@thebassclef/lite 1.9.9 → 1.9.10

package/README.md

@@ -67,7 +67,7 @@ your browser.
 
 ## Current release
 
-<!-- version-start -->1.9.9<!-- version-end -->
+<!-- version-start -->1.9.10<!-- version-end -->
 
 See [CHANGELOG.md](CHANGELOG.md) for the full changelog. Adopter-facing
 release notes live at [docs.bassclef.dev/docs/whats-new/releases](https://docs.bassclef.dev/docs/whats-new/releases).

package/dist/index.cjs

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const version = "1.9.9";
+const version = "1.9.10";
 exports.version = version;

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-export declare const version: "1.9.9";
+export declare const version: "1.9.10";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,4 +1,4 @@
-const version = "1.9.9";
+const version = "1.9.10";
 export {
   version
 };

package/dist/lite/.claude/hooks/pre-commit-gate.sh

@@ -201,6 +201,37 @@ if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_LEAD_LENS_SIGNOF
     -e '^\.github/workflows/bassclef-.*\.yml$' \
     -e '^scripts/[^/]+\.sh$' \
     || true)
+  # Install-written-paths filter per bassclef-upstream#2036 Finding #8 (Kunal).
+  # Rule: .claude/rules/install-written-paths-mediation.md
+  # Any staged substrate path registered as install-written AND unchanged since
+  # install is dropped from the author-edit set. Lead-lens gate fires only on
+  # author-edited substrate paths.
+  if [ -n "$STAGED_SUBSTRATE_LL" ]; then
+    IWP_LIB=""
+    if [ -f "lib/install-written-paths.sh" ]; then
+      IWP_LIB="lib/install-written-paths.sh"
+    elif [ -f "$BASSCLEF_DIR/lib/install-written-paths.sh" ]; then
+      IWP_LIB="$BASSCLEF_DIR/lib/install-written-paths.sh"
+    fi
+    if [ -n "$IWP_LIB" ]; then
+      # shellcheck source=/dev/null
+      . "$IWP_LIB" 2>/dev/null || true
+      if declare -F is_install_written_path >/dev/null 2>&1; then
+        FILTERED_LL=""
+        while IFS= read -r _iwp_f; do
+          [ -z "$_iwp_f" ] && continue
+          if is_install_written_path "$_iwp_f" 2>/dev/null; then
+            trace_log "pre-commit" "lead-lens skip install-written path=$_iwp_f"
+            continue
+          fi
+          FILTERED_LL="${FILTERED_LL}${FILTERED_LL:+$'\n'}$_iwp_f"
+        done <<EOF
+$STAGED_SUBSTRATE_LL
+EOF
+        STAGED_SUBSTRATE_LL="$FILTERED_LL"
+      fi
+    fi
+  fi
   if [ -n "$STAGED_SUBSTRATE_LL" ]; then
     LL_BRANCH_SLUG=$(git branch --show-current 2>/dev/null | tr '/' '-')
     PREM_M="state/markers/pre-mortem/${LL_BRANCH_SLUG}.marker"

