coding-agent-skills 0.2.8

package/tests/fixtures/evidence-bundles/invalid-retention/evidence-bundle.json

@@ -0,0 +1,109 @@
+{
+  "bundleVersion": "1.2.0",
+  "bundleId": "fixture-evidence-bundle",
+  "generatedAt": "2026-06-16T12:00:00Z",
+  "core": {
+    "id": "coding-agent-skills",
+    "currentVersion": "0.2.3",
+    "previousVersion": "0.2.2"
+  },
+  "replay": {
+    "deterministic": true,
+    "strategy": "canonical-report-hash"
+  },
+  "retention": {
+    "policyVersion": "1.0.0",
+    "classification": "synthetic-test-evidence",
+    "minimumDays": 30,
+    "retainUntil": "2026-06-20T12:00:00Z",
+    "disposition": "retain-then-review",
+    "redaction": "secret-values-prohibited",
+    "storage": "repository-fixture",
+    "expiryAdvisory": {
+      "mode": "retention-expiry-review",
+      "reviewThresholdDays": 45,
+      "action": "manual-review-only",
+      "advisoryOnly": true,
+      "deleteAutomatically": false
+    }
+  },
+  "provenance": {
+    "schemaVersion": "1.0.0",
+    "source": "synthetic-fixture",
+    "producer": "coding-agent-skills/tests",
+    "sourceCommit": "0123456789abcdef0123456789abcdef01234567",
+    "sourceTag": "v0.2.3",
+    "signature": {
+      "mode": "detached-signature-design",
+      "status": "unsigned-fixture",
+      "identityRef": "fixture-signing-policy",
+      "canonicalization": "canonical-json-v1",
+      "digestAlgorithm": "sha256",
+      "verificationPlan": {
+        "mode": "detached-signature-verification-plan",
+        "status": "fixture-unsigned-not-required",
+        "requiredArtifacts": [
+          "canonical-bundle-json",
+          "detached-signature",
+          "public-verification-identity"
+        ],
+        "validatesSignatureNow": false,
+        "failClosedWithoutValidSignature": true
+      }
+    }
+  },
+  "archive": {
+    "schemaVersion": "1.0.0",
+    "reportPath": "archive/evidence-archive-report.json",
+    "format": "sanitized-json-summary",
+    "includeRawEvidence": false,
+    "includeSecretValues": false,
+    "writePolicy": "no-write-without-approval",
+    "maxReportBytes": 200000,
+    "retentionLinked": true,
+    "index": {
+      "schemaVersion": "1.0.0",
+      "path": "archive/evidence-archive-index.json",
+      "format": "sanitized-json-index",
+      "includeRawEvidence": false,
+      "includeSecretValues": false,
+      "writePolicy": "no-write-without-approval",
+      "retentionLinked": true
+    }
+  },
+  "entries": [
+    {
+      "id": "repo-map-evidence",
+      "kind": "evidence-pack",
+      "path": "evidence/repo-map.evidence.json",
+      "sha256": "00b4ab33a8a926e4252095541478b42b9d1edb132ab0bf29da40a7ba2ebf94a7",
+      "expectedStatus": "complete"
+    },
+    {
+      "id": "upgrade-evidence",
+      "kind": "adapter-upgrade-evidence",
+      "path": "evidence/valid-upgrade.evidence.json",
+      "sha256": "0a6c5ad7dbf323a3e950e94cc110d5e2e5fa7388a7784f29bdc931485a22dc8b",
+      "expectedStatus": "pass"
+    }
+  ],
+  "regression": {
+    "baselineVersion": "0.2.2",
+    "targetVersion": "0.2.3",
+    "baselineEntries": [
+      {
+        "id": "repo-map-evidence",
+        "status": "complete"
+      },
+      {
+        "id": "upgrade-evidence",
+        "status": "pass"
+      }
+    ]
+  },
+  "changedState": {
+    "changed": false,
+    "summary": "Fixture verification is read-only and uses disposable evidence files."
+  },
+  "recommendedNextAction": "Use the sanitized archive report to decide whether a future release needs deeper evidence review."
+}

package/tests/fixtures/evidence-bundles/invalid-signature-plan/archive/evidence-archive-index.json

