coding-agent-skills 0.2.12 → 0.2.14

package/scripts/render-migration-review.mjs

@@ -0,0 +1,8 @@
+import { migrationReviewCliResult } from "./lib/migration-review.mjs";
+
+const outcome = migrationReviewCliResult(process.argv[2]);
+for (const line of outcome.lines) {
+  if (outcome.stream === "stdout") console.log(line);
+  else console.error(line);
+}
+process.exitCode = outcome.exitCode;

package/scripts/test-pack.mjs

@@ -62,6 +62,16 @@ import {
   buildApiContractAuditReport,
   renderApiContractAuditReport,
 } from "./lib/api-contract-audit.mjs";
+import {
+  buildMigrationReviewReport,
+  migrationReviewCliResult,
+  renderMigrationReviewReport,
+} from "./lib/migration-review.mjs";
+import {
+  buildGithubHandoffReport,
+  githubHandoffCliResult,
+  renderGithubHandoffReport,
+} from "./lib/github-handoff.mjs";
 import {
   adapterUpgradeCliResult,
   checkAdapterUpgrade,
@@ -128,6 +138,27 @@ function readJson(relativePath) {
   return JSON.parse(read(relativePath));
 }
 
+function runGitFixtureCommand(cwd, args) {
+  const result = spawnSync("git", args, {
+    cwd,
+    encoding: "utf8",
+    stdio: "pipe",
+  });
+  assert.equal(result.status, 0, `git ${args.join(" ")}\n${result.stderr}`);
+  return result.stdout.trim();
+}
+
+function createGitFixture(sourceRelativePath) {
+  const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "github-handoff-fixture-"));
+  fs.cpSync(path.join(root, sourceRelativePath), temporary, { recursive: true });
+  runGitFixtureCommand(temporary, ["init", "-b", "main"]);
+  runGitFixtureCommand(temporary, ["config", "user.name", "Fixture User"]);
+  runGitFixtureCommand(temporary, ["config", "user.email", "fixture@example.invalid"]);
+  runGitFixtureCommand(temporary, ["add", "."]);
+  runGitFixtureCommand(temporary, ["commit", "-m", "initial fixture commit"]);
+  return temporary;
+}
+
 function walk(directory, output = []) {
   for (const entry of fs.readdirSync(directory, { withFileTypes: true })) {
     if ([".git", "node_modules", "validation-output"].includes(entry.name)) continue;
@@ -280,10 +311,17 @@ test("local CLI maps approved commands to existing safe scripts", () => {
   assert.ok(cliText.includes("scripts/render-env-audit.mjs"));
   assert.ok(cliText.includes("scripts/render-secret-audit.mjs"));
   assert.ok(cliText.includes("scripts/render-api-contract-audit.mjs"));
+  assert.ok(cliText.includes("scripts/render-migration-review.mjs"));
+  assert.ok(cliText.includes("scripts/render-github-handoff.mjs"));
   assert.ok(cliText.includes("scripts/validate-adapters.mjs"));
   assert.ok(!cliText.includes(".env"));
 
   const fixtureRoot = path.join(root, "tests", "fixtures");
+  const githubHandoffFixture = createGitFixture(
+    path.join("tests", "fixtures", "github-handoff", "static-project"),
+  );
+  fs.appendFileSync(path.join(githubHandoffFixture, "README.md"), "\nLocal handoff change.\n");
+
   const commands = [
     [["validate-pack"], /pilot pack valid/],
     [
@@ -317,6 +355,14 @@ test("local CLI maps approved commands to existing safe scripts", () => {
       ["api-contract-audit", path.join(fixtureRoot, "api-contract-audit", "static-project")],
       /# API Contract Audit Report/,
     ],
+    [
+      ["migration-review", path.join(fixtureRoot, "migration-review", "static-project")],
+      /# Migration Review Report/,
+    ],
+    [
+      ["github-handoff", githubHandoffFixture],
+      /# GitHub Handoff Report/,
+    ],
   ];
 
