preview|preview-build|build|shape|longrun|decompose|spec|architect-review|frontend-design|prototype-variants|prototype-gallery|interpret-input|objectory-decompose|ux-migration|ia-model|interaction-design|use-case|user-stories|jtbd-tasks|task-scenarios)$"
+# Per ADR-040 D1 vocabulary rename (grace window through 2026-10-31 per
+# .claude/rules/we-dont-break-adopters.md): new names stage/launch added;
+# old names preview/preview-build preserved for grace-window compat.
+# Fix for bassclef-upstream#1777 (friction log never created because current
+# vocabulary skipped the gate).
+MAJOR_SKILLS_PATTERN="^(preview|preview-build|stage|launch|build|shape|longrun|decompose|spec|architect-review|frontend-design|prototype-variants|prototype-gallery|interpret-input|objectory-decompose|ux-migration|ia-model|interaction-design|use-case|user-stories|jtbd-tasks|task-scenarios)$"
 
 if ! echo "$SKILL_NAME" | grep -qE "$MAJOR_SKILLS_PATTERN"; then
   exit 0

package/dist/lite/.claude/hooks/pre-commit-gate.sh

@@ -41,7 +41,16 @@ trace_log "pre-commit" "git commit"
 # Exempt: rules/hooks/skills/standards/docs/strategy/chronicle/scripts/tests
 # (places where the policy itself is documented or test fixtures live).
 # Override: SKIP_OPERATOR_PATHS=1 git commit  (logged via trace-helper)
-if [ "${SKIP_OPERATOR_PATHS:-0}" != "1" ]; then
+#
+# Env-reach fix per #2036 Finding #4: the inline recipe sets the var in
+# the git subshell env, not the hook env. Source the helper lib so the
+# recipe reaches the check reliably across harness setups.
+# shellcheck source=/dev/null
+source "${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "$0")/../.." && pwd)}/lib/skip-env-inline-check.sh" 2>/dev/null || true
+if declare -F skip_var_set >/dev/null && skip_var_set "SKIP_OPERATOR_PATHS" "$COMMAND"; then
+  # Override honored; skip the check.
+  :
+else
   STAGED_NONEXEMPT=$(git diff --cached --name-only --diff-filter=AM 2>/dev/null | \
     grep -vE '^\.claude/(rules|hooks|skills|luminaries|agents)/' | \
     grep -vE '^standards/' | \
@@ -50,7 +59,8 @@ if [ "${SKIP_OPERATOR_PATHS:-0}" != "1" ]; then
     grep -vE '^docs/' | \
     grep -vE '^chronicle/' | \
     grep -vE '^strategy/' | \
-    grep -vE '^scripts/tests/' || true)
+    grep -vE '^scripts/tests/' | \
+    grep -vE '^lib/tests/' || true)
   if [ -n "$STAGED_NONEXEMPT" ]; then
     LEAKED=""
     while IFS= read -r f; do
@@ -110,7 +120,8 @@ fi
 # fast-fail layer per Saltzer-Schroeder complete mediation.
 #
 # Override: SKIP_COLD_ADOPTER_HARNESS=1 git commit (logged via trace-helper)
-if [ "${SKIP_COLD_ADOPTER_HARNESS:-0}" != "1" ]; then
+# Env-reach via skip_var_set helper per #2036 Finding #4.
+if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_COLD_ADOPTER_HARNESS" "$COMMAND"; }; then
   # The 12-pattern matcher mirrors .claude/rules/cold-adopter-harness-discipline.md
   # § "When this rule fires". Keep these patterns in sync; a future WU may
   # centralize the list via a sourced library function.
@@ -173,7 +184,8 @@ fi
 #   state/markers/lead-lens-signoff/<branch-slug>.marker
 # Discipline lives in .claude/rules/loop-discipline.md Step 0.5 + 2a + 5.5.
 # Override: SKIP_LEAD_LENS_SIGNOFF=1 git commit (logged via trace-helper)
-if [ "${SKIP_LEAD_LENS_SIGNOFF:-0}" != "1" ]; then
+# Env-reach via skip_var_set helper per #2036 Finding #4.
+if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_LEAD_LENS_SIGNOFF" "$COMMAND"; }; then
   # Reuse the substrate-affecting matcher shape from cold-adopter fast-path.
   STAGED_SUBSTRATE_LL=$(git diff --cached --name-only --diff-filter=AM 2>/dev/null | grep -E \
     -e '^\.claude/hooks/[^/]+\.sh$' \
@@ -305,7 +317,7 @@ fi
 
