@ccoalm/ccl-skills 0.18.6 → 0.18.7

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_locale_independent_gates.sh

@@ -0,0 +1,264 @@
+#!/usr/bin/env bash
+# Regression: the repository gates must not depend on the caller's locale.
+# Under a POSIX/unset locale Ruby defaults to US-ASCII, so a gate that reads the
+# UTF-8 skill text (or runs a `ruby -e` program with UTF-8 literals) crashed with
+# "invalid byte sequence in US-ASCII" before checking anything, while CI (which
+# runs C.UTF-8) stayed green. Each ruby-invoking script pins `RUBYOPT=-Ku`.
+#   (1) every tracked live shell script (skills/, hooks/, scripts/) and every
+#       Makefile target that invokes ruby carries the pin, and no other literal RUBYOPT mention drops it; the
+#       classifier is held by pinned bypass and near-miss rows; frozen evidence
+#       under specs/ and eval/ is exempt;
+#   (2) validate-skill.sh passes on a UTF-8 fixture under LC_ALL=C;
+#   (3) the same run with the pin deleted goes red for the encoding reason, which
+#       shows the pin is what makes leg (2) pass; on a host whose C locale already
+#       reads UTF-8 the pin is not load-bearing and leg (3) reports unevaluated.
+set -euo pipefail
+# Ruby takes its encoding from the locale; under a POSIX/unset locale it reads the UTF-8 skill text as US-ASCII and crashes. Pin UTF-8, as CI runs.
+case " ${RUBYOPT:-} " in *" -Ku "*) ;; *) export RUBYOPT="-Ku${RUBYOPT:+ $RUBYOPT}" ;; esac
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
+ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd -P)"
+PIN='case " ${RUBYOPT:-} " in *" -Ku "*) ;; *) export RUBYOPT="-Ku${RUBYOPT:+ $RUBYOPT}" ;; esac'
+fail() { printf 'FAIL: %b\n' "$*" >&2; exit 1; }
+
+# Closed contract over the idiom this repo owns: a RUBYOPT mention keeps the pin
+# only as the pin line itself, the keep idiom RUBYOPT="${RUBYOPT:+$RUBYOPT }..."
+# whose suffix holds only `-r<lib>` requires or variables, or an empty RUBYOPT=
+# before `bash "$script"` (that script pins itself). Any other literal mention -
+# replacing, clearing, unset, env -u, any other Ruby option - drops the pin.
+# Ruby's option names are not this repo's to enumerate, so the suffix is
+# allowlisted, never denylisted. Returns 0 when allowed.
+KEEP_TOKEN='(-r[^[:space:]"\\]+|[$][{]?[A-Za-z_0-9]+[}]?)'
+pin_kept() {
+  local line="$1" rest
+  [ "$line" = "$PIN" ] && return 0
+  # An attribute builtin on the variable can unexport or rescope it even when
+  # the value is the keep idiom.
+  if printf '%s\n' "$line" | grep -qE '(^|[[:space:];&|({])(declare|typeset|local|readonly|export[[:space:]]+-n)([[:space:]]|$)[^;|&]*RUBYOPT'; then
+    return 1
+  fi
+  rest="$(printf '%s\n' "$line" | sed -E \
+    -e "s/^([^\"'\\\\]*)[[:space:]]#.*\$/\\1/" \
+    -e "s/RUBYOPT=\"[\$][{]RUBYOPT:[+][\$]RUBYOPT [}](${KEEP_TOKEN}([[:space:]]+${KEEP_TOKEN})*)?\"//g" \
+    -e 's/(^|[[:space:]])RUBYOPT=[[:space:]]+bash[[:space:]]+"[$][A-Za-z_{][^"]*"/\1/g')"
+  case "$rest" in *RUBYOPT*) return 1 ;; esac
+  return 0
+}
+
+# Every RUBYOPT line of one file that drops the pin, as "N:line". Whole-line
+# comments are skipped; nothing else is pre-filtered, so a line that merely
+# contains the pin text is still classified.
+pin_drops() {
+  local hit
+  while IFS= read -r hit; do
+    pin_kept "${hit#*:}" || printf '%s\n' "$hit"
+  done < <(grep -nE 'RUBYOPT' "$1" | grep -vE '^[0-9]+:[[:space:]]*#' || true)
+}
+
+# (1a) The classifier itself: every bypass row must be flagged and every
+# near-miss row must stay allowed, so a broken classifier cannot pass on a
+# corpus that happens to hold only allowed shapes.
