@ccoalm/ccl-skills 0.10.0 → 0.11.0

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/validate_extraction_review_state.py

@@ -35,6 +35,12 @@ KNOWN_REVIEW_STATES = EXTERNAL_REVIEW_STATES | {"self_reviewed"}
 # future budget change lands in exactly one place.
 WRAPPER_CHALLENGE_BUDGET = 1
 WRAPPER_AUTONOMOUS_ROUNDS = WRAPPER_CHALLENGE_BUDGET + 1
+# A fix that edits the reviewed owner package ends its chain by construction, so
+# the post-fix candidate is challenged in ONE succeeding chain rather than inside
+# the ended one. The lane therefore spans at most two chains: the wrapper-budget
+# chain plus a single succession challenge bound to the landing candidate.
+LANE_MAX_CHAINS = 2
+LANE_MAX_ROUNDS = WRAPPER_AUTONOMOUS_ROUNDS + 1
 DISPOSITIONS = {
     "fixed",
     "source_refuted",
@@ -304,8 +310,10 @@ def validate_controller_receipts(
     payload: dict[str, Any], ledger_dir: Path
 ) -> tuple[list[dict[str, Any]], list[str], dict[str, list[str]], str, str]:
     refs = payload["controller_receipts"]
-    if not isinstance(refs, list) or not 1 <= len(refs) <= 3:
-        fail("controller_receipts must contain one to three ordered Agent rounds")
+    if not isinstance(refs, list) or not 1 <= len(refs) <= LANE_MAX_ROUNDS:
+        fail(
+            f"controller_receipts must contain one to {LANE_MAX_ROUNDS} ordered Agent rounds"
+        )
     if payload["autonomous_round"] != len(refs) or type(payload["autonomous_round"]) is not int:
         fail("autonomous_round must equal the ordered controller receipt count")
 
@@ -313,16 +321,20 @@ def validate_controller_receipts(
     receipt_hashes: list[str] = []
     finding_hashes: dict[str, list[str]] = {}
     chain_id: str | None = None
+    final_chain_id: str | None = None
     scope_hash: str | None = None
+    candidates: list[str] = []
+    succession_index: int | None = None
     ledger_candidate = sha256(
         payload["candidate_sha256"], "ledger.candidate_sha256"
     )
     for expected_index, value in enumerate(refs, start=1):
-        # A caller supplying more receipts than the wrapper can mint would
+        # A caller supplying more receipts than the lane can mint would
         # otherwise claim a negative remaining count and reach completion
-        # validation as a ready-state budget bypass.
-        if expected_index > WRAPPER_AUTONOMOUS_ROUNDS:
-            fail("controller chain exceeds the wrapper budget")
+        # validation as a ready-state budget bypass. The wrapper bound still
+        # governs each chain; the lane bound governs their sum.
+        if expected_index > LANE_MAX_ROUNDS:
+            fail("controller chain exceeds the lane budget")
         ref = exact_object(
             value, {"sequence", "file", "sha256"}, f"controller_receipts[{expected_index - 1}]"
         )
@@ -339,7 +351,28 @@ def validate_controller_receipts(
         receipt = decode_json(raw, label=f"controller receipt {expected_index}")
         if receipt.get("schema_version") != 3 or type(receipt.get("schema_version")) is not int:
             fail(f"controller receipt {expected_index} schema_version must be 3")
-        expected_mode = "review" if expected_index == 1 else "challenge"
+        # A succession round opens a second chain, so its own chain arithmetic
+        # restarts at one while its lane position keeps counting. Classify first;
+        # every expectation below reads the chain position, not the lane index.
+        predecessor_chain = receipt.get("predecessor_chain_id")
+        is_succession = predecessor_chain is not None
+        if is_succession:
+            if expected_index != len(refs):
+                fail("a succession round must be the lane's final round")
+            if expected_index != WRAPPER_AUTONOMOUS_ROUNDS + 1:
+                fail("a succession round may only follow a spent wrapper chain")
+            succession_index = expected_index
+            chain_position = 1
+        else:
+            # Only a succession round may sit past the wrapper chain. Without this
+            # the caller claims a negative remaining count and reaches completion
+            # validation as a ready-state budget bypass.
