cc-devflow 4.3.0 → 4.4.1

package/.claude/skills/cc-act/scripts/render-pr-brief.sh

@@ -0,0 +1,195 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+# ------------------------------------------------------------
+# cc-act: 从 requirement 真相源渲染 pr-brief.md
+# ------------------------------------------------------------
+
+usage() {
+  cat <<'EOF'
+Usage: render-pr-brief.sh --dir path/to/change [--out path/to/pr-brief.md] [--repo-root path/to/repo]
+EOF
+}
+
+REQ_DIR=""
+OUT_FILE=""
+REPO_ROOT=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --dir) REQ_DIR="$2"; shift 2 ;;
+    --out) OUT_FILE="$2"; shift 2 ;;
+    --repo-root) REPO_ROOT="$2"; shift 2 ;;
+    -h|--help) usage; exit 0 ;;
+    *) echo "Unknown arg: $1" >&2; usage; exit 1 ;;
+  esac
+done
+
+if [[ -z "$REQ_DIR" || ! -d "$REQ_DIR" ]]; then
+  usage
+  exit 1
+fi
+
+if [[ -z "$REPO_ROOT" ]]; then
+  REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+fi
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$script_dir/cc-act-common.sh"
+CHANGE_DIR="$(req_act_change_dir "$REQ_DIR")"
+if [[ -z "$OUT_FILE" ]]; then
+  OUT_FILE="$(req_act_handoff_dir "$CHANGE_DIR")/pr-brief.md"
+fi
+report_card="$(req_act_report_path "$CHANGE_DIR")"
+manifest="$(req_act_manifest_path "$CHANGE_DIR")"
+tasks_file="$(req_act_tasks_path "$CHANGE_DIR")"
+design_file="$(req_act_contract_path "$CHANGE_DIR")"
+release_note="$(req_act_release_note_path "$CHANGE_DIR")"
+resume_index="$(req_act_resume_index_path "$CHANGE_DIR")"
+doc_sync_report="$(req_act_doc_sync_report_path "$CHANGE_DIR")"
+
+"$script_dir/verify-act-gate.sh" --dir "$CHANGE_DIR" >/dev/null
+"$script_dir/sync-act-docs.sh" --dir "$CHANGE_DIR" --repo-root "$REPO_ROOT" >/dev/null
+
+ship_context="$("$script_dir/detect-ship-target.sh" 2>/dev/null || true)"
+current_branch="$(req_act_ship_field "$ship_context" "CURRENT_BRANCH")"
+base_branch="$(req_act_ship_field "$ship_context" "BASE_BRANCH")"
+ship_mode="$(req_act_ship_field "$ship_context" "DECISION_HINT")"
+pr_status="$(req_act_ship_field "$ship_context" "PR_STATUS")"
+pr_url="$(req_act_ship_field "$ship_context" "PR_URL")"
+
+requirement_id="$(req_act_requirement_id "$manifest" "$CHANGE_DIR")"
+report_summary="$(req_act_report_summary "$report_card")"
+report_verdict="$(req_act_report_verdict "$report_card")"
+design_goal="$(req_act_design_goal "$design_file")"
+main_risk="$(req_act_main_risk "$design_file")"
+
+tmp_changed="$(mktemp)"
+tmp_verify="$(mktemp)"
+tmp_followups="$(mktemp)"
+tmp_evidence="$(mktemp)"
+cleanup() {
+  rm -f "$tmp_changed" "$tmp_verify" "$tmp_followups" "$tmp_evidence"
+}
+trap cleanup EXIT
+
+req_act_collect_completed_titles "$manifest" "$tasks_file" "$tmp_changed"
+req_act_collect_verification_commands "$manifest" "$tmp_verify"
+req_act_collect_evidence "$report_card" "$tmp_evidence"
+req_act_collect_followups "$report_card" "$manifest" "$tmp_followups"
+
+claude_status="manual check required"
+readme_status="manual check required"
+if [[ -f "$doc_sync_report" ]]; then
+  if grep -q 'No scoped `CLAUDE.md` target detected' "$doc_sync_report"; then
+    claude_status="no scoped CLAUDE target detected"
+  else
+    claude_status="see doc-sync-report.md"
+  fi
+  if grep -q 'No README candidate found' "$doc_sync_report"; then
+    readme_status="no README candidate found"
+  else
+    readme_status="see doc-sync-report.md"
+  fi
+fi
+
+{
+  echo "# PR Brief"
+  echo
+  echo "## Requirement"
+  echo
+  echo "- $requirement_id"
+  echo
+  echo "## Ship Mode"
+  echo
+  echo "- \`$ship_mode\`"
+  echo
+  echo "## Branch Context"
+  echo
+  echo "- Current branch: ${current_branch:-unknown}"
+  echo "- Base branch: ${base_branch:-unknown}"
+  if [[ -n "$pr_url" ]]; then
+    echo "- PR / MR: $pr_url ($pr_status)"
+  else
+    echo "- PR / MR: none"
+  fi
+  echo
+  echo "## Summary"
+  echo
+  if [[ -n "$report_summary" ]]; then
+    echo "- $report_summary"
+  fi
+  if [[ -n "$design_goal" && "$design_goal" != "$report_summary" ]]; then
+    echo "- $design_goal"
+  fi
+  if [[ -z "$report_summary" && -z "$design_goal" ]]; then
+    echo "- No top-line summary recorded yet."