+while IFS= read -r row; do
+  [ -n "$row" ] || continue
+  if pin_kept "$row"; then fail "classifier allowed a pin-dropping line: $row"; fi
+done <<'ROWS'
+RUBYOPT="-r$SHIM" ruby x.rb
+RUBYOPT= ruby -e "p 1"
+unset RUBYOPT
+env -u RUBYOPT ruby -e 1
+RUBYOPT="$RUBYOPT_EXTRA -rfoo" ruby -e 1
+export RUBYOPT=
+RUBYOPT=
+RUBYOPT= LC_ALL=C ruby -e 1
+LC_ALL=C RUBYOPT= LANG=C ruby -e 1
+RUBYOPT= exec ruby -e 1
+RUBYOPT= "${RUBY:-ruby}" -e 1
+RUBYOPT= bash -c "ruby -e 1"
+unset -v RUBYOPT
+unset LANG RUBYOPT
+env --unset=RUBYOPT ruby -e 1
+env -uRUBYOPT ruby -e 1
+RUBYOPT=-W0 ruby -e 1 "$RUBYOPT"
+RUBYOPT="${RUBYOPT#-Ku}" ruby -e 1
+RUBYOPT="" bash x.sh
+export RUBYOPT=-W0
+echo "a #b"; RUBYOPT=-Kn ruby -e 1
+printf ' #' ; unset RUBYOPT
+case " ${RUBYOPT:-} " in *" -Ku "*) ;; *) export RUBYOPT="-Ku${RUBYOPT:+ $RUBYOPT}" ;; esac; unset RUBYOPT
+RUBYOPT="${RUBYOPT:+$RUBYOPT }-Kn" ruby x.rb
+RUBYOPT="${RUBYOPT:+$RUBYOPT }-E ASCII" ruby x.rb
+RUBYOPT="${RUBYOPT:+$RUBYOPT }--internal-encoding=US-ASCII" ruby x.rb
+RUBYOPT="${RUBYOPT:+$RUBYOPT }--disable=rubyopt" ruby x.rb
+RUBYOPT="${RUBYOPT:+$RUBYOPT }-r\" -Kn" ruby x.rb
+export -n RUBYOPT="${RUBYOPT:+$RUBYOPT }-rdate"
+declare +x RUBYOPT="${RUBYOPT:+$RUBYOPT }"
+local RUBYOPT="${RUBYOPT:+$RUBYOPT }-rdate"
+readonly RUBYOPT="${RUBYOPT:+$RUBYOPT }-rdate"
+typeset -x RUBYOPT="${RUBYOPT:+$RUBYOPT }-rdate"
+RUBYOPT="${RUBYOPT:+$RUBYOPT_EXTRA }" ruby x.rb
+RUBYOPT="${RUBYOPT:+$RUBYOPT}-Kn" ruby x.rb
+x=$#; unset RUBYOPT
+echo a\ #b; unset RUBYOPT
+local RUBYOPT
+declare -x RUBYOPT=
+ROWS
+while IFS= read -r row; do
+  [ -n "$row" ] || continue
+  pin_kept "$row" || fail "classifier flagged an allowed line: $row"
+done <<'ROWS'
+out="$(RUBYOPT="${RUBYOPT:+$RUBYOPT }-rdate" ruby x.rb)"
+env -u X LC_ALL=C RUBYOPT= bash "$SIZE_SCRIPT" "$REPO"
+f() { # takes a RUBYOPT value
+RUBYOPT= bash "$x"; ruby -e 1
+RUBYOPT="${RUBYOPT:+$RUBYOPT }-r$SHIM -rdate" ruby x.rb
+RUBYOPT="${RUBYOPT:+$RUBYOPT }$2" ruby "$1"
+run_gate() { # <gate-path> <RUBYOPT value or empty>
+locale=C RUBYOPT= bash "$x"
+dir=/usr/local RUBYOPT="${RUBYOPT:+$RUBYOPT }-rdate" ruby x.rb
+declared=1 RUBYOPT= bash "$s"
+ROWS
+
+# (1b) Static coverage over tracked live shell scripts.
+tracked="$(git -C "$ROOT" ls-files -- 'skills/*.sh' 'hooks/*.sh' 'scripts/*.sh')" \
+  || fail "cannot list tracked scripts (not a git checkout?); leg 1 needs git ls-files"
+[ -n "$tracked" ] || fail "git ls-files listed no tracked scripts under $ROOT; leg 1 would pass vacuously"
+missing=""
+dropped=""
+while IFS= read -r rel; do
+  # A bare `ruby` word: catches `ruby -e`, `ruby<<`, `ruby;`, `${RUBY:-ruby}`;
+  # leaves `rubygems` / `ruby-build` alone. Over-matching only over-requires the pin.
+  grep -qE '(^|[^a-z_])ruby([^a-z0-9_.-]|$)' "$ROOT/$rel" || continue
+  grep -qxF "$PIN" "$ROOT/$rel" || missing="$missing\n  $rel"
+  # This file names RUBYOPT in its own patterns and rows, so only its pin is checked.
