@cubis/foundry 0.3.83 → 0.3.84

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/csharp-best-practices/evals/evals.json

@@ -1,64 +0,0 @@
-[
-  {
-    "id": "csharp-minimal-api-with-records",
-    "prompt": "Design a .NET 9 minimal API for an order management service. The API should use records for request/response DTOs, TypedResults for compile-time response contracts, dependency injection with proper lifetimes, and nullable reference types. Include endpoints for creating an order, getting an order by ID, and listing orders with pagination.",
-    "assertions": [
-      {
-        "id": "record-types-for-dtos",
-        "description": "Request and response types are declared as record or record struct (e.g., record CreateOrderRequest, record OrderResponse) with required properties and value equality semantics — not plain classes with mutable properties.",
-        "weight": 1.0
-      },
-      {
-        "id": "typed-results-on-endpoints",
-        "description": "Endpoint handler return types use TypedResults (e.g., Results<Ok<OrderResponse>, NotFound, ValidationProblem>) providing compile-time verification that all return paths match the declared result types.",
-        "weight": 1.0
-      },
-      {
-        "id": "di-lifetime-correctness",
-        "description": "Services are registered with appropriate lifetimes: repositories as Scoped (per-request), stateless validators as Transient, and shared caches as Singleton. No Scoped services injected into Singleton registrations.",
-        "weight": 1.0
-      },
-      {
-        "id": "nullable-annotations",
-        "description": "Nullable reference types are enabled. Optional fields use nullable types (string?) while required fields are non-nullable. Try-pattern methods use [NotNullWhen(true)] or similar attributes for flow analysis.",
-        "weight": 1.0
-      },
-      {
-        "id": "cancellation-token-propagation",
-        "description": "All async endpoint handlers accept CancellationToken as a parameter, and it is passed through to every async service and repository call in the chain.",
-        "weight": 1.0
-      }
-    ]
-  },
-  {
-    "id": "csharp-async-stream-processing",
-    "prompt": "Implement an async stream processing pipeline in C# 13 that reads events from a database cursor, transforms them through multiple stages (filtering, enrichment, batching), and writes results to an output sink. The pipeline should support cancellation, backpressure, and graceful error handling. Include unit tests for the pipeline stages.",
-    "assertions": [
-      {
-        "id": "iasyncenumerable-pipeline",
-        "description": "The pipeline uses IAsyncEnumerable<T> as the core abstraction, with each stage accepting and returning IAsyncEnumerable<T>. Stages are composed via extension methods or LINQ-style chaining, enabling lazy evaluation.",
-        "weight": 1.0
-      },
-      {
-        "id": "cancellation-with-enumerator-token",
-        "description": "IAsyncEnumerable methods accept [EnumeratorCancellation] CancellationToken parameters, and cancellation is checked or propagated within yield loops using Task.Delay, database reads, or explicit Task.checkCancellation checks.",
-        "weight": 1.0
-      },
-      {
-        "id": "batching-with-backpressure",
-        "description": "A batching stage collects items into fixed-size batches before yielding them downstream, implementing natural backpressure — the producer does not advance until the consumer processes the current batch.",
-        "weight": 1.0
-      },
-      {
-        "id": "structured-error-handling",
-        "description": "Error handling uses try-catch at stage boundaries with specific exception types or Result<T> patterns. Failed items are logged or routed to a dead-letter mechanism rather than crashing the entire pipeline.",
-        "weight": 1.0
-      },
-      {
-        "id": "testable-stage-isolation",
-        "description": "Unit tests verify individual pipeline stages in isolation by passing in-memory IAsyncEnumerable sources (e.g., from async generator methods) and asserting on collected output. Tests cover normal flow, empty input, cancellation, and error cases.",
-        "weight": 1.0
-      }
-    ]
-  }
-]

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/database-design/evals/assertions.md

