@ccoalm/ccl-skills 0.1.1 → 0.3.0

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_source_refuted.sh

@@ -0,0 +1,176 @@
+#!/usr/bin/env bash
+# 043：`source-refuted` 证据类的冻结验收用例（specs/043-evidence-class-source-refuted/frozen-acceptance.md）。
+#
+# A-F 在闸被触碰之前冻结；G/H 由独立评审与挑战各指出一处滥用路径后补入（**加严**，
+# 不是放宽）。通过条件是全部命中——任何一条不符即本轮
+# 未完成，**不得**以"主要目标达成"结案，也不得为让 A 变绿而放宽 B–F。
+#
+# 全部确定性，不调模型。每用例一条分支，互不影响本地未提交改动。
+set -u
+ROOT="$(cd "$(dirname "$0")/../../.." && pwd -P)"
+GATE="$ROOT/skills/skill-extraction-workflow/scripts/impact-chain-gate.rb"
+TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT INT TERM
+fails=0
+fail() { echo "FAIL: $*" >&2; fails=$((fails+1)); }
+ok()   { echo "  ok   $*"; }
+
+REPO="$TMP/repo"
+git clone -q "$ROOT" "$REPO"
+git -C "$REPO" config user.email test@example.invalid
+git -C "$REPO" config user.name "Test User"
+
+OWNER_REF="skills/product-rd-workflow/SKILL.md"
+REGISTER="skills/skill-extraction-workflow/references/source-register.md"
+ZLOSS="specs/043-evidence-class-source-refuted/zero-loss-fixture.md"
+
+# 种子：给 owner 的 reference 加一段可被后续用例整段删掉的文本（保证净字节 < 0），
+# 以及一份非空的零损失义务对照 fixture。
+WITHDRAWN_TEXT='A fixture claim that a later case withdraws wholesale; it is long enough that removing it makes the owner package shrink by a clear margin.'
+mkdir -p "$REPO/$(dirname "$ZLOSS")"
+printf '# 零损失义务对照\n\n被撤回的原文（逐字）：\n\n> %s\n\n| before 义务 | 去向 |\n| --- | --- |\n| 该段承载的义务 | survives-verbatim: 同文件上一段 |\n' "$WITHDRAWN_TEXT" > "$REPO/$ZLOSS"
+printf '\n%s\n' "$WITHDRAWN_TEXT" >> "$REPO/$OWNER_REF"
+printf '\n<!-- fixture-withdrawable-start -->\nA fixture claim that a later case withdraws wholesale; it is long enough that removing it makes the owner package shrink by a clear margin, which is what the net-bytes floor checks.\n<!-- fixture-withdrawable-end -->\n' >> "$REPO/$OWNER_REF"
+git -C "$REPO" add -A >/dev/null
+git -C "$REPO" commit -qm "seed fixtures for source-refuted cases"
+git -C "$REPO" branch fixture-base HEAD
+
+new_case() { git -C "$REPO" switch -q -C "$1" fixture-base; git -C "$REPO" branch --set-upstream-to=fixture-base "$1" >/dev/null 2>&1; }
+commit_case() { git -C "$REPO" add -A >/dev/null; git -C "$REPO" commit -qm "$1"; }
+run_gate() { set +e; OUT="$(env -u CCL_SKILL_BASE_REF ruby "$GATE" "$REPO" 2>&1)"; RC=$?; set -e 2>/dev/null || true; }
+add_row() { printf '%s\n' "$1" >> "$REPO/$REGISTER"; }
+withdraw_fixture() {  # **纯删除**：只删那一行，不加任何内容。说明文字进 reference。
+  python3 - "$REPO/$OWNER_REF" "$WITHDRAWN_TEXT" <<'PYX'
+import io,sys
+p, txt = sys.argv[1], sys.argv[2]
+s = io.open(p, encoding='utf-8').read()
+io.open(p, 'w', encoding='utf-8').write(s.replace("\n" + txt + "\n", "\n", 1))
+PYX
+}
+
+SRC="https://example.invalid/primary-source-that-refutes-the-claim"
+FIRING="firing-path: file:skills/product-rd-workflow/SKILL.md#must survive verbatim above"
+FIRING_F="firing-path: file:skills/product-rd-workflow/SKILL.md#must record a RED-baseline row before it lands"
+
+# ---- A：合规撤回 —— 有类时必须绿，无类时必须红 ----
+new_case case-a; withdraw_fixture
+add_row "| A fixture claim is refuted by its primary source and is withdrawn wholesale | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case A: compliant source-refuted withdrawal"; run_gate
+# A 的期望值在裁决后由绿改红：该类不再顶起 RED 底线（见 frozen-acceptance.md 的裁决记录）。
+# 合规撤回现在仍然被拦——它要么配一条 RED 行，要么由具名风险 owner 人工放行。
+[ "$RC" != "0" ] && ok "A 合规撤回 -> 仍红（该类不顶底线，撤回需人工放行）" || fail "A 不得自动放行"
+
+# ---- B：真行为变更披该标签 —— 任何时候都必须红 ----
+new_case case-b
+printf '\n- Every fixture change must obtain approval before it lands.\n' >> "$REPO/$OWNER_REF"
+add_row "| A newly added normative rule wearing the withdrawal label | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case B: real behaviour change wearing the label"; run_gate