+  [ "$rel" = "skills/skill-extraction-workflow/scripts/test_locale_independent_gates.sh" ] && continue
+  while IFS= read -r hit; do
+    [ -n "$hit" ] && dropped="$dropped\n  $rel: $hit"
+  done < <(pin_drops "$ROOT/$rel")
+done <<<"$tracked"
+# Makefile targets that run ruby in a recipe must be on the target-specific
+# RUBYOPT pin line. A rule line names every target before its first colon
+# (`a b: deps`); `X := y` assignments and the pin line itself are not rules.
+mk_pinned_of() { sed -nE 's/^([^#:]*):[[:space:]]*override RUBYOPT :=.*-Ku.*$/\1/p' "$1"; }
+mk_ruby_of() {
+  awk '
+    /^\t/ { if ($0 ~ /(^|[^a-z_])ruby([^a-z0-9_.-]|$)/) for (i in cur) print cur[i]; next }
+    /^[^#[:space:]]/ {
+      c = index($0, ":"); if (c == 0) next
+      head = substr($0, 1, c - 1)
+      if (substr($0, c + 1, 1) == "=" || head ~ /=/) next
+      if ($0 ~ /RUBYOPT :=/) next
+      split("", cur); n = split(head, names, /[[:space:]]+/)
+      for (i = 1; i <= n; i++) if (names[i] != "") cur[i] = names[i]
+    }' "$1" | sort -u
+}
+mk_missing_of() { # <Makefile>: ruby-running targets absent from the pin line
+  local pinned t
+  grep -qxF 'export RUBYOPT' "$1" || { echo "(RUBYOPT is not exported)"; return; }
+  pinned="$(mk_pinned_of "$1")"
+  [ -n "$pinned" ] || { echo "(no target-specific RUBYOPT -Ku pin line)"; return; }
+  for t in $(mk_ruby_of "$1"); do
+    case " $pinned " in *" $t "*) ;; *) echo "$t" ;; esac
+  done
+}
+[ -n "$(mk_ruby_of "$ROOT/Makefile")" ] || fail "found no Makefile recipe that runs ruby; the Makefile check would pass vacuously"
+for t in $(mk_missing_of "$ROOT/Makefile"); do missing="$missing\n  Makefile target $t"; done
+# The tracker itself, on a fixture: a multi-target ruby rule after a pinned one
+# must be reported under its own names, and an assignment line must not reset it.
+mk_fx="$(mktemp "${TMPDIR:-/tmp}/locale-mk.XXXXXX")"
+printf 'X := 1\nexport RUBYOPT\np1 p2: override RUBYOPT := -Ku\np1:\n\truby a.rb\nnew-a new-b: dep\n\t@ruby b.rb\nY := 2\n\techo no\n' >"$mk_fx"
+mk_fx_out="$(mk_missing_of "$mk_fx" | tr '\n' ' ')"
+rm -f "$mk_fx"
+[ "$mk_fx_out" = "new-a new-b " ] || fail "Makefile tracker must report exactly new-a new-b on its fixture, got: $mk_fx_out"
+[ -z "$missing" ] || fail "ruby-invoking scripts without the RUBYOPT UTF-8 pin:$missing"
+[ -z "$dropped" ] || fail "RUBYOPT mentions that drop the UTF-8 pin (use the keep idiom):$dropped"
+
+TMP="$(mktemp -d "${TMPDIR:-/tmp}/locale-gates.XXXXXX")"
+trap 'rm -rf "$TMP"' EXIT
+
+# Exercise the actual Makefile declarations using inert recipes. In particular,
+# command-line RUBYOPT must not override the UTF-8 pin. Replacing just the recipes
+# keeps live evals offline and preserves Make's assignment/export semantics.
+make_targets="$(mk_ruby_of "$ROOT/Makefile" | tr '\n' ' ')"
+printf '%s:\n' "$make_targets" >"$TMP/probe.mk"
+printf '\t@ruby -e '\''abort "make recipe lost UTF-8" unless Encoding.default_external == Encoding::UTF_8; abort "make recipe lost caller option" if ENV["CCL_MAKE_CALLER_OPTION"] == "yes" && !ENV.fetch("RUBYOPT").split.include?("-W0")'\''\n' >>"$TMP/probe.mk"
+run_make_pin() {
+  local makefile="$1"
+  shift
+  env -u LANGUAGE -u RUBYOPT LC_ALL=C LANG=C make --no-print-directory \
+    -f "$makefile" -f "$TMP/probe.mk" "$@" $make_targets
+}
+if ! make_out="$(run_make_pin "$ROOT/Makefile" RUBYOPT=-W0 CCL_MAKE_CALLER_OPTION=yes 2>&1)"; then
+  fail "Makefile Ruby targets failed under LC_ALL=C with CLI RUBYOPT:\n$make_out"
+fi
+if ! make_out="$(run_make_pin "$ROOT/Makefile" 2>&1)"; then
+  fail "Makefile Ruby targets failed with RUBYOPT absent:\n$make_out"
+fi
+# Applied mutations prove both declarations matter at runtime, as well as in
+# the static tracker. CLI variables are auto-exported by Make, so the export
+# mutation must run without the CLI override to avoid masking a missing export.