 # --- Reserved skill names check (collision with Claude Code built-ins) ---
 # See .claude/rules/reserved-skill-names.md + standards/reserved-skill-names.md
-if [ "${SKIP_RESERVED_NAMES:-0}" != "1" ]; then
+if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_RESERVED_NAMES" "$COMMAND"; }; then
   STAGED_NEW_SKILLS=$(git diff --cached --name-only --diff-filter=A -- '.claude/skills/*/SKILL.md' 2>/dev/null || true)
   if [ -n "$STAGED_NEW_SKILLS" ]; then
     # Extract reserved names from the standards table (Name column values inside backticks)
@@ -351,7 +363,7 @@ fi
 # counter, silencing the compliance signal (the failure mode that motivated
 # this gate). Block commits to chronicle/*.md or docs/chronicle/*.md that
 # lack the section. Override: SKIP_CHRONICLE_GATE_EVIDENCE=1 git commit.
-if [ "${SKIP_CHRONICLE_GATE_EVIDENCE:-0}" != "1" ]; then
+if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_CHRONICLE_GATE_EVIDENCE" "$COMMAND"; }; then
   STAGED_CHRONICLES=$(git diff --cached --name-only --diff-filter=AM -- 'chronicle/*.md' 'docs/chronicle/*.md' 2>/dev/null || true)
   # Source spine accessor library when available — preferred frontmatter
   # check route per state-spine-contract.md. Graceful fallback for repos

package/dist/lite/.claude/hooks/pre-commit-identifier-leak-scrub.sh

@@ -33,12 +33,6 @@
 
 set -u
 
-# Override path — logged via trace-helper per bassclef discipline
-if [ "${SKIP_IDENTIFIER_LEAK_SCRUB:-0}" = "1" ]; then
-  echo "  identifier-leak-scrub: SKIP_IDENTIFIER_LEAK_SCRUB=1 — bypassing scrub" >&2
-  exit 0
-fi
-
 # R-N1 fail-soft: if grep is unavailable, warn to stderr and exit 0
 if ! command -v grep >/dev/null 2>&1; then
   echo "  identifier-leak-scrub: warn — grep unavailable; skipping scrub" >&2
@@ -59,6 +53,16 @@ else
   COMMAND=$(echo "$INPUT" | grep -oE '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/^"command"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
 fi
 
+# Override path — honors inline SKIP_FOO=1 cmd per #2036 Finding #4.
+# PreToolUse hooks run in Claude Code's env, not the git subshell env.
+# The helper lib parses $COMMAND for the inline prefix + falls back to env.
+# shellcheck source=/dev/null
+source "${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "$0")/../.." && pwd)}/lib/skip-env-inline-check.sh" 2>/dev/null || true
+if declare -F skip_var_set >/dev/null && skip_var_set "SKIP_IDENTIFIER_LEAK_SCRUB" "$COMMAND"; then
+  echo "  identifier-leak-scrub: SKIP_IDENTIFIER_LEAK_SCRUB=1 — bypassing scrub" >&2
+  exit 0
+fi
+
 # Pass through non-git-commit commands
 if ! echo "$COMMAND" | grep -qE '^[[:space:]]*git[[:space:]]+commit'; then
   exit 0

package/dist/lite/.claude/hooks/pre-commit-manifest-autoregen.sh

@@ -38,8 +38,10 @@ if ! echo "$COMMAND" | grep -q 'git commit'; then
   exit 0
 fi
 
-# Override path
-if [ "${SKIP_MANIFEST_AUTOREGEN:-0}" = "1" ]; then
+# Override path — honors inline SKIP_FOO=1 cmd per #2036 Finding #4.
+# shellcheck source=/dev/null
+source "${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "$0")/../.." && pwd)}/lib/skip-env-inline-check.sh" 2>/dev/null || true
+if declare -F skip_var_set >/dev/null && skip_var_set "SKIP_MANIFEST_AUTOREGEN" "$COMMAND"; then
   # Best-effort trace log; ignore failure so hook stays exit 0
   if command -v bash >/dev/null 2>&1 && [ -f ".claude/hooks/trace-helper.sh" ]; then
     bash .claude/hooks/trace-helper.sh "skip" "manifest-autoregen" "SKIP_MANIFEST_AUTOREGEN=1" 2>/dev/null || true

package/dist/lite/.claude/hooks/save-state.sh

@@ -216,6 +216,30 @@ if [ -n "$DIRTY" ]; then
   git add 'state/' ':!state/markers' ':!state/markers/**' 2>/dev/null || true
   git add .claude/projects/*/memory/ 2>/dev/null || true
 
