@starci/skills 1.1.0

package/templates/kinds/route.schema.json

@@ -0,0 +1,293 @@
+{
+  "$id": "kind:route",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "project",
+    "role",
+    "portableRouteRef",
+    "hydratedRouteRef",
+    "routeFingerprint",
+    "identityFingerprint",
+    "sourceHead",
+    "checkout",
+    "gitPolicy",
+    "mutationReadiness",
+    "writeRoots",
+    "authorityRoots",
+    "runtime",
+    "provenanceHeadRef"
+  ],
+  "properties": {
+    "project": {
+      "$ref": "#/$defs/slug"
+    },
+    "role": {
+      "$ref": "#/$defs/slug"
+    },
+    "portableRouteRef": {
+      "type": "string",
+      "minLength": 1
+    },
+    "hydratedRouteRef": {
+      "type": "string",
+      "minLength": 1
+    },
+    "routeFingerprint": {
+      "$ref": "#/$defs/fingerprint"
+    },
+    "identityFingerprint": {
+      "$ref": "#/$defs/fingerprint"
+    },
+    "sourceHead": {
+      "$ref": "#/$defs/gitHead"
+    },
+    "checkout": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "diskPath",
+        "gitRoot",
+        "gitRepository",
+        "branch",
+        "repositoryKind",
+        "directory",
+        "sourceHead"
+      ],
+      "properties": {
+        "diskPath": {
+          "type": "string",
+          "minLength": 1
+        },
+        "gitRoot": {
+          "type": "string",
+          "minLength": 1
+        },
+        "gitRepository": {
+          "type": "string",
+          "minLength": 1
+        },
+        "branch": {
+          "type": "string",
+          "minLength": 1
+        },
+        "repositoryKind": {
+          "enum": [
+            "source",
+            "sibling"
+          ]
+        },
+        "directory": {
+          "oneOf": [
+            {
+              "type": "string",
+              "minLength": 1
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "sourceHead": {
+          "$ref": "#/$defs/gitHead"
+        }
+      }
+    },
+    "gitPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "worktreeBranches",
+        "mutationBranch"
+      ],
+      "properties": {
+        "worktreeBranches": {
+          "enum": [
+            "forbidden",
+            "session-only"
+          ]
+        },
+        "mutationBranch": {
+          "type": "string",
+          "minLength": 1
+        }
+      }
+    },
+    "mutationReadiness": {
+      "enum": [
+        "ready",
+        "read-only"
+      ]
+    },
+    "writeRoots": {
+      "type": "array",
+      "minItems": 0,
+      "maxItems": 256,
+      "items": {
+        "type": "string",
+        "minLength": 1
+      },
+      "description": "The write roots the request declared; empty for a read-only binding (declaredWriteRoots defaults to empty)."
+    },
+    "authorityRoots": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "businesses"
+      ],
+      "properties": {
+        "businesses": {
+          "oneOf": [
+            {
+              "type": "string",
+              "pattern": "\\.worktrees/businesses$"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      }
+    },
+    "runtime": {
+      "oneOf": [
+        {
+          "$ref": "#/$defs/runtimeConsumption"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "provenanceHeadRef": {
+      "oneOf": [
+        {
+          "type": "string",
+          "minLength": 1
+        },
+        {
+          "type": "null"
+        }
+      ]
+    }
+  },
+  "$defs": {
+    "fingerprint": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "gitHead": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{40}$"
+    },
+    "slug": {
+      "type": "string",
+      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+    },
+    "serviceKey": {
+      "type": "string",
+      "pattern": "^[A-Za-z][A-Za-z0-9]*$"
+    },
+    "runtimeConsumption": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "ownerTaskId",
+        "generation",
+        "status",
+        "consumerRole",
+        "endpointBinding",
+        "endpoints"
+      ],
+      "properties": {
+        "ownerTaskId": {
+          "type": "string",
+          "minLength": 1
+        },
+        "generation": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "status": {
+          "enum": [
+            "starting",
+            "ready",
+            "degraded",
+            "stopped"
+          ]
+        },
+        "consumerRole": {
+          "const": "consumer"
+        },
+        "endpointBinding": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "authority",
+            "project",
+            "application",
+            "services",
+            "authorityFingerprint"
+          ],
+          "properties": {
+            "authority": {
+              "const": "workspace-route-port-projection"
+            },
+            "project": {
+              "$ref": "#/$defs/slug"
+            },
+            "application": {
+              "$ref": "#/$defs/slug"
+            },
+            "services": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "frontend",
+                "api",
+                "identity"
+              ],
+              "properties": {
+                "frontend": {
+                  "$ref": "#/$defs/serviceKey"
+                },
+                "api": {
+                  "$ref": "#/$defs/serviceKey"
+                },
+                "identity": {
+                  "$ref": "#/$defs/serviceKey"
+                }
+              }
+            },
+            "authorityFingerprint": {
+              "$ref": "#/$defs/fingerprint"
+            }
+          }
+        },
+        "endpoints": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "frontend",
+            "api",
+            "identity"
+          ],
+          "properties": {
+            "frontend": {
+              "type": "string",
+              "minLength": 1
+            },
+            "api": {
+              "type": "string",
+              "minLength": 1
+            },
+            "identity": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/templates/kinds/stack-model.schema.json

