@iceinvein/agent-skills 0.21.2 → 0.21.4

package/skills/migrate/evals/lib/express/14-census-lens-jobs.json

@@ -0,0 +1,21 @@
+{
+  "kind": "lens",
+  "surface": "jobs",
+  "phase": "enumerate",
+  "directions": {
+    "grep": {
+      "count": 1,
+      "evidence": "grep \"cron.schedule\" across cron.js"
+    },
+    "manual": {
+      "count": 1,
+      "evidence": "manual review of cron.js"
+    }
+  },
+  "total": 1,
+  "in_ledger": 0,
+  "added": 1,
+  "skipped": [],
+  "queued": [],
+  "batch": "b-jobs-census-001"
+}

package/skills/migrate/evals/lib/express/15-census-lens-reports.json

@@ -0,0 +1,21 @@
+{
+  "kind": "lens",
+  "surface": "reports",
+  "phase": "enumerate",
+  "directions": {
+    "grep": {
+      "count": 1,
+      "evidence": "ls reports/*.json"
+    },
+    "manual": {
+      "count": 1,
+      "evidence": "manual review of report definitions under reports/"
+    }
+  },
+  "total": 1,
+  "in_ledger": 0,
+  "added": 1,
+  "skipped": [],
+  "queued": [],
+  "batch": "b-reports-census-001"
+}

package/skills/migrate/evals/lib/express/16-census-lens-screens.json

@@ -0,0 +1,21 @@
+{
+  "kind": "lens",
+  "surface": "screens",
+  "phase": "enumerate",
+  "directions": {
+    "grep": {
+      "count": 1,
+      "evidence": "ls views/*.html"
+    },
+    "manual": {
+      "count": 1,
+      "evidence": "manual review of templates under views/"
+    }
+  },
+  "total": 1,
+  "in_ledger": 0,
+  "added": 1,
+  "skipped": [],
+  "queued": [],
+  "batch": "b-screens-census-001"
+}

package/skills/migrate/evals/lib/express/17-census-lens-integrations.json

@@ -0,0 +1,21 @@
+{
+  "kind": "lens",
+  "surface": "integrations",
+  "phase": "enumerate",
+  "directions": {
+    "grep": {
+      "count": 1,
+      "evidence": "grep \"fetch(\" across app.js"
+    },
+    "manual": {
+      "count": 1,
+      "evidence": "manual review of outbound HTTP calls in app.js"
+    }
+  },
+  "total": 1,
+  "in_ledger": 0,
+  "added": 1,
+  "skipped": [],
+  "queued": [],
+  "batch": "b-integrations-census-001"
+}

package/skills/migrate/evals/lib/express/18-census-lens-workflows.json

@@ -0,0 +1,21 @@
+{
+  "kind": "lens",
+  "surface": "workflows",
+  "phase": "enumerate",
+  "directions": {
+    "grep": {
+      "count": 1,
+      "evidence": "manual review of state stored and later consumed across app.js handlers"
+    },
+    "manual": {
+      "count": 1,
+      "evidence": "grep \"pendingWelcomes\" across app.js"
+    }
+  },
+  "total": 1,
+  "in_ledger": 0,
+  "added": 1,
+  "skipped": [],
+  "queued": [],
+  "batch": "b-workflows-census-001"
+}

package/skills/migrate/evals/lib/express/19-census-lens-settings.json

@@ -0,0 +1,21 @@
+{
+  "kind": "lens",
+  "surface": "settings",
+  "phase": "enumerate",
+  "directions": {
+    "grep": {
+      "count": 2,
+      "evidence": "grep \"settings\\.\" across app.js, excluding the require line"
+    },
+    "manual": {
+      "count": 2,
+      "evidence": "manual review of settings.json keys"
+    }
+  },
+  "total": 2,
+  "in_ledger": 0,
+  "added": 2,
+  "skipped": [],
+  "queued": [],
+  "batch": "b-settings-census-001"
+}