+            if expected_index > WRAPPER_AUTONOMOUS_ROUNDS:
+                fail("controller chain exceeds the wrapper budget")
+            chain_position = expected_index
+        expected_mode = (
+            "challenge" if is_succession else "review" if expected_index == 1 else "challenge"
+        )
         if receipt.get("mode") != expected_mode:
             fail(f"controller receipt {expected_index} must have mode {expected_mode}")
         if receipt.get("status") not in {"passed", "findings"}:
@@ -349,15 +382,24 @@ def validate_controller_receipts(
         current_chain = bounded_text(
             receipt.get("review_chain_id"), f"controller receipt {expected_index}.review_chain_id", 120
         )
-        if chain_id is None:
+        if is_succession:
+            if current_chain == chain_id:
+                fail(
+                    f"controller receipt {expected_index} succeeds its own chain"
+                )
+            final_chain_id = current_chain
+        elif chain_id is None:
             chain_id = current_chain
+            final_chain_id = current_chain
         elif current_chain != chain_id:
             fail(f"controller receipt {expected_index} review_chain_id changed")
-        if receipt.get("autonomous_review_index") != expected_index or type(
+        if receipt.get("autonomous_review_index") != chain_position or type(
             receipt.get("autonomous_review_index")
         ) is not int:
             fail(f"controller receipt {expected_index} autonomous_review_index is not contiguous")
-        expected_challenge_index = 0 if expected_index == 1 else expected_index - 1
+        expected_challenge_index = (
+            1 if is_succession else 0 if expected_index == 1 else expected_index - 1
+        )
         if receipt.get("challenge_index") != expected_challenge_index or type(
             receipt.get("challenge_index")
         ) is not int:
@@ -368,7 +410,7 @@ def validate_controller_receipts(
             receipt.get("autonomous_review_budget")
         ) is not int:
             fail(f"controller receipt {expected_index} autonomous_review_budget must be {WRAPPER_AUTONOMOUS_ROUNDS}")
-        expected_remaining = WRAPPER_AUTONOMOUS_ROUNDS - expected_index
+        expected_remaining = WRAPPER_AUTONOMOUS_ROUNDS - chain_position
         if receipt.get("autonomous_reviews_remaining") != expected_remaining or type(
             receipt.get("autonomous_reviews_remaining")
         ) is not int:
@@ -376,7 +418,8 @@ def validate_controller_receipts(
         if receipt.get("autonomous_review_allowed") is not (expected_remaining > 0):
             fail(f"controller receipt {expected_index} autonomous_review_allowed is invalid")
         prior = receipt.get("prior_review_result_sha256")
-        if prior != receipt_hashes:
+        expected_prior = [] if is_succession else receipt_hashes
+        if prior != expected_prior:
             fail(f"controller receipt {expected_index} prior_review_result_sha256 is not the complete ordered prefix")
         candidate = sha256(
             receipt.get("candidate_sha256"), f"controller receipt {expected_index}.candidate_sha256"
@@ -386,13 +429,10 @@ def validate_controller_receipts(
         )
         if packet != candidate:
             fail(f"controller receipt {expected_index} packet_sha256 must equal candidate_sha256")
-        # Every counted round must have inspected the exact final candidate;
-        # a chain whose review round saw an earlier candidate is not a review
-        # of the candidate this ledger closes out.
-        if candidate != ledger_candidate:
-            fail(
-                f"controller receipt {expected_index} does not bind the ledger candidate"
-            )
+        # Which candidate a round must bind depends on its phase, and the phase
+        # split is only known once every round is loaded, so this is settled
+        # after the loop rather than here.
