coding-agent-skills 0.2.11 → 0.2.13

package/examples/evidence-packs/migration-review.json

@@ -0,0 +1,60 @@
+{
+  "contractVersion": "1.0.0",
+  "skill": {"name": "migration-review", "version": "0.2.3"},
+  "invocation": {
+    "id": "example-migration-review",
+    "startedAt": "2026-07-03T12:00:00Z",
+    "endedAt": "2026-07-03T12:01:00Z"
+  },
+  "repository": {
+    "root": "/workspace/example-project",
+    "branch": "main",
+    "head": "0123456789abcdef",
+    "workingTreeState": "clean"
+  },
+  "userIntent": "Map static migration and schema evidence before database handoff.",
+  "declaredScope": ["/workspace/example-project"],
+  "projectAdapter": "example-migration-review-adapter",
+  "environmentSummary": {"platform": "linux", "shell": "bash"},
+  "status": "complete",
+  "confidence": {
+    "level": "medium",
+    "reason": "Static migration and schema files were inspected, but database state was not verified."
+  },
+  "commands": [
+    {
+      "command": "coding-agent-skills migration-review /workspace/example-project",
+      "family": "migration-review-renderer",
+      "workingDirectory": "/workspace/example-project",
+      "startedAt": "2026-07-03T12:00:20Z",
+      "endedAt": "2026-07-03T12:00:21Z",
+      "exitStatus": 0,
+      "resultStatus": "success",
+      "safetyClass": "allowed",
+      "approvalReference": null,
+      "purpose": "Render a static migration review report.",
+      "outputSummary": "Reported static migration files, schema files, config files, risk indicators, skipped items, and not-verified database areas."
+    }
+  ],
+  "skippedChecks": [],
+  "findings": [
+    {
+      "summary": "Static migration evidence was mapped without database access.",
+      "evidence": ["prisma/migrations/example/migration.sql", "prisma/schema.prisma"]
+    }
+  ],
+  "risks": [
+    {
+      "summary": "Database state may differ from static migration evidence.",
+      "evidence": ["applied migration history was not queried", "runtime database connectivity was not tested"]
+    }
+  ],
+  "failures": [],
+  "unresolvedQuestions": [],
+  "changedState": {
+    "changed": false,
+    "summary": "No project, Git, dependency, runtime, database, generated-code, service, or remote state changed."
+  },
+  "handoffSummary": "Static migration evidence is mapped; applied database state remains unverified.",
+  "recommendedNextAction": "Review reported migration surfaces before editing database schema or migration files."
+}

package/examples/manifests/api-contract-audit.json

@@ -0,0 +1,14 @@
+{
+  "name": "api-contract-audit",
+  "version": "0.2.3",
+  "mode": "audit-only",
+  "evidenceContract": "../../contracts/evidence-pack/evidence-pack.schema.json",
+  "commandPolicy": "../command-policies/api-contract-audit.json",
+  "adapterSchema": "../../schemas/project-adapter.schema.json",
+  "adapterCompatibility": {
+    "contractVersion": "1.0.0",
+    "compatibleAdapterVersions": ["1.0.0"]
+  },
+  "adapterInterface": "../../skills/api-contract-audit/adapter-interface.md",
+  "description": "Map static API contract surfaces without runtime calls or generation."
+}

package/examples/manifests/migration-review.json

@@ -0,0 +1,14 @@
+{
+  "name": "migration-review",
+  "version": "0.2.3",
+  "mode": "audit-only",
+  "evidenceContract": "../../contracts/evidence-pack/evidence-pack.schema.json",
+  "commandPolicy": "../command-policies/migration-review.json",
+  "adapterSchema": "../../schemas/project-adapter.schema.json",
+  "adapterCompatibility": {
+    "contractVersion": "1.0.0",
+    "compatibleAdapterVersions": ["1.0.0"]
+  },
+  "adapterInterface": "../../skills/migration-review/adapter-interface.md",
+  "description": "Map static database migration and schema evidence without database access."
+}

package/examples/workflows/api-contract-audit.md

@@ -0,0 +1,8 @@
+Use `api-contract-audit` before API work or handoff:
+
+```bash
+coding-agent-skills api-contract-audit /workspace/project
+```
+
+Review contract files, endpoint declarations, client-call patterns, schema/type files,
+skipped paths, and not-verified runtime behavior before making API claims.