package/skills/migrate/evals/lib/express/20-phase-enumerate-done.sh

@@ -0,0 +1 @@
+migrate phase enumerate --status done

package/skills/migrate/evals/lib/express/21-seam-artifacts.sh

@@ -0,0 +1,40 @@
+cat > .migrate/capabilities.jsonl <<'JSONL'
+{"slug":"audit-retention","title":"Audit Retention","ns":"AR","elements":["job-purge-audit-log","table-audit-log"]}
+{"slug":"user-directory","title":"User Directory","ns":"UD","elements":["report-daily-users","route-get-api-users","route-post-api-users","table-users","screen-users","setting-max-users-per-page"]}
+{"slug":"welcome-notification","title":"Welcome Notification","ns":"WN","elements":["route-get-api-users-id-welcome","setting-welcome-email-enabled","workflow-welcome-email","integration-mailer"]}
+JSONL
+cat > .migrate/seam.json <<'JSON'
+{
+  "validators": {
+    "schema-clustering": {
+      "ran": false,
+      "reason": "no relational schema this run can cluster"
+    },
+    "call-graph": {
+      "ran": false,
+      "reason": "no static call-graph tooling in this environment"
+    },
+    "change-coupling": {
+      "ran": false,
+      "reason": "the copied fixture carries no VCS history"
+    },
+    "surface-affinity": {
+      "ran": true,
+      "modularity": 0.459
+    }
+  },
+  "agreement": [
+    "surface-affinity"
+  ],
+  "modularity": 0.459,
+  "status": "accepted"
+}
+JSON
+cat > .migrate/seam.md <<'MD'
+# Seam evidence
+
+surface-affinity clustering over the ledger refs, connected components then the
+greedy modularity refinement, Q = 0.459. The other three validators could not
+run: no relational schema, no static call graph, no VCS history in the copied
+fixture.
+MD

package/skills/migrate/evals/lib/express/22-phase-seam-done.sh

@@ -0,0 +1 @@
+migrate phase seam --status done

package/skills/migrate/evals/lib/express/23-import-reqs-extract.json

@@ -0,0 +1,336 @@
+{
+  "batch": "b-reqs-extract-001",
+  "phase": "extract",
+  "rows": [
+    {
+      "id": "UD-001",
+      "cap": "user-directory",
+      "requirement": "Listing users returns at most the configured maximum number of users per page",
+      "actors": "API client",
+      "objects": "User list",
+      "rules": "The response is sliced to settings.maxUsersPerPage entries",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "route-get-api-users"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            8,
+            8
+          ]
+        },
+        {
+          "kind": "src",
+          "path": "settings.json",
+          "lines": [
+            1,
+            4
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "UD-002",
+      "cap": "user-directory",
+      "requirement": "Creating a user returns a generated id and records a pending welcome against it",
+      "actors": "API client",
+      "objects": "User",
+      "rules": "The id is minted from the current clock; the submitted email is held against it",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "route-post-api-users"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            10,
+            14
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "UD-003",
+      "cap": "user-directory",
+      "requirement": "The users table stores an id, a required email, and an active flag defaulting to set",
+      "actors": "-",
+      "objects": "User row",
+      "rules": "email is NOT NULL; is_active defaults to 1",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "table-users"
+        },
+        {
+          "kind": "src",
+          "path": "schema.sql",
+          "lines": [
+            1,
+            5
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "UD-004",
+      "cap": "user-directory",
+      "requirement": "The daily-users report counts only users whose active flag is set",
+      "actors": "Report consumer",
+      "objects": "Active user count",
+      "rules": "The query filters on is_active = 1 and runs once a day",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "report-daily-users"
+        },
+        {
+          "kind": "src",
+          "path": "reports/daily-users.json",
+          "lines": [
+            1,
+            6
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "UD-005",
+      "cap": "user-directory",
+      "requirement": "The users screen renders one list entry per user email",
+      "actors": "Operator",
+      "objects": "User list screen",
+      "rules": "Each entry is bound to the email field",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "screen-users"
+        },
+        {
+          "kind": "src",
+          "path": "views/users.html",
+          "lines": [
+            1,
+            9
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "UD-006",
+      "cap": "user-directory",
+      "requirement": "The users list endpoint reads the rows it returns from the users table",
+      "actors": "API client",
+      "objects": "User list",
+      "rules": "-",
+      "origin": "intended",
+      "confidence": {
+        "kind": "queued",
+        "queue": "q-express-user-list-source"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "route-get-api-users"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            8,
+            8
+          ]
+        },
+        {
+          "kind": "src",
+          "path": "schema.sql",
+          "lines": [
+            1,
+            5
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "WN-001",
+      "cap": "welcome-notification",
+      "requirement": "The welcome route reports a send only when the welcome setting is enabled and a pending welcome exists for that id",
+      "actors": "API client",
+      "objects": "Pending welcome",
+      "rules": "Both settings.welcomeEmailEnabled and a stored email must hold, or nothing is sent",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "route-get-api-users-id-welcome"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            18,
+            27
+          ]
+        },
+        {
+          "kind": "src",
+          "path": "settings.json",
+          "lines": [
+            1,
+            4
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "WN-002",
+      "cap": "welcome-notification",
+      "requirement": "Signup and welcome are one two-step workflow carrying the pending email in process memory between the two requests",
+      "actors": "API client",
+      "objects": "Pending welcome state",
+      "rules": "Step one writes the map entry; step two consumes it",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "workflow-welcome-email"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            5,
+            6
+          ]
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            16,
+            19
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "WN-003",
+      "cap": "welcome-notification",
+      "requirement": "The welcome email is sent by an outbound POST to the mailer service",
+      "actors": "System",
+      "objects": "Welcome email",
+      "rules": "The recipient address is the email held against the pending welcome",
+      "origin": "intended",
+      "confidence": {
+        "kind": "inferred"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "integration-mailer"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            21,
+            24
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "AR-001",
+      "cap": "audit-retention",
+      "requirement": "Audit log rows older than thirty days are purged on a nightly schedule",
+      "actors": "System",
+      "objects": "Audit log rows",
+      "rules": "Runs at 02:00 daily; the cutoff is thirty days",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "job-purge-audit-log"
+        },
+        {
+          "kind": "src",
+          "path": "cron.js",
+          "lines": [
+            3,
+            6
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "AR-002",
+      "cap": "audit-retention",
+      "requirement": "The audit log stores one row per user action with a creation timestamp",
+      "actors": "-",
+      "objects": "Audit log row",
+      "rules": "user_id, action and created_at are all NOT NULL",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "table-audit-log"
+        },
+        {
+          "kind": "src",
+          "path": "schema.sql",
+          "lines": [
+            7,
+            12
+          ]
+        }
+      ],
+      "parity": null
+    }
+  ]
+}