package/dist/lite/.claude/hooks/pre-commit-identifier-leak-scrub.sh

@@ -97,8 +97,36 @@ fi
 # Filter to '+' lines only so a commit that REMOVES a pre-existing leak
 # does not trip on the removed-content line. `+++` file headers stripped.
 # Per sunj-labs/bassclef-upstream#1575.
+#
+# Self-exclude per sunj-labs/bassclef-cli#305: the hook, its test, the
+# rule, and the pattern-source file all carry pattern-looking strings
+# as documentation. Scanning them blocks the first commit after a fresh
+# bassclef init and teaches adopters to skip the check on day one.
+# Non-self paths with the same patterns STILL block (Test 19).
+SELF_EXCLUDE_PATHS=(
+  ".claude/hooks/pre-commit-identifier-leak-scrub.sh"
+  ".claude/hooks/tests/pre-commit-identifier-leak-scrub.test.sh"
+  ".claude/rules/identifier-leak-prevention.md"
+  "standards/identifier-leak-patterns.txt"
+)
 if [ -z "$BLOCK_REASON" ]; then
-  STAGED_DIFF=$(git diff --cached 2>/dev/null | grep '^+' | grep -v '^+++' || echo "")
+  STAGED_FILES=$(git diff --cached --name-only 2>/dev/null || echo "")
+  STAGED_DIFF=""
+  while IFS= read -r file; do
+    [ -z "$file" ] && continue
+    skip=0
+    for sp in "${SELF_EXCLUDE_PATHS[@]}"; do
+      if [ "$file" = "$sp" ]; then
+        skip=1
+        break
+      fi
+    done
+    [ "$skip" = "1" ] && continue
+    file_diff=$(git diff --cached -- "$file" 2>/dev/null | grep '^+' | grep -v '^+++' || echo "")
+    if [ -n "$file_diff" ]; then
+      STAGED_DIFF+="$file_diff"$'\n'
+    fi
+  done <<< "$STAGED_FILES"
   if [ -n "$STAGED_DIFF" ]; then
     MATCH=$(echo "$STAGED_DIFF" | grep -oE "$IDENTIFIER_PATTERNS" | head -1)
     if [ -n "$MATCH" ]; then
@@ -108,6 +136,29 @@ if [ -z "$BLOCK_REASON" ]; then
   fi
 fi
 
+# Check 3 — git author identity (per sunj-labs/bassclef-cli#305)
+# On a Mac without user.email set, git builds the author from username +
+# hostname (e.g., `<user>@<host>.local`). The address ships in every commit.
+# Scan GIT_AUTHOR_IDENT against the pattern set plus the `.local` suffix.
+# Fail-soft when git is missing or the ident cannot be resolved.
+if [ -z "$BLOCK_REASON" ] && command -v git >/dev/null 2>&1; then
+  AUTHOR_IDENT=$(git var GIT_AUTHOR_IDENT 2>/dev/null || true)
+  if [ -n "$AUTHOR_IDENT" ]; then
+    # Format: "Name <email> timestamp timezone"
+    AUTHOR_EMAIL=$(echo "$AUTHOR_IDENT" | grep -oE '<[^>]+>' | tr -d '<>')
+    if [ -n "$AUTHOR_EMAIL" ]; then
+      MATCH=$(echo "$AUTHOR_EMAIL" | grep -oE "$IDENTIFIER_PATTERNS" | head -1)
+      if [ -z "$MATCH" ] && echo "$AUTHOR_EMAIL" | grep -qE '\.local$'; then
+        MATCH="$AUTHOR_EMAIL"
+      fi
+      if [ -n "$MATCH" ]; then
+        BLOCK_REASON="commit author"
+        BLOCK_MATCH="$MATCH"
+      fi
+    fi
+  fi
+fi
+
 # BLOCK if any pattern matched
 if [ -n "$BLOCK_REASON" ]; then
   cat >&2 <<EOF
@@ -128,7 +179,12 @@ Resolution paths:
   1. Rewrite the commit message or staged content to drop the identifier
      - Replace machine names with placeholders like <machine> or the branch
      - Replace absolute paths with relative paths or \$HOME references
-  2. Override (rare — for legitimate cases like DON'T-do-this documentation):
+  2. If the match is in your commit author identity:
+     - Set a stable identity: git config --global user.email \\
+         <username>@users.noreply.github.com
+     - And: git config --global user.name "<Your Name>"
+     - Then retry the commit; the author will no longer include the host.
+  3. Override (rare — for legitimate cases like DON'T-do-this documentation):
      SKIP_IDENTIFIER_LEAK_SCRUB=1 git commit ...
 
 See .claude/rules/identifier-leak-prevention.md for full discipline.

package/dist/lite/.claude/hooks/session-reflection.d/83-install-written-paths-rebuild.sh

