sshlg-skills 1.76.3 → 1.76.4

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## v1.76.4 (2026-10-24): seo-aeo-audit pinned to 0.32.2
+
+- **seo-aeo-audit 0.32.2** (was 0.32.0), commit `08a57df`: `references/playbooks.md` grows. PB5
+  gains the hub-showcase step (every item, in stock first, the rest marked "check availability" as
+  a live check); PB11 reads page speed per template from a keyed PageSpeed Insights call; PB12 adds
+  a network's hosts to Bing Webmaster through the API and keeps adding apart from verifying. 0.32.1
+  carries the same content under a lightweight tag its release refused, so 0.32.2 is the published
+  one.
+
 ## v1.76.3 (2026-10-24): telegram-dev pinned to 0.5.3
 
 - **Pin:** telegram-dev 0.5.3 (`telegram-bots/references/high-load.md`, a bot under load: the

package/README.md

@@ -51,7 +51,7 @@ scripts. No services, no telemetry, no API keys.
 | **[agent-sync](https://github.com/ssheleg/agent-sync)** | 1.23.0 | Several agents, one repository, no collisions. Leases with a TTL so two agents cannot claim the same work, race-free id reservation, a run journal and a generated board — over a pluggable knowledge cloud. The answer to "two sessions just committed over each other". |
 | **[make-skill](https://github.com/ssheleg/make-skill)** | 0.33.0 | A skill that builds skills. Create, retrofit, audit and publish agent skills and Claude Code plugins: conformance to the [Agent Skills](https://agentskills.io/specification) open standard, [Anthropic's platform rules](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/overview) (per-surface runtime limits, the Skills API, evals) and the [Claude Code plugin reference](https://code.claude.com/docs/en/plugins-reference), marketplace layout, version sync, validator + CI, every distribution channel, the review checklist for third-party skills, and what a *skill author* must know about MCP and A2A — the protocols themselves live in `agent-stack`. |
 | **[sheleg-design](https://github.com/ssheleg/sheleg-design-skill)** | 1.66.2 | The taste layer. Cinematic scroll-driven landing pages — one scroll clock, motion that degrades to calm, WebGL particle formations — plus product-UI style packs each shipping a ready token layer, and the Figma border: tokens as variables, design to code without hand-copied values. |
-| **[seo-aeo-audit](https://github.com/ssheleg/seo-aeo-audit)** | 0.32.0 | Evidence-first website audit for search **and** answer engines. Ten tracks from crawl access to AI citation mechanics; every finding carries an observation, every recommendation an evidence tier, and the output is a prioritized change plan plus a link-building brief, not a score. Before a site is built, `/seo-aeo-audit brief` writes the build-time brief that the audit later verifies. |
+| **[seo-aeo-audit](https://github.com/ssheleg/seo-aeo-audit)** | 0.32.2 | Evidence-first website audit for search **and** answer engines. Ten tracks from crawl access to AI citation mechanics; every finding carries an observation, every recommendation an evidence tier, and the output is a prioritized change plan plus a link-building brief, not a score. Before a site is built, `/seo-aeo-audit brief` writes the build-time brief that the audit later verifies. |
 | **[sheleg-dev](https://github.com/ssheleg/sheleg-dev)** | 0.16.0 | The integration layer a product reaches once it has users: **money in, tracking, sign-in, speed**. Stripe subscription billing reconciled into your own database — webhook idempotency, renewals, seats and proration, refunds, price drift, and the coupon offered at the cancel step, where a `duration=once` discount leaves `subscription.discounts` the moment its invoice finalizes and the offer can be taken every cycle; crypto payments that survive under-payment, duplicate webhooks and rate drift; GA4, Google Ads, Meta and LinkedIn under Consent Mode v2; Google sign-in with the account pre-hijacking guard, and the server-side auth surface behind it; Core Web Vitals work that moves the score rather than the report; and Sentry error tracking wired so it does not forward your own credentials to a third party and so a stack trace names the commit that caused it. |
 | **[agent-stack](https://github.com/ssheleg/agent-stack)** | 0.31.2 | Production patterns for agent systems, in four skills. **The orchestrator** — tool-calling loops that survive their own context pressure, pipelines with human checkpoints and resume, provider routing with fallback and health checks, memory architecture — form, function and dynamics, the four-stage retrieval pipeline, and what a layer table alone cannot say, and **the shape of the work decided before the work**: an edge that carries no data is no edge, a plan that declares its dependencies is executed in layers rather than in list order, and a parallel layer gets a checker before the node that consumes it. **The harness** — what the agent is *told*: system prompts at the right altitude, tool descriptions the model can act on, technique choice with a verdict each, workflow versus agent and static versus dynamic, plus a seven-track audit of an agent somebody else built and a scanner for the defects that are mechanically visible. **The evals** — suites that measure whether it actually works: judging trajectories, regression fixtures grown from production, judges calibrated before they are trusted. **The interop layer** — MCP at revision 2026-07-28 and the four features it deprecated, running many servers at once, the registry, A2A 1.0, and the gateway, every reference carrying the spec revision it was read against. Plus the wallet side of reselling LLM access: tiered balances, one markup boundary, two-phase commit against a provider API. |
 | **[telegram-dev](https://github.com/ssheleg/telegram-dev)** | 0.5.3 | Telegram, split by the API each surface actually speaks. **`telegram-bots`** — the official HTTP Bot API: `update_id` as the only idempotency key an update carries, the `allowed_updates` default that subscribes you to everything *except* `chat_member` and the two reaction types while answering `ok: true`, the webhook secret header that is the real check, rate limits as a design constraint (1/sec per chat, 20/min per group, ~30/sec bulk), and Telegram Stars with a **ten-second** pre-checkout window and a grant that belongs to `successful_payment`. **`telegram-userbots`** — MTProto and Telethon: the session file as a credential equal to the password, `FloodWaitError` as the API telling you exactly how long to wait, pinning across minor releases that move session and entity-cache behaviour, and the account-ban risk a bot token does not carry — the skill opens with whether a user account is needed at all. **`telegram-miniapps`** — the web layer, whose entire security model is one signed query string: verifying `initData` server-side, the `auth_date` window, the Ed25519 path for a third party, and the SDK package whose name moved while the organisation's own page still fronts the old one. Both the verifier and the delivery invariants ship as runnable fixtures with their mutants, and a bot under load has its own reference: a poll that never waits on a handler, a queue per chat under one ceiling, payments outside it, guards measured from arrival, a bounded shutdown, with a discrete-event simulation whose nine invariants each go red without their rule. |