@@ -1,50 +0,0 @@
-# Database Design Eval Assertions
-
-## Eval 1: Normalized Schema Design
-
-This eval tests the ability to produce a properly normalized relational schema with constraints, key selection, and relationship modeling for a multi-entity e-commerce domain.
-
-### Assertions
-
-| # | Type     | What it checks                                  | Why it matters                                                                                       |
-|---|----------|-------------------------------------------------|------------------------------------------------------------------------------------------------------|
-| 1 | contains | `REFERENCES` — Foreign key declarations         | Referential integrity must be enforced at the database level. Without foreign keys, orphaned records accumulate silently. |
-| 2 | contains | `NOT NULL` — Required column constraints        | Nullable columns that should be required allow incomplete data. Application-level checks are insufficient because direct DB access bypasses them. |
-| 3 | contains | `UNIQUE` — Uniqueness constraints               | Natural uniqueness (user email, product SKU) must be enforced by the database. Duplicate detection in application code races under concurrency. |
-| 4 | contains | `CREATE TABLE` — Executable DDL                 | Schema designs expressed as prose are ambiguous. Executable DDL can be validated, version-controlled, and applied directly. |
-| 5 | contains | `PRIMARY KEY` — Explicit key declarations       | Every table needs a primary key for row identity, efficient joins, and replication. Implicit or missing keys cause subtle bugs in ORMs and migration tools. |
-
-### What a passing response looks like
-
-- A set of `CREATE TABLE` statements for users, addresses, products, categories, product_categories (junction), orders, order_items, and reviews.
-- Foreign keys linking orders to users, order_items to orders and products, reviews to users and products, addresses to users.
-- A junction table (product_categories) with a composite primary key to model the many-to-many relationship between products and categories.
-- NOT NULL on required fields (user email, product name, order total, review rating).
-- UNIQUE constraint on user email and any natural keys.
-- Appropriate data types (TIMESTAMPTZ for dates, NUMERIC for money, TEXT or VARCHAR with limits for strings).
-- Normalized to 3NF: no transitive dependencies, no repeated groups, no partial key dependencies.
-
----
-
-## Eval 2: Index Optimization Strategy
-
-This eval tests the ability to design indexes grounded in specific query patterns, including composite index column ordering and partial indexes.
-
-### Assertions
-
-| # | Type     | What it checks                                  | Why it matters                                                                                       |
-|---|----------|-------------------------------------------------|------------------------------------------------------------------------------------------------------|
-| 1 | contains | `CREATE INDEX` — Executable index definitions   | Index recommendations in prose cannot be validated or applied. Executable statements ensure precision in column order and index type. |
-| 2 | contains | `user_id` — User-based index                    | Multiple query patterns filter on user_id. Missing this index forces sequential scans on the most common access pattern. |
-| 3 | contains | `status` — Status column indexing               | The dashboard groups by status and lookups filter by user+status. Without an index, these queries degrade as the orders table grows. |
-| 4 | contains | `created_at` — Temporal indexing                | Sorting by creation date and filtering by date range are core patterns. B-tree indexes on timestamps enable efficient range scans. |
-| 5 | contains | `WHERE` — Predicate-aware indexing              | Indexes must target specific query predicates. The response must connect each index to the query it serves, not just list columns. |
-
-### What a passing response looks like
-
-- A composite index on `(user_id, created_at DESC)` for fetching a user's orders sorted by date.
-- An index on `status` (or a composite with status) for the dashboard count query.
-- A composite index on `(user_id, status)` for the combined lookup pattern.
-- A partial index or range-aware index for orders above $100 in the last 30 days (e.g., `WHERE total_amount > 100`).
-- Each `CREATE INDEX` statement accompanied by a brief explanation of which query it targets and why the column order was chosen.
-- Discussion of when a covering index might avoid heap lookups for read-heavy patterns.

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/database-design/evals/evals.json

@@ -1,66 +0,0 @@
-[
-  {
-    "name": "normalized-schema-design",
-    "description": "Validate that the skill produces a properly normalized relational schema with appropriate constraints, key selection, and relationship modeling for a multi-entity domain.",
-    "input": "Design a database schema for an e-commerce platform. The domain includes: users (with profiles and addresses), products (with categories and inventory), orders (with line items and payment status), and reviews (tied to both users and products). Users can have multiple shipping addresses. Products belong to multiple categories. Orders contain multiple line items referencing products. Design the schema in PostgreSQL DDL with proper normalization, constraints, and relationships.",
-    "assertions": [
-      {
-        "type": "contains",
-        "value": "REFERENCES",
-        "description": "Foreign key constraints must be declared explicitly to enforce referential integrity between entities (users-orders, orders-line_items, products-reviews)."
-      },
-      {
-        "type": "contains",
-        "value": "NOT NULL",
-        "description": "Required columns must have NOT NULL constraints to prevent incomplete records from being inserted at the database level."
-      },
-      {
-        "type": "contains",
-        "value": "UNIQUE",
-        "description": "Natural uniqueness constraints (such as email on users or composite keys on junction tables) must be enforced to prevent duplicate data."
-      },
-      {
-        "type": "contains",
-        "value": "CREATE TABLE",
-        "description": "The schema must be expressed as executable PostgreSQL DDL statements, not just prose descriptions of tables."
-      },
-      {
-        "type": "contains",
-        "value": "PRIMARY KEY",
-        "description": "Every table must have an explicit primary key declaration to ensure row uniqueness and enable efficient joins."
-      }
-    ]
-  },
-  {
-    "name": "index-optimization-strategy",
-    "description": "Validate that the skill produces an indexing strategy grounded in specific query patterns with composite index column ordering, covering indexes, and partial indexes where appropriate.",
-    "input": "Given a PostgreSQL orders table with columns (id, user_id, status, created_at, total_amount, shipping_address_id) and these query patterns: (1) fetch all orders for a user sorted by creation date descending, (2) count orders by status for a dashboard, (3) find orders above $100 created in the last 30 days, (4) look up orders by user and status together. Design an indexing strategy with CREATE INDEX statements and explain why each index serves its target query.",
-    "assertions": [
-      {
-        "type": "contains",
-        "value": "CREATE INDEX",
-        "description": "Index definitions must be expressed as executable CREATE INDEX statements, not just recommendations in prose."
-      },
-      {
-        "type": "contains",
-        "value": "user_id",
-        "description": "An index on user_id must be present because multiple query patterns filter or join on user_id, making it the highest-value single-column index."
-      },
-      {
-        "type": "contains",
-        "value": "status",
-        "description": "The status column must appear in at least one index because the dashboard query groups by status and the lookup query filters by user and status together."
-      },
-      {
-        "type": "contains",
-        "value": "created_at",
-        "description": "The created_at column must be indexed (alone or in a composite) because queries sort by creation date and filter by date range."
-      },
-      {
-        "type": "contains",
-        "value": "WHERE",
-        "description": "At least one partial index or query explanation must reference WHERE clauses to demonstrate that indexes are designed for specific predicate patterns, not added blindly."
-      }
-    ]
-  }
-]

