fix: v0.13.2 — polish from the release review

Four small items the fresh-eyes verifier flagged as post-release debt,
none of them blocking, all cheap enough to land together.

- `LEDGER*.md` is a glob, not a prefix free-for-all: "ledger" must now
  be a whole name segment, so `ledgers.md` and `ledgerish.md` no longer
  count while `LEDGER.md`, `LEDGER-topic.md`, `LEDGER_notes.md` and the
  lowercase spellings still do.
- README's two guard-flow diagrams said `.workflow/LEDGER.md`; any
  active `LEDGER*.md` passes them.
- The monotonic-clock AST guard covered plain, annotated and
  variable-indirected assignments but not tuple unpacking
  (`_pad, deadline = 0, time.time() + B`) or the walrus operator. Both
  now covered and mutation-checked; neither form appears in the code
  today, so this is a guard against a future edit rather than a fix.
- Two comments still described the budgets as wall-clock.

- tests 129 -> 131.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rsqc71VgbiJx2vpsZyLEbz

Author: Rylaa

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "orchestrator",
   "description": "Token-frugal multi-agent orchestration for Claude Code, built for a Claude Fable 5 chair: Fable plans and decides, Sonnet 5 carries implementation and routine judgment, and a two-tier verification/escalation valve guards the close. When the Fable limit runs dry, an Opus fallback profile keeps the same discipline running. A Requirements Ledger and guard hooks enforce the discipline mechanically, and finished tmux teammates are reaped automatically.",
-  "version": "0.13.1",
+  "version": "0.13.2",
   "author": {
     "name": "Yusuf Demirkoparan",
     "url": "https://github.com/Rylaa"

README.md

@@ -110,7 +110,7 @@ spawn (Agent / Task / Workflow)
        │
        ├─ subagent_type == "fork" ................. PASS  (forks already see the ledger)
        │
-       ├─ ACTIVE .workflow/LEDGER.md found ........ PASS  (cite its items per agent)
+       ├─ ACTIVE .workflow/LEDGER*.md found ....... PASS  (cite its items per agent)
        │  (cwd → repo root / $HOME)
        │
        └─ no ledger — or only a stale one ......... DENY  → "write the ledger first;
@@ -124,7 +124,7 @@ A ledger is *stale* when every item is closed AND it was last touched before thi
 ```
 TaskCreate (tracker task)
   │
-  ├─ ACTIVE .workflow/LEDGER.md found .............. PASS
+  ├─ ACTIVE .workflow/LEDGER*.md found ............. PASS
   ├─ fewer than 3 ledgerless tasks this session .... PASS  (small task lists are fine)
   │
   └─ 3rd ledgerless task ........................... DENY once → "multi-phase work:

scripts/ledger_guard_spawn.py

@@ -236,6 +236,10 @@ def active_ledger_in(dirpath):
         low = name.lower()
         if not (low.startswith("ledger") and low.endswith(".md")):
             continue
+        # "ledger" must be a whole segment: LEDGER.md, LEDGER-topic.md,
+        # LEDGER_topic.md — but not ledgers.md or ledgerish.md.
+        if low[6:7] not in (".", "-", "_"):
+            continue
         # Retired only when "archive" is the trailing segment, the form
         # this hook's own message asks for. A live ledger ABOUT archives
         # (LEDGER-archive-migration.md) must still count.

scripts/ledger_guard_stop.py

@@ -93,6 +93,10 @@ def active_ledger_in(dirpath):
         low = name.lower()
         if not (low.startswith("ledger") and low.endswith(".md")):
             continue
+        # "ledger" must be a whole segment: LEDGER.md, LEDGER-topic.md,
+        # LEDGER_topic.md — but not ledgers.md or ledgerish.md.
+        if low[6:7] not in (".", "-", "_"):
+            continue
         # Retired only when "archive" is the trailing segment, the form
         # this hook's own message asks for. A live ledger ABOUT archives
         # (LEDGER-archive-migration.md) must still count.

tests/test_spawn_guard.py

@@ -159,6 +159,28 @@ def test_lowercase_ledger_name_counts(repo_dir):
     assert run_hook(SCRIPT, spawn_payload(repo_dir, prompt=VERY_LONG)) is None
 
 
+def test_ledger_must_be_a_whole_name_segment(repo_dir):
+    # `LEDGER*.md` is a glob, not a prefix free-for-all: a file merely
+    # starting with the letters must not be mistaken for a ledger.
+    for name in ("ledgers.md", "ledgerish.md", "LEDGERS.md"):
+        d = repo_dir / ".workflow"
+        d.mkdir(parents=True, exist_ok=True)
+        for old in d.glob("*.md"):
+            old.unlink()
+        (d / name).write_text("- [ ] 1. item\n", encoding="utf-8")
+        assert is_deny(run_hook(SCRIPT, spawn_payload(repo_dir))), name
+
+
+def test_separator_forms_all_count(repo_dir):
+    for name in ("LEDGER.md", "LEDGER-topic.md", "LEDGER_notes.md", "ledger.md"):
+        d = repo_dir / ".workflow"
+        d.mkdir(parents=True, exist_ok=True)
+        for old in d.glob("*.md"):
+            old.unlink()
+        (d / name).write_text("- [ ] 1. item\n", encoding="utf-8")
+        assert run_hook(SCRIPT, spawn_payload(repo_dir, prompt=VERY_LONG)) is None, name
+
+
 def test_archive_suffixed_ledger_does_not_satisfy_the_gate(repo_dir):
     # Renaming to *-archive.md is the documented way to retire a ledger;
     # an archived one must not keep the gates disarmed.

tests/test_stop_guard.py

@@ -450,13 +450,25 @@ def clocks_read_in(node):
         # time.time() + N` is the same bug wearing a type hint.
         def bindings(t):
             for node in ast.walk(t):
-                if isinstance(node, ast.Assign) and len(node.targets) == 1 \
-                        and isinstance(node.targets[0], ast.Name):
-                    yield node, node.targets[0].id, node.value
+                if isinstance(node, ast.Assign) and len(node.targets) == 1:
+                    tgt = node.targets[0]
+                    if isinstance(tgt, ast.Name):
+                        yield node, tgt.id, node.value
+                    elif isinstance(tgt, (ast.Tuple, ast.List)) \
+                            and isinstance(node.value, (ast.Tuple, ast.List)) \
+                            and len(tgt.elts) == len(node.value.elts):
+                        # `a, deadline = 0, time.time() + B` — pair them up.
+                        for name_node, val in zip(tgt.elts, node.value.elts):
+                            if isinstance(name_node, ast.Name):
+                                yield node, name_node.id, val
                 elif isinstance(node, ast.AnnAssign) \
                         and isinstance(node.target, ast.Name) \
                         and node.value is not None:
                     yield node, node.target.id, node.value
+                elif isinstance(node, ast.NamedExpr) \
+                        and isinstance(node.target, ast.Name):
+                    # `if (deadline := time.time() + B) ...`
+                    yield node, node.target.id, node.value
 
         from_clock = {}
         for _node, target, value in bindings(tree):