package/claude-plugin-pins.json

@@ -2682,8 +2682,8 @@
     {
       "name": "seo-aeo-audit",
       "repo": "ssheleg/seo-aeo-audit",
-      "commit": "51dba1913c967e606b773786f091302771d242ed",
-      "version": "0.32.0",
+      "commit": "08a57df38ed238219b84f7369b68bc738784d747",
+      "version": "0.32.2",
       "pluginInstall": "seo-aeo-audit@seo-aeo-audit",
       "pluginPath": "plugins/seo-aeo-audit",
       "entry": {
@@ -2691,7 +2691,7 @@
         "displayName": "SEO + AEO Audit",
         "source": "./plugins/seo-aeo-audit",
         "description": "Audits a website across ten evidence-based tracks (access & indexation, canonicalization, architecture & link equity, intent, content value, extractability/AEO, entity consensus, experience signals, risk, measurement) and outputs a findings report plus a prioritized change plan with verification steps. Includes a stdlib-only page auditor with answer-engine read-budget analysis.",
-        "version": "0.32.0",
+        "version": "0.32.2",
         "author": {
           "name": "ssheleg",
           "url": "https://x.com/sshlg93"
@@ -2716,7 +2716,7 @@
       "files": [
         {
           "path": ".claude-plugin/plugin.json",
-          "sha256": "54524e31122d383215eeac1c800d636b7e0f23a9394430774cb55b0e1be3a045",
+          "sha256": "7a1a5382075169a9693ecade9ac299089e003ea757ddcb1d5293d99d3805a467",
           "bytes": 766
         },
         {
@@ -2826,8 +2826,8 @@
         },
         {
           "path": "skills/seo-aeo-audit/references/playbooks.md",
-          "sha256": "d2ff12f4ddc127b9829934e9dcfae05bad85fe981b2a911e5251d3a2c26591eb",
-          "bytes": 20903
+          "sha256": "05cc851b4bea99638f647bf2ae846698ab5958220fb10b03b816a976b8dc8412",
+          "bytes": 25526
         },
         {
           "path": "skills/seo-aeo-audit/references/preflight.md",
@@ -2866,47 +2866,47 @@
         },
         {
           "path": "skills/seo-aeo-audit/scripts/agent_surface.py",
-          "sha256": "874833e978d6ccc58e6d1f16a3bd98b72e6fec814e0deef67c2edd7be17dcb9f",
+          "sha256": "fe9786aead0070f711a8058d6a89de8e85c54b4240574be1356c45a1980550ab",
           "bytes": 97372
         },
         {
           "path": "skills/seo-aeo-audit/scripts/ai_panel.py",
-          "sha256": "dfe0ff50123836d758fb1d5f74b795d46c3f28f6121eee5a20b117565e8e2f3b",
+          "sha256": "8708ef937bc626a8ba7a8c4d7b495d5e7dd9feb3e332c168deea3454c33a40bf",
           "bytes": 25268
         },
         {
           "path": "skills/seo-aeo-audit/scripts/bwt_pull.py",
-          "sha256": "b9dca38dd80acdfe71e740f0d26f7deb33cc6a4b9cfe778bc6e9bb694748559c",
+          "sha256": "cec4359d6d877dd90d13c3b1ae8fa0df96458755670e2da288e513c5bdabcb05",
           "bytes": 25409
         },
         {