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/deep-research/evals/assertions.md

@@ -1,17 +0,0 @@
-# Deep Research Eval Assertions
-
-## Eval 1: Latest Capability Verification
-
-1. **repo-first** — Starts by checking repo or local evidence before jumping to web claims.
-2. **official-first** — Uses official docs or upstream sources as the primary evidence for the capability.
-3. **secondary-labeled** — If community sources are mentioned, labels them as secondary evidence instead of presenting them as authoritative.
-4. **gaps-called-out** — Identifies unresolved uncertainty or missing confirmation.
-5. **next-route** — Ends with a concrete recommended workflow, agent, or skill to use next.
-
-## Eval 2: Tool Comparison
-
-1. **comparison-frame** — Defines the comparison axes instead of producing vague preferences.
-2. **repo-impact** — Connects the comparison back to the current repo or implementation constraints.
-3. **fact-vs-inference** — Separates verified facts from inference or interpretation.
-4. **decision-oriented** — Produces a recommendation or explicit defer condition.
-5. **no-research-sprawl** — Keeps the output concise and structured rather than dumping raw links.

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/deep-research/evals/evals.json

@@ -1,56 +0,0 @@
-[
-  {
-    "name": "latest-capability-verification",
-    "description": "Validate that the skill performs repo-first research, prioritizes official documentation, labels secondary evidence, and recommends a next route.",
-    "prompt": "Research whether the latest official Claude Code hook surface supports reinforcing route honoring before implementation. Start with the current repo state, then use official docs if needed. If community sources add useful practical context, include them but label them appropriately. End with the next workflow, agent, or skill we should use.",
-    "assertions": [
-      {
-        "id": "repo-first",
-        "description": "Starts with repo or local evidence before using external sources."
-      },
-      {
-        "id": "official-first",
-        "description": "Treats official docs or upstream sources as the primary evidence."
-      },
-      {
-        "id": "secondary-labeled",
-        "description": "Labels any Reddit or community evidence as secondary rather than authoritative."
-      },
-      {
-        "id": "gaps-called-out",
-        "description": "States any unresolved gaps, conflicts, or unknowns."
-      },
-      {
-        "id": "next-route",
-        "description": "Ends with a concrete recommended next route."
-      }
-    ]
-  },
-  {
-    "name": "tool-comparison",
-    "description": "Validate that the skill compares options with a clear frame, ties findings back to repo impact, and produces a decision-ready output.",
-    "prompt": "Compare whether our CLI should keep enforcement in Gemini command wrappers only or also add Claude hook templates. Use the repo state first, then official docs for current platform capabilities, and include community evidence only if it adds implementation nuance. Finish with a recommendation and the next route to take.",
-    "assertions": [
-      {
-        "id": "comparison-frame",
-        "description": "Defines concrete comparison axes such as repo impact, enforcement surface, and maintenance cost."
-      },
-      {
-        "id": "repo-impact",
-        "description": "Connects each option back to the current repo or bundle behavior."
-      },
-      {
-        "id": "fact-vs-inference",
-        "description": "Separates verified facts from inference or interpretation."
-      },
-      {
-        "id": "decision-oriented",
-        "description": "Produces a recommendation or explicit defer condition."
-      },
-      {
-        "id": "no-research-sprawl",
-        "description": "Keeps the answer structured instead of turning into an unfiltered dump of sources."
-      }
-    ]
-  }
-]