+sed 's/: override RUBYOPT :=/: RUBYOPT :=/' "$ROOT/Makefile" >"$TMP/no-override.mk"
+sed '/^export RUBYOPT$/d' "$ROOT/Makefile" >"$TMP/no-export.mk"
+for mutant in no-override no-export; do
+  cmp -s "$ROOT/Makefile" "$TMP/$mutant.mk" && fail "$mutant mutation was not applied"
+  [ -n "$(mk_missing_of "$TMP/$mutant.mk")" ] || fail "Makefile tracker accepted $mutant mutation"
+  make_args=()
+  [ "$mutant" != no-override ] || make_args=(RUBYOPT=-W0)
+  # Bash 3.2 treats an empty array as unset under nounset.
+  if make_out="$(run_make_pin "$TMP/$mutant.mk" ${make_args[@]+"${make_args[@]}"} 2>&1)"; then
+    fail "Makefile $mutant mutation still passed the UTF-8 assertion"
+  fi
+  case "$make_out" in *'make recipe lost UTF-8'*) : ;; *) fail "$mutant failed for an unrelated reason:\n$make_out" ;; esac
+done
+
+# (1c) The scan as a whole, on a fixture file: only a line that drops the pin is
+# reported, including one that also contains the pin text.
+{
+  printf '%s\n' "$PIN"
+  printf '%s; unset RUBYOPT\n' "$PIN"
+  printf '# unset RUBYOPT in a comment\n'
+  printf 'out="$(RUBYOPT="${RUBYOPT:+$RUBYOPT }-rdate" ruby x.rb)"\n'
+} >"$TMP/scan-fixture.sh"
+scan_out="$(pin_drops "$TMP/scan-fixture.sh")"
+[ "${scan_out%%:*}" = "2" ] && [ "$(printf '%s\n' "$scan_out" | grep -c .)" = "1" ] \
+  || fail "pin_drops must report only line 2 of the scan fixture, got:\n$scan_out"
+mkdir -p "$TMP/skill/references"
+cat >"$TMP/skill/SKILL.md" <<'EOF'
+---
+name: locale-fixture
+description: 合成夹具 — synthetic fixture for locale independence.
+---
+
+# 夹具
+
+见 `references/detail.md`。
+EOF
+printf '# 细节\n\n中文正文。\n' >"$TMP/skill/references/detail.md"
+
+run_c_locale() { env -u LANGUAGE LC_ALL=C LANG=C RUBYOPT= bash "$1" "$TMP/skill"; }
+
+# (2) The shipped gate passes under the C locale.
+if ! out="$(run_c_locale "$SCRIPT_DIR/validate-skill.sh" 2>&1)"; then
+  fail "validate-skill.sh failed under LC_ALL=C:\n$out"
+fi
+case "$out" in *markdown_references_ok*) : ;; *) fail "validate-skill.sh did not reach the reference check under LC_ALL=C:\n$out" ;; esac
+
+# (3) Applied mutation: the same script without the pin reds for the encoding reason.
+cp -R "$SCRIPT_DIR" "$TMP/scripts"
+grep -vxF "$PIN" "$SCRIPT_DIR/validate-skill.sh" >"$TMP/scripts/validate-skill.sh"
+if mout="$(run_c_locale "$TMP/scripts/validate-skill.sh" 2>&1)"; then
+  # Unevaluated only when the host itself explains the pass: Ruby already reads
+  # UTF-8 under the C locale, so the pin is not load-bearing here. Any other
+  # reason the unpinned run passed means leg 2 may be vacuous.