+        candidates.append(candidate)
         current_scope_hash = validate_scope(receipt, f"controller receipt {expected_index}")
         if scope_hash is None:
             scope_hash = current_scope_hash
@@ -425,7 +465,7 @@ def validate_controller_receipts(
             fail(f"controller receipt {expected_index} has unknown controller review_state {state}")
         expected_state = (
             "post_review_budget"
-            if receipt["status"] == "findings" and expected_index == WRAPPER_AUTONOMOUS_ROUNDS
+            if receipt["status"] == "findings" and chain_position == WRAPPER_AUTONOMOUS_ROUNDS
             else "findings_pending"
             if receipt["status"] == "findings"
             else "reviewed"
@@ -439,9 +479,38 @@ def validate_controller_receipts(
         receipt_hashes.append(receipt_hash)
         finding_hashes[receipt_hash] = current_findings
 
-    if chain_id is None or scope_hash is None:
+    if chain_id is None or scope_hash is None or final_chain_id is None:
         fail("controller receipt chain is empty")
-    return receipts, receipt_hashes, finding_hashes, chain_id, scope_hash
+
+    # Phase binding. Without a succession every counted round must have inspected
+    # the exact final candidate. With one, the wrapper chain reviewed the candidate
+    # the fix batch then moved, and the succession round is the only round that can
+    # bind what actually lands — which is the whole point of running it.
+    if succession_index is None:
+        for position, value in enumerate(candidates, start=1):
+            if value != ledger_candidate:
+                fail(f"controller receipt {position} does not bind the ledger candidate")
+    else:
+        succession = receipts[-1]
+        succeeded_candidate = sha256(
+            succession.get("predecessor_candidate_sha256"),
+            "succession receipt.predecessor_candidate_sha256",
+        )
+        if candidates[-1] != ledger_candidate:
+            fail("the succession round does not bind the ledger candidate")
+        if succeeded_candidate == ledger_candidate:
+            fail("a succession round must bind a candidate the wrapper chain never saw")
+        for position, value in enumerate(candidates[:-1], start=1):
+            if value != succeeded_candidate:
+                fail(f"controller receipt {position} does not bind the succeeded candidate")
+        if succession.get("predecessor_chain_id") != chain_id:
+            fail("the succession round does not name the chain it succeeds")
+        if sha256(
+            succession.get("predecessor_result_sha256"),
+            "succession receipt.predecessor_result_sha256",
+        ) != receipt_hashes[-2]:
+            fail("the succession round does not bind the succeeded chain's terminal receipt")
+    return receipts, receipt_hashes, finding_hashes, final_chain_id, scope_hash
 
 
 def validate_completion_receipt(
@@ -485,18 +554,24 @@ def validate_completion_receipt(
         receipt.get("autonomous_review_budget")
     ) is not int:
         fail(f"completion receipt autonomous_review_budget must be {WRAPPER_AUTONOMOUS_ROUNDS}")
-    if receipt.get("autonomous_review_index") != len(receipts) or type(
+    # The completion checkpoint binds the final external round, so its chain
+    # arithmetic is that round's — which is the succeeding chain's when a fix
+    # batch ended the wrapper chain, not the lane's round count.
+    final_index = final.get("autonomous_review_index")
+    if receipt.get("autonomous_review_index") != final_index or type(
         receipt.get("autonomous_review_index")
     ) is not int:
         fail("completion receipt autonomous_review_index does not match the final round")
-    expected_remaining = WRAPPER_AUTONOMOUS_ROUNDS - len(receipts)
+    expected_remaining = WRAPPER_AUTONOMOUS_ROUNDS - final_index
     if receipt.get("autonomous_reviews_remaining") != expected_remaining or type(
         receipt.get("autonomous_reviews_remaining")
     ) is not int:
         fail("completion receipt autonomous_reviews_remaining does not match the final round")
     if receipt.get("autonomous_review_allowed") is not False:
         fail("completion receipt must disable further autonomous review")
-    if receipt.get("prior_review_result_sha256") != receipt_hashes[:-1]:
+    if receipt.get("prior_review_result_sha256") != final.get(
+        "prior_review_result_sha256"
+    ):
         fail("completion receipt prior_review_result_sha256 does not match the final external receipt")
     if receipt.get("completion_review_result_sha256") != receipt_hashes[-1]:
         fail("completion receipt completion_review_result_sha256 does not identify the final external receipt")
@@ -950,13 +1025,29 @@ def validate(payload: dict[str, Any], ledger_dir: Path) -> tuple[str, int, int]:
             fail("ready_for_human_decision requires no unresolved finding occurrence and no unreviewed delta")
     elif closeout == "continuation_authorization_required":
         final = receipts[-1]
-        if (
-            len(receipts) != WRAPPER_AUTONOMOUS_ROUNDS
-            or final.get("status") != "findings"
-            or final.get("review_state") != "post_review_budget"
-            or final.get("human_decision_required") is not True
-        ):
-            fail(f"continuation_authorization_required requires final-round (round {WRAPPER_AUTONOMOUS_ROUNDS}) findings in post_review_budget")
+        # The lane is spent either at the wrapper chain's last round, or — when a
+        # fix batch moved the candidate — at the succession round that reviewed it.