   for (const [args, expected] of commands) {
@@ -341,7 +387,7 @@ test("local CLI maps approved commands to existing safe scripts", () => {
 test("npm package metadata is public-ready and dependency-free", () => {
   const packageJson = readJson("package.json");
   assert.equal(packageJson.name, "coding-agent-skills");
-  assert.equal(packageJson.version, "0.2.12");
+  assert.equal(packageJson.version, "0.2.14");
   assert.equal(
     packageJson.description,
     "Evidence-first, read-only coding-agent skills and project adapter tooling.",
@@ -357,6 +403,8 @@ test("npm package metadata is public-ready and dependency-free", () => {
     "env-audit",
     "secret-audit",
     "api-contract-audit",
+    "migration-review",
+    "github-handoff",
     "project-adapters",
     "code-validation",
     "cli",
@@ -650,6 +698,104 @@ test("api-contract-audit does not broaden a repo-map-only project adapter", () =
   assert.match(renderApiContractAuditReport(result), /api-contract-audit is not enabled/);
 });
 
+test("migration-review maps static migration surfaces without database access", () => {
+  const result = buildMigrationReviewReport(
+    path.join(root, "tests", "fixtures", "migration-review", "static-project"),
+    { coreRoot: root },
+  );
+
+  assert.equal(result.status, "complete");
+  assert.ok(result.migrationFiles.some((record) => record.path === "prisma/migrations/20260703010101_init/migration.sql"));
+  assert.ok(result.schemaFiles.some((record) => record.path === "prisma/schema.prisma"));
+  assert.ok(result.configFiles.some((record) => record.path === "drizzle.config.ts"));
+  assert.ok(result.packageScriptKeys.some((record) => record.key === "db:migrate"));
+  assert.ok(result.riskIndicators.some((record) => record.type === "drop-column"));
+  assert.match(renderMigrationReviewReport(result), /No database connection/);
+});
+
+test("migration-review respects adapter-declared scope", () => {
+  const result = buildMigrationReviewReport(
+    path.join(root, "tests", "fixtures", "migration-review", "adapter-project"),
+    { coreRoot: root },
+  );
+
+  assert.equal(result.status, "complete");
+  assert.equal(result.adapter.enabled, true);
+  assert.deepEqual(result.scopePaths, ["db"]);
+  assert.deepEqual(result.filesScanned, ["db/migrations/001_create_accounts.sql"]);
+  assert.ok(result.migrationFiles.some((record) => record.path === "db/migrations/001_create_accounts.sql"));
+  assert.ok(result.warnings.includes("migration-review used adapter-declared safe read paths only"));
+  const cli = migrationReviewCliResult(
+    path.join(root, "tests", "fixtures", "migration-review", "adapter-project"),
+    { coreRoot: root },
+  );
+  assert.equal(cli.exitCode, 0);
+  assert.match(cli.lines.join("\n"), /Migration-review enabled: yes/);
+});
+
+test("migration-review does not broaden a repo-map-only project adapter", () => {
+  const result = buildMigrationReviewReport(
+    path.join(root, "tests", "fixtures", "project-adapter-installation", "valid-exact-pin"),
+    { coreRoot: root },
+  );
+
+  assert.equal(result.status, "partial");
+  assert.equal(result.filesScanned.length, 0);
+  assert.equal(result.migrationFiles.length, 0);
+  assert.match(renderMigrationReviewReport(result), /migration-review is not enabled/);
+});
+
+test("github-handoff summarizes local git state without mutating remotes", () => {
+  const fixture = createGitFixture(path.join("tests", "fixtures", "github-handoff", "static-project"));
+  runGitFixtureCommand(fixture, ["tag", "v0.0.0"]);
+  fs.appendFileSync(path.join(fixture, "README.md"), "\nChanged for handoff.\n");
+  fs.writeFileSync(path.join(fixture, "src", "new-file.js"), "export const handoff = true;\n");
+
+  const result = buildGithubHandoffReport(fixture, { coreRoot: root });
+
+  assert.equal(result.status, "complete");
+  assert.equal(result.git.branch, "main");
+  assert.ok(result.git.head);
+  assert.ok(result.git.tagsAtHead.includes("v0.0.0"));
+  assert.equal(result.changeSummary.total, 2);
+  assert.equal(result.changeSummary.modified, 1);
+  assert.equal(result.changeSummary.untracked, 1);
+  assert.ok(result.changedFiles.some((record) => record.path === "README.md"));
+  assert.ok(result.changedFiles.some((record) => record.path === "src/new-file.js"));
+  assert.match(renderGithubHandoffReport(result), /No commit, push, tag/);
+});
+
+test("github-handoff respects adapter-declared handoff metadata", () => {
+  const fixture = createGitFixture(path.join("tests", "fixtures", "github-handoff", "adapter-project"));
+  fs.appendFileSync(path.join(fixture, "src", "index.js"), "\nexport const changed = true;\n");
+
+  const result = buildGithubHandoffReport(fixture, { coreRoot: root });
+
+  assert.equal(result.status, "complete");
+  assert.equal(result.adapter.enabled, true);
+  assert.ok(result.requiredEvidence.includes("handoff summary"));
+  assert.ok(result.ignoredPaths.includes("tmp"));
+  assert.equal(result.changeSummary.modified, 1);
+  assert.ok(result.warnings.includes("github-handoff used adapter-declared handoff evidence metadata"));
+  const cli = githubHandoffCliResult(fixture, { coreRoot: root });
+  assert.equal(cli.exitCode, 0);
+  assert.match(cli.lines.join("\n"), /Github-handoff enabled: yes/);
+});
+
+test("github-handoff does not broaden a repo-map-only project adapter", () => {
+  const fixture = createGitFixture(
+    path.join("tests", "fixtures", "project-adapter-installation", "valid-exact-pin"),
+  );
+  fs.appendFileSync(path.join(fixture, "README.md"), "\nShould not be listed.\n");
+
+  const result = buildGithubHandoffReport(fixture, { coreRoot: root });
+
+  assert.equal(result.status, "partial");
+  assert.equal(result.changedFiles.length, 0);
+  assert.equal(result.changeSummary.total, 0);
+  assert.match(renderGithubHandoffReport(result), /github-handoff is not enabled/);
+});
+
 test("validate-pack accepts installed package trees without source-only gitignore", () => {
   const temporaryRoot = fs.mkdtempSync(path.join(os.tmpdir(), "installed-package-"));
   const installedRoot = path.join(temporaryRoot, "coding-agent-skills");