+  if ! env -u LANGUAGE LC_ALL=C LANG=C ruby -e 'exit(Encoding.find("locale") == Encoding::UTF_8 ? 0 : 1)'; then
+    fail "pin removed, yet validate-skill.sh still passed under LC_ALL=C on a host whose Ruby reads US-ASCII there, so leg 2 proves nothing:\n$mout"
+  fi
+  echo "test_locale_independent_gates_leg3_unevaluated: this host's Ruby reads UTF-8 under LC_ALL=C, so removing the pin cannot be shown to matter here" >&2
+  echo "test_locale_independent_gates: ok (legs 1-2; leg 3 unevaluated on this host)"
+  exit 0
+fi
+case "$mout" in
+  *"invalid byte sequence"*|*"invalid multibyte char"*) : ;;
+  *) fail "pin removed: run failed, but not for the encoding reason:\n$mout" ;;
+esac
+
+echo "test_locale_independent_gates: ok"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_register_firing_path_resolution.sh

@@ -13,6 +13,8 @@
 # locator. A test that only ever asserts "clean stays clean" would pass with the
 # whole detection deleted, so every RED case here has a paired GREEN control.
 set -euo pipefail
+# Ruby takes its encoding from the locale; under a POSIX/unset locale it reads the UTF-8 skill text as US-ASCII and crashes. Pin UTF-8, as CI runs.
+case " ${RUBYOPT:-} " in *" -Ku "*) ;; *) export RUBYOPT="-Ku${RUBYOPT:+ $RUBYOPT}" ;; esac
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
 GATE="$SCRIPT_DIR/register-firing-path-resolution.rb"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_register_firing_path_wiring.sh

@@ -11,6 +11,8 @@
 # ALIAS_AUDIT_CMD=true stands in for a passing private R0 audit so the assertion
 # isolates firing-path enforcement from the separate R0 interim path.
 set -euo pipefail
+# Ruby takes its encoding from the locale; under a POSIX/unset locale it reads the UTF-8 skill text as US-ASCII and crashes. Pin UTF-8, as CI runs.
+case " ${RUBYOPT:-} " in *" -Ku "*) ;; *) export RUBYOPT="-Ku${RUBYOPT:+ $RUBYOPT}" ;; esac
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
 CHECK_SCRIPT="$SCRIPT_DIR/check-ccl-skills.sh"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_uiux_delivery_contract.sh

@@ -3,6 +3,8 @@
 # The canonical reference owns the protocol; each participating skill keeps
 # only its local responsibility and a pointer to that reference.
 set -euo pipefail
+# Ruby takes its encoding from the locale; under a POSIX/unset locale it reads the UTF-8 skill text as US-ASCII and crashes. Pin UTF-8, as CI runs.
+case " ${RUBYOPT:-} " in *" -Ku "*) ;; *) export RUBYOPT="-Ku${RUBYOPT:+ $RUBYOPT}" ;; esac
 
 ROOT="${UIUX_CONTRACT_ROOT:-$(cd "$(dirname "$0")/../../.." && pwd -P)}"
 CONTRACT="$ROOT/skills/product-ui-ux-design/references/delivery-contract.md"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_uiux_loading_budget.sh

@@ -7,6 +7,8 @@
 # entry and every routed reference local and resolvable. Real provider load,
 # token, latency, correction, and task-quality claims still require task trials.
 set -euo pipefail
+# Ruby takes its encoding from the locale; under a POSIX/unset locale it reads the UTF-8 skill text as US-ASCII and crashes. Pin UTF-8, as CI runs.
+case " ${RUBYOPT:-} " in *" -Ku "*) ;; *) export RUBYOPT="-Ku${RUBYOPT:+ $RUBYOPT}" ;; esac
 
 ROOT="${UIUX_LOADING_ROOT:-$(cd "$(dirname "$0")/../../.." && pwd -P)}"
 DEFAULT_BASE_REF="e322db47abe5736e6e1fdf0e73e2ed3eb32c006b"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/validate-skill.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
 set -euo pipefail
+# Ruby takes its encoding from the locale; under a POSIX/unset locale it reads the UTF-8 skill text as US-ASCII and crashes. Pin UTF-8, as CI runs.