+  STAGED=$(git diff --cached --name-only 2>/dev/null)
+  if [ -n "$STAGED" ]; then
+    # Operator-identifier leak check per #2036 Finding #1.
+    # save-state runs `git commit` directly, bypassing the PreToolUse
+    # pre-commit-gate.sh CCF-3 check. Even if CCF-3 fired, its grep
+    # exempts docs/ paths — so docs/sdlc-traces/*.log carrying absolute
+    # /Users/<name>/ paths would still get committed.
+    # Shared lib so this check matches pre-commit-gate CCF-3 shape.
+    REPO_ROOT_FOR_LIB="$(git rev-parse --show-toplevel 2>/dev/null)"
+    LEAK_LIB="${REPO_ROOT_FOR_LIB}/lib/identifier-leak-check.sh"
+    if [ -f "$LEAK_LIB" ]; then
+      # shellcheck source=/dev/null
+      source "$LEAK_LIB"
+      if ! check_staged_for_leaks; then
+        log "BLOCKED: auto-save detected operator paths in staged content; resetting stage"
+        git reset HEAD -- . 2>/dev/null || true
+        # Fall through — SESSION_LOCK cleanup below still fires, push is skipped
+        # because STAGED check below sees empty stage.
+        STAGED=""
+      fi
+    fi
+  fi
+
+  # Re-check STAGED after possible reset
   STAGED=$(git diff --cached --name-only 2>/dev/null)
   if [ -n "$STAGED" ]; then
     TIMESTAMP=$(date +%Y-%m-%dT%H:%M:%S)

package/dist/lite/.claude/hooks/trace-helper.sh

@@ -5,9 +5,28 @@
 #
 # Usage: source this file, then call:
 #   trace_log "hook-name" "trigger-description"
+#
+# Privacy — relative paths (#2036 Finding #1 — adopter report 2026-10-02):
+# The ${trigger} field can carry filesystem paths from caller args
+# (e.g., $FILE_PATH from PreToolUse hooks). We strip repo-root prefix
+# so adopter traces never leak /Users/<name>/ or /home/<name>/ paths
+# to adopter git. Fallback chain: $CLAUDE_PROJECT_DIR → git rev-parse
+# --show-toplevel → no-strip (silent — trigger lands as-is).
 
 TRACE_DIR="docs/sdlc-traces"
 
+# _trace_repo_root — resolve repo root for prefix-strip.
+# Precondition fallback per @luminary tony-hoare — Hoare R1 risk ledger.
+_trace_repo_root() {
+  if [ -n "${CLAUDE_PROJECT_DIR:-}" ]; then
+    echo "$CLAUDE_PROJECT_DIR"
+    return 0
+  fi
+  local root
+  root=$(git rev-parse --show-toplevel 2>/dev/null) || return 1
+  echo "$root"
+}
+
 trace_log() {
   local hook="$1"
   local trigger="$2"
@@ -17,6 +36,16 @@ trace_log() {
   today=$(date +%Y-%m-%d)
   local log_file="${TRACE_DIR}/${today}.log"
 
+  # Strip repo-root prefix from trigger before writing.
+  # Only strips when root is a non-empty prefix of trigger — leaves
+  # unrelated absolute paths (/opt/anthropic/..., /usr/bin/...) intact.
+  local root
+  root=$(_trace_repo_root 2>/dev/null) || root=""
+  if [ -n "$root" ] && [ "$root" != "/" ]; then
+    trigger="${trigger//$root\//}"
+    trigger="${trigger//$root/}"
+  fi
+
   mkdir -p "$TRACE_DIR" 2>/dev/null || true
   echo "${timestamp} | ${hook} | ${trigger} | — | —" >> "$log_file" 2>/dev/null || true
 }

package/dist/lite/.claude/rules/lite-manifest-schema-change-discipline.md

@@ -36,11 +36,41 @@ When a PR changes the manifest schema OR output shape:
 3. **Downstream cure named** — the entry names what adopters need to do. If nothing (backward-compatible add), say so explicitly. If code change (like the v0.36.0 `upstream_commit` removal), name the pattern.
 4. **Release script pre-flight** — before every `/release`, the script reads the ledger and confirms an entry exists for the outgoing `manifest_version`. Missing entry BLOCKs the cascade.
 