package/scripts/validate-pack.mjs

@@ -99,6 +99,8 @@ const requiredRootFiles = [
   "scripts/render-env-audit.mjs",
   "scripts/render-secret-audit.mjs",
   "scripts/render-api-contract-audit.mjs",
+  "scripts/render-migration-review.mjs",
+  "scripts/render-github-handoff.mjs",
   "scripts/check-adapter-upgrade.mjs",
   "scripts/check-adapter-upgrade-chain.mjs",
   "scripts/validate-adapters.mjs",
@@ -108,6 +110,8 @@ const requiredRootFiles = [
   "scripts/lib/env-audit.mjs",
   "scripts/lib/secret-audit.mjs",
   "scripts/lib/api-contract-audit.mjs",
+  "scripts/lib/migration-review.mjs",
+  "scripts/lib/github-handoff.mjs",
   "scripts/lib/adapter-upgrade.mjs",
   "scripts/lib/adapter-upgrade-chain.mjs",
   "scripts/lib/adapter-discovery.mjs",
@@ -681,8 +685,8 @@ if (packageJson) {
   if (packageJson.name !== "coding-agent-skills") {
     failures.push("package.json has unexpected package name");
   }
-  if (packageJson.version !== "0.2.12") {
-    failures.push("package.json version must be 0.2.12 for public package validation");
+  if (packageJson.version !== "0.2.14") {
+    failures.push("package.json version must be 0.2.14 for public package validation");
   }
   if (packageJson.type !== "module") failures.push("package.json must preserve ESM mode");
   if (packageJson.private !== false) {
@@ -704,6 +708,8 @@ if (packageJson) {
       "env-audit",
       "secret-audit",
       "api-contract-audit",
+      "migration-review",
+      "github-handoff",
       "project-adapters",
       "code-validation",
       "cli",