@@ -0,0 +1,90 @@
+{
+  "$id": "kind:stack-model",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["decisionId", "selectedAlternativeId", "alternatives", "boundaries", "stores", "components"],
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
+    "verdict": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["axis", "verified", "evidence"],
+      "properties": {
+        "axis": { "enum": ["runtime-version", "deployable-unit", "communication-failure", "datastore-ownership", "backup-restore"] },
+        "verified": { "type": "boolean" },
+        "evidence": { "type": "string" }
+      }
+    }
+  },
+  "properties": {
+    "decisionId": { "$ref": "#/$defs/id" },
+    "selectedAlternativeId": { "$ref": "#/$defs/id" },
+    "alternatives": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 4,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["alternativeId", "status", "scores", "rejectedBecause"],
+        "properties": {
+          "alternativeId": { "$ref": "#/$defs/id" },
+          "status": { "enum": ["selected", "rejected"] },
+          "scores": { "type": "object", "additionalProperties": { "type": "number", "minimum": 0, "maximum": 5 } },
+          "rejectedBecause": { "type": ["string", "null"] }
+        }
+      }
+    },
+    "boundaries": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["boundaryId", "responsibility", "owner", "interfaces", "ownsData"],
+        "properties": {
+          "boundaryId": { "$ref": "#/$defs/id" },
+          "responsibility": { "type": "string", "minLength": 1 },
+          "owner": { "type": "string", "minLength": 1 },
+          "interfaces": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+          "ownsData": { "type": "boolean" }
+        }
+      }
+    },
+    "stores": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["storeId", "owningBoundaryId", "writers", "readers", "migrators", "transactionScope", "backup", "restore", "sharedWriteJustification"],
+        "properties": {
+          "storeId": { "$ref": "#/$defs/id" },
+          "owningBoundaryId": { "$ref": "#/$defs/id" },
+          "writers": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/id" }, "uniqueItems": true },
+          "readers": { "type": "array", "items": { "$ref": "#/$defs/id" }, "uniqueItems": true },
+          "migrators": { "type": "array", "items": { "$ref": "#/$defs/id" }, "uniqueItems": true },
+          "transactionScope": { "type": "string", "minLength": 1 },
+          "backup": { "type": "string", "minLength": 1 },
+          "restore": { "type": "string", "minLength": 1 },
+          "sharedWriteJustification": { "type": ["string", "null"] }
+        }
+      }
+    },
+    "components": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["componentId", "status", "justification", "evidence", "compatibility"],
+        "properties": {
+          "componentId": { "$ref": "#/$defs/id" },
+          "status": { "enum": ["existing", "added", "replaced", "removed", "replaced-candidate"] },
+          "justification": { "enum": ["measured-constraint", "observed-evidence", "requirement-fit", null] },
+          "evidence": { "type": ["string", "null"] },
+          "compatibility": { "type": "array", "maxItems": 5, "items": { "$ref": "#/$defs/verdict" } }
+        }
+      }
+    }
+  }
+}

package/templates/kinds/uat-capture.schema.json

@@ -0,0 +1,35 @@
+{
+  "$id": "kind:uat-capture",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["caseId", "runId", "order", "executedAt", "screenshotRef", "loginFieldMasked", "outcome", "assertions"],
+  "properties": {
+    "caseId": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
+    "runId": { "type": "string", "pattern": "^[A-Za-z0-9._-]+$" },
+    "order": { "type": "integer", "minimum": 1 },
+    "executedAt": { "type": "string", "format": "date-time" },
+    "screenshotRef": { "type": "string", "pattern": "^response/artifacts/[A-Za-z0-9_.-]+\\.png$" },
+    "loginFieldMasked": {
+      "description": "The login field is masked in every screenshot this capture points at. A capture that cannot say so is EVIDENCE_UNAVAILABLE, never an unmasked picture.",
+      "const": true
+    },
+    "outcome": { "enum": ["pass", "fail"] },
+    "assertions": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 32,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["assertionId", "lane", "observed", "evidenceRef", "outcome"],
+        "properties": {
+          "assertionId": { "type": "string", "minLength": 1 },
+          "lane": { "enum": ["behavior", "ux", "ui"] },
+          "observed": { "type": "string", "minLength": 1 },
+          "evidenceRef": { "type": "string", "minLength": 1 },
+          "outcome": { "enum": ["pass", "fail"] }
+        }
+      }
+    }
+  }
+}