+## Retirements
+
+Retirement-class changes (content-remove: a file previously shipped in the lite manifest gets deleted intentionally) ship with the same discipline shape as additions. Three paired artifacts, same PR:
+
+1. **Ledger entry** under this ledger's `## Entries` section naming the removed slugs, the deletion SHA, the version bump (MINOR per content-remove policy), and the downstream cure (what adopters at an exact pin do).
+2. **Allowlist row** in `.claude/hooks/tests/fixtures/2026-09-16-lite-catalog-closure/retired-entries.txt` naming each removed `<type>/<slug>` + `retired-in=<SHA>` + `reason=<one-line>`. The Feathers v1.6.1 snapshot guard (Test 16 in `.claude/hooks/tests/generate-lite-manifest.test.sh`) subtracts allowlist rows before asserting zero drops. Without the allowlist row the test fails and main CI goes red.
+3. **Discipline amendment** when a new retirement class surfaces that this section does not cover (e.g., tier retirement, field retirement). Extend this `## Retirements` section rather than author a new rule, per Ousterhout's complexity-is-incremental principle.
+
+When this rule fires on retirement:
+
+- Any PR that deletes a file listed in the current `lite-manifest.json` under `.entries[].path`
+- Any PR that retires a schema field that previously shipped as REQUIRED
+
+Skips (same as additions):
+
+- Content-only changes where the file stays but its content_hash shifts
+- Comment-only edits
+
+**Anchor luminaries for retirement:**
+
+- `@luminary linus-torvalds` — retirement of a tier-tagged adopter-observable file is a userspace break; the ledger + allowlist + release-step6 check ship in one PR
+- `@luminary hyrum-wright` — observable behavior becomes dependency with enough adopters; the 2 removed slugs were cited in rule bodies, sister docs, and the fixture snapshot; every retirement needs observable-surface enumeration first
+- `@luminary michael-nygard` — current ledger discipline for additions is methodology at author time; retirement needs the same mechanical floor plus a stability-pattern gate (release-step6 pre-flight)
+- `@luminary michael-feathers` — the fixture snapshot is the characterization test; allowlist is the author-time hook that keeps it green
+- `@luminary vaughn-vernon` — `retired-entries.txt` is the anticorruption layer between the frozen snapshot and the current manifest
+- `@luminary john-ousterhout` — contrarian: extend the existing rule with this section, do not author a new rule; the mechanical pre-commit hook (`pre-retire-discipline-check.sh`) is deferred to a follow-on PR so this one stays scope-tight
+
 ## Anti-patterns
 
 **Schema field added but no ledger entry.** Release script pre-flight BLOCKs.
 INSTEAD: add the entry in the same PR.
 
+**File removed from the lite manifest without an allowlist row + ledger entry.** Test 16 (Feathers v1.6.1 snapshot guard) sees the drop and main CI goes red at the next run.
+INSTEAD: append a row to `retired-entries.txt` naming `<type>/<slug>  retired-in=<SHA>  reason=<one-line>` AND add a `## Retirements`-aware entry to `standards/lite-manifest-schema-changes.md` in the same PR.
+
 **Ledger entry written but wrong version bump.** Adopters plan their pin update against the wrong version.
 INSTEAD: correct the bump before merge. AJV validation of the entry format catches inconsistency.
 