+        # Only the closeout knows the lane is spent: the controller sizes
+        # human_decision_required from its own chain, where the succession round
+        # is round one of two.
+        succeeded = final.get("predecessor_chain_id") is not None
+        if succeeded:
+            spent = (
+                len(receipts) == LANE_MAX_ROUNDS and final.get("status") == "findings"
+            )
+        else:
+            spent = (
+                len(receipts) == WRAPPER_AUTONOMOUS_ROUNDS
+                and final.get("status") == "findings"
+                and final.get("review_state") == "post_review_budget"
+                and final.get("human_decision_required") is True
+            )
+        if not spent:
+            fail(
+                "continuation_authorization_required requires final-round "
+                f"(round {WRAPPER_AUTONOMOUS_ROUNDS}) findings in post_review_budget, "
+                f"or a succession round (round {LANE_MAX_ROUNDS}) carrying findings"
+            )
     elif closeout == "baseline_race" and not delta:
         fail("baseline_race requires a non-empty unreviewed_delta")
 

package/dist/assets/marketplace/plugins/ccl-skills/skills/test-artifact-management/SKILL.md

@@ -15,7 +15,7 @@ Bitable ownership:
 
 - Ambiguous "写测试用例" / "write test cases" requests mean `testing-strategy` first when the user wants test code, E2E/browser/device tests, CI coverage, mocks, or verification evidence. Use this skill only when the deliverable is a structured TC artifact, Feishu/Bitable sync, or source-to-TC generation workflow.
 - Use `testing-strategy` to decide which test layers (unit / integration / E2E / scenario) are needed *after* the use cases are written.
-- Use `go-microservice-dev` / `python-service-dev` / `web-react-dev` / `miniapp-product-dev` / `app-cross-platform-dev` for implementing the test code once test cases are approved.
+- Test-code implementation, once test cases are approved, must go to the owning stack skill: `go-microservice-dev` / `python-service-dev` / `nodejs-service-dev` / `web-react-dev` / `miniapp-product-dev` / `app-cross-platform-dev`.
 - Use `product-rd-workflow` when the test case work is part of a broader feature delivery plan.
 - Use `llm-inference-integration` when test cases cover LLM / agent / RAG / inference behavior.
 - Use `skill-extraction-workflow` to feed lessons from test case generation or Feishu Bitable setup back into this skill after each delivery cycle.

package/dist/assets/marketplace/plugins/ccl-skills/skills/testing-strategy/SKILL.md

@@ -9,14 +9,15 @@ Use this skill when the task is about test scope, test design, verification evid
 
 ## Skill Routing
 
-- Use this skill for test strategy, test pyramid decisions, unit/integration/e2e/scenario boundaries, fixtures, mocks/fakes, regression coverage, and verification evidence.
-- Use `go-microservice-dev` for Go-specific implementation details after the test layer is chosen.
-- Use `python-service-dev` for Python-specific pytest, async test, fixture, fake client, ruff, mypy/pyright, packaging, or migration-test implementation details after the test layer is chosen.
-- Use `app-cross-platform-dev` for Flutter unit/widget/integration tests, Android unit/Compose/instrumented tests, iOS unit/UI tests, mobile device smoke, and app release verification after the test layer is chosen.
-- Use `miniapp-product-dev` for WeChat/Alipay/Douyin/Baidu mini-program build, developer-tool preview, real-device smoke, host capability verification, review submission, and release checks after the test layer is chosen.
-- Use `web-react-dev` for React unit/component/API-client/browser/E2E implementation, browser automation, accessibility checks, and build/deploy smoke after the test layer is chosen.