package/templates/kinds/uat-flow-verification.contract.json

@@ -0,0 +1,11 @@
+{
+  "kind": "uat-flow-verification",
+  "title": "^# uat-flow-verification — [a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*$",
+  "sections": [
+    { "heading": "^## Admission$", "table": "| Kind | Ref | Commit |", "exactRows": 2, "rows": ["frontend-surface-audit", "quality-verification"], "cell": { "Kind": "^`(frontend-surface-audit|quality-verification)`$", "Ref": "\\S", "Commit": "^`[0-9a-f]{40}`$" } },
+    { "heading": "^## Snapshot$", "table": "| Field | Value |", "rows": ["Run", "Requested by", "Feature", "Flow", "Commit", "Snapshot", "Namespace", "Credential", "Run record", "Latest"], "cell": { "Value": "\\S" } },
+    { "heading": "^## Cases$", "table": "| Case | Order | Assertions | Capture | Screenshot | Outcome |", "minRows": 1, "cell": { "Order": "^[1-9][0-9]*$", "Assertions": "\\S", "Capture": "^`response/data/captures/[A-Za-z0-9_.-]+\\.json`$", "Screenshot": "^`response/artifacts/[A-Za-z0-9_.-]+\\.png`$", "Outcome": "^(pass|fail)$" } },
+    { "heading": "^## Lanes$", "table": "| Lane | Verdict | Evidence |", "exactRows": 3, "cell": { "Lane": "^`(behavior|ux|ui)`$", "Verdict": "^(pass|fail)$", "Evidence": "\\S" } },
+    { "heading": "^## Fallbacks taken$", "table": "| Code | Action |" }
+  ]
+}

package/templates/kinds/uat-flow-verification.skeleton.md

@@ -0,0 +1,47 @@
+# uat-flow-verification — enrollment/paid-enrollment
+
+One paragraph: who asked for this run, which flow it verified at which commit, and what the three
+lanes independently concluded. Written by `uat.verify` as `response/response.md`. The shared UAT
+password never appears here, in a capture, in a run record or in a log: the credential is named, and
+the login field is masked in every screenshot.
+
+## Admission
+
+| Kind | Ref | Commit |
+| --- | --- | --- |
+| `frontend-surface-audit` | `step-1/parallel-1/response/response.md` | `1111111111111111111111111111111111111111` |
+| `quality-verification` | `step-2/parallel-1/response/response.md` | `1111111111111111111111111111111111111111` |
+
+## Snapshot
+
+| Field | Value |
+| --- | --- |
+| Run | `run-2026-01-10-1` |
+| Requested by | the product owner, in the session that opened this run |
+| Feature | `enrollment` |
+| Flow | `paid-enrollment` |
+| Commit | `1111111111111111111111111111111111111111` |
+| Snapshot | `.worktrees/uat/enrollment/paid-enrollment/snapshot.json` |
+| Namespace | `uat-run-2026-01-10-1` |
+| Credential | `.stacks/local/secrets/uat.enc`, resolved by name at login only |
+| Run record | `.worktrees/uat/enrollment/paid-enrollment/runs/run-2026-01-10-1/result.json` |
+| Latest | `run-2026-01-10-1` |
+
+## Cases
+
+| Case | Order | Assertions | Capture | Screenshot | Outcome |
+| --- | --- | --- | --- | --- | --- |
+| `pay-and-enrol` | 1 | entry, commitment, terminal | `response/data/captures/pay-and-enrol.json` | `response/artifacts/pay-and-enrol.png` | pass |
+
+## Lanes
+
+| Lane | Verdict | Evidence |
+| --- | --- | --- |
+| `behavior` | pass | `response/data/captures/pay-and-enrol.json` |
+| `ux` | pass | `response/data/captures/pay-and-enrol.json` |
+| `ui` | pass | `response/artifacts/sheet.png` |
+
+## Fallbacks taken
+
+| Code | Action |
+| --- | --- |