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/django-drf/evals/assertions.md

@@ -1,21 +0,0 @@
-# Django DRF Skill Assertions
-
-## Eval 1: ViewSet with Nested Serializers
-
-| # | Assertion | Type | Expected Value | Rationale |
-|---|-----------|------|----------------|-----------|
-| 1 | Uses ModelSerializer | contains | `ModelSerializer` | ModelSerializer auto-generates fields and validators from the Django model, reducing boilerplate and drift. |
-| 2 | Uses select_related | contains | `select_related` | ForeignKey traversals without select_related cause one query per row, degrading response time linearly. |
-| 3 | Uses prefetch_related | contains | `prefetch_related` | Reverse and many-to-many relationships require prefetch_related to batch into a single query. |
-| 4 | Uses ModelViewSet | contains | `ModelViewSet` | ModelViewSet provides the full CRUD action set with consistent method routing and permission integration. |
-| 5 | Registers with router | contains | `router.register` | Router registration generates URL patterns automatically, ensuring consistency and reducing routing errors. |
-
-## Eval 2: Custom Permission Class
-
-| # | Assertion | Type | Expected Value | Rationale |
-|---|-----------|------|----------------|-----------|
-| 1 | Extends BasePermission | contains | `BasePermission` | All custom DRF permissions must extend BasePermission to integrate with the framework's permission pipeline. |
-| 2 | Implements has_object_permission | contains | `has_object_permission` | Object-level authorization requires this method; has_permission alone only checks view-level access. |
-| 3 | Overrides get_queryset | contains | `get_queryset` | Queryset scoping is the first line of defense; it prevents unauthorized objects from being visible at all. |
-| 4 | Uses APITestCase | contains | `APITestCase` | APITestCase provides DRF-specific assertions and an APIClient that handles content negotiation correctly. |
-| 5 | Sets permission_classes | contains | `permission_classes` | The ViewSet must declare permission_classes to wire in the custom permission; DRF does not auto-discover permissions. |

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/django-drf/evals/evals.json

@@ -1,66 +0,0 @@
-[
-  {
-    "name": "viewset-with-nested-serializers",
-    "description": "Validate that the skill produces a correct DRF ViewSet with nested serializers, eager loading, and proper router registration.",
-    "prompt": "Create a Django REST Framework API for a BlogPost model that belongs to an Author and has many Comments. Each Comment belongs to a User. Use nested serializers to return the author name, post content, and comments with commenter username and text. Include the ViewSet, serializers, router registration, and queryset optimization.",
-    "assertions": [
-      {
-        "type": "contains",
-        "value": "ModelSerializer",
-        "description": "Must use ModelSerializer for automatic field generation and validation."
-      },
-      {
-        "type": "contains",
-        "value": "select_related",
-        "description": "Must use select_related for ForeignKey relationships to prevent N+1 queries."
-      },
-      {
-        "type": "contains",
-        "value": "prefetch_related",
-        "description": "Must use prefetch_related for reverse/many relationships to prevent N+1 queries."
-      },
-      {
-        "type": "contains",
-        "value": "ModelViewSet",
-        "description": "Must use ModelViewSet or appropriate ViewSet mixin for CRUD operations."
-      },
-      {
-        "type": "contains",
-        "value": "router.register",
-        "description": "Must register the ViewSet with a DefaultRouter for consistent URL generation."
-      }
-    ]
-  },
-  {
-    "name": "custom-permission-class",
-    "description": "Validate that the skill produces a custom DRF permission class with object-level checks, proper integration in a ViewSet, and test coverage.",
-    "prompt": "Create a custom DRF permission class called IsOwnerOrReadOnly that allows read access to any authenticated user but restricts write operations to the object owner. Integrate it into a ProjectViewSet where get_queryset scopes by the authenticated user's organization. Include an APITestCase that verifies both allowed and denied access.",
-    "assertions": [
-      {
-        "type": "contains",
-        "value": "BasePermission",
-        "description": "Must extend BasePermission for custom permission class definition."
-      },
-      {
-        "type": "contains",
-        "value": "has_object_permission",
-        "description": "Must implement has_object_permission for object-level authorization checks."
-      },
-      {
-        "type": "contains",
-        "value": "get_queryset",
-        "description": "Must override get_queryset to scope data by authenticated user or tenant."
-      },
-      {
-        "type": "contains",
-        "value": "APITestCase",
-        "description": "Must include APITestCase for integration testing of permissions."
-      },
-      {
-        "type": "contains",
-        "value": "permission_classes",
-        "description": "Must assign permission_classes on the ViewSet to wire in the custom permission."
-      }
-    ]
-  }
-]

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/docker-compose-dev/evals/assertions.md

