@thebassclef/lite 1.9.9 → 1.9.11

package/README.md

@@ -67,7 +67,7 @@ your browser.
 
 ## Current release
 
-<!-- version-start -->1.9.9<!-- version-end -->
+<!-- version-start -->1.9.11<!-- version-end -->
 
 See [CHANGELOG.md](CHANGELOG.md) for the full changelog. Adopter-facing
 release notes live at [docs.bassclef.dev/docs/whats-new/releases](https://docs.bassclef.dev/docs/whats-new/releases).

package/dist/index.cjs

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const version = "1.9.9";
+const version = "1.9.11";
 exports.version = version;

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-export declare const version: "1.9.9";
+export declare const version: "1.9.11";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,4 +1,4 @@
-const version = "1.9.9";
+const version = "1.9.11";
 export {
   version
 };

package/dist/lite/.claude/hooks/artifact-ingestion-gate.sh

@@ -143,9 +143,15 @@ if [ "$HAS_SOURCES_READ" -eq 1 ]; then
         exit
       }
     ')
-    if [ -z "$PARENT_VALUE" ]; then
-      continue
-    fi
+    # cli#311 cure — treat null / ~ / empty as "no parent declared" (Peirce three-case).
+    # YAML null shorthand is `null`, `~`, or an empty value. Prior code caught empty
+    # only; `parent_bet: null` tripped the gate on root goals that genuinely have no
+    # parent. Mirrors the #70 cure in bet-doc-gate.sh.
+    case "$PARENT_VALUE" in
+      "" | "null" | "Null" | "NULL" | "~" | "None")
+        continue
+        ;;
+    esac
 
     # Check if the parent path (or its basename without extension) appears
     # in the Sources-read section. Accepts either:

package/dist/lite/.claude/hooks/pre-commit-gate.sh

@@ -201,6 +201,37 @@ if ! { declare -F skip_var_set >/dev/null && skip_var_set "SKIP_LEAD_LENS_SIGNOF
     -e '^\.github/workflows/bassclef-.*\.yml$' \
     -e '^scripts/[^/]+\.sh$' \
     || true)
+  # Install-written-paths filter per bassclef-upstream#2036 Finding #8 (Kunal).
+  # Rule: .claude/rules/install-written-paths-mediation.md
+  # Any staged substrate path registered as install-written AND unchanged since
+  # install is dropped from the author-edit set. Lead-lens gate fires only on
+  # author-edited substrate paths.
+  if [ -n "$STAGED_SUBSTRATE_LL" ]; then
+    IWP_LIB=""
+    if [ -f "lib/install-written-paths.sh" ]; then
+      IWP_LIB="lib/install-written-paths.sh"
+    elif [ -f "$BASSCLEF_DIR/lib/install-written-paths.sh" ]; then
+      IWP_LIB="$BASSCLEF_DIR/lib/install-written-paths.sh"
+    fi
+    if [ -n "$IWP_LIB" ]; then
+      # shellcheck source=/dev/null
+      . "$IWP_LIB" 2>/dev/null || true
+      if declare -F is_install_written_path >/dev/null 2>&1; then
+        FILTERED_LL=""
+        while IFS= read -r _iwp_f; do
+          [ -z "$_iwp_f" ] && continue
+          if is_install_written_path "$_iwp_f" 2>/dev/null; then
+            trace_log "pre-commit" "lead-lens skip install-written path=$_iwp_f"
+            continue
+          fi
+          FILTERED_LL="${FILTERED_LL}${FILTERED_LL:+$'\n'}$_iwp_f"
+        done <<EOF
+$STAGED_SUBSTRATE_LL
+EOF
+        STAGED_SUBSTRATE_LL="$FILTERED_LL"
+      fi
+    fi
+  fi
   if [ -n "$STAGED_SUBSTRATE_LL" ]; then
     LL_BRANCH_SLUG=$(git branch --show-current 2>/dev/null | tr '/' '-')
     PREM_M="state/markers/pre-mortem/${LL_BRANCH_SLUG}.marker"