+[ "$RC" != "0" ] && ok "B 真行为变更披标签 -> 仍红" || fail "B 不得通过（净增却用撤回类）"
+
+# ---- C：缺一手源 URL —— 必须红 ----
+new_case case-c; withdraw_fixture
+add_row "| A withdrawal whose row cites no refuting source | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case C: missing refuting source"; run_gate
+[ "$RC" != "0" ] && ok "C 缺一手源 -> 仍红" || fail "C 不得通过（无源即无据）"
+
+# ---- D：缺零损失指针 —— 必须红 ----
+new_case case-d; withdraw_fixture
+add_row "| A withdrawal whose row carries no zero-loss map | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case D: missing zero-loss pointer"; run_gate
+[ "$RC" != "0" ] && ok "D 缺零损失指针 -> 仍红" || fail "D 不得通过（义务保全无对照）"
+
+# ---- E：observed-failure: yes —— 必须红 ----
+new_case case-e; withdraw_fixture
+add_row "| A withdrawal self-declaring an observed failure | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: yes | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case E: observed-failure yes"; run_gate
+[ "$RC" != "0" ] && ok "E observed-failure: yes -> 仍红" || fail "E 不得通过（分类语义不得自选）"
+
+# ---- F：既有类不得回归 ----
+new_case case-f
+printf '\n- Every fixture delivery must record a RED-baseline row before it lands.\n' >> "$REPO/$OWNER_REF"
+add_row "| An ordinary behaviour-changing rule with a RED-baseline row | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; $FIRING_F | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+commit_case "case F: existing RED-baseline path"; run_gate
+if [ "$RC" = "0" ]; then ok "F 既有 RED-baseline 路径 -> 绿（无回归）"; else echo "--- F 完整输出 ---"; printf '%s\n' "$OUT"; fail "F 回归"; fi
+
+# ---- G：混合行 —— 同 owner 一条合规撤回 + 一条真行为变更的 semantic-control。必须红 ----
+#      独立评审 REVIEW-1：any? 顶起底线时，真行为变更会搭便车。
+new_case case-g; withdraw_fixture
+printf '\n- Every unrelated fixture delivery must obtain approval before it lands. zzmixedrule\n' >> "$REPO/$OWNER_REF"
+add_row "| A compliant withdrawal alongside an unrelated change | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| An unrelated behaviour change riding along on a stable-control label | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; firing-path: file:skills/product-rd-workflow/SKILL.md#must obtain approval before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+commit_case "case G: mixed rows"; run_gate
+[ "$RC" != "0" ] && ok "G 混合行 -> 仍红" || fail "G 不得通过（真行为变更搭撤回的便车）"
+
+# ---- H：抵消式新增 + 假锚点 —— 必须红 ----
+#      独立挑战 CHALLENGE-1：删无关文字凑净负、加一条新规则、指针写不存在的锚。
+new_case case-h; withdraw_fixture
+printf '\n- Every smuggled fixture rule must be rejected by the withdrawal class. zzsmuggled\n' >> "$REPO/$OWNER_REF"
+add_row "| A smuggled rule hidden behind an offsetting deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`README.md#no-such-anchor-exists-here\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case H: offset addition with bogus anchor"; run_gate
+[ "$RC" != "0" ] && ok "H 抵消式新增 + 假锚点 -> 仍红" || fail "H 不得通过（新增规范行 / 锚点不解析）"
+
+# ---- I：脚本改动、零删除 —— 必须红（旧代理谓词看不见脚本）----
+new_case case-i
+printf '\n# fixture: an added shell line that changes behaviour without matching any prose predicate\n' >> "$REPO/skills/product-rd-workflow/scripts/check-agent-contract-coverage.sh"
+add_row "| A script change wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case I: script change, no deletion"; run_gate
+[ "$RC" != "0" ] && ok "I 脚本改动零删除 -> 仍红" || fail "I 不得通过（非 .md、且无删除）"
+
+# ---- J：`Always` 规则、零删除 —— 必须红（旧谓词故意排除 always）----
+new_case case-j
+printf '\n- Always authenticate fixture requests before dispatch.\n' >> "$REPO/$OWNER_REF"
+add_row "| An Always-phrased rule wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case J: Always rule, no deletion"; run_gate
+[ "$RC" != "0" ] && ok "J Always 规则零删除 -> 仍红" || fail "J 不得通过（有新增行）"
+
+# ---- K：改权限 + 一次真删除 —— 必须红 ----