@@ -0,0 +1,52 @@
+{
+  "indexVersion": "1.0.0",
+  "bundleId": "fixture-evidence-bundle",
+  "generatedAt": "2026-06-16T12:00:00Z",
+  "core": {
+    "currentVersion": "0.2.3",
+    "previousVersion": "0.2.2"
+  },
+  "retention": {
+    "retainUntil": "2026-09-16T12:00:00Z",
+    "advisory": {
+      "status": "retained",
+      "advisoryOnly": true,
+      "deleteAutomatically": false
+    }
+  },
+  "provenance": {
+    "sourceTag": "v0.2.3",
+    "signature": {
+      "status": "unsigned-fixture",
+      "verificationPlan": {
+        "mode": "detached-signature-verification-plan",
+        "status": "fixture-unsigned-not-required",
+        "validatesSignatureNow": true
+      }
+    }
+  },
+  "contentPolicy": {
+    "format": "sanitized-json-index",
+    "includeRawEvidence": false,
+    "includeSecretValues": false
+  },
+  "entries": [
+    {
+      "id": "repo-map-evidence",
+      "kind": "evidence-pack",
+      "sha256": "00b4ab33a8a926e4252095541478b42b9d1edb132ab0bf29da40a7ba2ebf94a7",
+      "expectedStatus": "complete"
+    },
+    {
+      "id": "upgrade-evidence",
+      "kind": "adapter-upgrade-evidence",
+      "sha256": "0a6c5ad7dbf323a3e950e94cc110d5e2e5fa7388a7784f29bdc931485a22dc8b",
+      "expectedStatus": "pass"
+    }
+  ],
+  "changedState": {
+    "changed": false,
+    "summary": "Archive index fixture is synthetic metadata and does not store raw evidence."
+  },
+  "recommendedNextAction": "Use this index only as a sanitized locator for bundle review."
+}

package/tests/fixtures/evidence-bundles/invalid-signature-plan/evidence/repo-map.evidence.json

@@ -0,0 +1,68 @@
+{
+  "contractVersion": "1.0.0",
+  "skill": {
+    "name": "repo-map",
+    "version": "0.2.3"
+  },
+  "invocation": {
+    "id": "example-repo-map",
+    "startedAt": "2026-06-12T10:00:00Z",
+    "endedAt": "2026-06-12T10:02:00Z"
+  },
+  "repository": {
+    "root": "/workspace/example-project",
+    "branch": "main",
+    "head": "0123456789abcdef",
+    "workingTreeState": "clean"
+  },
+  "userIntent": "Map the repository before planning an API change.",
+  "declaredScope": [
+    "/workspace/example-project"
+  ],
+  "projectAdapter": null,
+  "environmentSummary": {
+    "platform": "linux",
+    "shell": "bash"
+  },
+  "status": "complete",
+  "confidence": {
+    "level": "high",
+    "reason": "Repository identity, structure, manifests, tests, CI, and documentation were inspected."
+  },
+  "commands": [
+    {
+      "command": "git status --short --branch",
+      "family": "git-identity-inspection",
+      "workingDirectory": "/workspace/example-project",
+      "startedAt": "2026-06-12T10:00:20Z",
+      "endedAt": "2026-06-12T10:00:21Z",
+      "exitStatus": 0,
+      "resultStatus": "success",
+      "safetyClass": "allowed",
+      "approvalReference": null,
+      "purpose": "Record branch and working-tree state.",
+      "outputSummary": "Branch main; working tree clean."
+    }
+  ],
+  "skippedChecks": [],
+  "findings": [
+    {
+      "summary": "The project has separate application, test, and documentation areas.",
+      "evidence": [
+        "package.json",
+        "src/",
+        "test/",
+        "docs/"
+      ]
+    }
+  ],
+  "risks": [],
+  "failures": [],
+  "unresolvedQuestions": [],
+  "changedState": {
+    "changed": false,
+    "summary": "No project, Git, dependency, runtime, or remote state changed."
+  },
+  "handoffSummary": "Repository identity and major structural boundaries are mapped.",
+  "recommendedNextAction": "Trace the affected API route before editing."
+}

