@iceinvein/agent-skills 0.21.2 → 0.21.4

package/skills/migrate/evals/lib/express/27-import-elements-disposed.json

@@ -0,0 +1,219 @@
+{
+  "batch": "b-elements-disposition-001",
+  "phase": "extract",
+  "rows": [
+    {
+      "id": "route-get-api-users",
+      "surface": "routes",
+      "element": "GET /api/users",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "UD-001"
+      },
+      "refs": [
+        {
+          "kind": "ledger",
+          "id": "table-users"
+        }
+      ],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "route-post-api-users",
+      "surface": "routes",
+      "element": "POST /api/users",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "UD-002"
+      },
+      "refs": [
+        {
+          "kind": "ledger",
+          "id": "table-users"
+        }
+      ],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "route-get-api-users-id-welcome",
+      "surface": "routes",
+      "element": "GET /api/users/:id/welcome",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "WN-001"
+      },
+      "refs": [],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "table-users",
+      "surface": "tables",
+      "element": "users",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "UD-003"
+      },
+      "refs": [],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "table-audit-log",
+      "surface": "tables",
+      "element": "audit_log",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "AR-002"
+      },
+      "refs": [],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "job-purge-audit-log",
+      "surface": "jobs",
+      "element": "nightly purge of audit_log",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "AR-001"
+      },
+      "refs": [
+        {
+          "kind": "ledger",
+          "id": "table-audit-log"
+        }
+      ],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "report-daily-users",
+      "surface": "reports",
+      "element": "daily-users report",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "UD-004"
+      },
+      "refs": [
+        {
+          "kind": "ledger",
+          "id": "table-users"
+        }
+      ],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "screen-users",
+      "surface": "screens",
+      "element": "users list screen",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "UD-005"
+      },
+      "refs": [],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "integration-mailer",
+      "surface": "integrations",
+      "element": "call to mailer service",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "WN-003"
+      },
+      "refs": [],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "workflow-welcome-email",
+      "surface": "workflows",
+      "element": "welcome email workflow",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "WN-002"
+      },
+      "refs": [
+        {
+          "kind": "ledger",
+          "id": "route-post-api-users"
+        },
+        {
+          "kind": "ledger",
+          "id": "route-get-api-users-id-welcome"
+        },
+        {
+          "kind": "ledger",
+          "id": "setting-welcome-email-enabled"
+        }
+      ],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "setting-welcome-email-enabled",
+      "surface": "settings",
+      "element": "welcomeEmailEnabled",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "WN-001"
+      },
+      "refs": [],
+      "lens": "code",
+      "notes": ""
+    },
+    {
+      "id": "setting-max-users-per-page",
+      "surface": "settings",
+      "element": "maxUsersPerPage",
+      "found_by": [
+        "code"
+      ],
+      "disposition": {
+        "kind": "mapped",
+        "fr": "UD-001"
+      },
+      "refs": [],
+      "lens": "code",
+      "notes": ""
+    }
+  ]
+}

package/skills/migrate/evals/lib/express/28-census-rule-sweep-user-directory.json

@@ -0,0 +1,10 @@
+{
+  "kind": "rule-sweep",
+  "subject": "user-directory",
+  "phase": "extract",
+  "probes": 2,
+  "found": 1,
+  "as_requirements": 1,
+  "queued": [],
+  "batch": "b-rules-user-directory-001"
+}

package/skills/migrate/evals/lib/express/29-census-rule-sweep-welcome-notification.json

@@ -0,0 +1,10 @@
+{
+  "kind": "rule-sweep",
+  "subject": "welcome-notification",
+  "phase": "extract",
+  "probes": 2,
+  "found": 1,
+  "as_requirements": 1,
+  "queued": [],
+  "batch": "b-rules-welcome-notification-001"
+}

package/skills/migrate/evals/lib/express/30-census-rule-sweep-audit-retention.json

@@ -0,0 +1,10 @@
+{
+  "kind": "rule-sweep",
+  "subject": "audit-retention",
+  "phase": "extract",
+  "probes": 2,
+  "found": 1,
+  "as_requirements": 1,
+  "queued": [],
+  "batch": "b-rules-audit-retention-001"
+}

package/skills/migrate/evals/lib/express/31-census-attribute-table-users.json

@@ -0,0 +1,21 @@
+{
+  "kind": "attribute",
+  "surface": "tables",
+  "subject": "table-users",
+  "phase": "extract",
+  "directions": {
+    "ddl": {
+      "count": 3,
+      "evidence": "column list from CREATE TABLE users in schema.sql"
+    },
+    "report_query": {
+      "count": 1,
+      "evidence": "columns named in the query in reports/daily-users.json"
+    }
+  },
+  "total": 3,
+  "behavioral": 2,
+  "explained": 2,
+  "queued": [],
+  "batch": "b-attr-table-users-001"
+}

package/skills/migrate/evals/lib/express/32-census-closer-cross-capability-workflow.json