+#      独立评审：chmod 在 --name-status 里显示为 M、在 --numstat 里记 0/0。
+new_case case-k; withdraw_fixture
+chmod 755 "$REPO/skills/product-rd-workflow/references/adr-convention.md"
+add_row "| A mode change riding along with a genuine deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case K: chmod plus deletion"; run_gate
+[ "$RC" != "0" ] && ok "K 改权限 + 删除 -> 仍红" || fail "K 不得通过（mode 变更未被 numstat 反映）"
+
+# ---- L：指针路径穿越出仓 —— 必须红 ----
+new_case case-l; withdraw_fixture
+add_row "| A withdrawal whose zero-loss pointer escapes the repository | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`../../../etc/hosts#localhost\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case L: traversal pointer"; run_gate
+[ "$RC" != "0" ] && ok "L 指针穿越出仓 -> 仍红" || fail "L 不得通过（路径逃出仓库）"
+
+# ---- M：锚点是存在但无意义的单字符子串 —— 必须红 ----
+new_case case-m; withdraw_fixture
+add_row "| A withdrawal whose anchor is a bare existing substring | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#a\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case M: one-character substring anchor"; run_gate
+[ "$RC" != "0" ] && ok "M 单字符子串锚 -> 仍红" || fail "M 不得通过（锚点未落在标题上）"
+
+# ---- N：锚点是存在但不相干的整词 —— 必须红 ----
+new_case case-n; withdraw_fixture
+add_row "| A withdrawal whose anchor is an unrelated existing word | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#survives-verbatim\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case N: unrelated existing substring anchor"; run_gate
+[ "$RC" != "0" ] && ok "N 不相干整词锚 -> 仍红" || fail "N 不得通过（锚点未落在标题上）"
+
+# ---- O：既有 semantic-control 路径不得回归（配对 RED 行）----
+new_case case-o
+printf '\n- Every fixture control rule must be recorded before it lands. zzsemctl\n' >> "$REPO/$OWNER_REF"
+add_row "| An unchanged control alongside a RED-baseline row | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| The behaviour change the control accompanies | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+commit_case "case O: semantic-control beside RED-baseline"; run_gate
+[ "$RC" = "0" ] && ok "O semantic-control + RED-baseline -> 绿（无回归）" || { echo "--- O ---"; printf '%s\n' "$OUT" | tail -3; fail "O 既有路径回归"; }
+
+# ---- P：对照表没有逐字交代被删内容 —— 必须红 ----
+new_case case-p; withdraw_fixture
+python3 - "$REPO/$ZLOSS" <<'PYP'
+import io,sys
+p=sys.argv[1]
+io.open(p,'w',encoding='utf-8').write("# 零损失义务对照\n\n| before 义务 | 去向 |\n| --- | --- |\n| 某条义务 | survives-verbatim: 别处 |\n")
+PYP
+add_row "| A withdrawal whose map does not quote what was removed | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+commit_case "case P: map does not account for deleted text"; run_gate
+[ "$RC" != "0" ] && ok "P 对照表未逐字交代被删内容 -> 仍红" || fail "P 不得通过（删了什么没抄出来）"
+
+echo
+if [ "$fails" = "0" ]; then
+  echo "all frozen cases behaved as specified"
+else
+  echo "frozen cases did not all behave as specified"
+  exit 1
+fi

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_regression_runner_lanes.sh

@@ -0,0 +1,101 @@
+#!/usr/bin/env bash
+# Lane-semantics regression for test_check_ccl_regressions.sh (036 challenge
+# P2): --heavy-only must run exactly the heavy_tests entries and no fast entry,
+# propagate a failing heavy suite, and end with its own token; --fast must run
+# exactly the fast_tests entries and no heavy entry. Runs the real runner
+# against a stub fixture tree via REGRESSION_SCRIPTS_DIR, so it proves the mode
+# dispatch in seconds without executing the real multi-minute suites. The stub
+# list is derived from the runner's own arrays, so a lane edit cannot drift the
+# fixture.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
+RUNNER="$SCRIPT_DIR/test_check_ccl_regressions.sh"
+
+fail() { printf 'FAIL: %s\n' "$1" >&2; exit 1; }
+
+extract_lane() {
+  # Bare entry tokens of one array block, comments stripped.