package/dist/lite/.claude/hooks/pre-commit-identifier-leak-scrub.sh

@@ -97,8 +97,36 @@ fi
 # Filter to '+' lines only so a commit that REMOVES a pre-existing leak
 # does not trip on the removed-content line. `+++` file headers stripped.
 # Per sunj-labs/bassclef-upstream#1575.
+#
+# Self-exclude per sunj-labs/bassclef-cli#305: the hook, its test, the
+# rule, and the pattern-source file all carry pattern-looking strings
+# as documentation. Scanning them blocks the first commit after a fresh
+# bassclef init and teaches adopters to skip the check on day one.
+# Non-self paths with the same patterns STILL block (Test 19).
+SELF_EXCLUDE_PATHS=(
+  ".claude/hooks/pre-commit-identifier-leak-scrub.sh"
+  ".claude/hooks/tests/pre-commit-identifier-leak-scrub.test.sh"
+  ".claude/rules/identifier-leak-prevention.md"
+  "standards/identifier-leak-patterns.txt"
+)
 if [ -z "$BLOCK_REASON" ]; then
-  STAGED_DIFF=$(git diff --cached 2>/dev/null | grep '^+' | grep -v '^+++' || echo "")
+  STAGED_FILES=$(git diff --cached --name-only 2>/dev/null || echo "")
+  STAGED_DIFF=""
+  while IFS= read -r file; do
+    [ -z "$file" ] && continue
+    skip=0
+    for sp in "${SELF_EXCLUDE_PATHS[@]}"; do
+      if [ "$file" = "$sp" ]; then
+        skip=1
+        break
+      fi
+    done
+    [ "$skip" = "1" ] && continue
+    file_diff=$(git diff --cached -- "$file" 2>/dev/null | grep '^+' | grep -v '^+++' || echo "")
+    if [ -n "$file_diff" ]; then
+      STAGED_DIFF+="$file_diff"$'\n'
+    fi
+  done <<< "$STAGED_FILES"
   if [ -n "$STAGED_DIFF" ]; then
     MATCH=$(echo "$STAGED_DIFF" | grep -oE "$IDENTIFIER_PATTERNS" | head -1)
     if [ -n "$MATCH" ]; then
@@ -108,6 +136,29 @@ if [ -z "$BLOCK_REASON" ]; then
   fi
 fi
 
+# Check 3 — git author identity (per sunj-labs/bassclef-cli#305)
+# On a Mac without user.email set, git builds the author from username +
+# hostname (e.g., `<user>@<host>.local`). The address ships in every commit.
+# Scan GIT_AUTHOR_IDENT against the pattern set plus the `.local` suffix.
+# Fail-soft when git is missing or the ident cannot be resolved.
+if [ -z "$BLOCK_REASON" ] && command -v git >/dev/null 2>&1; then
+  AUTHOR_IDENT=$(git var GIT_AUTHOR_IDENT 2>/dev/null || true)
+  if [ -n "$AUTHOR_IDENT" ]; then
+    # Format: "Name <email> timestamp timezone"
+    AUTHOR_EMAIL=$(echo "$AUTHOR_IDENT" | grep -oE '<[^>]+>' | tr -d '<>')
+    if [ -n "$AUTHOR_EMAIL" ]; then
+      MATCH=$(echo "$AUTHOR_EMAIL" | grep -oE "$IDENTIFIER_PATTERNS" | head -1)
+      if [ -z "$MATCH" ] && echo "$AUTHOR_EMAIL" | grep -qE '\.local$'; then
+        MATCH="$AUTHOR_EMAIL"
+      fi
+      if [ -n "$MATCH" ]; then
+        BLOCK_REASON="commit author"
+        BLOCK_MATCH="$MATCH"
+      fi
+    fi
+  fi
+fi
+
 # BLOCK if any pattern matched
 if [ -n "$BLOCK_REASON" ]; then
   cat >&2 <<EOF
@@ -128,7 +179,12 @@ Resolution paths:
   1. Rewrite the commit message or staged content to drop the identifier
      - Replace machine names with placeholders like <machine> or the branch
      - Replace absolute paths with relative paths or \$HOME references
-  2. Override (rare — for legitimate cases like DON'T-do-this documentation):
+  2. If the match is in your commit author identity:
+     - Set a stable identity: git config --global user.email \\
+         <username>@users.noreply.github.com
+     - And: git config --global user.name "<Your Name>"
+     - Then retry the commit; the author will no longer include the host.
+  3. Override (rare — for legitimate cases like DON'T-do-this documentation):
      SKIP_IDENTIFIER_LEAK_SCRUB=1 git commit ...
 