@@ -1,51 +0,0 @@
-# Docker Compose Dev Eval Assertions
-
-## Eval 1: Multi-Service Dev Environment
-
-This eval tests the core Docker Compose skill: designing a multi-service development environment with hot reload, health checks, networking, and optional tooling profiles.
-
-### Assertions
-
-| # | Type     | What it checks                                  | Why it matters                                                                                       |
-|---|----------|-------------------------------------------------|------------------------------------------------------------------------------------------------------|
-| 1 | contains | `volumes:` — Bind mount configuration           | Bind mounts map host source code into containers, enabling hot reload. Without them, every code change requires a full container rebuild. |
-| 2 | contains | `healthcheck:` — Service health checks          | Health checks for PostgreSQL and Redis ensure dependent services wait for actual readiness, not just port availability. Race conditions cause intermittent startup failures. |
-| 3 | contains | `networks:` — Custom network definition         | Custom networks enable service-to-service communication by name via Docker DNS. Default bridge networking requires hardcoded IPs that break across environments. |
-| 4 | contains | `profiles:` — Compose profile usage             | Profiles let developers opt into optional services (pgAdmin) without starting them by default. This saves resources and reduces startup time for daily development. |
-| 5 | contains | `depends_on:` — Service dependency ordering     | `depends_on` with health check conditions prevents application containers from starting before their database and cache dependencies are ready. |
-
-### What a passing response looks like
-
-- A `docker-compose.yml` with four always-on services: `frontend`, `backend`, `postgres`, `redis`.
-- Bind mount volumes mapping `./frontend` to the Next.js container and `./backend` to the FastAPI container.
-- PostgreSQL health check using `pg_isready` and Redis health check using `redis-cli ping`.
-- A custom network (`app-network`) attached to all services.
-- `depends_on` with `condition: service_healthy` for frontend and backend depending on postgres and redis.
-- pgAdmin service with `profiles: ["tools"]` so it only starts with `docker compose --profile tools up`.
-- Port mappings: 3000 for frontend, 8000 for backend, 5432 for PostgreSQL.
-
----
-
-## Eval 2: Production-Parity Configuration
-
-This eval tests the advanced Docker Compose skill: minimizing dev/prod drift with multi-stage builds, resource constraints, debugger support, and CI validation.
-
-### Assertions
-
-| # | Type     | What it checks                                  | Why it matters                                                                                       |
-|---|----------|-------------------------------------------------|------------------------------------------------------------------------------------------------------|
-| 1 | contains | `AS dev` — Named build stage for development    | Multi-stage Dockerfiles with named stages let Compose target the dev stage (with debugger, dev deps) while production uses the final stage. One Dockerfile, two purposes. |
-| 2 | contains | `mem_limit` — Memory resource constraint        | Matching production memory limits in dev catches OOM behaviors during development instead of discovering them after deployment to resource-constrained pods. |
-| 3 | contains | `2345` — Delve debugger port                    | Exposing the Delve debugger port enables IDE-attached debugging inside containers, preserving the breakpoint-driven workflow developers expect from local development. |
-| 4 | contains | `cache` — BuildKit cache mount                  | Go module cache mounts persist across builds, reducing rebuild time from minutes to seconds when only application code changes. Without caching, every build re-downloads all modules. |
-| 5 | contains | `target:` — Build target selection              | The Compose `build.target` field selects the dev stage from the multi-stage Dockerfile. Without it, Docker builds the final (production) stage, which lacks dev tools. |
-
-### What a passing response looks like
-
-- A multi-stage Dockerfile with `FROM golang:1.22 AS dev` and `FROM gcr.io/distroless/static AS production` stages.
-- Dev stage installs Delve (`go install github.com/go-delve/delve/cmd/dlv@latest`) and runs with `dlv exec`.
-- BuildKit cache mount: `RUN --mount=type=cache,target=/go/pkg/mod go mod download`.
-- Compose file with `build: { context: ., target: dev }` for the API service.
-- `mem_limit: 512m` and `cpus: "0.5"` on the API service matching production Kubernetes limits.
-- Port 2345 exposed for Delve debugger attachment.
-- A CI job example: `docker compose up --wait && docker compose exec api go test ./... && docker compose down`.