+  sed -n "/^${1}=(/,/^)/p" "$RUNNER" | sed -e '/^#/d' -e '/=($/d' -e '/^)$/d' \
+    -e 's/[[:space:]]*#.*$//' -e 's/^[[:space:]]*//' -e '/^$/d'
+}
+
+fast_lane="$(extract_lane fast_tests)"
+heavy_lane="$(extract_lane heavy_tests)"
+[ -n "$fast_lane" ] || fail "could not extract fast_tests from the runner"
+[ -n "$heavy_lane" ] || fail "could not extract heavy_tests from the runner"
+
+# Exactly-once contract at the array level (r4 challenge P2): a suite listed
+# twice in one lane, or in both lanes, would run twice in CI while every
+# per-mode comparison here still passed — reject it before building stubs.
+dup_fast="$(sort <<<"$fast_lane" | uniq -d)"
+[ -z "$dup_fast" ] || fail "duplicate entries inside fast_tests: $dup_fast"
+dup_heavy="$(sort <<<"$heavy_lane" | uniq -d)"
+[ -z "$dup_heavy" ] || fail "duplicate entries inside heavy_tests: $dup_heavy"
+overlap="$(comm -12 <(sort <<<"$fast_lane") <(sort <<<"$heavy_lane"))"
+[ -z "$overlap" ] || fail "entries registered in both lanes (would run twice per pipeline): $overlap"
+
+TMP="$(mktemp -d)"
+trap 'rm -rf "$TMP"' EXIT
+FIX="$TMP/skills/skill-extraction-workflow/scripts"
+mkdir -p "$FIX"
+LOG="$TMP/ran.log"
+
+write_stub() {
+  local entry="$1"
+  local path="$FIX/$entry"
+  mkdir -p "$(dirname "$path")"
+  printf '#!/usr/bin/env bash\nprintf "%%s\\n" "%s" >> "%s"\n' "$entry" "$LOG" >"$path"
+}
+while IFS= read -r entry; do write_stub "$entry"; done <<<"$fast_lane"
+while IFS= read -r entry; do write_stub "$entry"; done <<<"$heavy_lane"
+
+run_mode() {
+  : >"$LOG"
+  REGRESSION_SCRIPTS_DIR="$FIX" bash "$RUNNER" "$1" >"$TMP/out.$2" 2>&1
+}
+
+# --heavy-only: exactly the heavy lane, its own token, no fast token.
+run_mode --heavy-only heavy || fail "--heavy-only exited nonzero on passing stubs"
+diff <(sort <<<"$heavy_lane") <(sort "$LOG") >/dev/null \
+  || fail "--heavy-only did not run exactly the heavy_tests entries"
+grep -q '^test_check_ccl_regressions_heavy_only_ok$' "$TMP/out.heavy" \
+  || fail "--heavy-only missing its completion token"
+if grep -q 'test_check_ccl_regressions_fast_ok\|test_check_ccl_regressions_full_ok' "$TMP/out.heavy"; then
+  fail "--heavy-only emitted a fast/full token"
+fi
+
+# --fast: exactly the fast lane, fast token, no heavy entry.
+run_mode --fast fast || fail "--fast exited nonzero on passing stubs"
+diff <(sort <<<"$fast_lane") <(sort "$LOG") >/dev/null \
+  || fail "--fast did not run exactly the fast_tests entries"
+grep -q '^test_check_ccl_regressions_fast_ok$' "$TMP/out.fast" \
+  || fail "--fast missing its completion token"
+
+# --full: both lanes, full token.
+run_mode --full full || fail "--full exited nonzero on passing stubs"
+diff <(sort <(printf '%s\n%s\n' "$fast_lane" "$heavy_lane")) <(sort "$LOG") >/dev/null \
+  || fail "--full did not run exactly fast_tests + heavy_tests"
+grep -q '^test_check_ccl_regressions_full_ok$' "$TMP/out.full" \
+  || fail "--full missing its completion token"
+
+# Failure propagation: a red heavy stub must fail --heavy-only.
+first_heavy="$(head -n 1 <<<"$heavy_lane")"
+printf '#!/usr/bin/env bash\nexit 1\n' >"$FIX/$first_heavy"
+if REGRESSION_SCRIPTS_DIR="$FIX" bash "$RUNNER" --heavy-only >"$TMP/out.red" 2>&1; then
+  fail "--heavy-only exited zero although a heavy stub failed"
+fi
+write_stub "$first_heavy"
+
+# Unregistered-sibling enforcement (036 challenge P1): an unregistered
+# test_*.sh must hard-fail every execution mode, independent of the
+# registration guard test staying registered.