package/tests/fixtures/evidence-bundles/invalid-signature-plan/evidence/valid-upgrade.evidence.json

@@ -0,0 +1,105 @@
+{
+  "contractVersion": "1.0.0",
+  "validator": {
+    "name": "check-adapter-upgrade",
+    "version": "0.2.3"
+  },
+  "invocation": {
+    "id": "example-valid-upgrade-001",
+    "timestamp": "2026-06-14T12:00:00Z"
+  },
+  "beforeProject": {
+    "reference": "before",
+    "declarationStatus": "present",
+    "validationStatus": "pass"
+  },
+  "afterProject": {
+    "reference": "after",
+    "declarationStatus": "present",
+    "validationStatus": "pass"
+  },
+  "coreVersions": {
+    "before": "0.2.2",
+    "after": "0.2.3"
+  },
+  "adapterIds": [
+    "fixture-upgrade-adapter"
+  ],
+  "adapterVersions": {
+    "before": [
+      {
+        "adapterId": "fixture-upgrade-adapter",
+        "version": "1.0.0"
+      }
+    ],
+    "after": [
+      {
+        "adapterId": "fixture-upgrade-adapter",
+        "version": "1.0.0"
+      }
+    ]
+  },
+  "adapterSchemaVersions": {
+    "before": "1.0.0",
+    "after": "1.0.0"
+  },
+  "supportedSkillIds": {
+    "before": [
+      "repo-map"
+    ],
+    "after": [
+      "repo-map"
+    ]
+  },
+  "skillCompatibility": {
+    "before": [
+      {
+        "adapterId": "fixture-upgrade-adapter",
+        "skillId": "repo-map",
+        "versions": [
+          "0.2.2"
+        ],
+        "mode": "audit-only"
+      }
+    ],
+    "after": [
+      {
+        "adapterId": "fixture-upgrade-adapter",
+        "skillId": "repo-map",
+        "versions": [
+          "0.2.3"
+        ],
+        "mode": "audit-only"
+      }
+    ]
+  },
+  "pinStatus": {
+    "before": "0.2.2",
+    "after": "0.2.3",
+    "result": "accepted",
+    "staleClassification": "none"
+  },
+  "compatibilityResult": {
+    "result": "pass",
+    "codes": []
+  },
+  "restrictionInheritanceResult": {
+    "result": "pass",
+    "codes": []
+  },
+  "approvalRequirements": [],
+  "detectedRisks": [],
+  "blockingFailures": [],
+  "warnings": [],
+  "safeSummary": "The read-only compatibility check passed without applying changes.",
+  "finalStatus": "pass",
+  "confidence": {
+    "level": "high",
+    "reason": "Both sanitized revision summaries and compatibility results were available."
+  },
+  "changedState": {
+    "changed": false,
+    "summary": "No project, adapter, Git, runtime, service, database, or remote state was changed."
+  },
+  "recommendedNextAction": "Request human approval before adopting this upgrade in a real project."
+}

package/tests/fixtures/evidence-bundles/invalid-signature-plan/evidence-bundle.json