           "path": "skills/seo-aeo-audit/scripts/gsc_pull.py",
-          "sha256": "3298592db0e593514a28aa31d0e512ab5b6f0b8fcc7f95e73364d9066b70a873",
+          "sha256": "9f4fb37c6e7130bfd2d02b02e7bccae2524d3bb4ae5baed72dcda36cb04a1955",
           "bytes": 61132
         },
         {
           "path": "skills/seo-aeo-audit/scripts/page_audit.py",
-          "sha256": "6694279f96ea90bc2797adeb430b800bf04c674a625e37e64bc464a118237efc",
+          "sha256": "2bd20e35eedd8e807d3c89fa21bba8d701f1c77f80afe6796517d10a02e2be22",
           "bytes": 80703
         },
         {
           "path": "skills/seo-aeo-audit/scripts/preflight.py",
-          "sha256": "23f5fe8db6d7f219c8f43eced4d995239abf6d49b7996e937964f88bcfab4139",
+          "sha256": "4a89e52e624b0fa531a6d966405f3cc2cc8462195e35e2dcdacac45ba5ba0806",
           "bytes": 65317
         },
         {
           "path": "skills/seo-aeo-audit/scripts/psi_pull.py",
-          "sha256": "aaabbc25be17217ed1cbda2a9d7f1dfbe6873885d48bfad907384312adf7080b",
+          "sha256": "880afd32fba8719c9005cbcc93e18eea41eb342c5578327dc5cb8b75c3506bb2",
           "bytes": 28522
         },
         {
           "path": "skills/seo-aeo-audit/scripts/sitemap_audit.py",
-          "sha256": "0c4580b14ab26d1cc033cbd786b829328eba4c75ef67881e1a93e5ba79b878ee",
+          "sha256": "88b646986d024dcc5cf95d6713b1b6fc2d13ed760bd17ad86fe6f9f9f5ba2242",
           "bytes": 44650
         },
         {
           "path": "skills/seo-aeo-audit/scripts/url_inspection.py",
-          "sha256": "e531e03d7d7e9eac1b4b8f34d37b91232a13dbe2a17b3b4ea628195449b5e7a7",
+          "sha256": "cfcc63f2b2d08da4e24ac21c288645aebc7b09ef512091fd164586fba0c3c01e",
           "bytes": 36543
         },
         {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sshlg-skills",
-  "version": "1.76.3",
+  "version": "1.76.4",
   "skillsCli": "skills@1.7.2",
   "description": "The ssheleg harness skill layer: routing, delivery gates, specialist skills and durable handoffs for coding agents.",
   "bin": {

package/skills.json

@@ -160,13 +160,13 @@
       "skillNames": [
         "seo-aeo-audit"
       ],
-      "version": "0.32.0",
+      "version": "0.32.2",
       "entry": "/seo-aeo-audit",
       "role": "whether a machine will find it",
       "npm": "@ssheleg/seo-aeo-audit",
       "shape": "static, with a bounded discovery",
       "shapeWhy": "The ten tracks are fixed; **which** are in scope is decided per site at step 0 and written into the report, so the executed set is recoverable. An eleventh pass (Discover) is added by a stated condition, never by taste.",
-      "commit": "51dba1913c967e606b773786f091302771d242ed"
+      "commit": "08a57df38ed238219b84f7369b68bc738784d747"
     },
     {
       "name": "sheleg-dev",