+: >"$FIX/test_unregistered_probe.sh"
+if REGRESSION_SCRIPTS_DIR="$FIX" bash "$RUNNER" --fast >"$TMP/out.unreg" 2>&1; then
+  fail "--fast exited zero although an unregistered sibling test exists"
+fi
+grep -q 'test_unregistered_probe.sh' "$TMP/out.unreg" \
+  || fail "unregistered-sibling failure did not name the offending file"
+rm "$FIX/test_unregistered_probe.sh"
+
+echo "regression_runner_lanes_ok"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_validate_skill_root_depth.sh

@@ -39,7 +39,11 @@ printf 'not-frontmatter\n' > "$tmp/repo/skills/sample-skill/fixtures/SKILL.md"
 mkdir -p "$tmp/repo/vendor/thing"
 printf 'not-frontmatter\n' > "$tmp/repo/vendor/thing/SKILL.md"
 out="$(bash "$VALIDATE" "$tmp/repo" 2>&1)" || fail "repo-root run exited non-zero: $out"
-printf '%s\n' "$out" | grep -q 'validating 1 skill root(s)' \
+# Pure-bash substring match, not `printf | grep -q`: grep -q exits on its first
+# hit, the producer takes SIGPIPE, and under `set -o pipefail` the SUCCESS path
+# then reports failure. Timing-dependent, so it stayed latent until this lane
+# ran concurrently (specs/037-ci-intra-job-parallel/plan.md).
+[[ "$out" == *"validating 1 skill root(s)"* ]] \
   || fail "expected exactly 1 root (nested fixture must be excluded): $out"
 
 # (2) a tree with no SKILL.md still fails loudly (exit 2, no silent green).
@@ -47,7 +51,7 @@ mkdir -p "$tmp/empty/sub/deeper"
 if out="$(bash "$VALIDATE" "$tmp/empty" 2>&1)"; then
   fail "empty tree unexpectedly passed: $out"
 fi
-printf '%s\n' "$out" | grep -q 'no_skill_roots_found' \
+[[ "$out" == *no_skill_roots_found* ]] \
   || fail "empty tree missing loud no_skill_roots_found: $out"
 
 echo "PASS: validate-skill discovers skills/<name>/SKILL.md and stays loud on empty trees"

package/dist/assets/marketplace/plugins/ccl-skills/skills/testing-strategy/references/ci-fixtures-and-flake-control.md

@@ -36,7 +36,7 @@ The live layer proves wiring and credentials, never the fault matrix.
 
 ## Flake Control
 
-- Replace sleeps with explicit conditions. When an assertion still depends on time, make the ORACLE a state whose existence proves the invariant — the helper process still alive, the record not yet written, the lock still held — rather than "finished within N seconds"; a wall-clock margin only holds while the runner is fast enough, so it turns into a red on a loaded runner and, worse, into a silent pass when the margin is generous. Where a fixture's own lifetime is what the assertion races (a sleeping helper, a TTL, a retention window), push that lifetime far past any plausible run so it stops being a deadline, and keep any wall-clock bound as a coarse backstop only. Sample process state, not just liveness: an unreaped zombie still answers `kill -0`, so "still running" and "already gone" both need the state check, and reap lag on a loaded runner needs a bounded grace period instead of an instantaneous sample.
+- Replace sleeps with explicit conditions. When an assertion still depends on time, make the ORACLE a state whose existence proves the invariant — the helper process still alive, the record not yet written, the lock still held — rather than "finished within N seconds"; a wall-clock margin only holds while the runner is fast enough, so it turns into a red on a loaded runner and, worse, into a silent pass when the margin is generous. Where a fixture's own lifetime is what the assertion races (a sleeping helper, a TTL, a retention window), push that lifetime far past any plausible run so it stops being a deadline, and keep any wall-clock bound as a coarse backstop only — far past, but never UNBOUNDED: the thing that normally ends such a helper is whatever the suite is testing, and when that reaper dies first (an aborted run, a cancelled job, a suspended host) the fixture's own lifetime becomes the only thing that will ever end it, so an infinite loop is how a test helper outlives the machine rather than the run. The suite also owns reaping what it started, and cannot delegate that to the component under test: a helper deliberately made signal-immune, or started in its own session/process group where a signal aimed at the suite cannot reach it, has no other reaper — trap the abort signals as well as EXIT, identify what to reap by something the run owns (its own private temp path, its recorded process groups) rather than by a shared name that would hit a concurrent lane, and prove ownership again at the moment of signalling because a pid or group id read earlier is a number the OS recycles. Assert at exit that nothing the run started is still alive: every case can pass while the process table is not clean, so a green suite is not the acceptance object here. Sample process state, not just liveness: an unreaped zombie still answers `kill -0`, so "still running" and "already gone" both need the state check, and reap lag on a loaded runner needs a bounded grace period instead of an instantaneous sample.
 - Isolate tests by namespace, temp directory, tenant, user, DB schema, or unique id.
 - Clean up with test cleanup hooks.
 - Avoid shared global state or reset it explicitly.