 See .claude/rules/identifier-leak-prevention.md for full discipline.

package/dist/lite/.claude/hooks/save-state.sh

@@ -209,7 +209,12 @@ DIRTY=$(git status --porcelain 2>/dev/null | grep -v '\.DS_Store' | grep -v 'SES
 if [ -n "$DIRTY" ]; then
   # Stage tracked modified files + any docs/ or chronicle/ or runtime state
   git add -u 2>/dev/null || true
-  git add docs/ chronicle/ specs/ 2>/dev/null || true
+  # docs/ except docs/prototypes/ — prototypes are review-gated mocks per
+  # .claude/rules/prototype-workflow.md; auto-save must not commit them
+  # before the operator confirms the rendered output (cli#323).
+  # Same pathspec pattern used for state/markers below.
+  git add 'docs/' ':!docs/prototypes' ':!docs/prototypes/**' 2>/dev/null || true
+  git add chronicle/ specs/ 2>/dev/null || true
   # state/ except state/markers/ — markers are runtime gate evidence that
   # trigger session-rescue false-positives if committed (bassclef#341 / WU-A2).
   # Negative pathspec syntax requires git >= 2.13 (stable since 2017).

package/dist/lite/.claude/hooks/session-reflection.d/83-install-written-paths-rebuild.sh

@@ -0,0 +1,111 @@
+#!/bin/bash
+# tier: lite
+# install-class: dual
+#
+# Session-start fragment: rebuild install-written-paths manifest when missing/stale.
+# Per bassclef-upstream#2036 Finding #8 (Kunal Slot 1 cure).
+#
+# Walks lite-manifest.json. Registers each shipped file as install-written
+# via the lib. Runs when state/install-written-paths.json is missing OR
+# when any file in lite-manifest is newer than the manifest.
+#
+# Fail-soft per Nygard — logs advisory and continues on error.
+# Override: SKIP_INSTALL_WRITTEN_PATHS_REBUILD=1
+
+# Env-reach safe guard per bassclef-upstream#2036 Finding #4.
+# Fragment is sourced by session-reflection.sh; use return (not exit) so parent survives.
+# shellcheck disable=SC2317
+if [ -n "${SKIP_INSTALL_WRITTEN_PATHS_REBUILD:-}" ]; then
+  return 0 2>/dev/null
+fi
+
+_iwp_fragment_log() {
+  if command -v trace_log >/dev/null 2>&1; then
+    trace_log "install-written-paths-rebuild" "$*"
+  fi
+}
+
+_iwp_fragment_main() {
+  local project_root="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+  local lite_manifest="$project_root/lite-manifest.json"
+  local write_manifest="$project_root/state/install-written-paths.json"
+  local lib="$project_root/lib/install-written-paths.sh"
+
+  # Fallback to BASSCLEF_DIR when CLAUDE_PROJECT_DIR doesn't carry bassclef
+  if [ ! -f "$lite_manifest" ] && [ -n "${BASSCLEF_DIR:-}" ]; then
+    lite_manifest="$BASSCLEF_DIR/lite-manifest.json"
+    lib="$BASSCLEF_DIR/lib/install-written-paths.sh"
+  fi
+
+  # Skip when inputs missing (fail-soft)
+  if [ ! -f "$lib" ]; then
+    _iwp_fragment_log "skip reason=no-lib"
+    return 0
+  fi
+
+  if [ ! -f "$lite_manifest" ]; then
+    _iwp_fragment_log "skip reason=no-lite-manifest"
+    return 0
+  fi
+
+  if ! command -v jq >/dev/null 2>&1; then
+    _iwp_fragment_log "skip reason=no-jq"
+    return 0
+  fi
+
+  # Decide whether to rebuild: missing OR older than lite-manifest
+  local rebuild=0
+  if [ ! -f "$write_manifest" ]; then
+    rebuild=1
+  elif [ "$lite_manifest" -nt "$write_manifest" ]; then
+    rebuild=1
+  fi
+
+  if [ "$rebuild" -eq 0 ]; then
+    _iwp_fragment_log "skip reason=manifest-fresh"
+    return 0
+  fi
+
+  # Source lib — subshell so caller scope stays clean
+  (
+    # shellcheck source=/dev/null
+    . "$lib" 2>/dev/null || exit 0
+
+    if ! declare -F install_written_paths_register >/dev/null 2>&1; then
+      _iwp_fragment_log "skip reason=lib-missing-verb"
+      exit 0
+    fi
+
+    # Reset manifest to empty, then walk lite-manifest entries
+    rm -f "$write_manifest" 2>/dev/null || true
+    install_written_paths_rebuild 2>/dev/null || true
+
+    local registered=0
+    local skipped=0
+
+    # Each lite-manifest entry has .path field — register when file exists on disk
+    while IFS= read -r path; do
+      [ -z "$path" ] && continue
+      local full
+      case "$path" in
+        /*) full="$path" ;;
+        *) full="$project_root/$path" ;;
+      esac
+      if [ -f "$full" ]; then
+        if install_written_paths_register "$path" "bassclef-sync-template" 2>/dev/null; then
+          registered=$((registered + 1))
+        else
+          skipped=$((skipped + 1))
+        fi
+      else
+        skipped=$((skipped + 1))
+      fi
+    done < <(jq -r '.entries[]?.path // empty' "$lite_manifest" 2>/dev/null)
+
+    _iwp_fragment_log "rebuild complete registered=$registered skipped=$skipped"
+  ) || true
+
+  return 0
+}
+
+_iwp_fragment_main