-- Use `terminal-cli-dev` for command-line, terminal, PTY-backed, ANSI-rendered, keyboard-driven, and full-screen text UI implementation after the test layer is chosen.
-- Use `llm-inference-integration` for LLM/agent/RAG evals, replay sets, prompt/model regression checks, shadow runs, and inference-specific observability after the test layer is chosen.
+- Use this skill for test strategy, test pyramid decisions, unit/integration/e2e/scenario boundaries, fixtures, mocks/fakes, regression coverage, and verification evidence. Stack pointers below apply after that choice.
+- Use `go-microservice-dev` for Go-specific implementation details.
+- Use `python-service-dev` for Python-specific pytest, async test, fixture, fake client, ruff, mypy/pyright, packaging, or migration-test implementation details.
+- Node runner, mock/fixture, fake timers, stream and cancellation assertions, child-process lifecycle, and packaged-artifact verification must use `nodejs-service-dev`.
+- Use `app-cross-platform-dev` for Flutter unit/widget/integration tests, Android unit/Compose/instrumented tests, iOS unit/UI tests, mobile device smoke, and app release verification.
+- Use `miniapp-product-dev` for WeChat/Alipay/Douyin/Baidu mini-program build, developer-tool preview, real-device smoke, host capability verification, review submission, and release checks.
+- Use `web-react-dev` for React unit/component/API-client/browser/E2E implementation, browser automation, accessibility checks, and build/deploy smoke.
+- Use `terminal-cli-dev` for the terminal interface contract, PTY/ANSI/keyboard rendering, and full-screen text UI testing.
+- Use `llm-inference-integration` for LLM/agent/RAG evals, replay sets, prompt/model regression checks, shadow runs, and inference-specific observability.
 - Use `defect-diagnosis` first when a test is failing, flaky, or used to reproduce a bug.
 - Use `product-rd-workflow` first when testing is part of an end-to-end product delivery plan.
 - Use `product-ui-ux-design` for visual hierarchy, interaction, state, accessibility, and design acceptance criteria; use this skill for automated proof and test coverage.

package/dist/assets/release.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "npmPackage": "@ccoalm/ccl-skills",
-  "version": "0.10.0",
-  "sourceCommit": "6c14975b271bc4477e96b860c361717dea81836e",
+  "version": "0.11.0",
+  "sourceCommit": "3269aa4739c5336f005292e70cb82cdd4ffb76c7",
   "sourceState": "clean",
   "files": [
     {
@@ -282,7 +282,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/references/staged-review-contract.md",
-      "sha256": "058ba68ce10a452dc298812f1bae4806a3885166803b3ff90ad3ebc18c5a9a68",
+      "sha256": "c63a16c569e2ae55784204a36458cab1e19351b76d7b94da1cae1ee370412449",
       "mode": 420
     },
     {
@@ -372,7 +372,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/review_gate.py",
-      "sha256": "153a4d5e385f894bc62f6bf2d69aea353b2bb76dc54c96b2d30e08369e80854d",
+      "sha256": "887d408540b9e195301c856df37c6883916ae9287ede623f7fd43cc31fac99e9",
       "mode": 493
     },
     {
@@ -477,7 +477,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_review_gate.sh",
-      "sha256": "e899de3d1c86afa1d513d203b01b8140f13e84aa5e5e096d87c59e95ceb6c03c",
+      "sha256": "51ea90cd42ce9661f84c1a0f5daee4f2a17072b5f0cdfa5d3c0e27a0ec2af235",
       "mode": 493
     },
     {
@@ -497,7 +497,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/SKILL.md",
-      "sha256": "52ddc8371cebc3883de4d4988f2895b1fd0072e2d17380ddadf8e8180aaa6a4d",
+      "sha256": "f960b78a381e166bb848a80efb8834f7904cd1103d9aee176205375f4b02a81b",