@@ -0,0 +1,111 @@
+#!/bin/bash
+# tier: lite
+# install-class: dual
+#
+# Session-start fragment: rebuild install-written-paths manifest when missing/stale.
+# Per bassclef-upstream#2036 Finding #8 (Kunal Slot 1 cure).
+#
+# Walks lite-manifest.json. Registers each shipped file as install-written
+# via the lib. Runs when state/install-written-paths.json is missing OR
+# when any file in lite-manifest is newer than the manifest.
+#
+# Fail-soft per Nygard — logs advisory and continues on error.
+# Override: SKIP_INSTALL_WRITTEN_PATHS_REBUILD=1
+
+# Env-reach safe guard per bassclef-upstream#2036 Finding #4.
+# Fragment is sourced by session-reflection.sh; use return (not exit) so parent survives.
+# shellcheck disable=SC2317
+if [ -n "${SKIP_INSTALL_WRITTEN_PATHS_REBUILD:-}" ]; then
+  return 0 2>/dev/null
+fi
+
+_iwp_fragment_log() {
+  if command -v trace_log >/dev/null 2>&1; then
+    trace_log "install-written-paths-rebuild" "$*"
+  fi
+}
+
+_iwp_fragment_main() {
+  local project_root="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+  local lite_manifest="$project_root/lite-manifest.json"
+  local write_manifest="$project_root/state/install-written-paths.json"
+  local lib="$project_root/lib/install-written-paths.sh"
+
+  # Fallback to BASSCLEF_DIR when CLAUDE_PROJECT_DIR doesn't carry bassclef
+  if [ ! -f "$lite_manifest" ] && [ -n "${BASSCLEF_DIR:-}" ]; then
+    lite_manifest="$BASSCLEF_DIR/lite-manifest.json"
+    lib="$BASSCLEF_DIR/lib/install-written-paths.sh"
+  fi
+
+  # Skip when inputs missing (fail-soft)
+  if [ ! -f "$lib" ]; then
+    _iwp_fragment_log "skip reason=no-lib"
+    return 0
+  fi
+
+  if [ ! -f "$lite_manifest" ]; then
+    _iwp_fragment_log "skip reason=no-lite-manifest"
+    return 0
+  fi
+
+  if ! command -v jq >/dev/null 2>&1; then
+    _iwp_fragment_log "skip reason=no-jq"
+    return 0
+  fi
+
+  # Decide whether to rebuild: missing OR older than lite-manifest
+  local rebuild=0
+  if [ ! -f "$write_manifest" ]; then
+    rebuild=1
+  elif [ "$lite_manifest" -nt "$write_manifest" ]; then
+    rebuild=1
+  fi
+
+  if [ "$rebuild" -eq 0 ]; then
+    _iwp_fragment_log "skip reason=manifest-fresh"
+    return 0
+  fi
+
+  # Source lib — subshell so caller scope stays clean
+  (
+    # shellcheck source=/dev/null
+    . "$lib" 2>/dev/null || exit 0
+
+    if ! declare -F install_written_paths_register >/dev/null 2>&1; then
+      _iwp_fragment_log "skip reason=lib-missing-verb"
+      exit 0
+    fi
+
+    # Reset manifest to empty, then walk lite-manifest entries
+    rm -f "$write_manifest" 2>/dev/null || true
+    install_written_paths_rebuild 2>/dev/null || true
+
+    local registered=0
+    local skipped=0
+
+    # Each lite-manifest entry has .path field — register when file exists on disk
+    while IFS= read -r path; do
+      [ -z "$path" ] && continue
+      local full
+      case "$path" in
+        /*) full="$path" ;;
+        *) full="$project_root/$path" ;;
+      esac
+      if [ -f "$full" ]; then
+        if install_written_paths_register "$path" "bassclef-sync-template" 2>/dev/null; then
+          registered=$((registered + 1))
+        else
+          skipped=$((skipped + 1))
+        fi
+      else
+        skipped=$((skipped + 1))
+      fi
+    done < <(jq -r '.entries[]?.path // empty' "$lite_manifest" 2>/dev/null)
+
+    _iwp_fragment_log "rebuild complete registered=$registered skipped=$skipped"
+  ) || true
+
+  return 0
+}
+
+_iwp_fragment_main

package/dist/lite/.claude/hooks/state-validate.sh

@@ -61,6 +61,14 @@ SCHEMA_DIR="${PROJECT_DIR}/standards/state-spine/schemas"
 