package/skills/github-handoff/SKILL.md

@@ -0,0 +1,95 @@
+---
+name: github-handoff
+description: Prepare read-only GitHub handoff evidence from local Git metadata. Use when Codex needs to summarize branch state, HEAD, tags at HEAD, remote names, and changed-file status before a separately approved pull request, release, or GitHub workflow handoff without creating commits, pushes, tags, pull requests, API calls, token reads, or file changes.
+---
+
+# GitHub Handoff
+
+## Purpose And Use
+
+Use this skill to produce a local, audit-only handoff report before a human or separately approved workflow performs GitHub work.
+
+The skill is for local Git evidence only. It does not create pull requests, publish releases, push branches, inspect tokens, or call GitHub APIs.
+
+## Inputs
+
+Required:
+
+- Project root.
+
+Optional:
+
+- Project adapter declaration that enables `github-handoff`.
+- Human-provided handoff intent.
+
+Do not assume:
+
+- GitHub authentication is available.
+- Local commits are pushed.
+- CI status, review status, or PR state is known.
+- Remote URLs are safe to print.
+
+## Procedure
+
+1. Confirm the project root exists.
+2. Validate the project adapter when one is present.
+3. If an adapter exists but does not enable `github-handoff`, report `partial` and do not list changed files.
+4. Inspect local Git metadata only: root, branch state, current branch, HEAD, tags at HEAD, remote names, and status entries.
+5. Redact secret-bearing changed paths such as `.env`, key files, credential paths, or token paths.
+6. Summarize changed-file counts by status.
+7. Record skipped and not-verified GitHub state honestly.
+8. State refused behavior clearly.
+
+## Evidence, Recovery, And Dependencies
+
+Expected evidence:
+
+- Git root.
+- Branch state.
+- Current branch.
+- HEAD or short HEAD.
+- Tags at HEAD.
+- Remote names only, not remote URLs.
+- Changed-file summary.
+- Redacted path count when applicable.
+
+Recovery:
+
+- If the directory is not a Git repository, return `failed` with no mutation.
+- If Git status is unavailable, return a warning and preserve partial evidence.
+- If adapter validation fails, fail closed.
+
+Dependencies:
+
+- Local Git command-line tool.
+- Node.js 20+ for the packaged renderer.
+
+## Approval Boundary
+
+This skill is audit-only.
+
+Allowed:
+
+- Read local Git metadata.
+- List changed-file paths unless they are secret-bearing.
+- Validate project adapter metadata.
+- Render a handoff report.
+
+Forbidden:
+
+- Commit.
+- Push.
+- Tag.
+- Checkout, reset, rebase, merge, stash, restore, or clean.
+- Create pull requests.
+- Create releases.
+- Call GitHub APIs.
+- Read tokens, `.env`, `.env.*`, `.npmrc`, keys, or credential files.
+- Print remote URLs.
+- Change project files.
+
+## Completion
+
+Complete only after a report states what was verified, what was skipped, and what was not verified.
+
+The completion boundary must say that no commit, push, tag, branch change, pull request creation, GitHub API mutation, token read, secret-file read, or project write occurred.

package/skills/github-handoff/adapter-interface.md

@@ -0,0 +1,18 @@
+# GitHub Handoff Adapter Interface
+
+Adapters may enable `github-handoff` as an audit-only skill.
+
+Adapters may narrow:
+
+- Required evidence labels.
+- Ignored path labels.
+- Documentation precedence used as human context.
+
+Adapters must not:
+
+- Permit commits, pushes, tags, pull request creation, release creation, or GitHub API mutation.
+- Permit token reads.
+- Permit secret-file reads.
+- Suppress warnings or failures.
+- Redefine completion.
+- Escalate the skill out of audit-only mode.

package/skills/github-handoff/agents/openai.yaml

@@ -0,0 +1,3 @@
+display_name: GitHub Handoff
+short_description: Prepare local Git handoff evidence without GitHub mutation.
+default_prompt: Prepare a GitHub handoff report as an audit-only pass without modifying files, committing, pushing, tagging, creating pull requests, reading tokens, or calling GitHub APIs.