package/dist/assets/release.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "npmPackage": "@ccoalm/ccl-skills",
-  "version": "0.1.1",
-  "sourceCommit": "fa73ff8f90778fc8dc69625f11682b8d0b95209a",
+  "version": "0.3.0",
+  "sourceCommit": "0e8a42aee6ffd691679245331af0ad346baf4fdc",
   "sourceState": "clean",
   "files": [
     {
@@ -407,7 +407,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_init_policy_matrix.sh",
-      "sha256": "dbba0c3e5e9fe5b1847c397945d294dbbd4a87bf8c617cf324977c2ef543f595",
+      "sha256": "c93b3db0e68758a71b85f6e05c2553fd64f023e038d765976778fb69435387c3",
       "mode": 493
     },
     {
@@ -432,7 +432,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_parse_probe_result.sh",
-      "sha256": "849e441dfdc13a2acc5db93cedd89a225c34927f2fa95eb397246652b7649c5a",
+      "sha256": "d035ef9c2cd154c4e81ae8818b1b12469f69514ad6e8d01b53f620387c568774",
       "mode": 493
     },
     {
@@ -450,9 +450,14 @@
       "sha256": "18b61e5f43921ebf7c36b059afb8de948c3d174990c3707d5c37a01cee2f5884",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_review_gate_abort_leak.sh",
+      "sha256": "9434aa303e93754ef5a8dfdaf6453bab86f0c253eb787b80fecc00b5f7b3e984",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_review_gate.sh",
-      "sha256": "75b18cc579859f485a218c0d7a4c412e5bb451402ecfc0605804016bd920c09e",
+      "sha256": "6659beaca736d91c9498157766b3d90ce1cbdff828d12fb91b4fff17b9857166",
       "mode": 493
     },
     {
@@ -902,7 +907,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/llm-inference-integration/references/model-prompt-evaluation.md",
-      "sha256": "3a34c9ac4d501570d0460ac20c579361945f4af3978ff71228036f306134f7b7",
+      "sha256": "8c1a38ed0e4007fdc1912046680ed146d762a15a6c3d8eef98f1c26ceb1d3547",
       "mode": 420
     },
     {
@@ -1452,7 +1457,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-ui-ux-design/references/external-ui-ux-quality-benchmarks.md",
-      "sha256": "be6f2117f740f768b83967cacb7922efd40e749380bcca65909b38dbedc268ed",
+      "sha256": "a226dad35b1ef81e74c7f4295bcc4b03153577339c04a6a01486ebcce23b15b6",
       "mode": 420
     },
     {
@@ -1532,7 +1537,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-ui-ux-design/references/ui-ux-audit.md",
-      "sha256": "0da57b20680d36a3fa3b9ea22186b174292759968c8b18209b295bc0cc68c528",
+      "sha256": "36ef05c9b24f8af566cf4200ce2ef36ad4408854a5c5fc884e9e567a2334d93d",
       "mode": 420
     },
     {
@@ -1922,7 +1927,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/external-practice-controls.md",
-      "sha256": "a11c1bbb33aa5d57799c77924f96bcfa1e0c478dbd416851e5e1c8ec22d225dc",
+      "sha256": "703204ddcf298bf0618d777f5551649ca97fa89d4df0cefc7118b7b2396c7ace",
       "mode": 420
     },
     {
@@ -1997,7 +2002,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/rule-consolidation.md",
-      "sha256": "5d791e623d180ff2dd574a32bfe8fa9be63303a9e3b9466aa2054271f41f80d5",
+      "sha256": "adb14725a9ac36cc6d4cf24c3a518e3a2301e2cf7495067b017844b15624884e",
       "mode": 420
     },
     {
@@ -2007,12 +2012,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-register.md",
-      "sha256": "ef68f9d29739e12072945b726d55c20bc75e81834d762de364a8973badceba89",
+      "sha256": "b028098c3d5fdcdb49b6e26fde4a162f958fa236085532e8975e4e7ce2e7de14",
       "mode": 420
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-to-skill-extraction.md",
-      "sha256": "88e22f578d404bc41bab6b46a024a90d1c988c7dc66808bf451cadfae5234980",
+      "sha256": "1c4c99821e26a36a3b82a6194dc82997ce509f50f03f963b7db5a5126e2c5e21",
       "mode": 420
     },
     {
@@ -2097,12 +2102,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/impact-chain-gate.rb",
-      "sha256": "12e5c06254f33e6e56dcafc18f17be0f999a8faed3bda307bdb59d72411f3155",
+      "sha256": "f15d8b1d1932589e981ad1c104e73bfb9e057f61e5ceae60c3a75004422b7ae9",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/register-firing-path-resolution.rb",
-      "sha256": "7e0996581de4d1a4c8a43361e56d7951e4dacd6fbc4bec7007b7314fb92853b8",
+      "sha256": "36da0a9c3b2065f743f25796c0539b93663cfbf84e0106be974c6d66121ce54a",