 # If schema dir doesn't exist, this repo doesn't have spine v0 yet — pass through
 if [ ! -d "$SCHEMA_DIR" ]; then
+  # Per cli#316 — honest skip. Previously exited 0 silently; adopters +
+  # agents on lite couldn't tell "validated" from "not checked". /launch
+  # and /objectory-decompose SKILLs promise this hook will BLOCK bad
+  # frontmatter. On lite, where schemas don't ship, this message makes
+  # the skip visible so the promise doesn't lie.
+  if [ "${STATE_VALIDATE_QUIET:-0}" != "1" ]; then
+    echo "state-validate: schemas not available (standards/state-spine/schemas missing at $SCHEMA_DIR); validation skipped at this tier — set STATE_VALIDATE_QUIET=1 to silence" >&2
+  fi
   exit 0
 fi
 

package/dist/lite/.claude/rules/install-written-paths-mediation.md

@@ -0,0 +1,74 @@
+---
+tier: lite
+---
+
+# Install-Written-Paths — single accessor mediation
+
+Discipline hooks that would fire on files written by install writers (`bassclef init`, `bassclef-sync.sh`, `bassclef-hook-connect`, `schedule-auto-save`, template scripts) MUST consult `lib/install-written-paths.sh` via the single accessor `is_install_written_path <path>` before firing on each staged file.
+
+The lib + manifest ship per bassclef-upstream#2036 Finding #8 (Kunal cold-adopter report, 2026-10-02). Structural cure for Class A (install-leak surfaces).
+
+## When this rule fires
+
+Any discipline hook that currently fires on file content without discriminating install-written from author-edited. Candidate hooks:
+
+- `.claude/hooks/pre-commit-gate.sh` — lead-lens 3-marker gate section (consumer wired per this cure's V1 PR)
+- `.claude/hooks/pre-commit-identifier-leak-scrub.sh` — identifier-leak sister per Kunal #1 (future adopter per R2 risk ledger)
+- Any new discipline hook authored under the loop discipline (`.claude/rules/loop-discipline.md`) that assumes author-edit
+
+## What the rule requires
+
+Before firing discipline on a staged path, each discipline hook:
+
+1. Sources `lib/install-written-paths.sh`.
+2. Calls `is_install_written_path "$staged_path"`.
+3. When return is 0 (true — path is install-written AND content hash matches), SKIP discipline for that path. Emit a trace line via `trace_log` for audit.
+4. When return is 1 (false — path not in manifest OR hash drifted), FIRE discipline as today.
+
+When all staged paths return 0, the hook returns pass without discipline. When at least one returns 1, the hook fires discipline on the author-edited paths.
+
+## Anti-patterns
+
+### Reimplementing the discrimination
+
+Hook authors who grep `.bassclef-source.json` or hard-code install path lists duplicate the lib. Future rename events or new install writers break them silently.
+
+INSTEAD: source the lib. Compose with the shared discipline.
+
+### Skipping the lib for sister hooks
+
+Discipline hooks that fire on install-written content but don't consult the lib produce Kunal-pattern false fires on cold adopters.
+
+INSTEAD: add the consultation at the first opportunity. Per @luminary michael-feathers legacy-code retrofit — sister hooks consult the lib when next touched for other work.
+
+## Composes with
+
+- `.claude/rules/bootstrap-pair-discipline.md` — this rule + lib + schema + hook consumption + session-start fragment ship paired
+- `.claude/rules/state-schema-validation.md` — schema at `standards/state-spine/schemas/install-written-paths.schema.json` validates on write
+- `.claude/rules/we-dont-break-adopters.md` — additive; existing SKIP_* paths preserved
+- `.claude/rules/sibling-smoke-after-substrate-change.md` — post-merge sibling smoke confirms Kunal #8 cured end-to-end
+- @luminary linus-torvalds — adopter contract (manifest IS the adopter-visible surface this cure protects)
+- @luminary michael-feathers — characterization tests (lib tests pin actual install-vs-author discrimination)
+- @luminary john-ousterhout — deep module (narrow 5-verb interface hides schema + hash + I/O complexity)
+- @luminary michael-nygard — fail-soft (missing manifest, malformed JSON, missing hash tool → return "not install-written" + advisory to stderr)
+
+## Override path
+
+`SKIP_INSTALL_WRITTEN_PATHS=1` — the lib's `is_install_written_path` returns 1 (false) unconditionally when this env var is set. Hooks fire discipline normally. Logged via `trace_log`.
+
+INSTEAD of overriding routinely: trust the lib. Overrides are for one-shot debugging where the manifest-based path has misclassified.
+
+## V1 scope — this cure's PR
+
+- `lib/install-written-paths.sh` + Tier 0 tests
+- `standards/state-spine/schemas/install-written-paths.schema.json` + state-spine.md Shape C entry
+- `.claude/hooks/pre-commit-gate.sh` — lead-lens 3-marker gate section amended to consult the lib
+- `presence/install/bassclef-hook-connect.sh` — registers each path on write
+- `presence/install/bassclef-sync.template.sh` — registers each path on sync
+- `.claude/hooks/session-reflection.d/83-install-written-paths-rebuild.sh` — regenerates manifest when missing at session-start
+
+## Deferred to follow-on
+
+- `bassclef init` npm-side registration (lands in bassclef-cli; sources the lib via package symlink)
+- `pre-commit-identifier-leak-scrub.sh` consultation (sister hook adoption per Feathers legacy-code retrofit)
+- Any other hook that assumes author-edit — audit at next /architect-review