+  fi
+  echo
+  echo "## What Changed"
+  echo
+  if [[ -s "$tmp_changed" ]]; then
+    while IFS= read -r line; do
+      echo "- $line"
+    done < "$tmp_changed"
+  else
+    echo "- No completed task list captured yet."
+  fi
+  echo
+  echo "## Verification Evidence"
+  echo
+  echo "- \`report-card.json\` verdict: $report_verdict"
+  if [[ -s "$tmp_evidence" ]]; then
+    while IFS= read -r line; do
+      echo "- $line"
+    done < "$tmp_evidence"
+  else
+    echo "- No evidence lines captured yet."
+  fi
+  echo
+  echo "## Documentation Sync"
+  echo
+  echo "- \`CLAUDE.md\`: $claude_status"
+  echo "- \`README.md\`: $readme_status"
+  if [[ -f "$release_note" ]]; then
+    echo "- \`release-note.md\`: refreshed"
+  else
+    echo "- \`release-note.md\`: missing"
+  fi
+  if [[ -f "$resume_index" ]]; then
+    echo "- \`resume-index.md\`: refreshed"
+  else
+    echo "- \`resume-index.md\`: missing"
+  fi
+  echo
+  echo "## How To Verify"
+  echo
+  if [[ -s "$tmp_verify" ]]; then
+    while IFS= read -r cmd; do
+      echo "- \`$cmd\`"
+    done < "$tmp_verify"
+  else
+    echo "- See \`review/report-card.json\` evidence."
+  fi
+  echo
+  echo "## Follow-Ups"
+  echo
+  if [[ -s "$tmp_followups" ]]; then
+    while IFS= read -r line; do
+      echo "- $line"
+    done < "$tmp_followups"
+  else
+    echo "- None recorded."
+  fi
+  echo
+  echo "## Risks"
+  echo
+  if [[ -n "$main_risk" ]]; then
+    echo "- $main_risk"
+  else
+    echo "- No additional risk captured in planning/design.md."
+  fi
+} > "$OUT_FILE"
+
+echo "Wrote $OUT_FILE"

package/.claude/skills/cc-act/scripts/sync-act-docs.sh

@@ -0,0 +1,315 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+# ------------------------------------------------------------
+# cc-act: 同步 requirement 级文档，并产出 doc sync 报告
+# ------------------------------------------------------------
+
+usage() {
+  cat <<'EOF'
+Usage: sync-act-docs.sh --dir path/to/change [--repo-root path/to/repo]
+EOF
+}
+
+REQ_DIR=""
+REPO_ROOT=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --dir) REQ_DIR="$2"; shift 2 ;;
+    --repo-root) REPO_ROOT="$2"; shift 2 ;;
+    -h|--help) usage; exit 0 ;;
+    *) echo "Unknown arg: $1" >&2; usage; exit 1 ;;
+  esac
+done
+
+if [[ -z "$REQ_DIR" || ! -d "$REQ_DIR" ]]; then
+  usage
+  exit 1
+fi
+
+if [[ -z "$REPO_ROOT" ]]; then
+  REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+fi
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$script_dir/cc-act-common.sh"
+CHANGE_DIR="$(req_act_change_dir "$REQ_DIR")"
+report_card="$(req_act_report_path "$CHANGE_DIR")"
+manifest="$(req_act_manifest_path "$CHANGE_DIR")"
+tasks_file="$(req_act_tasks_path "$CHANGE_DIR")"
+design_file="$(req_act_contract_path "$CHANGE_DIR")"
+resume_index="$(req_act_resume_index_path "$CHANGE_DIR")"
+release_note="$(req_act_release_note_path "$CHANGE_DIR")"
+doc_sync_report="$(req_act_doc_sync_report_path "$CHANGE_DIR")"
+
+"$script_dir/verify-act-gate.sh" --dir "$CHANGE_DIR" >/dev/null
+mkdir -p "$(dirname "$resume_index")"
+
+ship_context="$("$script_dir/detect-ship-target.sh" 2>/dev/null || true)"
