agentme 0.34.0 → 0.35.1

package/.xdrs/agentme/edrs/principles/skills/151-refine-user-story/SKILL.test.md

@@ -1,6 +1,6 @@
 ---
 skill: 151-refine-user-story
-skill-version: "2.0"
+skill-version: "4.1"
 ---
 
 ## Test Scenarios
@@ -32,8 +32,8 @@ You are an agent with the `151-refine-user-story` skill loaded. The workspace ha
 **Assertions**
 - [ ] Skill asks at least one question about who receives notifications and what triggers them before producing any output.
 - [ ] Skill does not output a story while any area in the identification table (problem, scope, requirements, flow, edge cases, dependencies) has an open question.
-- [ ] Final output follows the output template with Title (max 10 words), User Story (As a … I want … so that …), Scope, and Acceptance Criteria sections.
-- [ ] Acceptance criteria items are verifiable and start with a checkbox `- [ ]`.
+- [ ] Output follows the output template with Title (max 10 words), User Story (As a … I want … so that …), Scope, and Acceptance Criteria sections.
+- [ ] Output contains acceptance criteria items that are verifiable and start with a checkbox `- [ ]`.
 
 ---
 
@@ -74,9 +74,9 @@ You are an agent with the `151-refine-user-story` skill loaded. The workspace ha
 5. Skill presents `vscode_askQuestions` with "Accept split — start refining Registration" (recommended) plus options to adjust boundaries or keep the original scope.
 6. User accepts the split and picks "Registration" as the first slice to refine.
 7. Skill restarts from Phase 1 with the narrower registration scope. The remaining 3 slices are recorded as Deferred Stories.
-8. Phases 1–7 run on the registration slice only. At Phase 7, a Deferred Items summary lists the 3 remaining slices.
-9. Because no plan doc is active, skill presents `vscode_askQuestions` asking where to save the deferred slices; user picks BACKLOG.md.
-10. Skill outputs one fully refined story (registration) and appends the 3 deferred slices to BACKLOG.md.
+8. Phases 1–7 run on the registration slice only. At Phase 8, a Deferred Items summary lists the 3 remaining slices.
+9. Because no initiative doc is active, skill presents `vscode_askQuestions` asking where to save the deferred slices; user picks TODO.md.
+10. Skill outputs one fully refined story (registration) and appends the 3 deferred slices to TODO.md as a single `### Group:` section with one `#### ` subsection per slice.
 
 **Simulated Human Responses**
 1. "Registration: email + password only. Password min 8 chars, at least one digit. Email must be verified before the user can log in."
@@ -87,15 +87,15 @@ You are an agent with the `151-refine-user-story` skill loaded. The workspace ha
 6. "No rate limiting, CAPTCHA, or 2FA in scope for now. Each flow ships independently."
 
 **Assertions**
-- [ ] Phase 0 is skipped (no XDRS scope found).
+- [ ] Skill skips Phase 0 when no XDRS scope is found.
 - [ ] Skill proposes a split at Phase 2 with rationale for each slice boundary.
 - [ ] Skill uses `vscode_askQuestions` to present the split options, not plain text.
-- [ ] After the user accepts, skill restarts Phase 1 for the chosen slice (registration) only.
-- [ ] Final output contains exactly one fully refined story (the chosen slice), using the full output template.
-- [ ] The three deferred slices appear in a Deferred Items summary at Phase 7, each with a one-line description.
+- [ ] Skill restarts Phase 1 for the chosen slice (registration) only after the user accepts the split.
+- [ ] Output contains exactly one fully refined story (the chosen slice) using the full output template.
+- [ ] Deferred Items summary at Phase 8 lists the three deferred slices, each with a one-line description.
 - [ ] Skill does NOT produce a single merged story covering all four flows.
-- [ ] The chosen slice's story is independently shippable and delivers a complete end-to-end user-visible outcome.
-- [ ] No slice is a technical-layer-only story (e.g. "implement the auth database schema" alone is not acceptable).
+- [ ] Output confirms the chosen slice delivers a complete, independently shippable end-to-end user outcome.
+- [ ] Output shows no slice is a technical-layer-only story (e.g. "implement the auth database schema" alone is not acceptable).
 