package/dist/lite/.claude/skills/autonomous/SKILL.md

@@ -15,15 +15,19 @@ requires:
 
 # Autonomous Development
 
-Entry point for autonomous and semi-autonomous development sessions.
-Invoke at any point in any repo that inherits bassclef.
+<!-- FKGL-EXEMPT: cli#331 cure — orientation block names skill scope + tier split. Short SVO loses the tier contract. -->
+Entry point for autonomous SDLC sessions. Use in any repo inheriting bassclef.
 
-This file is a thin dispatcher. Deep procedural detail lives in:
+**Lite adopters:** this file is self-contained. The `## Lite procedure` block below has the minimum steps to run `/autonomous start`. No `strategy/` file is needed at lite tier.
 
-- `strategy/autonomous-dry-run.md` — read-only boot-sequence preview
-- `strategy/autonomous-boot-sequence.md` — `/autonomous start` scaffold +
-  activate, including Step 0–9, Construction automation A–E, pre-build
-  gates, branch stacking, context management, transition hierarchy
+**Standard and ultra adopters:** deeper procedure lives in these standard-tier files:
+
+- `strategy/autonomous-dry-run.md` — read-only boot preview
+- `strategy/autonomous-boot-sequence.md` — full `/autonomous start` steps 0-9 + Construction automation A-E
+- `strategy/agent-choreography.md` — multi-agent operational guide
+
+Per cli#331 — closes the "lite skill points at files lite doesn't ship" gap.
+<!-- /FKGL-EXEMPT -->
 
 ## Usage
 
@@ -263,6 +267,48 @@ silently proceed with defaults.
 