       "mode": 420
     },
     {
@@ -517,7 +517,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/defect-diagnosis/SKILL.md",
-      "sha256": "134b5313c5ee63d6b297f969a1a85ee96369cdc4d0efccb1d8268131095158b5",
+      "sha256": "caad451eb1abf3255451c28a76c686a417d117a26b8c00e0725998d99a330c65",
       "mode": 420
     },
     {
@@ -822,7 +822,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/go-microservice-dev/SKILL.md",
-      "sha256": "5109eccfa3ca570b3b3e27081fae3adeee65efcfa490c43de5265df59249f10e",
+      "sha256": "e769f91d708b635b1987bfa43343ed0c31734ae66997f2643e00194cb7bea81c",
       "mode": 420
     },
     {
@@ -947,7 +947,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/llm-inference-integration/SKILL.md",
-      "sha256": "2b42442d84124bb5ad97f3d526b3dd1cabb4a0f30dee0075c74b9a78fdb1b349",
+      "sha256": "274bbf04b4849403fb75de56b90da8ce2daa1f4674e210ed157bfe23b12fef0d",
       "mode": 420
     },
     {
@@ -1057,7 +1057,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/nodejs-service-dev/references/async-lifecycle-and-performance.md",
-      "sha256": "0cc63ac7259ed1f83a90aec1cfa0f43ea61db6227d7499a929ef74cabb2a36f3",
+      "sha256": "693c3b6ee26d0eacc63c97888b6141735a63412538363d49874d24076f28360a",
       "mode": 420
     },
     {
@@ -1067,7 +1067,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/nodejs-service-dev/references/source-map.md",
-      "sha256": "21177c5d101d94f3364e0cba757d37cf60c61a10bc4110b4182e31512ef325d2",
+      "sha256": "0fcb80b552e98eb94ba9525c8a6ceb01bd36bb82a542da02f5a3908d2c8a9897",
       "mode": 420
     },
     {
@@ -1077,7 +1077,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/nodejs-service-dev/SKILL.md",
-      "sha256": "728ab6b5ec6ac7879b998e4528ca97c433a4348f70c40704f935dc08a0ab3e1a",
+      "sha256": "96206c6babadafb509e37339e95ad8d4bf96e70acf837ab8ac9cbd02a7e2a62f",
       "mode": 420
     },
     {
@@ -1332,7 +1332,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/references/delivery-lifecycle.md",
-      "sha256": "adb63f5aa873dea2292e43b1478eecac1557f3fd0382cea1202826bb70c26cbd",
+      "sha256": "17b5f7eee4049894cb855de31878abfda1196a20278a0ccd5c03c87ecf4d720c",
       "mode": 420
     },
     {
@@ -1352,7 +1352,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/references/dispatch-owner-skills.md",
-      "sha256": "8796caf73a536a792fc5a692ba3e244427277ae21116fa5f0e5549459ee341a8",
+      "sha256": "647e06fe20fc87d041b11721d18cb011760a37d85d28eddf68a797a280915a5c",
       "mode": 420
     },
     {
@@ -1402,7 +1402,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/references/problem-resolution-and-learning.md",
-      "sha256": "e2dd9257560f76ce73f0c26ab095c44d45a94598ff79131d121649dec3900cd5",
+      "sha256": "2f9d3d6d4d734822ac4a0dacb1048ca1675636194b55108362e32cbadceb48e8",
       "mode": 420
     },
     {
@@ -1472,7 +1472,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/SKILL.md",
-      "sha256": "4a0a972584e85670223cd13aecf1620622cbb5d2fa2b16aeb1f2ba86a4d2bcc2",
+      "sha256": "3569609af15adace2db554945a3fd2a2926b45802e26df05da1132da3b8cd9ca",
       "mode": 420
     },
     {
@@ -1847,7 +1847,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/python-service-dev/SKILL.md",
-      "sha256": "1566ef7836d5160d3737ffb4b086c1a59d839f2da554a264cd873f401e64babf",
+      "sha256": "13549ba3bf78a7014af32be7abac40860d905e06d389b92281938b97dbc481cd",
       "mode": 420
     },
     {
@@ -1882,7 +1882,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/release-coordination/references/tag-and-prod-pipeline-gate.md",