 ---
 
@@ -104,7 +104,7 @@ You are an agent with the `151-refine-user-story` skill loaded. The workspace ha
 **Trigger / Input**
 You are an agent with the `151-refine-user-story` skill loaded. The skill has completed Phase 4 (Consistency & Scope Review) and presents the phase gate. The user selects:
 
-"Re-run Phase 4 — deeper pass"
+"Re-run Phase 4: Consistency & Scope Review — deeper pass"
 
 **Expected Behaviour**
 1. Skill does NOT advance to Phase 5 — it restarts Phase 4 Step 1 (consistency check) and Phase 4 Step 2 (scope item review) with fresh eyes.
@@ -114,14 +114,14 @@ You are an agent with the `151-refine-user-story` skill loaded. The skill has co
 5. Skill re-presents the Phase 4 gate with "Continue to Phase 5 — Visual Validation" as the recommended option.
 
 **Simulated Human Responses**
-1. (Re-run Phase 4 selected at gate)
+1. (Re-run Phase 4: Consistency & Scope Review selected at gate)
 2. "The empty state message should appear only after a 300 ms delay to avoid a flash on fast networks."
 
 **Assertions**
 - [ ] Skill re-runs Phase 4 (does not skip to Phase 5) when the human selects re-run.
 - [ ] Skill surfaces at least one new finding during the deeper pass.
 - [ ] Skill asks a question about the new finding before re-presenting the gate.
-- [ ] The Phase 4 gate is re-presented after the human responds.
+- [ ] Skill re-presents the Phase 4 gate after the human responds.
 - [ ] Skill does not advance to Phase 5 until the gate is explicitly confirmed with "Continue".
 
 ---
@@ -140,7 +140,7 @@ Phases 1–5 are complete. The skill is running Phase 6, angle 1 (User journey c
 2. Skill presents this as a finding and asks: "What should the user see while the export is being prepared — an immediate download, a loading indicator, or a background task with a notification? What feedback confirms the download completed?"
 3. Human answers the question.
 4. Skill incorporates the answer into the story scope and continues to angles 2–9.
-5. Skill does NOT produce the final story until Phase 7 is complete and the readiness checklist passes.
+5. Skill does NOT produce the final story until Phase 8 is complete and the readiness checklist passes.
 
 **Simulated Human Responses**
 1. "Show a spinner while generating. When ready, auto-download the file and show a success toast: 'Your CSV is ready'."
@@ -149,15 +149,15 @@ Phases 1–5 are complete. The skill is running Phase 6, angle 1 (User journey c
 - [ ] Skill runs Phase 6 analysis before producing any output.
 - [ ] Skill surfaces the missing loading state and download confirmation as a finding during angle 1 (User journey completeness).
 - [ ] Skill asks at least one question about the finding using `vscode_askQuestions` before moving to angle 2.
-- [ ] After the human responds, the answer is reflected in the story scope (loading spinner + success toast added).
-- [ ] Skill does not skip to Phase 7 while any angle has open questions.
+- [ ] Skill reflects the human's answer in the story scope (loading spinner + success toast added).
+- [ ] Skill does not skip to Phase 8 while any angle has open questions.
 
 ---
 
-### Scenario 6: Plan document with pending placeholder stories — user picks one to refine
+### Scenario 6: Initiative document with pending placeholder stories — user picks one to refine
 