 ---
 
+## Lite procedure — self-contained minimum (cli#331)
+
+<!-- FKGL-EXEMPT: cli#331 cure — procedure block for lite adopters. Short SVO loses step contract. -->
+Lite adopters run `/autonomous start` with this block only. No `strategy/` file needed.
+
+**Step 0 — validate args.** Accept `operator-gated` or `orchestrator-gated` for gating. Accept `sequential` or `parallel` for mode. Reject anything else with a helpful error.
+
+**Step 1 — ask the operator two choices.** Gating (default: operator-gated). Mode (default: sequential). Use AskUserQuestion.
+
+**Step 2 — check readiness.** Run through this checklist. Scaffold missing items as you go:
+- `substrate.config.md` present → if missing, dispatch `/onboard-repo` first
+- `docs/whereami.md` present → if missing, dispatch `/onboard-repo` first
+- Current iteration goal doc at `docs/iteration-bets/<slug>.md` → if missing, ask operator for the goal; create a minimal doc
+- Session lock free → if active and >30 min old, clear with announcement
+- Chronicle fresh (last 24h) → if stale, note "will write at session-end"
+
+**Step 3 — risk register (optional on lite).** `docs/risk-register.md` is optional at lite tier. Create one only when operator asks or when mode is orchestrator-gated. Skip the check otherwise.
+
+**Step 4 — budget ceiling (optional on lite).** Ask the operator "how many turns are you OK spending on this session?" Default to "proceed until operator says stop" when operator skips. Record whatever they say in session memory.
+
+**Step 5 — confirm scope.** Echo the goal, the two choices, and the ceiling (or "no ceiling"). Ask: "Ready to start?" Wait for yes.
+
+**Step 6 — execute the SDLC chain.** Fire the agents in order per gating choice:
+- **operator-gated:** pause between each agent for operator approval. Agents: Shaper → PM → Architect → Designer → Builder → Reviewer → Deployer → Closer. Operator picks which fire.
+- **orchestrator-gated:** chain the agents without pausing. Each writes a handoff doc. Builder commits code. Reviewer runs `/verify`. PRs open for operator merge (or admin-merge within scope).
+
+**Step 7 — handle Construction.** For code work:
+- Parse scope into GitHub issues (one issue per discrete change)
+- Write stack manifest at `docs/stacks/<slug>.md` if more than one branch
+- Create branches with issue numbers in name (not placeholder — per bassclef#295)
+- Dispatch Builder per branch; fire `/temperance` + `/diagnose` + `/verify` per branch
+- Open PR per branch; squash merge after Reviewer PASS
+
+**Step 8 — close the session.** Dispatch `/session-end` which handles chronicle write, whereami bump, journal entry.
+
+Lite adopters at any point can escalate to operator-gated mode mid-session. Say "pause for me to review" and the next agent handoff waits.
+
+**Deep procedure for standard+ adopters.** Standard+ and ultra adopters have the strategy/ files above. Those cover Construction automation A-E, pre-build gates, branch stacking, context management, transition hierarchy, and the full choreography rules. Read them for the complete design.
+<!-- /FKGL-EXEMPT -->
+
+---
+
 ## Rules
 
 - Never start work without operator confirmation

package/dist/lite/.claude/skills/build/SKILL.md

@@ -255,7 +255,7 @@ FLOOR_PATTERN='src/lib/auth/|src/middleware\.ts|prisma/schema\.prisma|prisma/mig
 ACCEPTANCE_CONTENT=$(awk '
   /^```/{in_code = !in_code; next}
   in_code{next}
-  /^### WU-/{in_wu=1; next}
+  /^### (Step|WU)-/{in_wu=1; next}
   /^## /{in_wu=0}
   in_wu && /^- \[ \]/ {print}
 ' "docs/specs/${SPEC_PATH}.md" "docs/decompositions/${DECOMP_PATH}.md" 2>/dev/null)
@@ -273,8 +273,8 @@ fi
 ```
 
 **Why this is precise (per bassclef#366):** the scan only looks at
-step acceptance criteria (lines starting `- [ ]` under `### WU-N`
-headings, outside code blocks) plus file-path-shaped references in
+step acceptance criteria (lines starting `- [ ]` under `### Step-N`
+or `### WU-N` headings, outside code blocks) plus file-path-shaped references in
 the goal's frontmatter. Prose paragraphs that DESCRIBE the floor (like
 this section) don't trigger refusal. Code blocks that document the
 floor don't trigger refusal. Only structured ACTIONS the agent would
@@ -590,7 +590,26 @@ already open. Operator merges inline.
 
 ### Phase 7 — ApprovalGateLink (LIVE — STUBBED)
 
-Tonight emits literal:
+<!-- FKGL-EXEMPT: cli#332 cure — Phase 7 branches on hosting_platform value. Three code-shape outputs. Technical stub-shape dispatch pattern. -->
+
+Phase 7 branches on `hosting_platform` read from `substrate.config.md`:
+
+**When `hosting_platform: none`** (lite adopters, operator-only tools, local-first apps) — emit:
+
+```
+TODO: live execution — built, not deployed. hosting_platform=none in
+substrate.config.md. The code is reviewed and committed. Running it is
+your choice.
+
+To add hosting later:
+  - Edit substrate.config.md: set hosting_platform to one of
+    github-pages | netlify | cloudflare-pages | vercel | amplify
+  - Run /onboard-repo --with-deploy-host to wire the host
+  - Then /build Phase 7 will dispatch /deploy-prod via GitHub Environment
+    + required-reviewer rail per manual-prod-approval.md.
+```
+
+**When `hosting_platform` is set to a known value** — emit:
 
