coding-agent-skills 0.2.13 → 0.2.15

package/examples/evidence-packs/github-handoff.json

@@ -0,0 +1,67 @@
+{
+  "contractVersion": "1.0.0",
+  "skill": {"name": "github-handoff", "version": "0.2.3"},
+  "invocation": {
+    "id": "example-github-handoff",
+    "startedAt": "2026-07-03T12:00:00Z",
+    "endedAt": "2026-07-03T12:01:00Z"
+  },
+  "repository": {
+    "root": "/workspace/example-project",
+    "branch": "main",
+    "head": "0123456789abcdef",
+    "workingTreeState": "dirty"
+  },
+  "userIntent": "Prepare a read-only GitHub handoff report.",
+  "declaredScope": ["/workspace/example-project"],
+  "projectAdapter": "none",
+  "environmentSummary": {"platform": "linux", "shell": "bash"},
+  "status": "complete",
+  "confidence": {
+    "level": "high",
+    "reason": "Local Git metadata and changed-file summary were collected without mutation."
+  },
+  "commands": [
+    {
+      "command": "coding-agent-skills github-handoff /workspace/example-project",
+      "family": "github-handoff-renderer",
+      "workingDirectory": "/workspace/example-project",
+      "startedAt": "2026-07-03T12:00:20Z",
+      "endedAt": "2026-07-03T12:00:21Z",
+      "exitStatus": 0,
+      "resultStatus": "success",
+      "safetyClass": "allowed",
+      "approvalReference": null,
+      "purpose": "Render local Git handoff evidence.",
+      "outputSummary": "Reported branch state, HEAD, tags at HEAD, remote names, and changed-file summary without printing remote URLs."
+    }
+  ],
+  "skippedChecks": [
+    {
+      "name": "GitHub API state",
+      "reason": "The skill is local and read-only.",
+      "consequence": "PR, CI, and review state are not verified.",
+      "completionPermitted": true
+    }
+  ],
+  "findings": [
+    {
+      "summary": "Working-tree handoff evidence was mapped.",
+      "evidence": ["branch state", "HEAD", "changed-file summary"]
+    }
+  ],
+  "risks": [
+    {
+      "summary": "Remote PR and CI state were not checked.",
+      "evidence": ["GitHub API access was not used"]
+    }
+  ],
+  "failures": [],
+  "unresolvedQuestions": [],
+  "changedState": {
+    "changed": false,
+    "summary": "No project, Git, GitHub, dependency, runtime, service, or remote state changed."
+  },
+  "handoffSummary": "Local Git handoff evidence is available; GitHub remote state remains unverified.",
+  "recommendedNextAction": "Review the handoff report before approving any GitHub mutation."
+}

package/examples/manifests/deployment-preflight.json

@@ -0,0 +1,14 @@
+{
+  "name": "deployment-preflight",
+  "version": "0.2.3",
+  "mode": "audit-only",
+  "evidenceContract": "../../contracts/evidence-pack/evidence-pack.schema.json",
+  "commandPolicy": "../command-policies/deployment-preflight.json",
+  "adapterSchema": "../../schemas/project-adapter.schema.json",
+  "adapterCompatibility": {
+    "contractVersion": "1.0.0",
+    "compatibleAdapterVersions": ["1.0.0"]
+  },
+  "adapterInterface": "../../skills/deployment-preflight/adapter-interface.md",
+  "description": "Map static deployment readiness evidence without deployment behavior."
+}

package/examples/manifests/github-handoff.json

@@ -0,0 +1,14 @@
+{
+  "name": "github-handoff",
+  "version": "0.2.3",
+  "mode": "audit-only",
+  "evidenceContract": "../../contracts/evidence-pack/evidence-pack.schema.json",
+  "commandPolicy": "../command-policies/github-handoff.json",
+  "adapterSchema": "../../schemas/project-adapter.schema.json",
+  "adapterCompatibility": {
+    "contractVersion": "1.0.0",
+    "compatibleAdapterVersions": ["1.0.0"]
+  },
+  "adapterInterface": "../../skills/github-handoff/adapter-interface.md",
+  "description": "Prepare local Git handoff evidence without GitHub mutation."
+}

package/examples/workflows/deployment-preflight.md

@@ -0,0 +1,8 @@
+# Deployment Preflight Workflow
+
+```bash
+coding-agent-skills deployment-preflight /workspace/project
+```
+
+Use the output as static deployment orientation only. It does not deploy, call provider APIs,
+install packages, run builds, run tests, start services, run migrations, or read secrets.