 **Trigger / Input**
-You are an agent with the `151-refine-user-story` skill loaded. The user references an epic plan document at `.xdrs/_local/bdrs/operations/plans/001-epic-improve-checkout.md`. The plan contains:
+You are an agent with the `151-refine-user-story` skill loaded. The user references an epic initiative document at `.xdrs/_local/bdrs/operations/initiatives/001-epic-improve-checkout.md`. The initiative contains:
 
 ```
 ### Milestone 1: Payment Speed
@@ -173,43 +173,43 @@ You are an agent with the `151-refine-user-story` skill loaded. The user referen
 Each `.assets/userstory-*.md` file contains `**Status:** to-be-refined` plus any preliminary notes captured when the story was created.
 
 **Expected Behaviour**
-1. Skill activates Phase 0, detects the plan document, and parses all Milestone key tasks.
+1. Skill activates Phase 0, detects the initiative document, and parses all Milestone key tasks.
 2. Skill reads each linked `.assets/userstory-*.md` file and checks for `**Status:** to-be-refined`. Identifies all three as pending.
 3. Skill presents a `vscode_askQuestions` list of the three pending stories plus a "New story" option.
 4. User picks the "Reduce payment steps" story from Milestone 1.
 5. Skill reads the placeholder file — extracts NNN (001) and slug (`reduce-payment-steps`) from its `**Story ID:**` line; carries any notes into Phase 1 as starting context.
 6. Skill proceeds to Phase 1 using the placeholder's title and notes as the subject.
-7. After Phase 7, skill overwrites `.assets/userstory-001-reduce-payment-steps.md` with the fully refined content (no `**Status:**` line).
+7. After Phase 8, skill overwrites `.assets/userstory-001-reduce-payment-steps.md` with the fully refined content (no `**Status:**` line).
 8. Skill updates the task entry link text in Milestone 1 to `- [Reduce payment steps at checkout](.assets/userstory-001-reduce-payment-steps.md)`.
 
 **Assertions**
-- [ ] Phase 0 detects pending stories by reading file content (`**Status:** to-be-refined`), not by task entry name format.
-- [ ] All three pending stories are listed before Phase 1 begins.
-- [ ] NNN and slug are extracted from the placeholder file's `**Story ID:**` line, not from the task entry text.
-- [ ] After Phase 7, the story detail file is overwritten with the refined content and no `**Status:**` field.
-- [ ] The Milestone 1 task entry link text is updated to the refined story title; the file path stays the same.
-- [ ] Skill does NOT offer "Save to BACKLOG.md" for deferred items while a plan doc is active.
+- [ ] Skill detects pending stories by reading file content (`**Status:** to-be-refined`), not by task entry name format.
+- [ ] Skill lists all three pending stories before Phase 1 begins.
+- [ ] Output shows NNN and slug extracted from the placeholder file's `**Story ID:**` line, not from the task entry text.
+- [ ] Skill overwrites the story detail file with refined content and no `**Status:**` field after Phase 8.
+- [ ] Skill updates the Milestone 1 task entry link text to the refined story title; the file path stays the same.
+- [ ] Skill does NOT offer "Save to TODO.md" for deferred items while an initiative doc is active.
 
 ---
 
-### Scenario 7: Refined story output writes asset file and updates plan Milestone link
+### Scenario 7: Refined story output writes asset file and updates initiative Milestone link
 
 **Trigger / Input**
-You are an agent with the `151-refine-user-story` skill loaded. Phase 0 has detected an active plan doc at `.xdrs/_local/bdrs/operations/plans/002-epic-onboarding.md` with Milestone 1: "First Login Experience". The user is refining a new story to be placed there.
+You are an agent with the `151-refine-user-story` skill loaded. Phase 0 has detected an active initiative doc at `.xdrs/_local/bdrs/operations/initiatives/002-epic-onboarding.md` with Milestone 1: "First Login Experience". The user is refining a new story to be placed there.
 
-After completing Phases 1–6, Phase 7 produces the final story: "Show personalised welcome screen on first login".
+After completing Phases 1–6, Phase 8 produces the final story: "Show personalised welcome screen on first login".
 
 **Expected Behaviour**
-1. Phase 7 determines the next NNN in the plan's `.assets/` folder (no existing userstory files → NNN = 001).
-2. Skill writes `.assets/userstory-001-welcome-screen-first-login.md` using the output template sections: Title, User Story, Scope, Edge Cases, Out of Scope, Constraints, Detailed Specs, Acceptance Criteria, Attachments, plus a back-link to the epic plan.