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/docker-compose-dev/evals/evals.json

@@ -1,66 +0,0 @@
-[
-  {
-    "name": "multi-service-dev-environment",
-    "description": "Validate that the skill produces a Docker Compose configuration for a multi-service development environment with hot reload, proper networking, health checks, and developer-friendly tooling.",
-    "input": "Create a Docker Compose development environment for a full-stack application with: a Next.js frontend (port 3000), a FastAPI backend (port 8000), a PostgreSQL database, and a Redis cache. Configure hot reload for both the frontend and backend using bind mounts. Add health checks for PostgreSQL and Redis. Use a custom network so services communicate by name. Include a pgAdmin service behind a Compose profile for optional database management.",
-    "assertions": [
-      {
-        "type": "contains",
-        "value": "volumes:",
-        "description": "The configuration must use bind mount volumes to map host source directories into containers, enabling hot reload without container rebuilds."
-      },
-      {
-        "type": "contains",
-        "value": "healthcheck:",
-        "description": "Database and cache services must define health checks so that dependent services wait for actual readiness, not just container startup."
-      },
-      {
-        "type": "contains",
-        "value": "networks:",
-        "description": "The configuration must define a custom Docker network so services communicate by service name via Docker DNS rather than hardcoded IPs."
-      },
-      {
-        "type": "contains",
-        "value": "profiles:",
-        "description": "Optional services like pgAdmin must be placed behind Compose profiles so they only start when explicitly requested by the developer."
-      },
-      {
-        "type": "contains",
-        "value": "depends_on:",
-        "description": "Application services must declare depends_on with health check conditions to enforce correct startup ordering and prevent race conditions."
-      }
-    ]
-  },
-  {
-    "name": "production-parity-configuration",
-    "description": "Validate that the skill produces a Compose configuration that minimizes dev/prod drift with multi-stage Dockerfiles, resource limits, and CI-testable setup.",
-    "input": "Refactor an existing Docker Compose development setup to improve production parity. The application is a Go API with a PostgreSQL database. Create a multi-stage Dockerfile with separate dev and prod targets. Add resource limits matching the production Kubernetes pod limits (512Mi memory, 0.5 CPU). Configure the dev stage with Delve debugger support on port 2345. Use BuildKit cache mounts for Go module downloads. Add a CI test job that runs 'docker compose up --wait' to verify the configuration works.",
-    "assertions": [
-      {
-        "type": "contains",
-        "value": "AS dev",
-        "description": "The Dockerfile must use a named 'dev' build stage so Docker Compose can target it specifically for development builds with debugging tools."
-      },
-      {
-        "type": "contains",
-        "value": "mem_limit",
-        "description": "The Compose configuration must set memory limits to match production constraints, ensuring resource-related bugs surface during development."
-      },
-      {
-        "type": "contains",
-        "value": "2345",
-        "description": "The development configuration must expose the Delve debugger port (2345) so developers can attach IDE debuggers to the running Go process."
-      },
-      {
-        "type": "contains",
-        "value": "cache",
-        "description": "The Dockerfile must use BuildKit cache mounts for Go module downloads to speed up rebuilds when only application code changes."
-      },
-      {
-        "type": "contains",
-        "value": "target:",
-        "description": "The Compose build section must specify 'target: dev' to select the development stage of the multi-stage Dockerfile."
-      }
-    ]
-  }
-]

