v0.5.2

Selector evidence at 1 000 records, size bands, and Claude Code hook
fixes. The specification stays v0.2.

Changed

• The evidence built into ldf-select now has Opus 5.5 and Sonnet 5.5 at
  1 000 held-out records (reports/2026-10-20-large). From 201 to 1 000
  rows: Opus gets LDF on nested (hoisted), sparse and mixed-type data and
  JSON on flat data; Sonnet gets LDF on flat and mixed-type data and JSON
  on nested and sparse data. Haiku and DeepSeek have no evidence above 200
  rows and get JSON there. Above 1 000 rows every model gets JSON.
• ldf-select judges an input by size band: only evidence at the smallest
  measured size at or above the input's row count counts (200 or 1 000
  records today). Before, any failing row withdrew a layout at every size,
  so the 1 000-record losses also gave JSON to Opus on flat data and to
  Sonnet on nested and sparse data at 200 rows or fewer; those get LDF
  again up to 200 rows. Inputs larger than the largest measured size still
  get JSON.

Added

• ldf-eval build --kinds limits a bundle to the listed task kinds.
• Claude Code hook: a command containing LDF_RAW=1 keeps its JSON
  (reason raw); the conversion note tells the model so.
• install claude-code --hooks and doctor warn when another
  PostToolUse hook matches Bash: Claude Code keeps the last rewrite, so
  a redacting hook can lose to the LDF rewrite.

Fixed

• Claude Code hook in subagents: a subagent's calls carry the parent's
  session id, so it shared the main thread's primer flag (LDF without the
  primer in the subagent's context) and model (the selector asked about
  the wrong model). Each subagent now has its own primer flag, and its
  model comes from --model or its own transcript; otherwise its output
  passes through (reason subagent).
• Claude Code hook: the primer was marked as sent before the reply was
  written; it is now marked only after a whole write.
• install and uninstall replaced a symlinked settings.json with a
  plain file; they now write through the link.
• ldf-mcp hook claude-code --evidence FILE without --model was ignored
  silently and the built-in evidence used; the hook now reads the file and
  keeps taking the model from the session.