package/dist/lite/.claude/skills/build/SKILL.md

@@ -330,14 +330,25 @@ Parse the validated goal's structure:
 ```bash
 # Already have BET_JSON, SPEC_PATH, DECOMP_PATH, UX_MIG_PATH from Phase 0
 # Read spec body for step enumeration. Per bassclef#367, spec MUST have
-# the exact heading `## Steps enumerated` (pinned in /spec SKILL.md
-# rules + templates/spec-template.md). /launch's Phase 9
-# emits this heading by contract. Specs that lack the section → exit 4.
+# the heading `## Steps enumerated` (pinned in /spec SKILL.md rules +
+# templates/spec-template.md). /launch's Phase 9 emits this heading by
+# contract. Specs that lack the section → exit 4.
+#
+# Finding #2 + #3 cure (#2036): the previous awk range
+# `/^## Steps enumerated/,/^## /` closed on its own start line because
+# `^## ` matches `^## Steps enumerated`. Flag-based extraction fixes it.
+# Grace window per ADR-040 D1 (through 2026-10-31): accept both the new
+# "Steps enumerated" / "### Step-N" and the historical "Workunits
+# enumerated" / "### WU-N" headings so legacy specs still build.
 SPEC_FILE="docs/specs/${SPEC_PATH}.md"
-WU_LIST=$(awk '/^## Steps enumerated/,/^## /' "$SPEC_FILE" | grep -E '^### WU-')
+WU_LIST=$(awk '
+  /^## (Steps|Workunits) enumerated/ { in_section=1; next }
+  /^## / { in_section=0 }
+  in_section
+' "$SPEC_FILE" | grep -E '^### (Step|WU)-')
 
-# Each WU should reference at least one story (US-NNN)
-WU_COUNT=$(echo "$WU_LIST" | grep -c '^### WU-' || echo 0)
+# Each step should reference at least one story (US-NNN)
+WU_COUNT=$(echo "$WU_LIST" | grep -cE '^### (Step|WU)-' || echo 0)
 ```
 
 Build structured object: `{ bet, spec_path, decomp_path, ux_migration_path, wus[] }`.
@@ -348,7 +359,8 @@ Verify each step traces to at least one story. Refuse if any step lacks
 story traceability.
 
 ```bash
-ORPHAN_WUS=$(echo "$WU_LIST" | grep -v 'US-' || true)
+# Keep only step headings; drop body lines before the US-NNN check.
+ORPHAN_WUS=$(echo "$WU_LIST" | grep -E '^### (Step|WU)-' | grep -v 'US-' || true)
 if [ -n "$ORPHAN_WUS" ]; then
   echo "/build: step enumeration lacks story traceability (bassclef#358 violation)" >&2
   echo "Orphan steps (no US-NNN ref):" >&2

package/dist/lite/.claude/skills/onboard-repo/SKILL.md

@@ -462,9 +462,28 @@ immediately without waiting for a sync cycle.
 
 ##### 1.2 Protect main from force-push and deletion
 
+**Heads up — GitHub free-tier adopters on PRIVATE repos:** the API call
+below returns HTTP 403 ("Upgrade to GitHub Pro or make this repository
+public") on free-tier accounts, because branch protection is a paid
+feature for private repos. Public repos get branch protection on every
+plan, free included. Pick a path below BEFORE running the call.
+
+Three ways to clear this step:
+
+1. **Make the repo public** — simplest; free plan includes branch
+   protection on public repos. Good fit when the code is open source
+   or ships to adopters anyway.
+2. **Upgrade the GitHub plan** — Pro / Team / Enterprise includes
+   branch protection on private repos.
+3. **Skip the API call** — rely on local safety (no `git push --force`
+   habits, PR review, pre-commit hooks). Mark the repo config so later
+   phases know branch protection is operator-managed, not substrate-
+   managed. See the fallback block below.
+
 ```bash
 DEFAULT_BRANCH=$(gh repo view "$REPO" --json defaultBranchRef -q '.defaultBranchRef.name')
 
+# Pro / public-repo path — run the API call.
 gh api "repos/$REPO/branches/$DEFAULT_BRANCH/protection" \
   --method PUT \
   --input - <<EOF
@@ -484,6 +503,28 @@ required here — agent-created PRs (bassclef-sync) need to merge
 without human intervention for the mobile-sync story. Add stricter
 rules per-repo in `.github/branch-protection.yml` if the repo warrants.
 
+**Free-tier private-repo fallback (path 3 above).** If the API
+returned 403 and the operator picked "skip and manage locally":
+
+```bash
+# Record the choice so later audits know main is not API-protected.
+mkdir -p .claude
+cat >> .claude/onboard-notes.md <<'NOTE'
+## Branch protection — operator-managed
+
+GitHub free-tier does not include branch protection on private repos.
+This repo relies on:
+- Local discipline: no `git push --force` to main.
+- PR review before merge.
+- Pre-commit hooks shipped by bassclef.
+
+Revisit if the repo moves to public, or the plan upgrades to Pro+.
+NOTE
+```
+
+The adopter can revisit this step after switching to public OR
+upgrading the plan.
+
 ##### 1.3 Add the production approval gate (if this repo deploys to prod)
 
 If the repo will deploy to production, per `manual-prod-approval.md`:

package/dist/lite/.claude/skills/release-notes/SKILL.md

@@ -108,6 +108,30 @@ Rules for external notes:
 - No feature names that aren't visible to users
 - Test: could someone who's never seen the codebase understand this?
 