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/drizzle-orm/SKILL.md

@@ -1,92 +0,0 @@
----
-name: drizzle-orm
-description: "Use when building or refactoring TypeScript data layers with Drizzle ORM: schema-as-code, relational queries, type-safe SQL, drizzle-kit migrations, and edge/serverless deployment patterns."
-allowed-tools: Read Grep Glob Bash Edit Write
-user-invocable: true
-argument-hint: "Drizzle schema, query, or migration to work on"
----
-
-# Drizzle ORM
-
-## Purpose
-
-Guide developers through production-grade Drizzle ORM usage including TypeScript-first schema definition, relational query building, type-safe SQL composition, drizzle-kit migration workflows, and deployment patterns for edge and serverless runtimes. This skill ensures type-safe, performant, and migration-safe database layers in TypeScript applications.
-
-## When to Use
-
-- Defining or refactoring Drizzle schema files with `pgTable`, `sqliteTable`, or `mysqlTable`.
-- Building relational queries with `db.query.*` API or composing type-safe SQL with `select()`.
-- Creating, reviewing, or troubleshooting drizzle-kit migration workflows.
-- Deploying Drizzle-backed APIs to edge runtimes (Cloudflare Workers, Vercel Edge, Deno Deploy).
-- Migrating from Prisma, TypeORM, or raw SQL to Drizzle ORM.
-- Tuning query performance, connection pooling, or prepared statement strategies.
-
-## Instructions
-
-1. **Confirm the target database engine and runtime before writing schema code** because Drizzle uses engine-specific schema builders (`pgTable`, `sqliteTable`, `mysqlTable`) that produce different SQL dialects, and mixing them causes build-time type errors and runtime failures.
-
-2. **Define all tables in schema files using the TypeScript-first schema API** because Drizzle derives all TypeScript types directly from schema definitions, making `typeof users.$inferSelect` and `typeof users.$inferInsert` the single source of truth for both database and application types, eliminating type drift.
-
-3. **Use `relations()` declarations for every foreign key relationship** because Drizzle's relational query API (`db.query.users.findMany({ with: { posts: true } })`) requires explicit relation definitions to function, and missing relations silently fall back to returning incomplete data.
-
-4. **Prefer the relational query API for reads that involve joins** because it generates optimized SQL with proper JOIN or subquery strategies, provides fully typed nested results, and eliminates the manual mapping layer that raw `select().from().leftJoin()` requires.
-
-5. **Use the SQL-like `select()` API for writes, aggregations, and complex WHERE clauses** because the relational query API is read-optimized and does not support `INSERT`, `UPDATE`, `DELETE`, `GROUP BY`, or subquery composition, which are core to transactional write paths.
-
-6. **Configure `drizzle-kit` with explicit `schema`, `out`, and `dialect` fields** because ambiguous configuration causes migrations to target the wrong tables or generate empty diffs, and dialect mismatch between config and schema silently produces invalid SQL.
-
-7. **Run `drizzle-kit generate` in CI to detect schema-migration drift** because developers frequently modify schema files without generating a migration, and this drift only surfaces during deployment when the database does not match the schema.
-
-8. **Use `drizzle-kit push` only for prototyping and development databases** because push applies schema changes directly without migration files, making production rollback impossible and leaving no audit trail of schema evolution.
-
-9. **Write migration files with both up and down logic when custom SQL is needed** because drizzle-kit auto-generated migrations handle schema additions but frequently miss data transformations, enum modifications, and index strategy changes that require manual intervention.
-
-10. **Scope database connections to the runtime deployment model** because Cloudflare Workers use D1 or Hyperdrive bindings, Vercel Edge uses connection strings with `@vercel/postgres`, and Node.js uses `database-design` or `better-sqlite3`, each requiring different Drizzle driver initialization.
-
-11. **Use `$inferSelect` and `$inferInsert` types instead of manually defining interfaces** because Drizzle derives these types from the schema at compile time, and manual interfaces drift from the schema as columns are added, renamed, or made nullable.
-
-12. **Use `prepared()` statements for hot-path queries** because prepared statements skip the SQL compilation step on repeated execution, reducing latency by 20-40% in high-throughput endpoints, and Drizzle's `.prepare()` method makes this a one-line optimization.
-
-13. **Validate schema changes against the target database before deploying** because Drizzle generates SQL at build time but does not validate against the live schema, so renaming a column that a deployed migration already renamed will produce a duplicate alteration error at runtime.
-
-14. **Separate read-only queries from write operations at the connection level** because read replicas, connection pooling, and edge caching all depend on clean read/write separation that Drizzle supports through multiple `drizzle()` instances.
-
-15. **Test Drizzle queries against the target database engine, not in-memory mocks** because SQLite, Postgres, and MySQL have different type coercion, JSON handling, and constraint enforcement behaviors that mocks cannot reproduce.
-
-16. **Use transactions for multi-table writes with `db.transaction()`** because Drizzle does not auto-wrap related writes in a transaction, and interleaved failures without transactions leave the database in an inconsistent state that is expensive to diagnose and repair.
-
-## Output Format
-
-Provide implementation guidance, code examples, and configuration as appropriate to the task. Include complete schema definitions, query patterns, migration scripts, and drizzle-kit configuration when the task requires them. Use TypeScript with strict mode throughout.
-
-## References
-
-| File | Load when |
-| --- | --- |
-| `references/schema-definition.md` | Defining or refactoring table schemas, column types, constraints, relations, or type inference patterns. |
-| `references/queries.md` | Writing relational queries, SQL-like queries, transactions, prepared statements, or aggregation patterns. |
-| `references/migrations.md` | Creating, reviewing, or troubleshooting drizzle-kit migrations, push vs generate workflow, or migration chain management. |
-
-## Scripts
-
-No helper scripts are required for this skill right now. Keep execution in `SKILL.md` and `references/` unless repeated automation becomes necessary.
-
-## Examples
-
-- "Help me design a Drizzle schema for a multi-tenant SaaS with Postgres"
-- "Review my drizzle-kit migration workflow for production safety"
-
-## Claude Platform Notes
-
-- Use `$ARGUMENTS` to access user-provided arguments passed when the skill is invoked.
-- Reference skill-local files with `${CLAUDE_SKILL_DIR}/references/<file>` for portable paths.
-- When `context: fork` is set, the skill runs in an isolated subagent context; the `agent` field names the fork target.
-- Custom subagents in `.claude/agents/*.md` support YAML frontmatter: `name`, `description`, `tools`, `model`, `maxTurns`, `memory`, `handoffs`.
-- Use `model` field in agent frontmatter to select model per subagent (e.g., `model: opus` for complex analysis).
-- Set `maxTurns` to prevent runaway iterations (default: 25, orchestrator: 30).
-- Key agents support `memory: project` for cross-session learning (orchestrator, debugger, researcher, project-planner).
-- Hook templates in `.claude/hooks/` provide lifecycle event integration at `UserPromptSubmit` and other events.
-- Path-scoped rules: `.claude/rules/*.md` with `paths:` frontmatter for targeted guidance.
-- MCP skill tools (`skill_search`, `skill_get`, `skill_validate`, `skill_get_reference`) are available for dynamic skill discovery and loading.
-- Use `allowed-tools` in frontmatter to restrict tool access for security-sensitive skills.
-- Workflow skills can be compiled to `.claude/skills/<workflow-id>/SKILL.md` as `generatedSkills`.