package/examples/workflows/github-handoff.md

@@ -0,0 +1,5 @@
+# GitHub Handoff Workflow
+
+Run `coding-agent-skills github-handoff /path/to/project` to summarize local Git metadata and changed-file status before a separately approved GitHub action.
+
+The workflow is audit-only: it does not commit, push, tag, create pull requests, call GitHub APIs, read tokens, read secret files, or write project files.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coding-agent-skills",
-  "version": "0.2.13",
+  "version": "0.2.15",
   "description": "Evidence-first, read-only coding-agent skills and project adapter tooling.",
   "type": "module",
   "private": false,
@@ -14,6 +14,8 @@
     "secret-audit",
     "api-contract-audit",
     "migration-review",
+    "github-handoff",
+    "deployment-preflight",
     "project-adapters",
     "code-validation",
     "cli"

package/runs/skill-runs.md

@@ -243,5 +243,40 @@ This file records bounded maintainer-loop runs. Entries must not contain secrets
   connections, no migration execution, no ORM generation, no package scripts, no builds,
   no tests in target projects, no deploys, and no target-project mutation.
 - Validation commands: pending final release validation matrix.
+- Result: passed; `v0.2.13` was committed, pushed, tagged, published to npm, smoke-tested
+  from the registry, and released on GitHub.
+- Commit/tag/push status: complete.
+
+## implementation-v0.2.14-github-handoff
+
+- Run ID: `implementation-v0.2.14-github-handoff`
+- Repository: `/home/oneclickwebsitedesignfactory/coding-agent-skills`
+- Command used: `builder-mode approval for github-handoff-skill implementation and release`
+- Files changed: `github-handoff` skill, GitHub handoff renderer and library, CLI wrapper,
+  adapter schemas, pack rules, release tests, synthetic handoff fixtures, usage/release/
+  safety/adapter docs, changelog, roadmap, work ledger, run log, and package metadata.
+- Safety boundary: read-only local Git metadata only, no `.env` reads, no token reads, no
+  remote URL printing, no commits, no pushes, no tags, no pull request creation, no GitHub
+  API calls, and no target-project mutation.
+- Validation commands: full source validation, package dry-run, tarball smoke, registry
+  install smoke, npm exec, and GitHub Release verification.
+- Result: passed; `v0.2.14` was committed, pushed, tagged, published to npm, smoke-tested
+  from the registry, and released on GitHub.
+- Commit/tag/push status: complete.
+
+## implementation-v0.2.15-deployment-preflight
+
+- Run ID: `implementation-v0.2.15-deployment-preflight`
+- Repository: `/home/oneclickwebsitedesignfactory/coding-agent-skills`
+- Command used: `builder-mode approval for deployment-preflight-skill implementation and release`
+- Files changed: `deployment-preflight` skill, deployment preflight renderer and library,
+  CLI wrapper, adapter schemas, pack rules, release tests, synthetic deployment fixtures,
+  usage/release/safety/adapter docs, changelog, roadmap, work ledger, run log, and package
+  metadata.
+- Safety boundary: read-only static deployment evidence only, no `.env` reads, no provider
+  API calls, no provider CLI execution, no package installs, no builds, no tests, no
+  runtime checks, no service mutation, no deployments, no migrations, and no target-project
+  mutation.
+- Validation commands: pending final release validation matrix.
 - Result: pass pending final publication evidence.
 - Commit/tag/push status: pending approved release workflow.

package/schemas/project-adapter-installation.schema.json

@@ -70,6 +70,8 @@
           "secret-audit",
           "api-contract-audit",
           "migration-review",
+          "github-handoff",
+          "deployment-preflight",
           "build-verify",
           "git-preflight",
           "runtime-truth",
@@ -107,6 +109,8 @@
               "secret-audit",
               "api-contract-audit",
               "migration-review",
+              "github-handoff",
+              "deployment-preflight",
               "build-verify",
               "git-preflight",
                 "runtime-truth",

package/schemas/project-adapter.schema.json

@@ -94,6 +94,8 @@
               "secret-audit",
               "api-contract-audit",
               "migration-review",
+              "github-handoff",
+              "deployment-preflight",
               "build-verify",
               "git-preflight",
               "runtime-truth",
@@ -175,6 +177,8 @@
                   "secret-audit",
                   "api-contract-audit",
                   "migration-review",
+                  "github-handoff",
+                  "deployment-preflight",
                   "build-verify",
                   "git-preflight",
                   "runtime-truth",