+### 3.5. Run `/ogilvy-writing-audit` on each body
+
+Before saving the drafted bodies to disk, run `/ogilvy-writing-audit`
+on each one. The skill scans against Ogilvy + Roman-Raphaelson's
+rules (see `standards/ogilvy-writing-rules.md`) and returns
+severity-tagged findings.
+
+```bash
+/ogilvy-writing-audit docs/release-notes/YYYY-MM-DD-internal.md
+/ogilvy-writing-audit docs/release-notes/YYYY-MM-DD-external.md
+```
+
+Fix every 🔴 and 🟡 finding before step 4. When a 🟡 ships without
+a fix, cite the audit in the commit body and name why.
+
+Why this step. Release notes land in reader surfaces that must read
+clean — the GitHub Release artifact plus the Google Doc the team
+reviews. Jargon and grade-13 prose creep in without a mechanical
+check. PR #408 ran this discipline by hand across 8 entries, and
+PR #412 formalizes it so every future entry inherits the floor.
+
+Cross-ref: `.claude/rules/session-artifacts.md` §Release notes names
+this step as the discipline anchor.
+
 ### 4. Save locally
 
 ```

package/dist/lite/bassclef-version.json

@@ -1,7 +1,7 @@
 {
-  "version": "v1.6.4",
-  "marker_tag": "release-2026-09-28-21212e17",
-  "release_date": "2026-09-28T01:33:41Z",
-  "release_sha": "21212e17",
-  "release_tag": "release-2026-09-28-21212e17"
+  "version": "v1.6.6",
+  "marker_tag": "release-2026-10-03-89ceaa15",
+  "release_date": "2026-10-03T10:51:10Z",
+  "release_sha": "89ceaa15",
+  "release_tag": "release-2026-10-03-89ceaa15"
 }

package/dist/lite/gitignore

@@ -31,6 +31,14 @@ state/luminary-implementations/
 .claude/hooks/logs/
 .claude/hooks/*.trace
 
+# SDLC traces (operator-private; runtime artifacts carry operator paths)
+# Per #2036 Finding #1 (adopter report 2026-10-02) — auto-save was
+# committing /Users/<name>/ paths to adopter git every fire. Shipping this
+# line stops future adopter installs from leaking. Existing installs run
+# `git rm --cached -r docs/sdlc-traces/` one time to untrack files
+# already in history.
+docs/sdlc-traces/
+
 # Build output
 dist/
 

package/dist/lite/lib/deferred-actions.sh

@@ -72,9 +72,9 @@ _da_resolve_path() {
 da_get_field() {
   local id="$1"
   local field="$2"
-  local path
-  path="$(_da_resolve_path "$id")"
-  [[ -f "$path" ]] || { echo "not-found: $path" >&2; return 1; }
+  local p
+  p="$(_da_resolve_path "$id")"
+  [[ -f "$p" ]] || { echo "not-found: $p" >&2; return 1; }
   # Read frontmatter only (between two `---` lines)
   awk -v f="$field" '
     BEGIN { in_fm = 0; seen_open = 0 }
@@ -89,7 +89,7 @@ da_get_field() {
       print
       exit
     }
-  ' "$path"
+  ' "$p"
 }
 
 da_resolve() {

package/dist/lite/lib/fixture-builder.sh

@@ -82,16 +82,16 @@ fixture_cleanup() {
   if [ "${SKIP_FIXTURE_BUILDER:-0}" = "1" ]; then
     return 0
   fi
-  local path="${1:?fixture_cleanup requires path}"
-  if [ ! -e "$path" ]; then
+  local p="${1:?fixture_cleanup requires path}"
+  if [ ! -e "$p" ]; then
     # Idempotent — nothing to do
     return 0
   fi
-  if [ ! -f "$path/$_FIXTURE_SENTINEL" ]; then
-    echo "fixture_cleanup: refusing to remove path without sentinel: $path" >&2
+  if [ ! -f "$p/$_FIXTURE_SENTINEL" ]; then
+    echo "fixture_cleanup: refusing to remove path without sentinel: $p" >&2
     return 1
   fi
-  rm -rf "$path"
+  rm -rf "$p"
   return 0
 }
 
@@ -105,10 +105,10 @@ fixture_cleanup_all() {
     return 0
   fi
   local IFS=$'\n'
-  local path
-  for path in $_FIXTURE_REGISTRY; do
-    [ -n "$path" ] || continue
-    fixture_cleanup "$path" 2>/dev/null || true