package/workflows/workflows/agent-environment-setup/platforms/claude/skills/drizzle-orm/evals/assertions.md

@@ -1,52 +0,0 @@
-# Drizzle ORM Eval Assertions
-
-## Eval 1: Schema Definition with Relations
-
-This eval tests the ability to produce a correctly structured Drizzle ORM schema with table definitions, relations, type inference, and indexes for a multi-entity blog platform.
-
-### Assertions
-
-| # | Type     | What it checks                                  | Why it matters                                                                                       |
-|---|----------|-------------------------------------------------|------------------------------------------------------------------------------------------------------|
-| 1 | contains | `pgTable` — Correct table builder               | PostgreSQL requires pgTable. Using the wrong dialect builder produces incompatible SQL and type errors at build time. |
-| 2 | contains | `relations` — Relation declarations              | Drizzle's relational query API (db.query.*) requires explicit relation definitions. Without them, nested queries silently return incomplete data. |
-| 3 | contains | `$inferSelect` — Schema-derived types            | Manual TypeScript interfaces drift from the schema as columns change. $inferSelect and $inferInsert are the single source of truth. |
-| 4 | contains | `references` — Foreign key constraints           | Foreign keys enforce referential integrity at the database level. Relations alone only enable the query API — they do not create constraints. |
-| 5 | contains | `pgEnum` — Native PostgreSQL enum                | Post status as pgEnum enforces valid values at the database level and produces a fully typed column in TypeScript, unlike plain varchar. |
-| 6 | contains | `primaryKey` — Junction table composite key      | Many-to-many junction tables without a composite primary key allow duplicate rows, corrupting the relationship. |
-
-### What a passing response looks like
-
-- A `users` table with email, displayName, and role columns.
-- A `posts` table with title, content, and a `pgEnum` status column (draft/published/archived).
-- A `comments` table with foreign keys to posts and users.
-- A `tags` table and a `postsToTags` junction table with a composite primary key.
-- `relations()` declarations for all entities enabling nested queries.
-- `$inferSelect` and `$inferInsert` type exports for at least the main entities.
-- Indexes on foreign key columns (authorId on posts, postId on comments).
-
----
-
-## Eval 2: Migration Workflow
-
-This eval tests the ability to produce a safe drizzle-kit migration workflow including schema changes, migration generation, custom data migration, and deployment steps.
-
-### Assertions
-
-| # | Type     | What it checks                                  | Why it matters                                                                                       |
-|---|----------|-------------------------------------------------|------------------------------------------------------------------------------------------------------|
-| 1 | contains | `drizzle-kit` — Migration tool usage             | Drizzle ORM relies on drizzle-kit for migration management. Omitting it means no structured migration workflow. |
-| 2 | contains | `generate` — Migration file generation           | `drizzle-kit generate` creates versioned SQL files. Using `push` instead skips file creation and makes rollback impossible. |
-| 3 | contains | `pgEnum` — Native enum for status column         | Using pgEnum ensures the database rejects invalid status values. A plain varchar with application validation can be bypassed. |
-| 4 | contains | `transaction` — Atomic data migration            | Data migrations that update existing rows must be wrapped in transactions. Partial updates from failed migrations leave data inconsistent. |
-| 5 | contains | `default` — Default value on new column          | Adding a NOT NULL column without a default to a table with existing rows fails. Defaults ensure backward compatibility during migration. |
-
-### What a passing response looks like
-
-- A `drizzle.config.ts` with schema path, output directory, and dialect.
-- Schema changes: new `orgStatusEnum`, new `organizations` table, nullable `organizationId` on users.
-- Command sequence: `drizzle-kit generate` to create the migration file.
-- Generated SQL reviewed (CREATE TYPE, CREATE TABLE, ALTER TABLE ADD COLUMN).
-- A custom data migration script using `db.transaction()` to set all users to "active" status.
-- Command to apply: `drizzle-kit migrate`.
-- No use of `drizzle-kit push` for production.