+case " ${RUBYOPT:-} " in *" -Ku "*) ;; *) export RUBYOPT="-Ku${RUBYOPT:+ $RUBYOPT}" ;; esac
 
 target="${1:-.}"
 

package/dist/assets/release.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "npmPackage": "@ccoalm/ccl-skills",
-  "version": "0.18.6",
-  "sourceCommit": "404c29b2d42bda7a427676da5ba96b782c7d2f85",
+  "version": "0.18.7",
+  "sourceCommit": "dcdc9ba9c54f708348dbfc46fb4964ec8d452001",
   "sourceState": "clean",
   "files": [
     {
@@ -42,12 +42,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/agent-context/session-policy.md",
-      "sha256": "b1372ffc5458516c51a32b09194a8480c521dc58dea4f5e1a4eb4547b0262278",
+      "sha256": "a47f7ff077f33da3efaa24fc1d55118330f23ef268e92355d2f281ee56237d2a",
       "mode": 420
     },
     {
       "path": "marketplace/plugins/ccl-skills/agent-context/session-start.md",
-      "sha256": "8ce6cc34721028822a4ca0a215f747b0eb2d38b9763554a187a2827af12bf2b2",
+      "sha256": "a4292129978273e62a6975ed86abd383ea0b4cc3925ede8a1a8af5d6b39be1c8",
       "mode": 420
     },
     {
@@ -82,7 +82,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/host-input.py",
-      "sha256": "99de6454efb550efe70c514d81fae8ed2bdca98b11b6b529618dae669b8b7611",
+      "sha256": "b737a74f0a664c52189e43b84539c7ab41e5e4817570b6b1c50c889056c3a9a6",
       "mode": 420
     },
     {
@@ -187,7 +187,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/test_proposed_next.py",
-      "sha256": "771bbc6fa63b0803567e13a8af4d4d78b8c9a73fcad05f8aa6612c56101e7416",
+      "sha256": "db2df523107fa2b0896c769396e523171f77948526f9d39c8396b598e68fefbf",
       "mode": 493
     },
     {
@@ -347,7 +347,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/references/development-completion.md",
-      "sha256": "b2af745ca8dbd64ed3e87c5e93d24ce39298ae9530ec98ad663b724b8e4d4fc6",
+      "sha256": "1de7e7f7529d4399738cb1bf9447cb33654bb96443449456fc14d037ca8a94c9",
       "mode": 420
     },
     {
@@ -557,7 +557,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_review_gate.sh",
-      "sha256": "bb054072877443d4c44c02843dc9cebdd786fb9e33248150887fb2991a96ce01",
+      "sha256": "b04fd9bd2bbd75195e5a3f1ca63aeba9d8a585403079a721c44f0275b0ea0208",
       "mode": 493
     },
     {
@@ -1417,7 +1417,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/references/design-review-gate-mechanics.md",
-      "sha256": "7852dd2f0a6a32b6f6fddd4f4884e8701c54be4b738f6520370b9c4826424c7c",
+      "sha256": "6c07df6024da34e6494101c85959286049aed52db96567c2819c957566ca6ea2",
       "mode": 420
     },
     {
@@ -1477,7 +1477,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/references/pre-final-continuation-gate.md",
-      "sha256": "c0403e25446b74a732dcd6f927d805a265fac13b9b781e995833ac153290b042",
+      "sha256": "b23c9822452402d26035218ea1e16f8cb3943a2d5812ff6ecd94399f66110644",
       "mode": 420
     },
     {
@@ -1507,7 +1507,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/references/review-reception.md",
-      "sha256": "34ffcb08689b244939cd501fc48dfdea1b8661c0e3fc33fd8317d1b7bf392d63",
+      "sha256": "e00b62f2719fc8640b5632b9b1ca0bc2035880b0688441c8beebb3fd49cc781d",
       "mode": 420
     },
     {
@@ -1552,7 +1552,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/SKILL.md",
-      "sha256": "cb4e2f2b246c444dcc005ea864949c1ba8eb83e340b80e5b188c0d99e1bb4c2f",
+      "sha256": "5e1218771802f949cded19f40ddb03676b0e0be411d0616245fdd581425d0ef9",
       "mode": 420
     },
     {
@@ -1817,7 +1817,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/python-service-architecture/SKILL.md",
-      "sha256": "c4bf4b3a18c7a9eb8ca5c73c889c192222dd1a659df12b7952ec313d15969d61",
+      "sha256": "199b030335cfdb9f5255d5697326c97e48604fe2a46dcb3dd98f07793e2d40de",
       "mode": 420
     },
     {
@@ -2107,7 +2107,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/eval-routing.md",
-      "sha256": "bbe5ac36800a0c3301d82b467076863ab9b72c51be0656b14ec79a6c382f1bbc",
+      "sha256": "f0bf6485aa236398045f6ab460ec6975566f78569862a7c1f94a29e58e05a9e2",
       "mode": 420
     },
     {
@@ -2207,7 +2207,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-register.md",
-      "sha256": "4694aa9cd45b4df1801067e537223badb6f127564db2eff89cedd9e8497347d6",