+current_branch="$(req_act_ship_field "$ship_context" "CURRENT_BRANCH")"
+base_branch="$(req_act_ship_field "$ship_context" "BASE_BRANCH")"
+ship_mode="$(req_act_ship_field "$ship_context" "DECISION_HINT")"
+pr_status="$(req_act_ship_field "$ship_context" "PR_STATUS")"
+pr_url="$(req_act_ship_field "$ship_context" "PR_URL")"
+
+timestamp="$(date '+%Y-%m-%d %H:%M:%S %z')"
+requirement_id="$(req_act_requirement_id "$manifest" "$CHANGE_DIR")"
+report_summary="$(req_act_report_summary "$report_card")"
+report_verdict="$(req_act_report_verdict "$report_card")"
+spec_sync_ready="$(req_act_spec_sync_ready "$report_card")"
+design_goal="$(req_act_design_goal "$design_file")"
+main_risk="$(req_act_main_risk "$design_file")"
+
+tmp_changed="$(mktemp)"
+tmp_verify="$(mktemp)"
+tmp_followups="$(mktemp)"
+tmp_touched="$(mktemp)"
+tmp_specs="$(mktemp)"
+tmp_claude="$(mktemp)"
+tmp_readme="$(mktemp)"
+cleanup() {
+  rm -f "$tmp_changed" "$tmp_verify" "$tmp_followups" "$tmp_touched" "$tmp_specs" "$tmp_claude" "$tmp_readme"
+}
+trap cleanup EXIT
+
+# ------------------------------------------------------------
+# 共享提取：变更 / 验证 / follow-up / touched
+# ------------------------------------------------------------
+req_act_collect_completed_titles "$manifest" "$tasks_file" "$tmp_changed"
+req_act_collect_verification_commands "$manifest" "$tmp_verify"
+req_act_collect_followups "$report_card" "$manifest" "$tmp_followups"
+req_act_collect_touched_files "$manifest" "$tmp_touched"
+req_act_collect_spec_files "$manifest" "$tmp_specs"
+
+nearest_claude() {
+  local rel="$1"
+  local dir candidate
+
+  if [[ -z "$rel" ]]; then
+    return 0
+  fi
+
+  dir="$(dirname "$rel")"
+  while :; do
+    if [[ "$dir" == "." ]]; then
+      candidate="$REPO_ROOT/CLAUDE.md"
+    else
+      candidate="$REPO_ROOT/$dir/CLAUDE.md"
+    fi
+    if [[ -f "$candidate" ]]; then
+      printf '%s\n' "${candidate#$REPO_ROOT/}"
+      return 0
+    fi
+    if [[ "$dir" == "." || "$dir" == "/" ]]; then
+      break
+    fi
+    dir="$(dirname "$dir")"
+  done
+
+  if [[ -f "$REPO_ROOT/CLAUDE.md" ]]; then
+    printf '%s\n' "CLAUDE.md"
+  fi
+}
+
+while IFS= read -r touched; do
+  nearest_claude "$touched" >> "$tmp_claude" || true
+done < "$tmp_touched"
+awk 'NF && !seen[$0]++' "$tmp_claude" > "${tmp_claude}.dedup"
+mv "${tmp_claude}.dedup" "$tmp_claude"
+
+find "$REPO_ROOT" -maxdepth 2 -type f \( -iname 'README.md' -o -iname 'README*.md' \) \
+  -print 2>/dev/null | sed "s|^$REPO_ROOT/||" | awk '!seen[$0]++' > "$tmp_readme" || true
+
+# ------------------------------------------------------------
+# 生成 release note
+# ------------------------------------------------------------
+{
+  echo "# Release Note"
+  echo
+  echo "## User Impact"
+  if [[ -n "$report_summary" ]]; then
+    echo
+    echo "- $report_summary"
+  fi
+  if [[ -n "$design_goal" && "$design_goal" != "$report_summary" ]]; then
+    echo "- $design_goal"
+  fi
+  if [[ ! -s "$tmp_changed" && -z "$report_summary" && -z "$design_goal" ]]; then
+    echo
+    echo "- No user-facing summary captured yet."