@@ -0,0 +1,10 @@
+{
+  "kind": "closer",
+  "closer": "cross-capability-workflow",
+  "phase": "extract",
+  "checked": 1,
+  "findings": 1,
+  "fixed": 1,
+  "queued": [],
+  "batch": "b-closer-cross-capability-001"
+}

package/skills/migrate/evals/lib/express/33-census-closer-scope-injection.json

@@ -0,0 +1,10 @@
+{
+  "kind": "closer",
+  "closer": "scope-injection",
+  "phase": "extract",
+  "checked": 11,
+  "findings": 0,
+  "fixed": 0,
+  "queued": [],
+  "batch": "b-closer-scope-injection-001"
+}

package/skills/migrate/evals/lib/express/34-census-closer-read-write-symmetry.json

@@ -0,0 +1,12 @@
+{
+  "kind": "closer",
+  "closer": "read-write-symmetry",
+  "phase": "extract",
+  "checked": 11,
+  "findings": 1,
+  "fixed": 0,
+  "queued": [
+    "q-express-users-table-unwired"
+  ],
+  "batch": "b-closer-read-write-symmetry-001"
+}

package/skills/migrate/evals/lib/express/35-phase-extract-done.sh

@@ -0,0 +1 @@
+migrate phase extract --status done

package/skills/migrate/evals/lib/express/36-import-deltas-parity.json

@@ -0,0 +1,14 @@
+{
+  "batch": "b-deltas-parity-001",
+  "phase": "parity",
+  "rows": [
+    {
+      "id": "delta-mailer-provider-swap",
+      "scope": "Outbound welcome email delivery (WN-003)",
+      "rationale": "The legacy app posts straight to mailer.example.com from inside the request handler. The target sends through its own provider, so the outbound request differs by destination and headers for reasons that have nothing to do with whether a welcome was owed.",
+      "parity_exclusion": "The WN-003 parity check must not assert on the mailer endpoint or the shape of the request sent to it, only that a send was attempted for an enabled, pending welcome.",
+      "validation": "A greenfield-only test asserts the target provider is called with the right recipient; the parity suite does not re-prove the transport.",
+      "owner_signed": "2026-08-08"
+    }
+  ]
+}