+      "sha256": "1c0e95554f7b8d63860e23385d3b9d84b7d3c1790e4e4071e772b170b4a2b2c6",
       "mode": 420
     },
     {
@@ -2247,7 +2247,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/check-ccl-skills.sh",
-      "sha256": "9c3bb27f2cf8cffabfec633b33ee58a392fd7a4b464420bc6a3f02822380e94d",
+      "sha256": "cc0b4c36f8f5c8cfe613a046117b4f569314be1f0cae94ba4b4133c21415b960",
       "mode": 493
     },
     {
@@ -2272,12 +2272,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/check-size-budget.sh",
-      "sha256": "1e02c4309fff454bdafe1c840671ae29b1240cb9ad31a8295dee279001732a63",
+      "sha256": "9a5f860bde439347e853ba4298705abe237ab18ca908e919204b1d5294570e60",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/check-sync-pointers.sh",
-      "sha256": "2cefaf3db4db1bb12ba14982da924d57bcbfcd4c4ee2cd83a220ac3b3c2a5633",
+      "sha256": "f2a12a889e8fe18b89c95cdb5a7ea9647661822de58270adf08a045c39cbf319",
       "mode": 493
     },
     {
@@ -2302,7 +2302,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/eval-routing-bank.rb",
-      "sha256": "6d1e2f0d13c0965ffe5b41e42a86bfd7e135158cbd1bdfbcbb6f01be9140bee0",
+      "sha256": "224fbb07f3e1233510ee2493de9e4a8b98afd0d03e39c334a68df95109a0c936",
       "mode": 493
     },
     {
@@ -2382,12 +2382,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_body_compliance_grading.sh",
-      "sha256": "d3a37c4ae39492325f71940099fe965862b6766a9b8ec3a3b5db3d8e59f7057a",
+      "sha256": "c1c34a27011e77f367a758bb5d6f4abd1ab04d997119f718268343c73027604f",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_impact_chain_refscripts.sh",
-      "sha256": "dbc090be57b6f14795e6b7dcd79abe83bb1efa3d2f090040c4b7225b4e10d2fa",
+      "sha256": "705f24a9cd5f8ed552fdeda3334d308bafa15922d1c311cba3c62866c2a07ae2",
       "mode": 493
     },
     {
@@ -2402,22 +2402,22 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_register_pending_exclusion.sh",
-      "sha256": "44505ed0f4d7fa5e4acea3745388df12a6832955c97f1fc269e6534793353470",
+      "sha256": "db83328728cd9579e910548d28a9096292d8140c8c447e714b2b28409158d46b",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_regressions.sh",
-      "sha256": "6083c908561d71c2b62743a6e40e371de62fcd2627bf8c24a1e74f46f5b88ea2",
+      "sha256": "3fac6685fe62945ac8733b58cc4826932cdaf243233d38f44979796dda3ec845",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_route_drift.sh",
-      "sha256": "9d1ab92e6de53db37e14af26315a2bbc1e4d59c65149809cfc3a18024ba70821",
+      "sha256": "4116943f04a4711a5b8ba1544f5165cd906cebcfe4ef200fa858ac2283e98ac4",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_size_budget.sh",
-      "sha256": "2711bdaf188f37abfda41edde59821d812c7d5c38f08dab91b6d952a588454e1",
+      "sha256": "12516de81258c0be905ca62ed9acef5afb5af0ff9b32aace6636fd5759e323f7",
       "mode": 493
     },
     {
@@ -2427,7 +2427,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_source_register_lifecycle.sh",
-      "sha256": "20ad89c0eeeba8638a99854a5c25cc997e96796bc7548a4d977a4dd32058d73c",
+      "sha256": "19421b4db0ed6f1e22f0bf8402a049f111018d69703313ecf1c961cc477f8d37",
       "mode": 493
     },
     {
@@ -2447,7 +2447,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_sync_pointers.sh",
-      "sha256": "910070e5182a5202f92c0e6199e2d1a89ea72c112c1b6c79359d9f8dc0df7108",
+      "sha256": "582e2c093d5a872db63d42001fa2ff4c5743ab4e8e5b2804e3f1718a8d355afa",
       "mode": 493
     },
     {
@@ -2472,22 +2472,22 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_eval_routing_bank_grader_diagnostics.sh",
-      "sha256": "10cacb2baf142dbedddbecb34ac2ee1bd9d043b9c946acff9ce83373be0d1553",
+      "sha256": "1fd3bb148b94fa4fcdc9914075bec85f0b18ce2d57fb02bca5595d319c0f446f",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_eval_routing_bank_resolution.sh",
-      "sha256": "ea151e086c53d3cbf227e1e5cf6a3c3ef54d0e6460b4ec61275a097073499c11",
+      "sha256": "f927bf7f2210d67611b9f2ee07b5e218f78bea3daa73173a4c06e6fab56fa80d",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_eval_routing_bank_surface_binding.sh",
-      "sha256": "68003f1b1bc58023236a021ca5272b598cb7d9080182548a012992322214b9e8",