package/skills/github-handoff/checklist.md

@@ -0,0 +1,10 @@
+# GitHub Handoff Checklist
+
+- Confirm the project root.
+- Validate adapter metadata if present.
+- Inspect local Git state only.
+- Summarize changed files without reading file contents.
+- Redact secret-bearing paths.
+- Do not print remote URLs.
+- Report not-verified GitHub state.
+- Confirm no mutation occurred.

package/skills/github-handoff/evidence-template.md

@@ -0,0 +1,16 @@
+# GitHub Handoff Evidence Template
+
+- Skill: `github-handoff`
+- Status: `complete`, `partial`, or `failed`
+- Project root:
+- Git root:
+- Branch state:
+- HEAD:
+- Tags at HEAD:
+- Remote names:
+- Changed-file summary:
+- Redacted path count:
+- Skipped:
+- Not verified:
+- Refused behavior:
+- Changed state: no project, Git, GitHub, dependency, runtime, service, or remote state changed.

package/skills/github-handoff/examples.md

@@ -0,0 +1,19 @@
+# GitHub Handoff Examples
+
+## Safe Examples
+
+```bash
+coding-agent-skills github-handoff /path/to/project
+```
+
+```bash
+node scripts/render-github-handoff.mjs /path/to/project
+```
+
+## Unsafe Examples
+
+- Create a pull request.
+- Push the current branch.
+- Tag the release.
+- Read GitHub tokens.
+- Print configured remote URLs.

package/skills/github-handoff/failure-modes.md

@@ -0,0 +1,8 @@
+# GitHub Handoff Failure Modes
+
+- Project root is not a Git repository.
+- Adapter exists but does not enable `github-handoff`.
+- Adapter validation fails.
+- Git status is unavailable.
+- Secret-bearing changed paths are present and must be redacted.
+- Remote PR, CI, and review state cannot be verified without separately approved GitHub access.

package/skills/migration-review/SKILL.md

@@ -0,0 +1,87 @@
+---
+name: migration-review
+description: Review statically visible database migration and schema evidence without connecting to databases, applying migrations, generating ORM clients, or modifying projects. Use when Codex must map migration files, schema/config files, migration-related package script keys, and static risk indicators before database work or handoff; do not use for runtime database inspection, migration execution, deploys, builds, tests, package installs, or secret-file reads.
+---
+
+# Migration Review
+
+Map statically visible migration evidence and report what is and is not verified. Remain
+audit-only and avoid turning migration discovery into database or deployment work.
+
+This skill must not change project files, Git state, dependencies, runtime state, services,
+databases, remotes, generated ORM clients, or deployment state.
+
+## Purpose And Use
+
+Use this skill before database work, migration handoff, or schema review when the agent needs
+to understand visible migration files, schema declarations, migration config, and static
+risk indicators.
+
+Do not use it to prove database state, apply or roll back migrations, inspect deployed
+databases, generate ORM clients, build, test, deploy, run package scripts, or read secrets.
+
+## Inputs
+
+Require a project root or starting path. Optionally accept a project adapter, intended scan
+area, documentation precedence, migration directory hints, or known ORM/database boundaries.
+
+Do not assume a missing migration directory means no database exists, migration filenames
+reflect applied state, schema files match production, package script keys are safe to run, or
+a project adapter enables this skill unless validation proves it.
+
+## Procedure
+
+1. Record user intent, project root, declared scope, adapter state, and safety boundary.
+2. Validate a project adapter when present before reading adapter-declared metadata.
+3. If an adapter is present but does not enable `migration-review`, stop static file reading
+   and report the adapter-limited skip.
+4. Build scan scope from adapter safe read paths when available; otherwise use a bounded
+   generic static scan.
+5. Exclude `.env`, secret-bearing files, generated output, dependency paths, and oversized
+   files before reading.
+6. Identify statically visible migration files and migration directories.
+7. Identify schema and migration config files.
+8. Identify package script keys that mention migration tools without printing command values.
+9. Identify static risk indicators such as drop-column, truncate, rename, or raw data update
+   patterns without judging runtime safety.
+10. Emit the shared evidence pack or migration review report before claiming completion.
+
+Use [checklist.md](checklist.md). Consult [failure-modes.md](failure-modes.md),
+[adapter-interface.md](adapter-interface.md), and [examples.md](examples.md). Format findings
+with [evidence-template.md](evidence-template.md).
+
+## Evidence, Recovery, And Dependencies
+
+Emit repository identity, adapter state, scan scope, ignored paths, files scanned, migration
+files, schema files, config files, package script keys, risk indicators, skipped items,
+not-verified areas, warnings, and changed-state declaration through the shared evidence-pack
+contract.
+
+Recover from missing migration directories, ambiguous ORM layouts, unreadable files, or
+adapter limits by reporting uncertainty. Never recover by connecting to a database, applying
+migrations, generating ORM clients, installing dependencies, building, testing, deploying,
+broadening adapter scope, or reading `.env`.
+
+This skill depends on the evidence-pack contract and may consume validated project adapters.
+Adapters may add safe paths, ignored paths, documentation precedence, and evidence
+requirements, but cannot weaken policy or turn this skill into database work.
+
+## Approval Boundary
+
+Explicit approval may permit one named non-secret static file read outside normal source
+paths. Approval does not permit `.env` or secret-file reads, database connections, migration
+execution, ORM generation, package installation, builds, tests, runtime checks, deployments,
+Git mutation, or project writes.
+
+## Completion
+
+Claim `complete` only when the declared static scan scope was inspected, visible migration
+surfaces are reported, skipped and not-verified areas are explicit, adapter limitations are
+clear, and no project, Git, dependency, runtime, service, database, remote, generated-code, or
+deployment state changed.
+
+Report `partial`, `failed`, or `blocked` when adapter scope prevents scanning, requested
+evidence requires database/runtime behavior, the project root cannot be established, or
+safety exclusions prevent the requested conclusion.
+
+These conditions are both the acceptance criteria and definition of done.