-3. Skill inserts `- [Show personalised welcome screen on first login](.assets/userstory-001-welcome-screen-first-login.md)` as a key task in Milestone 1 of the plan doc.
+1. Phase 8 determines the next NNN in the initiative's `.assets/` folder (no existing userstory files → NNN = 001).
+2. Skill writes `.assets/userstory-001-welcome-screen-first-login.md` using the output template sections: Title, User Story, Scope, Edge Cases, Out of Scope, Constraints, Detailed Specs, Acceptance Criteria, Attachments, plus a back-link to the epic initiative.
+3. Skill inserts `- [Show personalised welcome screen on first login](.assets/userstory-001-welcome-screen-first-login.md)` as a key task in Milestone 1 of the initiative doc.
 
 **Assertions**
-- [ ] Story detail file is created at the correct path inside the plan's `.assets/` folder.
-- [ ] File uses all required template sections including `## Constraints` and `## Detailed Specs`.
-- [ ] File includes a back-link to the parent epic plan.
-- [ ] The plan doc's Milestone 1 key tasks section contains a markdown link entry pointing to the new file.
-- [ ] NNN is 001 (first story in this epic's `.assets/` folder).
+- [ ] Skill creates the story detail file at the correct path inside the initiative's `.assets/` folder.
+- [ ] Output uses all required template sections including `## Constraints` and `## Detailed Specs`.
+- [ ] Output includes a back-link to the parent epic initiative.
+- [ ] Initiative doc's Milestone 1 key tasks section contains a markdown link entry pointing to the new file.
+- [ ] Output shows NNN as 001 (first story in this epic's `.assets/` folder).
 
 ---
 
@@ -223,14 +223,14 @@ You are an agent with the `151-refine-user-story` skill loaded. The workspace ha
 **Expected Behaviour**
 1. Phase 0 finds no XDRS scope and skips to Phase 1 immediately.
 2. Skill runs all phases normally.
-3. At Phase 7, after producing the final story, skill asks via `vscode_askQuestions` where to save the story file, defaulting to `userstory-001-reset-pin-via-sms.md` at the workspace root.
-4. If the story is split, the deferred slices prompt offers: add to existing epic plan, create new epic plan, or save to `BACKLOG.md`.
+3. At Phase 8, after producing the final story, skill asks via `vscode_askQuestions` where to save the story file, defaulting to `userstory-001-reset-pin-via-sms.md` at the workspace root.
+4. If the story is split, the deferred slices prompt offers: add to existing epic initiative, create new epic initiative, or save to `TODO.md`.
 
 **Assertions**
-- [ ] Phase 0 does not block or present any plan-doc questions when no XDRS scope exists.
-- [ ] Phase 7 asks for a save location with a clear default path.
-- [ ] The story file is saved to the user-confirmed path.
-- [ ] Split deferred stories trigger a destination choice (not silently written to BACKLOG.md).
+- [ ] Skill does not block or present any initiative-doc questions when no XDRS scope exists.
+- [ ] Skill asks for a save location with a clear default path at Phase 8.
+- [ ] Skill saves the story file to the user-confirmed path.
+- [ ] Skill triggers a destination choice for split deferred stories (not silently writing to TODO.md).
 
 ---
 
@@ -248,36 +248,36 @@ After Phase 2 Step 1, no API endpoints, no payload structures, no documentation
 2. Skill asks targeted questions: "What is the payment provider? Do you have an API reference or documentation link? What is the payment flow — which endpoints are called, in what order, with what payload?"
 3. Human provides partial answers: "We use Stripe. Charge endpoint. Don't know the exact payload."
 4. Skill asks follow-up: "Can you share the Stripe API documentation link or the name of someone who owns the Stripe integration?"
-5. Phase 7 readiness checklist item for Detailed Specs fails until sufficient detail is provided (endpoint, payload shape, or doc link).
+5. Phase 8 readiness checklist item for Detailed Specs fails until sufficient detail is provided (endpoint, payload shape, or doc link).
 
 **Assertions**
 - [ ] Phase 2 Step 1 explicitly surfaces the missing integration details before Step 2 is reached.
 - [ ] Skill does not produce a final story while `## Detailed Specs` remains empty for a story involving an external API.
-- [ ] Phase 7 checklist item for Detailed Specs is checked only after sufficient detail (at minimum a doc link or endpoint) is provided.
+- [ ] Phase 8 checklist item for Detailed Specs is checked only after sufficient detail (at minimum a doc link or endpoint) is provided.
 - [ ] Final output's `## Detailed Specs` section contains at least the Stripe API reference and the charge endpoint.
 
 ---
 