+  fi
+  echo
+  echo "## What Is New"
+  if [[ -s "$tmp_changed" ]]; then
+    while IFS= read -r line; do
+      echo "- $line"
+    done < "$tmp_changed"
+  else
+    echo
+    echo "- No completed task list captured yet."
+  fi
+  echo
+  echo "## Verification"
+  echo
+  echo "- CC-Check verdict: $report_verdict"
+  jq -r '(.evidence // [])[]?' "$report_card" 2>/dev/null | sed '/^$/d' | while IFS= read -r line; do
+    echo "- $line"
+  done
+  if [[ -s "$tmp_verify" ]]; then
+    while IFS= read -r cmd; do
+      echo "- Verify with: \`$cmd\`"
+    done < "$tmp_verify"
+  fi
+  echo
+  echo "## Ops Notes"
+  echo
+  echo "- Ship mode: $ship_mode"
+  echo "- Spec sync ready: $spec_sync_ready"
+  echo "- Current branch: ${current_branch:-unknown}"
+  echo "- Base branch: ${base_branch:-unknown}"
+  [[ -n "$pr_status" ]] && echo "- PR status: $pr_status"
+  [[ -n "$pr_url" ]] && echo "- PR url: $pr_url"
+  echo
+  echo "## Follow-Ups"
+  if [[ -s "$tmp_followups" ]]; then
+    echo
+    while IFS= read -r line; do
+      echo "- $line"
+    done < "$tmp_followups"
+  else
+    echo
+    echo "- None recorded."
+  fi
+} > "$release_note"
+
+# ------------------------------------------------------------
+# 生成 resume index
+# ------------------------------------------------------------
+next_action="Refresh handoff and close the requirement."
+case "$ship_mode" in
+  create-pr) next_action="Push current branch and create PR / MR from pr-brief.md." ;;
+  update-pr) next_action="Refresh the open PR / MR body and resolve outstanding review feedback." ;;
+  local-handoff) next_action="Hand off with pr-brief.md and this resume index." ;;
+  post-merge-closeout) next_action="Finish release note, backlog writeback, and archive the requirement." ;;
+esac
+
+{
+  echo "# Resume Index"
+  echo
+  echo "- Requirement: $requirement_id"
+  echo "- Current stage: cc-act"
+  echo "- Current task: ship:$ship_mode"
+  if [[ -s "$tmp_followups" ]]; then
+    echo "- Ready tasks: follow-up review"
+  else
+    echo "- Ready tasks: none"
+  fi
+  echo "- Updated at: $timestamp"
+  echo
+  echo "## Last Good Checkpoint"
+  echo
+  if [[ -n "$report_summary" ]]; then
+    echo "- $report_summary"
+  else
+    echo "- Req-Check passed; see review/report-card.json for evidence."
+  fi
+  echo "- Ship mode decided as \`$ship_mode\`."
+  [[ -n "$pr_url" ]] && echo "- Active PR / MR: $pr_url"
+  echo
+  echo "## Blockers"
+  echo
+  if [[ -s "$tmp_followups" ]]; then
+    while IFS= read -r line; do
+      echo "- $line"
+    done < "$tmp_followups"
+  else
+    echo "- None."
+  fi
+  echo
+  echo "## Next Action"
+  echo
+  echo "- $next_action"
+  echo "- Formal spec sync belongs in cc-act before final ship closeout."
+  echo
+  echo "## Parallel Notes"
+  echo
+  echo "- Safe to parallelize: documentation review, backlog wording, release note polish."
+  echo "- Must stay sequential: cc-check pass -> doc sync -> pr brief render -> ship action."
+} > "$resume_index"
+
+# ------------------------------------------------------------
+# 生成 doc sync 报告：要求人工关注的项目级文档目标
+# ------------------------------------------------------------
+{
+  echo "# Doc Sync Report"
+  echo
+  echo "- Requirement: $requirement_id"
+  echo "- Ship mode: $ship_mode"
+  echo "- CC-Check verdict: $report_verdict"
+  echo "- Spec sync ready: $spec_sync_ready"
+  echo "- Updated at: $timestamp"
+  echo
+  echo "## Synced Requirement Artifacts"
+  echo
+  echo "- \`handoff/release-note.md\`: refreshed"
+  echo "- \`resume-index.md\`: refreshed"
+  echo
+  echo "## Touched Files"
+  echo
+  if [[ -s "$tmp_touched" ]]; then
+    while IFS= read -r line; do
+      echo "- \`$line\`"
+    done < "$tmp_touched"
+  else
+    echo "- No touched files recorded in task-manifest.json."