       "mode": 493
     },
     {
@@ -2142,7 +2147,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_regressions.sh",
-      "sha256": "e35d2b7fa943c82d08190cf4ba5538c9d89b89b9c5f4f2686d36f547e1cd6a44",
+      "sha256": "c6ff1fe420383ec343281678a96ba9b7b2905c8946ea6cd145a7c38da0ff28f2",
       "mode": 493
     },
     {
@@ -2157,7 +2162,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_skill_catalog.sh",
-      "sha256": "40dfed37595b199ec32330c6b5ce2365851955596edee03e0735dff96b71595f",
+      "sha256": "a4dfa305d4aa9be5cd64cadae1a71169ec7024a20d202ca451378cebb043a599",
       "mode": 493
     },
     {
@@ -2215,6 +2220,21 @@
       "sha256": "493443e08b635ac1acd47339fcd0fe966646374e4224baa68a99f46dba932ae1",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_gate_verdict_differential.sh",
+      "sha256": "3c6d27086a7c0d97b636f09faef811ed7d1a53806dbcce21de69707cc6f3dc0a",
+      "mode": 493
+    },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_round_attribution.sh",
+      "sha256": "a8e9bc8a8d60dae6c037c8fa760d15b5a0633e575a9831b9ab11235f3ca12da3",
+      "mode": 493
+    },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_source_refuted.sh",
+      "sha256": "e52069f1ab54e431d62db309c752ded5d7d148e221900a201235ef879e8d3af5",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_register_firing_path_resolution.sh",
       "sha256": "4894f739af0b3aa995243592d71ca3f93de3108a11f9734422a4f15c2ca33668",
@@ -2225,6 +2245,11 @@
       "sha256": "2be264f3dc5291eb51c0512b3ca1f85a74ed8a869b5ae0bac4b0468a195e207f",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_regression_runner_lanes.sh",
+      "sha256": "dd9ce18143e2cce5722c30396d0f8f06f896aa2787ca1f3cb0600233f31b272b",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_regression_runner_registration.sh",
       "sha256": "79159a98cf1ca73054d45b2c6f5d8707641477ba930d87a9c3486e419cbcac9b",
@@ -2252,7 +2277,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_validate_skill_root_depth.sh",
-      "sha256": "13aad76c6ae1c4cc09ce12447c659e93c8307f8df1bbe943fcb8a8dd65210cb3",
+      "sha256": "1261c93b9049dd02120b45ce93284cb30af1c90cfc7da9a4c7ec9cd421ce9de4",
       "mode": 493
     },
     {
@@ -2262,7 +2287,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/SKILL.md",
-      "sha256": "b81061217af840e94896db5178b81e255b4afdac6e15673e400839d318eebf4d",
+      "sha256": "081a7d21813d00a462f2c77c53923edf60cd6f740138d6c028b84ea4675c1aeb",
       "mode": 420
     },
     {
@@ -2412,7 +2437,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/testing-strategy/references/ci-fixtures-and-flake-control.md",
-      "sha256": "8e97149f2efc43b76e50baf7b07b5c7163c5bfdd846612b7ed38089cc52a4664",
+      "sha256": "f35c12479559a56701338e715101a7a5eccba1f2ccbcee4827e9696def8cfc33",
       "mode": 420
     },
     {
@@ -2694,7 +2719,7 @@
     },
     {
       "path": "cli.js",
-      "sha256": "de1aebd30b83f4e53e17cd79a14dfaa5642aebdcaa1f89b0b358c13d05e89bf0",
+      "sha256": "5b5ab7f39b7faa81ea209b3e479295da64f2a834969ee5ac8d76354a182c2822",
       "mode": 493
     },
     {
@@ -2787,6 +2812,26 @@
       "sha256": "2aeabe2364755dc91d7058bf3e3b8e2bb4086a0392da6b8f87a3892879334915",
       "mode": 420
     },
+    {
+      "path": "update-notice.d.ts",
+      "sha256": "2caf9b8512c1969c4ecdb31e90de0265ef435b70a9bcca07f649d5055d63c6ab",
+      "mode": 420
+    },
+    {
+      "path": "update-notice.js",
+      "sha256": "da5ceca856f4492afd38010918d4c33c5f8dfc04d490bbf84ff955a8e12f7245",
+      "mode": 420
+    },
+    {
+      "path": "version-check.d.ts",
+      "sha256": "43e818adf60173644896298637f47b01d5819b17eda46eaa32d0c7d64724d012",
+      "mode": 420
+    },
+    {
+      "path": "version-check.js",
+      "sha256": "bd6babcff7eb222ce39f8ed4d8945f55f4004f45d17600fee497ee64357099da",
+      "mode": 420
+    },
     {
       "path": "version.d.ts",
       "sha256": "edc6c24c912373b1ffc68f7b261f2e04d616b0486e9ab2401d1201f094c5a885",
@@ -2798,5 +2843,5 @@
       "mode": 420
     }
   ],
-  "snapshotHash": "4aef2fcf9dcaafaf0bc219dfe27899c742ae4dc94c919978462e49bc49c894d3"