-### Scenario 10: XDRS scope active, start fresh, story split — Phase 7 asks where to put deferred slices
+### Scenario 10: XDRS scope active, start fresh, story split — Phase 8 asks where to put deferred slices
 
 **Trigger / Input**
-You are an agent with the `151-refine-user-story` skill loaded. Phase 0 detected an XDRS scope with two existing epic plans but the user chose "start fresh — no plan context". During Phase 2, the story is found to be too large and split into three slices. The user accepts the split and starts refining Slice 1.
+You are an agent with the `151-refine-user-story` skill loaded. Phase 0 detected an XDRS scope with two existing epic initiatives but the user chose "start fresh — no initiative context". During Phase 2, the story is found to be too large and split into three slices. The user accepts the split and starts refining Slice 1.
 
 **Expected Behaviour**
-1. Phase 0 detects XDRS scope, presents epic plan list plus "Start fresh" option, user picks "Start fresh".
+1. Phase 0 detects XDRS scope, presents epic initiative list plus "Start fresh" option, user picks "Start fresh".
 2. Phases 1–7 run normally for Slice 1.
-3. At Phase 7, because the context is "start fresh" (no active plan doc), the two deferred slices trigger a `vscode_askQuestions` prompt: "Where should the deferred story slices go?" with options: add to an existing epic plan (lists found epics), create a new epic plan, or save to BACKLOG.md.
-4. Skill applies the chosen action (e.g., creates placeholder files for the two deferred slices and inserts `- [Slice description — pending](.assets/userstory-NNN-slug.md)` task entries in the chosen epic plan, or appends descriptions to BACKLOG.md).
+3. At Phase 8, because the context is "start fresh" (no active initiative doc), the two deferred slices trigger a `vscode_askQuestions` prompt: "Where should the deferred story slices go?" with options: add to an existing epic initiative (lists found epics), create a new epic initiative, or save to TODO.md.
+4. Skill applies the chosen action (e.g., creates placeholder files for the two deferred slices and inserts `- [Slice description — pending](.assets/userstory-NNN-slug.md)` task entries in the chosen epic initiative, or appends a Group/Part entry to TODO.md).
 
 **Assertions**
-- [ ] Phase 0 presents the XDRS epic plan list even in "start fresh" mode.
-- [ ] Deferred slices do NOT go silently to BACKLOG.md when an XDRS scope is present.
-- [ ] Phase 7 presents a `vscode_askQuestions` destination choice for deferred slices.
-- [ ] If an epic plan is chosen, deferred slices are created as placeholder files and inserted as `- [description — pending](.assets/...)` link entries in the correct Milestone.
+- [ ] Phase 0 presents the XDRS epic initiative list even in "start fresh" mode.
+- [ ] Deferred slices do NOT go silently to TODO.md when an XDRS scope is present.
+- [ ] Phase 8 presents a `vscode_askQuestions` destination choice for deferred slices.
+- [ ] If an epic initiative is chosen, deferred slices are created as placeholder files and inserted as `- [description — pending](.assets/...)` link entries in the correct Milestone.
 
 ---
 
-### Scenario 11: Very large story split into multiple slices — no XDRS scope — deferred slices saved to BACKLOG.md
+### Scenario 11: Very large story split into multiple slices — no XDRS scope — deferred slices saved to TODO.md
 
 **Trigger / Input**
 You are an agent with the `151-refine-user-story` skill loaded. The workspace has no `.xdrs/` directory. The user says:
@@ -296,11 +296,11 @@ You are an agent with the `151-refine-user-story` skill loaded. The workspace ha
    - Slice 6: Post-purchase upsell screen
 4. Skill presents `vscode_askQuestions` asking which slice to refine first; user picks Slice 1.
 5. Phases 1–7 run on Slice 1 only. The remaining 5 slices are tracked as Deferred Stories.
-6. At Phase 7, because no plan doc is active, skill presents `vscode_askQuestions`:
-   - **"Save deferred slices to BACKLOG.md"** (recommended)
+6. At Phase 8, because no initiative doc is active, skill presents `vscode_askQuestions`:
+   - **"Save deferred slices to TODO.md"** (recommended)
    - **"Save to a different file"** (open box)
    - **"Skip — do not save"**
-7. User picks "Save deferred slices to BACKLOG.md". Skill appends the 5 deferred slices under a `## Deferred Stories` heading in `BACKLOG.md` at the workspace root (creating the file if needed), each with a one-line description and split rationale.