+  local p
+  for p in $_FIXTURE_REGISTRY; do
+    [ -n "$p" ] || continue
+    fixture_cleanup "$p" 2>/dev/null || true
   done
   _FIXTURE_REGISTRY=""
 }

package/dist/lite/lib/identifier-leak-check.sh

@@ -0,0 +1,85 @@
+#!/bin/bash
+# tier: lite
+# Operator-identifier leak check for staged git content.
+#
+# Shared across:
+#   - .claude/hooks/save-state.sh (inline before `git commit`;
+#     bypasses pre-commit-gate.sh because save-state runs git
+#     directly, not through the agent's PreToolUse path)
+#   - future: .claude/hooks/pre-commit-gate.sh CCF-3 (unification
+#     deferred to a follow-on; shape intentionally matches CCF-3
+#     today so the two can merge without semantic drift)
+#
+# Rejects staged content carrying absolute operator paths matching
+# /Users/<name>/ or /home/<name>/. Mirrors pre-commit-gate.sh:50-53
+# exemptions so policy docs that quote the pattern don't trip.
+#
+# Per #2036 Finding #1 (adopter report 2026-10-02).
+# Per @luminary nygard — stability pattern (circuit breaker on commit).
+# Per @luminary hoare — precondition contract before `git commit`.
+
+# check_staged_for_leaks — scan git-staged content for operator paths.
+#
+# Returns 0 when staged content is clean OR when every leaking file
+# sits in an exempt path (policy docs, rules, luminaries).
+# Returns 1 when staged content outside exempt paths carries a leak.
+# On exit 1, every leaking file is named on stderr with line number
+# and the matched pattern.
+check_staged_for_leaks() {
+  # Staged non-exempt files. Match pre-commit-gate.sh:46-53 exemption shape
+  # so the two gates agree on which paths carry policy docs legitimately
+  # quoting operator paths.
+  local staged
+  staged=$(git diff --cached --name-only --diff-filter=AM 2>/dev/null | \
+    grep -vE '^\.claude/(rules|hooks|skills|luminaries|agents)/' | \
+    grep -vE '^standards/' | \
+    grep -vE '^architecture/' | \
+    grep -vE '^design/' | \
+    grep -vE '^docs/standards/' | \
+    grep -vE '^docs/rules/' | \
+    grep -vE '^chronicle/' | \
+    grep -vE '^strategy/' | \
+    grep -vE '^scripts/tests/' || true)
+
+  [ -z "$staged" ] && return 0
+
+  local leaked=""
+  while IFS= read -r f; do
+    [ -z "$f" ] && continue
+    [ ! -f "$f" ] && continue
+    local matches
+    matches=$(grep -nE '/Users/[A-Za-z0-9_.-]+|/home/[A-Za-z0-9_.-]+' "$f" 2>/dev/null || true)
+    if [ -n "$matches" ]; then
+      leaked="${leaked}
+  ${f}:
+${matches}
+"
+    fi
+  done <<< "$staged"
+
+  if [ -n "$leaked" ]; then
+    {
+      echo ""
+      echo "============================================"
+      echo "BLOCKED: operator path in staged content (#2036 Finding #1)"
+      echo "============================================"
+      echo "$leaked"
+      echo ""
+      echo "Operator-specific paths (/Users/<name>, /home/<name>) must NOT"
+      echo "ship in adopter git. Common cause: docs/sdlc-traces/*.log"
+      echo "carrying absolute paths from PreToolUse hook callers."
+      echo ""
+      echo "Fixes:"
+      echo "  1. Delete the staged file if it's a trace log auto-generated"
+      echo "     (gitignored going forward per #2036 Finding #1 cure)"
+      echo "  2. Rewrite the path as repo-relative"
+      echo "  3. Move policy docs under docs/standards/ or docs/rules/ (exempt)"
+      echo ""
+      echo "Policy: standards/two-layer-config.md (bassclef#740)"
+      echo "============================================"
+    } >&2
+    return 1
+  fi
+
+  return 0
+}