 ```
 TODO: live execution — when all steps merged + CI green, would dispatch
@@ -599,6 +618,17 @@ required-reviewer rail per manual-prod-approval.md. Operator approves
 prod deploy via GitHub UI from phone. /build NEVER bypasses this rail.
 ```
 
+**When `hosting_platform` is unset or unrecognized** — emit:
+
+```
+TODO: live execution — hosting_platform not set in substrate.config.md.
+Can't deploy without a target. Set hosting_platform to one of none |
+github-pages | netlify | cloudflare-pages | vercel | amplify, then re-run.
+```
+
+Per cli#332 — closes the "lite promises deployed app without a deploy path" honesty gap.
+<!-- /FKGL-EXEMPT -->
+
 <!-- FKGL-EXEMPT: Phase 7.5 references paths + skip criteria per architect-review SKILL; technical dispatch stub matches sibling STUB pattern -->
 ### Phase 7.5 — /architect-review auto-dispatch (LIVE — STUBBED, per #1437 Step 2 wiring)
 

package/dist/lite/.claude/skills/deploy-prod/SKILL.md

@@ -17,8 +17,18 @@ requires:
 
 # Deploy to Production
 
+<!-- FKGL-EXEMPT: cli#332 cure — tier contract block names scope + override path. Short SVO loses host-override contract. -->
 Standard deployment procedure. Run after code is reviewed and ready to ship.
 
+**Tier contract (per cli#332):**
+
+- This skill ships at `tier: lite` as a generic 5-step template: test → build → push → CI → verify.
+- The template body is host-agnostic. Host-specific commands (AWS, Vercel, Netlify, Fly, Railway, GitHub Pages) are not shipped here.
+- When `substrate.config.md` sets `hosting_platform` to a known value, standard-tier adopters add a host-specific wrapper that calls this skill AND runs the host commands. Lite adopters without `hosting_platform` run the template steps + stop.
+- `/build` Phase 7 dispatches this skill only when `hosting_platform` is set to a known value — see /build Phase 7 branching logic per cli#332.
+- `manual-prod-approval.md` applies in all tiers: GitHub Environment `prod` with required reviewer MUST be configured before any prod deploy fires.
+<!-- /FKGL-EXEMPT -->
+
 ## Procedure
 
 ### Step 1: Pre-flight

package/dist/lite/.claude/skills/launch/SKILL.md

@@ -309,9 +309,35 @@ Per `standards/voice-input-pattern.md` + Phase V Hey-Alexa MVD goal (`docs/itera
 - Existing text-mode + brownfield-mode behavior unchanged when flag absent
 - Composes with `--brownfield` (rare; voice-driven brownfield refactor is plausible but not the MVD path)
 
+### Phase 0b — hosting_platform ask (per cli#332)
+
+<!-- FKGL-EXEMPT: cli#332 cure — hosting_platform ask step. Short SVO loses the config-key contract. -->
+Read `substrate.config.md` for the `hosting_platform` key. If unset or missing, ask the operator once:
+
+```
+Where should this run?
+  a. local only (default — develop + preview on your machine)
+  b. a static host (GitHub Pages / Netlify / Cloudflare Pages / Vercel)
+  c. a server host (Amplify / Fly.io / Railway)
+  d. I'll deploy myself — just build the plan
+```
+
+Write the answer to `substrate.config.md` `hosting_platform`:
+- `a` → `hosting_platform: none`
+- `b` → prompt for which static host; write that value (`github-pages` / `netlify` / `cloudflare-pages` / `vercel`)
+- `c` → prompt for which server host; write that value (`amplify` / `fly` / `railway`)
+- `d` → `hosting_platform: operator-managed`
+
+If already set, skip the question. The answer flows to /build Phase 7 which branches on this value per cli#332.
+
+Per cli#332 — closes "Nothing asks where the app will run" at the earliest surface in the chain.
+<!-- /FKGL-EXEMPT -->
+
 ### Phase 1 — `/interpret-input`
 
+<!-- FKGL-EXEMPT: pre-existing text-mode + brownfield-mode description — technical dispatch contract per bassclef#459 sub-goal 1. -->
 Dispatches `/interpret-input` with the type detected by Phase 0. Text mode preserves the existing text-mode behavior; brownfield mode invokes the Phase C extractor (LR2 WU-1, bassclef#459 sub-goal 1) which walks the repo and populates structural hints (entities, actors, routes, README excerpt).
+<!-- /FKGL-EXEMPT -->
 