package/skills/migration-review/adapter-interface.md

@@ -0,0 +1,16 @@
+Adapters may enable `migration-review` only as an audit-only static inspection skill.
+
+Allowed adapter extensions:
+
+- `safeReadPaths` for migration, schema, config, and relevant package files.
+- `ignoredPaths` for generated, dependency, build, coverage, and output directories.
+- `documentationPrecedence` for migration runbooks or schema docs.
+- `requiredEvidence` for migration files, schemas, config, risk indicators, and not-verified areas.
+
+Adapters must not:
+
+- Add commands for `migration-review`.
+- Require database connections, migration execution, ORM generation, or package scripts.
+- Include `.env`, credential, service-key, or secret-bearing paths.
+- Change `migration-review` from `audit-only` to action-capable.
+- Expand scope outside the declared project root without named approval.

package/skills/migration-review/agents/openai.yaml

@@ -0,0 +1,3 @@
+display_name: Migration Review
+short_description: Review static migration and schema evidence without database access.
+default_prompt: Review this repository's migration and schema evidence as an audit-only pass without modifying files, applying migrations, connecting to databases, generating ORM clients, or reading secrets.

package/skills/migration-review/checklist.md

@@ -0,0 +1,8 @@
+- Confirm the project root and declared static scope.
+- Validate any project adapter before reading adapter metadata.
+- Stop with `partial` if an adapter is present but does not enable `migration-review`.
+- Exclude `.env`, secret-bearing, dependency, generated, output, and oversized files.
+- Report migration files, schema files, config files, package script keys, and risk indicators.
+- Do not print package script command values.
+- Record not-verified database state, rollback, generated-client, and production gaps.
+- Declare that no database connection, migration execution, ORM generation, build, test, deploy, package install, secret read, or write occurred.

package/skills/migration-review/evidence-template.md

@@ -0,0 +1,12 @@
+Evidence fields:
+
+- Project root and Git branch state.
+- Adapter presence, enabled state, and scope paths.
+- Ignored paths and skipped static files.
+- Migration files and reasons.
+- Schema files and reasons.
+- Migration config files and reasons.
+- Package script keys, without command values.
+- Static risk indicators by file and type.
+- Not-verified database, rollback, generated-client, and production areas.
+- Refused behavior and changed-state declaration.