package/templates/kinds/uat-snapshot.schema.json

@@ -0,0 +1,96 @@
+{
+  "$id": "kind:uat-snapshot",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "runId", "requestedBy", "feature", "flow", "commit", "frozenAt", "flowRoot", "snapshotRef",
+    "snapshotFingerprint", "lease", "admission", "account", "fixtureNamespace", "seed", "cases"
+  ],
+  "properties": {
+    "runId": { "$ref": "#/$defs/runId" },
+    "requestedBy": { "type": "string", "minLength": 1 },
+    "feature": { "$ref": "#/$defs/slug" },
+    "flow": { "$ref": "#/$defs/slug" },
+    "commit": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "frozenAt": { "type": "string", "format": "date-time" },
+    "flowRoot": { "type": "string", "minLength": 1 },
+    "snapshotRef": { "type": "string", "pattern": "^\\.worktrees/uat/[a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*/snapshot\\.json$" },
+    "snapshotFingerprint": { "$ref": "#/$defs/fingerprint" },
+    "lease": {
+      "description": "The exclusive lease on the flow directory. One run writes it at a time; the lease is granted by the orchestrator and is never asked of a person.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["leaseRef", "exclusive", "expiresAt"],
+      "properties": {
+        "leaseRef": { "type": "string", "pattern": "^uat-lease://[A-Za-z0-9._~/-]+$" },
+        "exclusive": { "const": true },
+        "expiresAt": { "type": "string", "format": "date-time" }
+      }
+    },
+    "admission": {
+      "description": "The two receipts that admit product UAT, each pinned at the commit this run verifies.",
+      "type": "array",
+      "minItems": 2,
+      "maxItems": 2,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["kind", "ref", "commit"],
+        "properties": {
+          "kind": { "enum": ["frontend-surface-audit", "quality-verification"] },
+          "ref": { "type": "string", "minLength": 1 },
+          "commit": { "type": "string", "pattern": "^[0-9a-f]{40}$" }
+        }
+      }
+    },
+    "account": {
+      "description": "A dedicated UAT username per flow and one shared password, sealed under the master identity. Every field is a name or a reference, so a password has nowhere to live even by accident.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["username", "role", "credentialName", "credentialRef", "custody", "isUat", "plaintextRecorded"],
+      "properties": {
+        "username": { "type": "string", "pattern": "^uat-[A-Za-z0-9._-]+$" },
+        "role": { "type": "string", "minLength": 1 },
+        "credentialName": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+        "credentialRef": { "type": "string", "pattern": "^\\.stacks/[a-z0-9][a-z0-9-]*/secrets/uat\\.enc$" },
+        "custody": { "const": "sealed-shared-master-identity" },
+        "isUat": { "const": true },
+        "plaintextRecorded": { "const": false }
+      }
+    },
+    "fixtureNamespace": { "$ref": "#/$defs/namespace" },
+    "seed": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["recordsRef", "expectedRef", "fingerprint", "namespace", "isUat"],
+      "properties": {
+        "recordsRef": { "type": "string", "pattern": "^\\.worktrees/uat/[a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*/seed/records\\.json$" },
+        "expectedRef": { "type": "string", "pattern": "^\\.worktrees/uat/[a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*/seed/expected\\.json$" },
+        "fingerprint": { "$ref": "#/$defs/fingerprint" },
+        "namespace": { "$ref": "#/$defs/namespace" },
+        "isUat": { "const": true }
+      }
+    },
+    "cases": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 64,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["caseId", "order", "assertions"],
+        "properties": {
+          "caseId": { "$ref": "#/$defs/slug" },
+          "order": { "type": "integer", "minimum": 1 },
+          "assertions": { "type": "array", "minItems": 1, "maxItems": 32, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "fingerprint": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
+    "runId": { "type": "string", "pattern": "^[A-Za-z0-9._-]+$" },
+    "namespace": { "type": "string", "pattern": "^uat-[A-Za-z0-9._-]+$" }
+  }
+}

package/templates/kinds/uat-verdicts.schema.json

@@ -0,0 +1,41 @@
+{
+  "$id": "kind:uat-verdicts",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["runId", "commit", "resultRef", "latestRef", "lanes", "cleanup"],
+  "properties": {
+    "runId": { "type": "string", "pattern": "^[A-Za-z0-9._-]+$" },
+    "commit": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "resultRef": { "type": "string", "pattern": "^\\.worktrees/uat/[a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*/runs/[A-Za-z0-9._-]+/result\\.json$" },
+    "latestRef": { "type": "string", "pattern": "^\\.worktrees/uat/[a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*/latest$" },
+    "lanes": {
+      "description": "Three independent lanes, judged apart on their own evidence. There is no fourth lane and no lane may be omitted.",
+      "type": "array",
+      "minItems": 3,
+      "maxItems": 3,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["lane", "verdict", "evidenceRefs", "statement"],
+        "properties": {
+          "lane": { "enum": ["behavior", "ux", "ui"] },
+          "verdict": { "enum": ["pass", "fail"] },
+          "evidenceRefs": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+          "statement": { "type": "string", "minLength": 1 }
+        }
+      }
+    },
+    "cleanup": {
+      "description": "Cleanup deletes the run namespace and nothing else; a run record is history and is never deleted.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["performed", "isUat", "namespace", "runRecordsDeleted"],
+      "properties": {
+        "performed": { "type": "boolean" },
+        "isUat": { "const": true },
+        "namespace": { "type": "string", "pattern": "^uat-[A-Za-z0-9._-]+$" },
+        "runRecordsDeleted": { "const": false }
+      }
+    }
+  }
+}