 ```bash
 # Generate sprint slug + InputArtifact path

package/dist/lite/.claude/skills/onboard-repo/SKILL.md

@@ -433,25 +433,25 @@ Idempotent API calls against the target repo via `gh`.
 # Read from git remote — don't infer from cwd basename (cwd can be renamed)
 REPO=$(gh repo view --json nameWithOwner -q .nameWithOwner)
 
-declare -A LABELS=(
-  [bassclef-evolution]="A6E0F2:Candidate for promotion to bassclef"
-  [agent-user-proposed]="D4A5F5:Proposed by agent in an app repo"
-  [bassclef-sync]="8FD4A4:Related to bassclef substrate syncing"
-  [review-required]="F5B94A:Blocks — human review required"
-  [bug]="E4443A:Defect"
-  [enhancement]="A2EEEF:New or improved functionality"
-  [security]="FF0000:Security-relevant"
-  [infra]="C9D1D9:Infrastructure / workflows / tooling"
-  [priority-high]="E4443A:High priority"
-  [priority-medium]="F5B94A:Medium priority"
-  [question]="D876E3:Needs operator input or design discussion"
-)
-
-for NAME in "${!LABELS[@]}"; do
-  COLOR="${LABELS[$NAME]%%:*}"
-  DESC="${LABELS[$NAME]#*:}"
+# Per cli#306 — use while-read loop over pipe-delimited heredoc instead
+# of `declare -A`. macOS ships bash 3.2 which has no associative arrays.
+# Format per line: NAME|COLOR|DESCRIPTION
+while IFS='|' read -r NAME COLOR DESC; do
+  [ -z "$NAME" ] && continue
   gh label create "$NAME" --repo "$REPO" --color "$COLOR" --description "$DESC" --force >/dev/null
-done
+done <<'EOF'
+bassclef-evolution|A6E0F2|Candidate for promotion to bassclef
+agent-user-proposed|D4A5F5|Proposed by agent in an app repo
+bassclef-sync|8FD4A4|Related to bassclef substrate syncing
+review-required|F5B94A|Blocks — human review required
+bug|E4443A|Defect
+enhancement|A2EEEF|New or improved functionality
+security|FF0000|Security-relevant
+infra|C9D1D9|Infrastructure / workflows / tooling
+priority-high|E4443A|High priority
+priority-medium|F5B94A|Medium priority
+question|D876E3|Needs operator input or design discussion
+EOF
 ```
 
 Uses `--force` so the call is idempotent (updates existing label or

package/dist/lite/.claude/skills/personas/SKILL.md

@@ -87,7 +87,7 @@ When no persona files exist in the repo, auto-populate a minimal persona file fo
 
 - `CLAUDE.md` — read the "What this repo is" / "Active initiative" sections for goal context
 - `substrate.config.md` — read `agents:` and `deploy_targets:` for role context
-- If a git `user.email` exists, use it to derive a rough slug (`operator-[local-part]`), otherwise `operator`
+- Default slug: `operator`. Do not derive it from `user.email`. GitHub no-reply addresses carry the account ID and handle. The slug then leaks into committed docs (cli#320). Ask for a display name in-turn if the operator wants one.
 
 Emit the operator default to the conversation (not to disk — operator decides whether to persist it):
 

package/dist/lite/bassclef-version.json

@@ -1,7 +1,7 @@
 {
   "version": "v1.6.6",
-  "marker_tag": "release-2026-10-03-89ceaa15",
-  "release_date": "2026-10-03T10:51:10Z",
-  "release_sha": "89ceaa15",
-  "release_tag": "release-2026-10-03-89ceaa15"
+  "marker_tag": "release-2026-10-05-484c6f3e",
+  "release_date": "2026-10-05T03:42:33Z",
+  "release_sha": "484c6f3e",
+  "release_tag": "release-2026-10-05-484c6f3e"
 }