+      "sha256": "7388730731f38e6cb9042546b3c384241b7a9c7df2fe5f368de5f9b2b84d580d",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_eval_routing_prose_target.sh",
-      "sha256": "8ddd704eac6f4ffdc5d5b6566f9a2b3d5e940b944af448586dfec0e920a54ee5",
+      "sha256": "f64532ad4d50d4546f09994c38dd63dae05e7dd7f90ae8fe2b640e9987d1d814",
       "mode": 493
     },
     {
@@ -2532,27 +2532,27 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_gate_dateless_host.sh",
-      "sha256": "08e707048810264e6d74d5df4d9415601b14749204eed55f9f160ae5dc782a60",
+      "sha256": "b3ea5fdcabf00d0df14710830c7c6860ef1d5476d19044ff7812000eaee6edb6",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_gate_verdict_differential.sh",
-      "sha256": "b53ec5cc1247bbcd068f43eacac190de2efcea531883f8e25828522870553a37",
+      "sha256": "0028a9ffa2a9c344ce143377da5787975f488cb75dd04cf602de4d93c72b6496",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_round_attribution.sh",
-      "sha256": "034179e057ff3dbba0ecf3077fad6836caf45536a68479742ace8bbd016ab283",
+      "sha256": "e6417d70200377268f71bd445578687c27aa1994a0260626feca9e0e950b0738",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_self_adjudication.sh",
-      "sha256": "16c600bfaab47a810202307a61f3b9fcf1e1c2f5125530afb8eb7f3f0ee6114a",
+      "sha256": "b84dcaa206ce9c95d95ec0a813d55450f5759422e67076ea473d2b775088acf2",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_source_refuted.sh",
-      "sha256": "f2f24a5e16d90b11ab0878004612c59a56091bca26f3f4a030490c3dd64a8449",
+      "sha256": "7afcf09d3bb2ed2405c685b9bd5d8f95cd0c3798d2dd7d119279cb6905b6372b",
       "mode": 493
     },
     {
@@ -2560,6 +2560,11 @@
       "sha256": "59a64a65c1998a18506164f93100cb270319ee9c6eddd485d32d78520b064e6a",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_locale_independent_gates.sh",
+      "sha256": "0f78f16b4193f2feeb72c3af102c3979ab76ce1322530be053c049fed7bf5aee",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_obligation_ledger_repo_audit.sh",
       "sha256": "57b64b2b2f9cfddf96ff723be42e93410cf2269f6b0fae184c6a68b3c7945968",
@@ -2582,12 +2587,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_register_firing_path_resolution.sh",
-      "sha256": "ba82e2d6506ad0845e1583e64bb8d28f91ae7411c8b75f40ed44295a6c3b4897",
+      "sha256": "b5dfd026af42ccb67801e3e7325ccc909a0677c72bd37c29c4c5fcd4905bc71c",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_register_firing_path_wiring.sh",
-      "sha256": "5a138eb28549dc9fa9cc7bb290c448eedfa51857b49c7b416b35d036f81fac0f",
+      "sha256": "8b8ae410afc61a8d4fde59e21f88af91cd90a4329b0cdc3183eb8b5f2a6dc630",
       "mode": 493
     },
     {
@@ -2617,12 +2622,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_uiux_delivery_contract.sh",
-      "sha256": "1dc2f8ccba0451dd25560c58bdc2363ba8c295715fbe2a292612cf5878f8e18e",
+      "sha256": "b58ec01810e0a226ff92bfd15b9d1f7bdc3c572591e7a68407b4a9fa8fa14ced",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_uiux_loading_budget.sh",
-      "sha256": "76533e5dd88225ff5b4f710536b6a43e5139fd2691942e52737828c3098326ce",
+      "sha256": "3e85121dd240eb88c8a1ce1b66de0ac700dd722a5680b5584d706b22bb6d10a7",
       "mode": 493
     },
     {
@@ -2642,7 +2647,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/validate-skill.sh",
-      "sha256": "f2a92802a5d87032e85084ab2e05898f694b16b26da36be80216d354e2e02371",
+      "sha256": "0422dbae4565e2df2582f3bedb6fb4b2a3f849a0b430e03ad27acd6bbdbf1846",
       "mode": 493
     },
     {
@@ -3518,5 +3523,5 @@
       "mode": 420
     }
   ],
-  "snapshotHash": "1c834267787c28801e4e6a233529d3974542ebdbf016f84c7745bd38fdbf794b"
+  "snapshotHash": "ba46e55d708e08e62b84b47d83c333b50a91b1ea66c25a01c9b8430689cf3e3f"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ccoalm/ccl-skills",
-	"version": "0.18.6",
+	"version": "0.18.7",
   "description": "Reusable workflows that help coding agents plan, build, test, review, and release software — for Claude Code, Codex, and OpenCode",
 	"keywords": ["skills", "agent-skills", "claude", "claude-code", "codex", "opencode", "agent", "ai", "ai-agents", "cli", "anthropic", "developer-tools"],
   "type": "module",