-      "sha256": "c900be8e24769a86be16aacb7d890f1469842b56ab328f520570213c4a70a4d8",
+      "sha256": "dc295da66df9cd4d123ee6b425bbd191380b94925a02adfd28abee41785b49c1",
       "mode": 420
     },
     {
@@ -2017,7 +2017,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/dual-track-review-gate.md",
-      "sha256": "c8769da69d81a6165d8a7601120fad248134167cc20196decef1213fc16cd3c1",
+      "sha256": "b567749aee88e60a46a1ba7dfb687fe7e22e0898b2fae69f4638d2c07e2a6cca",
       "mode": 420
     },
     {
@@ -2037,7 +2037,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/external-practice-controls.md",
-      "sha256": "554f3b469ea2bfe28e5fa75204406b310a15330934beadb9730bc1d4a768ae55",
+      "sha256": "a956c52fdf268c2f75edcc7de66f882be222fdd5bad07b68c1242ad05d79637d",
       "mode": 420
     },
     {
@@ -2047,7 +2047,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/extraction-quickstart.md",
-      "sha256": "358658f2c767c0487f9e52f34ad2e069548424efdada9b658bfb90b44d18979f",
+      "sha256": "63d62923d961f34765c1ebb832c73764ebd979f981a0f2c086a6f815a6c2b6b8",
       "mode": 420
     },
     {
@@ -2112,7 +2112,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/rule-consolidation.md",
-      "sha256": "5e42ca157381a7edc4f664a38f19c87ed96cf810895fde846c78aadf89146c0a",
+      "sha256": "d2455dfb4f3213db76244a21e004ad0f934279c773d733bae9303a90990f285f",
       "mode": 420
     },
     {
@@ -2122,12 +2122,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-register.md",
-      "sha256": "487afc683c490b5eaa5a1ff38e94b07f220536b848c8e33acf4ceb6a364d2af8",
+      "sha256": "244e155d641b0495a254f765dc8d9d548e0f0bf2f1f3e60916fcbebea2b44ece",
       "mode": 420
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-to-skill-extraction.md",
-      "sha256": "8ea17e4e71159252de8d162e579a1909eed9f1eca170b87e206930adc3073eec",
+      "sha256": "ae4021df2377a407eaa615b267822651750a0d8f775a67db672e360150c1b96c",
       "mode": 420
     },
     {
@@ -2147,7 +2147,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/validation-and-landing.md",
-      "sha256": "c406fd00c09a2923e647d7c94c2b178fcd9b25af99bd8cff0815a2a33067040c",
+      "sha256": "58f85c05e3a08c49836113778ba7a8dba86c5dbf4b2716e20c38f86632481c52",
       "mode": 420
     },
     {
@@ -2157,7 +2157,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/check-ccl-skills.sh",
-      "sha256": "7f844cc8bbd518f42c8bcba45ea810588feaf4977df27a400501de36ed434b4d",
+      "sha256": "9c3bb27f2cf8cffabfec633b33ee58a392fd7a4b464420bc6a3f02822380e94d",
       "mode": 493
     },
     {
@@ -2192,7 +2192,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/contract-anchors.tsv",
-      "sha256": "da91dbadf4e1b076e8e78aa7c3f91dac8b792e300959bd4392eb5761ac03d47a",
+      "sha256": "10cdd03d67185c1b1730a34248edb6c311e6ee8b82b8ecc0f7923e8f8f368b59",
       "mode": 420
     },
     {
@@ -2237,7 +2237,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/impact-chain-gate.rb",
-      "sha256": "0df591fb71e8fe435d0b7b10febbb216907eaa8d9925125f5845477f3f503876",
+      "sha256": "9430395d38d36863e6ec5e4a2087e558c4f2214dc90feebdaa70e8d0d92a29f8",
       "mode": 493
     },
     {
@@ -2250,6 +2250,11 @@
       "sha256": "db009982ac485aaebf708c4bff9b33fc65e2fef6264769ec1e42870f75bc8677",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/review_ledger_binding.py",
+      "sha256": "20068bbd9b54f32460d14963391e11d8e9ecf08997bf8ece3c758effeb950f40",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/shared_git_surface_gate.py",