+  fi
+  echo
+  echo "## Spec Targets"
+  echo
+  if [[ -s "$tmp_specs" ]]; then
+    while IFS= read -r line; do
+      echo "- \`$line\`"
+    done < "$tmp_specs"
+  else
+    echo "- No capability spec files recorded in task-manifest.json."
+  fi
+  echo
+  echo "## Project Doc Targets"
+  echo
+  echo "### CLAUDE Targets"
+  if [[ -s "$tmp_claude" ]]; then
+    echo
+    while IFS= read -r line; do
+      echo "- \`$line\`"
+    done < "$tmp_claude"
+  else
+    echo
+    echo "- No scoped \`CLAUDE.md\` target detected from touched files."
+  fi
+  echo
+  echo "### README Candidates"
+  if [[ -s "$tmp_readme" ]]; then
+    echo
+    while IFS= read -r line; do
+      echo "- \`$line\`"
+    done < "$tmp_readme"
+  else
+    echo
+    echo "- No README candidate found under repo root."
+  fi
+  echo
+  echo "## Manual Follow-Ups"
+  echo
+  echo "- Update the listed \`CLAUDE.md\` files if structure, workflow, or operational truth changed."
+  echo "- Update README candidates if user-visible behavior or setup flow changed."
+  echo "- Re-render \`pr-brief.md\` after any manual doc edits so the PR body stays in sync."
+  if [[ -n "$main_risk" ]]; then
+    echo "- Main risk to reflect in docs: $main_risk"
+  fi
+} > "$doc_sync_report"
+
+echo "Synced $release_note"
+echo "Synced $resume_index"
+echo "Wrote $doc_sync_report"

package/.claude/skills/cc-act/scripts/verify-act-gate.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+# ------------------------------------------------------------
+# cc-act: 校验 Check 阶段是否真的闭合
+# ------------------------------------------------------------
+
+usage() {
+  cat <<'EOF'
+Usage: verify-act-gate.sh --dir path/to/change
+EOF
+}
+
+REQ_DIR=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --dir) REQ_DIR="$2"; shift 2 ;;
+    -h|--help) usage; exit 0 ;;
+    *) echo "Unknown arg: $1" >&2; usage; exit 1 ;;
+  esac
+done
+
+if [[ -z "$REQ_DIR" || ! -d "$REQ_DIR" ]]; then
+  usage
+  exit 1
+fi
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$script_dir/cc-act-common.sh"
+CHANGE_DIR="$(req_act_change_dir "$REQ_DIR")"
+report_card="$(req_act_report_path "$CHANGE_DIR")"
+tasks_file="$(req_act_tasks_path "$CHANGE_DIR")"
+
+[[ -f "$report_card" ]] || { echo "Gate open: missing report-card.json" >&2; exit 1; }
+
+verdict="$(jq -r '.verdict // "unknown"' "$report_card" 2>/dev/null || echo unknown)"
+reroute="$(jq -r '.reroute // "unknown"' "$report_card" 2>/dev/null || echo unknown)"
+spec_sync_ready="$(jq -r '.specSyncReady // false' "$report_card" 2>/dev/null || echo false)"
+evidence_count="$(jq -r '(.evidence // []) | length' "$report_card" 2>/dev/null || echo 0)"
+gap_count="$(jq -r '(.gaps // []) | length' "$report_card" 2>/dev/null || echo 0)"
+
+remaining_tasks="0"
+if [[ -f "$tasks_file" ]]; then
+  remaining_tasks="$(awk '/^- \[ \]/{c++} END{print c+0}' "$tasks_file" 2>/dev/null || echo 0)"
+fi
+
+[[ "$verdict" == "pass" ]] || { echo "Gate open: verdict=$verdict" >&2; exit 1; }
+[[ "$reroute" == "none" ]] || { echo "Gate open: reroute=$reroute" >&2; exit 1; }
+[[ "$spec_sync_ready" == "true" ]] || { echo "Gate open: spec_sync_ready=$spec_sync_ready" >&2; exit 1; }
+[[ "$evidence_count" -gt 0 ]] || { echo "Gate open: evidence is empty" >&2; exit 1; }
+[[ "$gap_count" -eq 0 ]] || { echo "Gate open: gaps=$gap_count" >&2; exit 1; }
+[[ "$remaining_tasks" -eq 0 ]] || { echo "Gate open: remaining_tasks=$remaining_tasks" >&2; exit 1; }
+
+cat <<EOF
+GATE=closed
+VERDICT=$verdict
+REROUTE=$reroute
+SPEC_SYNC_READY=$spec_sync_ready
+EVIDENCE_COUNT=$evidence_count
+GAP_COUNT=$gap_count
+REMAINING_TASKS=$remaining_tasks
+EOF

package/.claude/skills/cc-check/CHANGELOG.md

@@ -0,0 +1,73 @@
+# CC-Check Skill Changelog
+
+## v1.8.1 - 2026-04-25
+