package/dist/lite/.claude/hooks/session-reflection.d/97-last-block-count.sh

@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+# tier: lite
+# install-class: dual
+# Session-reflection fragment — surface last-block marker count.
+#
+# Per @luminary don-norman signifier: when BLOCK banners from prior
+# sessions sit in state/markers/last-block/, this fragment tells the
+# adopter they exist and names /last-block as the retrieval path.
+#
+# Fires once at session-start. Reads marker count. Prints one line to
+# stdout when count > 0. Silent on empty.
+#
+# Composition — sourced by session-reflection.sh under set -e. Must use
+# `return`, not `exit`, else the coordinator dies. Per test-sufficiency
+# criterion 12 (invocation-mode variation).
+#
+# Per bassclef-upstream#2036 Finding #10 + UC-skill-last-block.md.
+
+# Resolve directory (same convention as lib/last-block.sh).
+_last_block_count_dir() {
+  if [ -n "${LAST_BLOCK_DIR:-}" ]; then
+    echo "$LAST_BLOCK_DIR"
+  else
+    echo "${CLAUDE_PROJECT_DIR:-.}/state/markers/last-block"
+  fi
+}
+
+LBC_DIR="$(_last_block_count_dir)"
+
+if [ ! -d "$LBC_DIR" ]; then
+  # Fresh install or dir never created. Silent.
+  # shellcheck disable=SC2317  # dual-use sourced-or-standalone exit path
+return 0 2>/dev/null || exit 0
+fi
+
+LBC_COUNT=$(find "$LBC_DIR" -maxdepth 1 -name '*.marker' -type f 2>/dev/null | wc -l | tr -d ' ')
+
+if [ "$LBC_COUNT" -gt 0 ]; then
+  if [ "$LBC_COUNT" = "1" ]; then
+    echo "### LAST BLOCK"
+    echo ""
+    echo "1 BLOCK banner stored. Read it with /last-block."
+    echo ""
+  else
+    echo "### LAST BLOCKS"
+    echo ""
+    echo "${LBC_COUNT} BLOCK banners stored. Read the newest with /last-block, or list all with /last-block --list."
+    echo ""
+  fi
+fi
+
+# shellcheck disable=SC2317  # dual-use sourced-or-standalone exit path
+return 0 2>/dev/null || exit 0

package/dist/lite/.claude/hooks/session-reflection.d/tests/97-last-block-count.test.sh