       "sha256": "954841f113ace5cdd1a1d29e189ed9d8d68e07fe170236962b044978e472e0fc",
@@ -2287,7 +2292,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_impact_chain_refscripts.sh",
-      "sha256": "04e4b75799c9e6e97402a6515f063dd1c59dc0b4d5f02cc9448142dc99459fea",
+      "sha256": "82eb576dd1a0280bdd7cbe742f5903a5b1919f8b0bdd8da53489b47f0468e09c",
       "mode": 493
     },
     {
@@ -2307,7 +2312,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_regressions.sh",
-      "sha256": "f9054f204e93b69cee0e91b2cd43af6b6085b00c05abdb2168953f454d71b1de",
+      "sha256": "2463130c6af00c0611f1197628b3eb760e141b7db3fb8db8b88bb27e3da7fd62",
       "mode": 493
     },
     {
@@ -2475,6 +2480,11 @@
       "sha256": "79159a98cf1ca73054d45b2c6f5d8707641477ba930d87a9c3486e419cbcac9b",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_review_ledger_binding.sh",
+      "sha256": "ce08eca4a5ecd1c578216eaed67cf9af0d02629e2c9cfea54c2a27bfaf8809ae",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_routing_bank_integrity.sh",
       "sha256": "7f5068806aeac86d636e3cece64b205e0593c6dbecf0c9f54605eed3126dc49b",
@@ -2482,7 +2492,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_routing_pointer_integrity.sh",
-      "sha256": "c593d8890ae5884189ceb662efafad536eafd290ecff0a85b6fac422fa7e04f0",
+      "sha256": "a940e6625055d2991b71d3e73fd452b1057ddf6f0cf5115e7174b30abfac5225",
       "mode": 493
     },
     {
@@ -2502,7 +2512,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_validate_extraction_review_state.sh",
-      "sha256": "d4e273b7dd48af4d3fdf3e3ba24c42e880b3fe0128354deaab0796f40548a796",
+      "sha256": "8bce4771a225860356aa3301aee09dc064a0491a20da6273a3c3aa9719d48297",
       "mode": 493
     },
     {
@@ -2522,7 +2532,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/validate_extraction_review_state.py",
-      "sha256": "649c530bf58a426e07613d9c1ce3685c7dbccd6f6f6305df73ff6792f9d35659",
+      "sha256": "234a501a93f2b820081d8aea7bf3a3750bd865455b1217d641e5960931412ae7",
       "mode": 493
     },
     {
@@ -2532,7 +2542,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/SKILL.md",
-      "sha256": "a0719dcdd2170c934b7f14a22b452d5ee14a67444bc4abbe2af3b0a333fb16e8",
+      "sha256": "83c6d8bb60a0edafc1c80ca02109f7210ec090e5c9b5eda813672b14779b7cc4",
       "mode": 420
     },
     {
@@ -2672,7 +2682,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/test-artifact-management/SKILL.md",
-      "sha256": "7a814183111df2b4e7e64f69db907054da5b35d0091f2b8c03c622165d4fda45",
+      "sha256": "9d40a4f2bb66128964295f60b96a425c62a0629076f730e09621850cab7c6289",
       "mode": 420
     },
     {
@@ -2817,7 +2827,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/testing-strategy/SKILL.md",
-      "sha256": "db42b8dcf62c77ce6374abc3926e84cbcd45ab04f6a7f7663e88c55cf2507eff",
+      "sha256": "3527e55b44e74ec4c6a0f402068f0d954b1760715ff4b449f53034086118288a",
       "mode": 420
     },
     {
@@ -3368,5 +3378,5 @@
       "mode": 420
     }
   ],
-  "snapshotHash": "ddff1fc512030e6dfa432b0844b2cc5177dd24623bde566b0dc3f3af78a306af"
+  "snapshotHash": "4797cf3d30cf1336e439094f37df74198438083e314e2fb1db66dbfbd3eac0fc"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ccoalm/ccl-skills",
-	"version": "0.10.0",
+	"version": "0.11.0",
   "description": "Reusable workflows that help coding agents plan, build, test, review, and release software — for Claude Code, Codex, and OpenCode",
 	"keywords": ["skills", "agent-skills", "claude", "claude-code", "codex", "opencode", "agent", "ai", "ai-agents", "cli", "anthropic", "developer-tools"],
   "type": "module",