+7. User picks "Save deferred slices to TODO.md". Skill appends a single `### Group: [checkout flow] — deferred [date]` section under a `## Deferred Stories` heading in `TODO.md` at the workspace root (creating the file if needed), recording Origin, Original objective, and Split rationale, followed by one `#### ` subsection per deferred slice (Slices 2–6), each with its own Objective, Scope, Context captured so far, and Suggested prompt to resume.
 8. Skill outputs the refined story for Slice 1 only.
 
 **Assertions**
@@ -308,9 +308,149 @@ You are an agent with the `151-refine-user-story` skill loaded. The workspace ha
 - [ ] Skill explicitly states at Phase 2 that the request is too large and must be split.
 - [ ] All identified slices are presented for user selection before any refinement begins.
 - [ ] Only the user-selected slice (Slice 1) is refined through Phases 1–7.
-- [ ] The remaining slices appear in a Deferred Items summary at Phase 7.
-- [ ] `vscode_askQuestions` is used at Phase 7 to ask where to save deferred slices (not silently appended).
-- [ ] BACKLOG.md is created (or appended to) at the workspace root with a `## Deferred Stories` section.
-- [ ] Each deferred slice in BACKLOG.md has a one-line description and reason for deferral.
+- [ ] The remaining slices appear in a Deferred Items summary at Phase 8.
+- [ ] `vscode_askQuestions` is used at Phase 8 to ask where to save deferred slices (not silently appended).
+- [ ] TODO.md is created (or appended to) at the workspace root with a `## Deferred Stories` section containing a single `### Group:` heading for this split.
+- [ ] The Group heading records the origin (151-refine-user-story, Phase 2 Step 3), the original checkout-flow objective, and the split rationale.
+- [ ] Each of the 5 deferred slices appears as its own `#### ` subsection with Objective, Scope, Context captured so far, and a Suggested prompt to resume.
 - [ ] The final output contains exactly one refined story (Slice 1), not all slices.
-- [ ] Skill does NOT offer BACKLOG.md for deferred items from an active plan doc (this scenario has no plan doc — condition satisfied).
+- [ ] Skill does NOT offer TODO.md for deferred items from an active initiative doc (this scenario has no initiative doc — condition satisfied).
+
+---
+
+### Scenario 12: Phase 6 passes cleanly but Phase 7 implementer angles surface missing error paths and a security concern
+
+**Trigger / Input**
+You are an agent with the `151-refine-user-story` skill loaded. The workspace has no `.xdrs/` directory. Phases 1–6 have completed for:
+
+"Allow users to link their Google account to an existing account so they can sign in with Google."
+
+Phase 6 converged without surfacing major gaps. The skill is now entering Phase 7.
+
+**Expected Behaviour**
+1. Phase 7 fires and applies the per-angle protocol to all 8 implementer angles.
+2. Angle 2 (Error and edge paths): the protocol generates questions about failure modes. The current story does not describe what happens if: the Google OAuth callback fails, the Google email is already linked to another account, or the OAuth token is revoked after linking. Skill surfaces these as findings and asks the user how each should be handled.
+3. Angle 6 (Security implications): the protocol generates questions about auth handling. The story does not specify how the OAuth state parameter is validated, how long the linking session is valid, or whether the user must be authenticated before initiating Google linking. Skill surfaces these as an auth concern and asks.
+4. Angles 1, 3, 4, 5, 7 converge quickly with answers drawn from story contents or brief user responses.
+5. Angle 8 (Implementer dry run): a cold engineer following the story would get stuck on the OAuth callback error handling and the authentication prerequisite — both already surfaced by angles 2 and 6. Skill confirms these are now resolved and the dry run passes.
+6. Phase 8 checklist requires both Phase 6 (9 user-perspective angles) and Phase 7 (8 implementer-perspective angles) complete before output is produced.
+7. Phase 9 Check A re-validates items 8 (error and edge paths) and 12 (security implications) in the final output. Both pass.
+8. Phase 9 Check B applies the 4 size criteria — none are met — skill presents the completion gate.
+
+**Simulated Human Responses**
+1. (Phase 7 angle 2 question on OAuth callback failure) "Show an error toast: 'Could not link Google account. Please try again.' Keep the user on the account settings page."
+2. (Phase 7 angle 2 question on email already linked) "Show: 'This Google account is already linked to another user.' Do not link or merge — block the attempt."
+3. (Phase 7 angle 2 question on revoked token) "Out of scope — user must re-link manually if token is revoked."