package/examples/workflows/migration-review.md

@@ -0,0 +1,7 @@
+# Migration Review Workflow
+
+Use `coding-agent-skills migration-review <project-root>` to map static migration, schema,
+config, package-script-key, and risk-indicator evidence before database work.
+
+The workflow remains read-only: no database connections, migration execution, ORM generation,
+package installation, builds, tests, deployments, secret-file reads, or project writes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coding-agent-skills",
-  "version": "0.2.11",
+  "version": "0.2.13",
   "description": "Evidence-first, read-only coding-agent skills and project adapter tooling.",
   "type": "module",
   "private": false,
@@ -12,6 +12,8 @@
     "route-trace",
     "env-audit",
     "secret-audit",
+    "api-contract-audit",
+    "migration-review",
     "project-adapters",
     "code-validation",
     "cli"

package/runs/skill-runs.md

@@ -213,3 +213,35 @@ This file records bounded maintainer-loop runs. Entries must not contain secrets
 - Validation commands: pending final release validation matrix.
 - Result: pass pending final publication evidence.
 - Commit/tag/push status: pending approved release workflow.
+
+## implementation-v0.2.12-api-contract-audit
+
+- Run ID: `implementation-v0.2.12-api-contract-audit`
+- Repository: `/home/oneclickwebsitedesignfactory/coding-agent-skills`
+- Command used: `builder-mode approval for api-contract-audit-skill implementation and release`
+- Files changed: `api-contract-audit` skill, API contract audit renderer and library,
+  CLI wrapper, adapter schemas, pack rules, release tests, synthetic API contract fixtures,
+  usage/release/safety/adapter docs, changelog, roadmap, work ledger, run log, and package
+  metadata.
+- Safety boundary: read-only, static-analysis only, no `.env` reads, no target runtime,
+  no URL probes, no API calls, no schema/client generation, no builds, no tests in target
+  projects, no deploys, no migrations, and no target-project mutation.
+- Validation commands: pending final release validation matrix.
+- Result: pass pending final publication evidence.
+- Commit/tag/push status: pending approved release workflow.
+
+## implementation-v0.2.13-migration-review
+
+- Run ID: `implementation-v0.2.13-migration-review`
+- Repository: `/home/oneclickwebsitedesignfactory/coding-agent-skills`
+- Command used: `builder-mode approval for migration-review-skill implementation and release`
+- Files changed: `migration-review` skill, migration review renderer and library,
+  CLI wrapper, adapter schemas, pack rules, release tests, synthetic migration fixtures,
+  usage/release/safety/adapter docs, changelog, roadmap, work ledger, run log, and package
+  metadata.
+- Safety boundary: read-only, static-analysis only, no `.env` reads, no database
+  connections, no migration execution, no ORM generation, no package scripts, no builds,
+  no tests in target projects, no deploys, and no target-project mutation.
+- Validation commands: pending final release validation matrix.
+- Result: pass pending final publication evidence.
+- Commit/tag/push status: pending approved release workflow.

package/schemas/project-adapter-installation.schema.json

@@ -68,6 +68,8 @@
           "route-trace",
           "env-audit",
           "secret-audit",
+          "api-contract-audit",
+          "migration-review",
           "build-verify",
           "git-preflight",
           "runtime-truth",
@@ -103,6 +105,8 @@
               "route-trace",
               "env-audit",
               "secret-audit",
+              "api-contract-audit",
+              "migration-review",
               "build-verify",
               "git-preflight",
                 "runtime-truth",

package/schemas/project-adapter.schema.json

@@ -92,6 +92,8 @@
               "route-trace",
               "env-audit",
               "secret-audit",
+              "api-contract-audit",
+              "migration-review",
               "build-verify",
               "git-preflight",
               "runtime-truth",
@@ -171,6 +173,8 @@
                   "route-trace",
                   "env-audit",
                   "secret-audit",
+                  "api-contract-audit",
+                  "migration-review",
                   "build-verify",
                   "git-preflight",
                   "runtime-truth",