@@ -0,0 +1,131 @@
+#!/usr/bin/env bash
+# tier: lite
+# fixtures: bassclef-upstream-self
+# shellcheck disable=SC2034
+# Tier 0 test for .claude/hooks/session-reflection.d/97-last-block-count.sh
+#
+# Covers invocation-mode variation (criterion 12 of test-sufficiency rubric):
+# both standalone and sourced-under-set-e paths.
+#
+# Ticket: bassclef-upstream#2036 Finding #10
+#
+# test-list:
+# [x] T01: standalone + no dir -> silent, exit 0, no return error
+# [x] T02: standalone + empty dir -> silent, exit 0
+# [x] T03: standalone + 1 marker -> prints "1 BLOCK banner stored"
+# [x] T04: standalone + 3 markers -> prints "3 BLOCK banners stored"
+# [x] T05: sourced under set -e -> parent survives (no exit)
+# [x] T06: honors LAST_BLOCK_DIR env override
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+FRAG_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
+FRAG="$FRAG_DIR/97-last-block-count.sh"
+
+if [ ! -f "$FRAG" ]; then
+  echo "RED: $FRAG does not exist yet" >&2
+  exit 1
+fi
+
+FIXTURE_ROOT="$(mktemp -d)"
+RESULTS_FILE="$FIXTURE_ROOT/results.log"
+touch "$RESULTS_FILE"
+trap 'rm -rf "$FIXTURE_ROOT"' EXIT
+
+pass() { echo "PASS" >> "$RESULTS_FILE"; echo "PASS: $1"; }
+fail() { echo "FAIL" >> "$RESULTS_FILE"; echo "FAIL: $1"; }
+
+# T01: standalone + no dir
+( LAST_BLOCK_DIR="$FIXTURE_ROOT/nonexistent"
+  export LAST_BLOCK_DIR
+  OUT=$(bash "$FRAG" 2>&1)
+  RC=$?
+  if [ "$RC" = "0" ] && [ -z "$OUT" ]; then
+    pass "T01: standalone + no dir -> silent"
+  else
+    fail "T01: standalone + no dir -> silent (rc=$RC out=$OUT)"
+  fi
+)
+
+# T02: standalone + empty dir
+( LAST_BLOCK_DIR="$(mktemp -d)"
+  export LAST_BLOCK_DIR
+  OUT=$(bash "$FRAG" 2>&1)
+  RC=$?
+  if [ "$RC" = "0" ] && [ -z "$OUT" ]; then
+    pass "T02: standalone + empty dir -> silent"
+  else
+    fail "T02: standalone + empty dir -> silent (rc=$RC out=$OUT)"
+  fi
+)
+
+# T03: standalone + 1 marker
+( DIR="$(mktemp -d)"
+  LAST_BLOCK_DIR="$DIR"
+  export LAST_BLOCK_DIR
+  echo "hook: a" > "$DIR/a.marker"
+  OUT=$(bash "$FRAG" 2>&1)
+  if echo "$OUT" | grep -qF "1 BLOCK banner stored"; then
+    pass "T03: 1 marker -> prints singular"
+  else
+    fail "T03: 1 marker (got: $OUT)"
+  fi
+)
+
+# T04: standalone + 3 markers
+( DIR="$(mktemp -d)"
+  LAST_BLOCK_DIR="$DIR"
+  export LAST_BLOCK_DIR
+  echo "hook: a" > "$DIR/a.marker"
+  echo "hook: b" > "$DIR/b.marker"
+  echo "hook: c" > "$DIR/c.marker"
+  OUT=$(bash "$FRAG" 2>&1)
+  if echo "$OUT" | grep -qF "3 BLOCK banners stored"; then
+    pass "T04: 3 markers -> prints plural with count"
+  else
+    fail "T04: 3 markers (got: $OUT)"
+  fi
+)
+
+# T05: sourced under set -e -> parent survives (criterion 12)
+( DIR="$(mktemp -d)"
+  LAST_BLOCK_DIR="$DIR"
+  export LAST_BLOCK_DIR
+  echo "hook: a" > "$DIR/a.marker"
+  # Simulate coordinator: set -e wrapper + source
+  CANARY_FILE="$FIXTURE_ROOT/canary-t05"
+  (
+    set -e
+    # shellcheck source=/dev/null
+    source "$FRAG"
+    # If frag used `exit` instead of `return`, this line never runs.
+    touch "$CANARY_FILE"
+  ) >/dev/null 2>&1 || true
+  if [ -f "$CANARY_FILE" ]; then
+    pass "T05: sourced under set -e survives (canary ran)"
+  else
+    fail "T05: sourced under set -e survives (canary missing)"
+  fi
+)
+
+# T06: honors LAST_BLOCK_DIR env override
+( DIR="$(mktemp -d)"
+  LAST_BLOCK_DIR="$DIR"
+  export LAST_BLOCK_DIR
+  echo "hook: a" > "$DIR/a.marker"
+  OUT=$(bash "$FRAG" 2>&1)
+  if echo "$OUT" | grep -qF "1 BLOCK banner stored"; then
+    pass "T06: honors LAST_BLOCK_DIR override"
+  else
+    fail "T06: honors LAST_BLOCK_DIR override (got: $OUT)"
+  fi
+)
+
+echo
+echo "=== Results ==="
+PASS=$(awk '/^PASS$/ {c++} END {print c+0}' "$RESULTS_FILE")
+FAIL=$(awk '/^FAIL$/ {c++} END {print c+0}' "$RESULTS_FILE")
+echo "PASS: $PASS"
+echo "FAIL: $FAIL"
+if [ "$FAIL" -gt 0 ]; then exit 1; fi