package/skills/migrate/evals/lib/express/24-queue-q-express-user-list-source.md

@@ -0,0 +1,24 @@
+---
+id: q-express-user-list-source
+severity: moderate
+status: open
+---
+
+## Evidence
+
+`app.js:8` answers `GET /api/users` with `[].slice(0, settings.maxUsersPerPage)`:
+a literal empty array, capped at the configured page size. Nothing anywhere
+in the checkout opens a database connection or reads the `users` table that
+`schema.sql:1-5` declares.
+
+## Options
+
+(a) Treat the endpoint as a stub and write the requirement against the table
+the schema declares. (b) Treat the empty list as the real behavior and
+record that the table is unread. (c) Ask the operator which one production
+actually served.
+
+## Recommendation
+
+Recommend (c); the route and the schema disagree about whether this endpoint
+has a data source, and nothing in the source settles it either way.

package/skills/migrate/evals/lib/express/25-queue-q-express-mailer-delivery-unobservable.md

@@ -0,0 +1,24 @@
+---
+id: q-express-mailer-delivery-unobservable
+severity: moderate
+status: open
+---
+
+## Evidence
+
+`WN-003` describes the outbound POST at `app.js:21-24` to
+`https://mailer.example.com/send`. The basis for this run is source-only, so
+there is no live legacy system to diff against and nothing to capture a
+golden master from, and the call crosses a boundary neither could reach in
+any case.
+
+## Options
+
+(a) Ship `rubric:low` and revisit if a runnable environment appears.
+(b) Block parity on this requirement until the mailer can be observed.
+(c) Ship `rubric:moderate`: the guard conditions and the recipient are both
+readable from the source, the delivery itself is not.
+
+## Recommendation
+
+Recommend (c); `rubric:moderate` matches exactly what is observable today.

package/skills/migrate/evals/lib/express/26-queue-q-express-users-table-unwired.md

@@ -0,0 +1,26 @@
+---
+id: q-express-users-table-unwired
+severity: moderate
+status: open
+---
+
+## Evidence
+
+The `read-write-symmetry` closer checked every write path against a matching
+read path. `schema.sql:1-5` declares a `users` table;
+`reports/daily-users.json:4` reads it; nothing in `app.js` or `cron.js`
+writes to it, and `POST /api/users` at `app.js:10-14` persists nothing at
+all beyond an in-memory map entry.
+
+## Options
+
+(a) Treat the table as write-only-by-something-outside-this-checkout and
+widen the search. (b) Treat it as a real gap for the target to fix rather
+than replicate. (c) Ask the operator whether user rows were ever written by
+this application.
+
+## Recommendation
+
+Recommend (c); a table with a reader and no writer anywhere in the checkout
+is exactly what this closer exists to surface, and only the operator can say
+whether the writer is missing or merely elsewhere.