+  "snapshotHash": "f339a0ca319bb93956aebf42d2f63143ae37de54484398b0a3f87af313064436"
 }

package/dist/cli.js

@@ -2,9 +2,11 @@
 import { readFileSync, realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { Worker } from "node:worker_threads";
-import { spawnSync } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
+import { paths } from "./paths.js";
+import { cachePath, emitNotice } from "./update-notice.js";
 const pkg = JSON.parse(readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf8"));
-const HELP = `ccl-skills — npm snapshot installer for Claude Code, Codex, and OpenCode\n\nUsage:\n  ccl-skills install [--host claude|codex|opencode] [--json]\n  ccl-skills update [--host claude|codex|opencode] [--yes] [--allow-downgrade] [--json]\n  ccl-skills doctor [--host claude|codex|opencode] [--json]\n  ccl-skills uninstall [--host claude|codex|opencode] [--yes] [--json]\n\nWithout --host, every installed or package-owned host is selected.\nUpdate and uninstall are dry-run unless --yes is supplied.\nBy default update --yes upgrades the global npm package to @latest before refreshing assets.\nSet CCL_SKILLS_SKIP_SELF_UPDATE=1 for an assets-only refresh; --allow-downgrade always uses the invoked package without installing @latest first.`;
+const HELP = `ccl-skills — npm snapshot installer for Claude Code, Codex, and OpenCode\n\nUsage:\n  ccl-skills install [--host claude|codex|opencode] [--json]\n  ccl-skills update [--host claude|codex|opencode] [--yes] [--allow-downgrade] [--json]\n  ccl-skills doctor [--host claude|codex|opencode] [--json]\n  ccl-skills uninstall [--host claude|codex|opencode] [--yes] [--json]\n\nWithout --host, every installed or package-owned host is selected.\nUpdate and uninstall are dry-run unless --yes is supplied.\nBy default update --yes upgrades the global npm package to @latest before refreshing assets.\nSet CCL_SKILLS_SKIP_SELF_UPDATE=1 for an assets-only refresh; --allow-downgrade always uses the invoked package without installing @latest first.\n\nAn interactive run prints an update notice on stderr at most once a day.\nSet CCL_SKILLS_NO_UPDATE_NOTIFIER=1 (or NO_UPDATE_NOTIFIER) to silence it; it is\nalready silent under --json, in CI, and when output is not a terminal.`;
 export function parseArgs(args) {
     if (!args.length ||
         args.includes("--help") ||
@@ -164,10 +166,28 @@ function selfUpdate(options) {
         return { code: 5, status: "package-updated-assets-unknown", message: "npm package updated, but the fresh CLI returned an invalid result" };
     }
 }
+/** Secondary guidance chrome. It is handed a stderr writer only, runs after the
+ * command's own output, and schedules its registry check in a detached child,
+ * so it can neither reach stdout nor add latency to this invocation. */
+function notifyUpdate(json) {
+    emitNotice({
+        current: pkg.version,
+        now: Date.now(),
+        env: process.env,
+        stdoutTTY: !!process.stdout.isTTY,
+        stderrTTY: !!process.stderr.isTTY,
+        columns: process.stdout.columns,
+        json,
+    }, cachePath(paths().root), {
+        stderr: (text) => write(process.stderr, text),
+        spawnCheck: () => spawn(process.execPath, [fileURLToPath(new URL("./version-check.js", import.meta.url))], { detached: true, stdio: "ignore" }).unref(),
+    });
+}
 export async function main(args) {
     const parsed = parseArgs(args);
     if (parsed.direct) {
         write(parsed.direct.stream === "stdout" ? process.stdout : process.stderr, parsed.direct.text);
+        notifyUpdate(false);
         return parsed.direct.code;
     }
     const shouldSelfUpdate = parsed.command === "update" && parsed.options.yes && !parsed.options.allowDowngrade && process.env.CCL_SKILLS_SKIP_SELF_UPDATE !== "1";
@@ -184,6 +204,7 @@ export async function main(args) {
     write(process.stdout, parsed.json
         ? JSON.stringify(result)
         : `${result.status}: ${result.message}${result.plan ? `\n${result.plan.map((x) => `- ${x}`).join("\n")}` : ""}`);
+    notifyUpdate(!!parsed.json);
     return result.code;
 }
 export function isDirectEntrypoint(importMetaUrl, argv1) {