package/dist/lite/.claude/hooks/session-reflection.sh

@@ -74,6 +74,14 @@ else
 fi
 export BASSCLEF_DIR
 
+# Source lib/last-block.sh so banner calls persist markers. Per Finding
+# #10 — adopters need a first-class way to retrieve BLOCK text they saw.
+# The lib fails soft; missing lib leaves the banners untouched.
+# shellcheck source=/dev/null
+if [ -f "${BASSCLEF_DIR}/lib/last-block.sh" ]; then
+  source "${BASSCLEF_DIR}/lib/last-block.sh"
+fi
+
 # High-contrast BLOCKED banner; used by every module that raises a gap.
 # RFC-0008 F3 — "Silence is not deferral" is a commitment device. It works
 # because it forecloses the easy out, and it is consumable: spend it on a
@@ -81,9 +89,13 @@ export BASSCLEF_DIR
 # Callers that can prove their own state is benign pass a second argument
 # and get a softer close. Callers that pass one argument behave exactly as
 # before, so the other 27 sites are untouched.
+#
+# Per Finding #10 — each call now also writes a marker so the adopter can
+# retrieve the exact banner text later via /last-block.
 blocked_banner() {
   local msg="$1"
   local severity="${2:-blocking}"
+  local hook_name="${BASSCLEF_CALLING_HOOK:-session-reflection}"
   echo ""
   case "$severity" in
     info)
@@ -106,9 +118,14 @@ blocked_banner() {
       echo "────────────────────────────────────────────"
       echo "ACTION: resolve OR explicitly defer (per .claude/rules/blocked-items.md)."
       echo "Silence is not deferral. Propose this as item #1 in your session plan."
+      echo "(Retrieve this banner later with: /last-block ${hook_name})"
       ;;
   esac
   echo ""
+  # Persist marker for /last-block retrieval. Fail-soft.
+  if type -t record_last_block >/dev/null 2>&1; then
+    record_last_block "$hook_name" "$severity" "$msg" 2>/dev/null || true
+  fi
 }
 
 # Vendor-swap constant — the AI in the harness running bassclef. Adopter
@@ -131,7 +148,12 @@ guardrail_banner() {
   echo "────────────────────────────────────────────"
   echo "bassclef is steering $AI_NAME to $step — $retry"
   echo "────────────────────────────────────────────"
+  echo "(Retrieve this banner later with: /last-block ${hook_name})"
   echo ""
+  # Persist marker for /last-block retrieval. Fail-soft.
+  if type -t record_last_block >/dev/null 2>&1; then
+    record_last_block "$hook_name" "guardrail" "$step — $retry" 2>/dev/null || true
+  fi
 }
 
 # RFC-0008 F6 — this block is steering aimed at the agent, but the adopter

package/dist/lite/.claude/hooks/state-validate.sh

@@ -61,6 +61,14 @@ SCHEMA_DIR="${PROJECT_DIR}/standards/state-spine/schemas"
 
 # If schema dir doesn't exist, this repo doesn't have spine v0 yet — pass through
 if [ ! -d "$SCHEMA_DIR" ]; then
+  # Per cli#316 — honest skip. Previously exited 0 silently; adopters +
+  # agents on lite couldn't tell "validated" from "not checked". /launch
+  # and /objectory-decompose SKILLs promise this hook will BLOCK bad
+  # frontmatter. On lite, where schemas don't ship, this message makes
+  # the skip visible so the promise doesn't lie.
+  if [ "${STATE_VALIDATE_QUIET:-0}" != "1" ]; then
+    echo "state-validate: schemas not available (standards/state-spine/schemas missing at $SCHEMA_DIR); validation skipped at this tier — set STATE_VALIDATE_QUIET=1 to silence" >&2
+  fi
   exit 0
 fi
 