package/skills/migrate/evals/lib/express/37-import-reqs-parity.json

@@ -0,0 +1,367 @@
+{
+  "batch": "b-reqs-parity-001",
+  "phase": "parity",
+  "rows": [
+    {
+      "id": "UD-001",
+      "cap": "user-directory",
+      "requirement": "Listing users returns at most the configured maximum number of users per page",
+      "actors": "API client",
+      "objects": "User list",
+      "rules": "The response is sliced to settings.maxUsersPerPage entries",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "route-get-api-users"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            8,
+            8
+          ]
+        },
+        {
+          "kind": "src",
+          "path": "settings.json",
+          "lines": [
+            1,
+            4
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "rubric",
+        "level": "high"
+      }
+    },
+    {
+      "id": "UD-002",
+      "cap": "user-directory",
+      "requirement": "Creating a user returns a generated id and records a pending welcome against it",
+      "actors": "API client",
+      "objects": "User",
+      "rules": "The id is minted from the current clock; the submitted email is held against it",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "route-post-api-users"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            10,
+            14
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "rubric",
+        "level": "high"
+      }
+    },
+    {
+      "id": "UD-003",
+      "cap": "user-directory",
+      "requirement": "The users table stores an id, a required email, and an active flag defaulting to set",
+      "actors": "-",
+      "objects": "User row",
+      "rules": "email is NOT NULL; is_active defaults to 1",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "table-users"
+        },
+        {
+          "kind": "src",
+          "path": "schema.sql",
+          "lines": [
+            1,
+            5
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "golden-master",
+        "ref": "tests/parity/user-directory/users-table.test.ts"
+      }
+    },
+    {
+      "id": "UD-004",
+      "cap": "user-directory",
+      "requirement": "The daily-users report counts only users whose active flag is set",
+      "actors": "Report consumer",
+      "objects": "Active user count",
+      "rules": "The query filters on is_active = 1 and runs once a day",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "report-daily-users"
+        },
+        {
+          "kind": "src",
+          "path": "reports/daily-users.json",
+          "lines": [
+            1,
+            6
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "golden-master",
+        "ref": "tests/parity/user-directory/daily-users-report.test.ts"
+      }
+    },
+    {
+      "id": "UD-005",
+      "cap": "user-directory",
+      "requirement": "The users screen renders one list entry per user email",
+      "actors": "Operator",
+      "objects": "User list screen",
+      "rules": "Each entry is bound to the email field",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "screen-users"
+        },
+        {
+          "kind": "src",
+          "path": "views/users.html",
+          "lines": [
+            1,
+            9
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "rubric",
+        "level": "high"
+      }
+    },
+    {
+      "id": "UD-006",
+      "cap": "user-directory",
+      "requirement": "The users list endpoint reads the rows it returns from the users table",
+      "actors": "API client",
+      "objects": "User list",
+      "rules": "-",
+      "origin": "intended",
+      "confidence": {
+        "kind": "queued",
+        "queue": "q-express-user-list-source"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "route-get-api-users"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            8,
+            8
+          ]
+        },
+        {
+          "kind": "src",
+          "path": "schema.sql",
+          "lines": [
+            1,
+            5
+          ]
+        }
+      ],
+      "parity": null
+    },
+    {
+      "id": "WN-001",
+      "cap": "welcome-notification",
+      "requirement": "The welcome route reports a send only when the welcome setting is enabled and a pending welcome exists for that id",
+      "actors": "API client",
+      "objects": "Pending welcome",
+      "rules": "Both settings.welcomeEmailEnabled and a stored email must hold, or nothing is sent",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "route-get-api-users-id-welcome"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            18,
+            27
+          ]
+        },
+        {
+          "kind": "src",
+          "path": "settings.json",
+          "lines": [
+            1,
+            4
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "rubric",
+        "level": "high"
+      }
+    },
+    {
+      "id": "WN-002",
+      "cap": "welcome-notification",
+      "requirement": "Signup and welcome are one two-step workflow carrying the pending email in process memory between the two requests",
+      "actors": "API client",
+      "objects": "Pending welcome state",
+      "rules": "Step one writes the map entry; step two consumes it",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "workflow-welcome-email"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            5,
+            6
+          ]
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            16,
+            19
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "rubric",
+        "level": "high"
+      }
+    },
+    {
+      "id": "WN-003",
+      "cap": "welcome-notification",
+      "requirement": "The welcome email is sent by an outbound POST to the mailer service",
+      "actors": "System",
+      "objects": "Welcome email",
+      "rules": "The recipient address is the email held against the pending welcome",
+      "origin": "intended",
+      "confidence": {
+        "kind": "inferred"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "integration-mailer"
+        },
+        {
+          "kind": "src",
+          "path": "app.js",
+          "lines": [
+            21,
+            24
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "rubric",
+        "level": "moderate",
+        "queue": "q-express-mailer-delivery-unobservable"
+      }
+    },
+    {
+      "id": "AR-001",
+      "cap": "audit-retention",
+      "requirement": "Audit log rows older than thirty days are purged on a nightly schedule",
+      "actors": "System",
+      "objects": "Audit log rows",
+      "rules": "Runs at 02:00 daily; the cutoff is thirty days",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "job-purge-audit-log"
+        },
+        {
+          "kind": "src",
+          "path": "cron.js",
+          "lines": [
+            3,
+            6
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "rubric",
+        "level": "high"
+      }
+    },
+    {
+      "id": "AR-002",
+      "cap": "audit-retention",
+      "requirement": "The audit log stores one row per user action with a creation timestamp",
+      "actors": "-",
+      "objects": "Audit log row",
+      "rules": "user_id, action and created_at are all NOT NULL",
+      "origin": "intended",
+      "confidence": {
+        "kind": "confirmed"
+      },
+      "citations": [
+        {
+          "kind": "ledger",
+          "id": "table-audit-log"
+        },
+        {
+          "kind": "src",
+          "path": "schema.sql",
+          "lines": [
+            7,
+            12
+          ]
+        }
+      ],
+      "parity": {
+        "kind": "golden-master",
+        "ref": "tests/parity/audit-retention/audit-log-table.test.ts"
+      }
+    }
+  ]
+}

package/skills/migrate/evals/lib/express/38-phase-parity-done.sh

@@ -0,0 +1 @@
+migrate phase parity --status done