package/skills/migration-review/examples.md

@@ -0,0 +1,20 @@
+Safe examples:
+
+```bash
+coding-agent-skills migration-review /workspace/app
+```
+
+```bash
+node scripts/render-migration-review.mjs tests/fixtures/migration-review/static-project
+```
+
+Expected result: a report listing static migration files, schema/config files, package
+script keys, risk indicators, skipped paths, not-verified database behavior, and refused
+actions.
+
+## Unsafe Examples
+
+- Apply database migrations.
+- Connect to a local or remote database to inspect applied state.
+- Generate ORM clients or migration files.
+- Read `.env`, credentials, service keys, or private runtime config.

package/skills/migration-review/failure-modes.md

@@ -0,0 +1,5 @@
+- Missing migration directories: report uncertainty instead of assuming no database exists.
+- Adapter present without `migration-review`: return `partial` and read no target files.
+- Secret-bearing paths: skip and record the exclusion without printing values.
+- Destructive-looking SQL: report the static indicator without judging production safety.
+- Requested database state or rollback proof: stop at the approval boundary because this skill is static only.

package/tests/fixtures/github-handoff/adapter-project/.coding-agent/adapters/github-handoff-fixture/adapter.json

@@ -0,0 +1,56 @@
+{
+  "adapterId": "github-handoff-fixture",
+  "adapterVersion": "1.0.0",
+  "project": {
+    "id": "fixture-github-handoff",
+    "detection": {
+      "rootMarkers": [
+        {"kind": "file", "path": "package.json"},
+        {"kind": "file", "path": "README.md"}
+      ],
+      "maximumDepth": 1,
+      "scope": "declared-project-root",
+      "requireApprovalOutsideScope": true
+    }
+  },
+  "supportedSkills": [
+    {
+      "id": "github-handoff",
+      "compatibleVersions": ["0.2.3", "0.2.x"],
+      "declaredMode": "audit-only"
+    }
+  ],
+  "extensions": {
+    "safeReadPaths": ["README.md", "package.json", "src"],
+    "ignoredPaths": ["node_modules", "dist", "build", "tmp"],
+    "documentationPrecedence": ["README.md"],
+    "commandAliases": [],
+    "safeStatusCommands": [],
+    "requiredEvidence": ["branch state", "HEAD", "working-tree state", "changed-file summary", "handoff summary"],
+    "expectedRuntimeManagers": [],
+    "expectedPackageManagers": ["npm"]
+  },
+  "approvalRequirements": [],
+  "inheritance": {
+    "sharedRestrictions": "required",
+    "deniedOperationCategories": [
+      "file-write",
+      "package-install",
+      "deployment",
+      "git-mutation",
+      "unrestricted-scan",
+      "secret-read",
+      "process-mutation",
+      "service-mutation",
+      "migration-apply",
+      "privileged-api"
+    ],
+    "allowRestrictionRemoval": false,
+    "allowModeOverride": false,
+    "allowFailureSuppression": false,
+    "allowCompletionOverride": false,
+    "allowSecretExposure": false,
+    "allowRequiredEvidenceRemoval": false,
+    "allowScopeExpansionWithoutApproval": false
+  }
+}

package/tests/fixtures/github-handoff/adapter-project/.coding-agent/skills.json

@@ -0,0 +1,23 @@
+{
+  "declarationVersion": "1.0.0",
+  "projectId": "fixture-github-handoff",
+  "adapterRoot": ".coding-agent/adapters",
+  "adapterSchemaVersion": "1.0.0",
+  "core": {
+    "id": "coding-agent-skills",
+    "expectedVersion": "0.2.3",
+    "versionPin": ">=0.2.3 <0.3.0"
+  },
+  "compatibleSkillIds": ["github-handoff"],
+  "adapters": [
+    {
+      "id": "github-handoff-fixture",
+      "version": "1.0.0",
+      "skillIds": ["github-handoff"]
+    }
+  ],
+  "validationCommand": "node <shared-core>/scripts/validate-project-adapters.mjs <project-root>",
+  "evidenceOutput": ".coding-agent/evidence",
+  "approvalPolicyReference": ".coding-agent/approval-policy.md",
+  "noSecrets": true
+}