+- remove external tool provenance from the public skill contract so diff review reads as native `cc-check` behavior
+- keep plan completion, scope drift, critical pass, outside-diff lookup, and documentation staleness requirements unchanged
+
+## v1.8.0 - 2026-04-24
+
+- add the native `cc-check` requirement diff review contract
+- add plan completion audit, scope drift detection, critical pass categories, outside-diff lookup, documentation staleness, and adversarial synthesis to the review pipeline
+- require findings to carry severity, confidence, source, evidence, and action so report cards route failures without chat-memory interpretation
+
+Migration note:
+
+- new `review/report-card.json` files should populate `review.diffReview` with plan completion, scope drift, critical pass, and documentation staleness facts when applicable
+
+## v1.7.0 - 2026-04-23
+
+- tighten the public skill around an explicit `NO PASS WITHOUT FRESH EVIDENCE` iron law so `cc-check` cannot degrade into inherited narration from `cc-do`
+- add a four-phase verification model, layered boundary checks, and stop-reset signals in native verification semantics
+- clarify that runtime gates, review proof, requirement diff truth, and spec sync readiness are separate layers and any single-layer drift blocks `pass`
+
+## v1.6.0 - 2026-04-19
+
+- extend `report-card.json` with `specAlignment`, `specDeltaVerified`, `specSyncReady`, and `gaps` so closeout can judge spec readiness directly
+- teach the report renderer to derive spec verification signals from manifest capability metadata
+- relax gate validation to accept both existing reports and the richer spec-aware fields during the transition
+
+Migration note:
+
+- new `cc-check` runs should write the spec-aware report fields
+- old reports remain structurally valid during migration
+
+## v1.5.0 - 2026-04-17
+
+- accept `ANALYSIS.md` as an upstream verification contract so investigated bug fixes can flow through the same evidence gate
+- add `cc-investigate` as an explicit reroute target when verification disproves the current root-cause story
+- teach report rendering and gate validation scripts about the new reroute so blocked bug fixes stop at the right stage
+
+## v1.4.0 - 2026-04-17
+
+- move quality-gate execution and report-card assembly into skill-local scripts so `lib/harness/operations/verify.js` becomes a thinner shell
+- add `scripts/render-report-card.js` as the skill-local report renderer
+- teach `run-quality-gates.sh` to emit `skipped` gates explicitly instead of faking green passes for missing scripts
+
+Migration note:
+
+- `report-card.json` shape stays compatible
+- internal callers should prefer the cc-check scripts for gate execution and report rendering logic
+
+## v1.3.0 - 2026-04-17
+
+- add structured frontmatter contract fields so cc-check can be consumed as an independent evaluator stage
+- add `Harness Contract` and `Visible State Machine` to make pass/fail/blocked routing explicit in the public skill surface
+- tighten the clean-room reset language so verdicts are rebuilt from fresh evidence instead of execution narration
+
+Migration note:
+
+- `report-card.json` shape remains compatible
+- publish validation and registry generation now expect the new frontmatter keys on this public skill
+
+## v1.2.0 - 2026-04-15
+
+- upgrade `REPORT_CARD_TEMPLATE.json` with realistic gate, review, and blocking examples
+- make the default template teach reroute and evidence quality on first read
+
+## v1.1.0 - 2026-04-15
+
+- add `version` frontmatter and semver tracking
+- add stronger trigger phrases in frontmatter
+- add `Quick Start` to classify evidence reality before selecting a verdict
+- strengthen `Good Output` expectations so reroute and proof are obvious on first read