+4. (Phase 7 angle 6 question on auth prerequisite) "User must be logged in. Redirect to login if not."
+5. (Phase 7 angle 6 question on state parameter validation) "Yes — validate CSRF state parameter on callback. Reject if missing or mismatched."
+
+**Assertions**
+- [ ] Phase 6 completes with all 9 user-perspective angles run using the per-angle protocol (5–10 questions generated per angle, answers attempted, gaps asked).
+- [ ] Phase 7 fires after Phase 6 gate is confirmed.
+- [ ] Phase 7 angle 2 surfaces at least the OAuth callback failure and the "email already linked" case as open findings and asks the user about each.
+- [ ] Phase 7 angle 6 surfaces the missing authentication prerequisite and CSRF state validation as a security concern and asks the user.
+- [ ] Phase 7 angle 8 (implementer dry run) references the gaps found in angles 2 and 6 and confirms they are resolved before marking the dry run passed.
+- [ ] Phase 8 checklist explicitly requires both Phase 6 (9 angles) and Phase 7 (8 angles) complete.
+- [ ] Phase 9 Check A items 8 and 12 pass in the final output (error paths and security addressed in story).
+- [ ] Phase 9 Check B detects no split needed; skill presents the completion gate.
+- [ ] Final story includes error handling for OAuth failure, duplicate email, and revoked token (out-of-scope noted), and documents the CSRF state validation and auth prerequisite in Acceptance Criteria or Detailed Specs.
+
+---
+
+### Scenario 13: Context Enrichment — existing CRM system, domain inferred, URL provided, mid-phase probe fires
+
+**Trigger / Input**
+You are an agent with the `151-refine-user-story` skill loaded. The workspace has no `.xdrs/` directory. The user says:
+
+"Delete contacts from Leads."
+
+**Expected Behaviour**
+1. Phase 1 Step 3 fires (Context Enrichment).
+2. Skill performs quick request analysis internally and infers the domain is likely a CRM based on the entities "contacts" and "Leads."
+3. Skill scans the workspace — finds no relevant source code, READMEs, or prior stories.
+4. Skill asks targeted, domain-specific questions: *"This looks like a CRM — is it? Can you point me to the Leads screen documentation or any existing specs?"* and *"Do you have screenshots or a recording of the current Leads / Contacts flow?"*
+5. User provides a URL: `https://internal.docs/crm/leads-screen`.
+6. Skill reads the URL content and summarises it (factual, labeled with source).
+7. Context loop re-evaluates: no further gaps at this stage; convergence reached after 1 round. Skill presents the convergence gate.
+8. User selects "Context is sufficient — continue to Phase 2."
+9. Skill compiles the Context Summary and carries it into Phase 2.
+10. During Phase 2 Step 2 (requirements loop), skill hits an interface-and-integration gap: the URL did not specify the API used for deleting contacts. Skill applies the Context Probe rule and asks: *"The docs describe the UI flow but do not mention the API contract for contact deletion — do you have an API reference or endpoint spec?"*
+11. User provides a partial answer. Skill records it and continues.
+
+**Simulated Human Responses**
+1. (Quick analysis internal — not shown)
+2. URL: `https://internal.docs/crm/leads-screen`
+3. (Convergence gate) "Context is sufficient — continue to Phase 2"
+4. (API probe) "We use a REST API. DELETE /contacts/:id. No other docs."
+
+**Assertions**
+- [ ] Skill performs quick internal analysis before surfacing any question.
+- [ ] First questions are domain-specific and tied to inferred domain (CRM), not generic.
+- [ ] Skill auto-reads the provided URL and summarizes its content with source label.
+- [ ] Context loop converges after 1 round and presents the convergence gate.
+- [ ] Context Summary is compiled and referenced in Phase 2.
+- [ ] Mid-phase Context Probe fires in Phase 2 for the API gap — ask is tied to the specific gap, not generic.
+- [ ] Skipped or partial answers (no further docs) are recorded as "Context: not provided for [topic]" and do NOT block Phase 2 progress.
+
+---
+
+### Scenario 14: Context Enrichment — new feature, no codebase, user pastes KR + interview excerpt, loop converges in 2 rounds
+
+**Trigger / Input**
+You are an agent with the `151-refine-user-story` skill loaded. The workspace has no `.xdrs/` directory. The user says:
+
+"We need a way for field technicians to report equipment failures from their mobile device."
+
+**Expected Behaviour**
+1. Phase 1 Step 3 fires (Context Enrichment).
+2. Quick analysis identifies: domain = field service / maintenance; key entities = technicians, equipment, failure reports; no named system; operation = create/report flow.