package/dist/lite/.claude/rules/install-written-paths-mediation.md

@@ -0,0 +1,74 @@
+---
+tier: lite
+---
+
+# Install-Written-Paths — single accessor mediation
+
+Discipline hooks that would fire on files written by install writers (`bassclef init`, `bassclef-sync.sh`, `bassclef-hook-connect`, `schedule-auto-save`, template scripts) MUST consult `lib/install-written-paths.sh` via the single accessor `is_install_written_path <path>` before firing on each staged file.
+
+The lib + manifest ship per bassclef-upstream#2036 Finding #8 (Kunal cold-adopter report, 2026-10-02). Structural cure for Class A (install-leak surfaces).
+
+## When this rule fires
+
+Any discipline hook that currently fires on file content without discriminating install-written from author-edited. Candidate hooks:
+
+- `.claude/hooks/pre-commit-gate.sh` — lead-lens 3-marker gate section (consumer wired per this cure's V1 PR)
+- `.claude/hooks/pre-commit-identifier-leak-scrub.sh` — identifier-leak sister per Kunal #1 (future adopter per R2 risk ledger)
+- Any new discipline hook authored under the loop discipline (`.claude/rules/loop-discipline.md`) that assumes author-edit
+
+## What the rule requires
+
+Before firing discipline on a staged path, each discipline hook:
+
+1. Sources `lib/install-written-paths.sh`.
+2. Calls `is_install_written_path "$staged_path"`.
+3. When return is 0 (true — path is install-written AND content hash matches), SKIP discipline for that path. Emit a trace line via `trace_log` for audit.
+4. When return is 1 (false — path not in manifest OR hash drifted), FIRE discipline as today.
+
+When all staged paths return 0, the hook returns pass without discipline. When at least one returns 1, the hook fires discipline on the author-edited paths.
+
+## Anti-patterns
+
+### Reimplementing the discrimination
+
+Hook authors who grep `.bassclef-source.json` or hard-code install path lists duplicate the lib. Future rename events or new install writers break them silently.
+
+INSTEAD: source the lib. Compose with the shared discipline.
+
+### Skipping the lib for sister hooks
+
+Discipline hooks that fire on install-written content but don't consult the lib produce Kunal-pattern false fires on cold adopters.
+
+INSTEAD: add the consultation at the first opportunity. Per @luminary michael-feathers legacy-code retrofit — sister hooks consult the lib when next touched for other work.
+
+## Composes with
+
+- `.claude/rules/bootstrap-pair-discipline.md` — this rule + lib + schema + hook consumption + session-start fragment ship paired
+- `.claude/rules/state-schema-validation.md` — schema at `standards/state-spine/schemas/install-written-paths.schema.json` validates on write
+- `.claude/rules/we-dont-break-adopters.md` — additive; existing SKIP_* paths preserved
+- `.claude/rules/sibling-smoke-after-substrate-change.md` — post-merge sibling smoke confirms Kunal #8 cured end-to-end
+- @luminary linus-torvalds — adopter contract (manifest IS the adopter-visible surface this cure protects)
+- @luminary michael-feathers — characterization tests (lib tests pin actual install-vs-author discrimination)
+- @luminary john-ousterhout — deep module (narrow 5-verb interface hides schema + hash + I/O complexity)
+- @luminary michael-nygard — fail-soft (missing manifest, malformed JSON, missing hash tool → return "not install-written" + advisory to stderr)
+
+## Override path
+
+`SKIP_INSTALL_WRITTEN_PATHS=1` — the lib's `is_install_written_path` returns 1 (false) unconditionally when this env var is set. Hooks fire discipline normally. Logged via `trace_log`.
+
+INSTEAD of overriding routinely: trust the lib. Overrides are for one-shot debugging where the manifest-based path has misclassified.
+
+## V1 scope — this cure's PR
+
+- `lib/install-written-paths.sh` + Tier 0 tests
+- `standards/state-spine/schemas/install-written-paths.schema.json` + state-spine.md Shape C entry
+- `.claude/hooks/pre-commit-gate.sh` — lead-lens 3-marker gate section amended to consult the lib
+- `presence/install/bassclef-hook-connect.sh` — registers each path on write
+- `presence/install/bassclef-sync.template.sh` — registers each path on sync
+- `.claude/hooks/session-reflection.d/83-install-written-paths-rebuild.sh` — regenerates manifest when missing at session-start
+
+## Deferred to follow-on
+
+- `bassclef init` npm-side registration (lands in bassclef-cli; sources the lib via package symlink)
+- `pre-commit-identifier-leak-scrub.sh` consultation (sister hook adoption per Feathers legacy-code retrofit)
+- Any other hook that assumes author-edit — audit at next /architect-review