+3. Workspace scan finds nothing relevant — no source code, no docs.
+4. Skill asks targeted questions: *"What business outcome is expected from this feature? Are there OKR or KR documents describing the goal?"* and *"Were there user interviews or stakeholder discussions about this need? A transcript or notes would help."* and *"Is there an existing system (even paper-based or manual) that this replaces?"*
+5. User pastes a KR: "KR: 90% of failures reported within 15 minutes of occurrence (baseline: 45% today)" and an interview excerpt: "Technicians said they often forget details by the time they reach a desk. They need it on-site."
+6. Skill summarizes the pasted content with source label.
+7. Context loop re-evaluates: a new gap surfaced (no info on mobile platform or existing backend). Skill asks 1 follow-up round: *"What mobile platform should this target (iOS, Android, both)? Is there an existing backend or API that failure reports should be sent to?"*
+8. User answers. Loop re-evaluates — no further gaps. Convergence reached after 2 rounds.
+9. Skill presents the convergence gate; user selects "Context is sufficient — continue to Phase 2."
+10. Context Summary is compiled with KR, interview excerpt, and platform answer all labeled.
+
+**Simulated Human Responses**
+1. (No workspace artifacts found — no answer needed)
+2. KR + interview excerpt (pasted inline)
+3. Follow-up: "Android only. No existing backend — we'll build it."
+
+**Assertions**
+- [ ] Skill asks targeted questions derived from domain inference even when workspace scan finds nothing.
+- [ ] Pasted KR and interview excerpt are summarized with source label (e.g. `**Source:** user-provided KR — 90% failure reporting rate target`).
+- [ ] Loop fires a second round when new gaps are identified after first answers.
+- [ ] Loop converges after exactly 2 rounds (no infinite loop).
+- [ ] Context Summary contains all three pieces: KR, interview excerpt, platform decision.
+- [ ] Phase 2 references the Context Summary when restating understanding.
+
+---
+
+### Scenario 15: Context Enrichment — user skips entirely, Phase 2 proceeds, no fabrication
+
+**Trigger / Input**
+You are an agent with the `151-refine-user-story` skill loaded. The workspace has no `.xdrs/` directory. The user says:
+
+"Add a dark mode toggle to the settings page."
+
+**Expected Behaviour**
+1. Phase 1 Step 3 fires (Context Enrichment).
+2. Quick analysis: domain = UI/UX, web or mobile app; key entity = settings page; operation = toggle/preference.
+3. Workspace scan finds nothing.
+4. Skill asks targeted questions: *"Is there an existing design system or theme configuration? Can you point me to the settings page code or design spec?"* and *"What frameworks or platforms does this app use?"*
+5. User selects "Skip — no additional context available."
+6. Skill records `Context: none available` and proceeds immediately to Phase 2.
+7. Phase 2 restates understanding without any fabricated system details, noting context is unavailable.
+8. Phase 2 requirements loop asks about the existing theme system, frameworks, and user preference persistence — without assuming any specific technology.
+
+**Simulated Human Responses**
+1. "Skip — no additional context available"
+
+**Assertions**
+- [ ] Skill records `Context: none available` explicitly and does not invent any system details.
+- [ ] Skill proceeds to Phase 2 immediately after the skip — no re-prompting.
+- [ ] Phase 2 Step 1 restate does not reference any assumed technologies or design systems.
+- [ ] Phase 2 requirements loop asks about theme system and framework without assuming anything from the story text.
+- [ ] Skipped Context Probe is not treated as an unresolved decision — does not block the Hard Gate.

package/.xdrs/agentme/index.md

@@ -27,7 +27,7 @@ The `agentme` EDRs cover project tooling and structure for each supported langua
 
 ### Business decisions
 
-The `agentme` BDRs cover software development project management practices: how to organize and track epics, features, and user stories using XDRS plan documents. See the full list in the [BDRs Index](bdrs/index.md).
+The `agentme` BDRs cover software development project management practices: how to organize and track epics, features, and user stories using XDRS initiative documents. See the full list in the [BDRs Index](bdrs/index.md).
 
 ## Type Indexes
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentme",
-  "version": "0.34.0",
+  "version": "0.35.1",
   "description": "",
   "dependencies": {
     "filedist": "^0.39.0"