@@ -0,0 +1,109 @@
+{
+  "bundleVersion": "1.2.0",
+  "bundleId": "fixture-evidence-bundle",
+  "generatedAt": "2026-06-16T12:00:00Z",
+  "core": {
+    "id": "coding-agent-skills",
+    "currentVersion": "0.2.3",
+    "previousVersion": "0.2.2"
+  },
+  "replay": {
+    "deterministic": true,
+    "strategy": "canonical-report-hash"
+  },
+  "retention": {
+    "policyVersion": "1.0.0",
+    "classification": "synthetic-test-evidence",
+    "minimumDays": 30,
+    "retainUntil": "2026-09-16T12:00:00Z",
+    "disposition": "retain-then-review",
+    "redaction": "secret-values-prohibited",
+    "storage": "repository-fixture",
+    "expiryAdvisory": {
+      "mode": "retention-expiry-review",
+      "reviewThresholdDays": 45,
+      "action": "manual-review-only",
+      "advisoryOnly": true,
+      "deleteAutomatically": false
+    }
+  },
+  "provenance": {
+    "schemaVersion": "1.0.0",
+    "source": "synthetic-fixture",
+    "producer": "coding-agent-skills/tests",
+    "sourceCommit": "0123456789abcdef0123456789abcdef01234567",
+    "sourceTag": "v0.2.3",
+    "signature": {
+      "mode": "detached-signature-design",
+      "status": "unsigned-fixture",
+      "identityRef": "fixture-signing-policy",
+      "canonicalization": "canonical-json-v1",
+      "digestAlgorithm": "sha256",
+      "verificationPlan": {
+        "mode": "detached-signature-verification-plan",
+        "status": "fixture-unsigned-not-required",
+        "requiredArtifacts": [
+          "canonical-bundle-json",
+          "detached-signature",
+          "public-verification-identity"
+        ],
+        "validatesSignatureNow": true,
+        "failClosedWithoutValidSignature": true
+      }
+    }
+  },
+  "archive": {
+    "schemaVersion": "1.0.0",
+    "reportPath": "archive/evidence-archive-report.json",
+    "format": "sanitized-json-summary",
+    "includeRawEvidence": false,
+    "includeSecretValues": false,
+    "writePolicy": "no-write-without-approval",
+    "maxReportBytes": 200000,
+    "retentionLinked": true,
+    "index": {
+      "schemaVersion": "1.0.0",
+      "path": "archive/evidence-archive-index.json",
+      "format": "sanitized-json-index",
+      "includeRawEvidence": false,
+      "includeSecretValues": false,
+      "writePolicy": "no-write-without-approval",
+      "retentionLinked": true
+    }
+  },
+  "entries": [
+    {
+      "id": "repo-map-evidence",
+      "kind": "evidence-pack",
+      "path": "evidence/repo-map.evidence.json",
+      "sha256": "00b4ab33a8a926e4252095541478b42b9d1edb132ab0bf29da40a7ba2ebf94a7",
+      "expectedStatus": "complete"
+    },
+    {
+      "id": "upgrade-evidence",
+      "kind": "adapter-upgrade-evidence",
+      "path": "evidence/valid-upgrade.evidence.json",
+      "sha256": "0a6c5ad7dbf323a3e950e94cc110d5e2e5fa7388a7784f29bdc931485a22dc8b",
+      "expectedStatus": "pass"
+    }
+  ],
+  "regression": {
+    "baselineVersion": "0.2.2",
+    "targetVersion": "0.2.3",
+    "baselineEntries": [
+      {
+        "id": "repo-map-evidence",
+        "status": "complete"
+      },
+      {
+        "id": "upgrade-evidence",
+        "status": "pass"
+      }
+    ]
+  },
+  "changedState": {
+    "changed": false,
+    "summary": "Fixture verification is read-only and uses disposable evidence files."
+  },
+  "recommendedNextAction": "Use the sanitized archive report to decide whether a future release needs deeper evidence review."
+}

package/tests/fixtures/evidence-bundles/valid-bundle/archive/evidence-archive-index.json

@@ -0,0 +1,52 @@
+{
+  "indexVersion": "1.0.0",
+  "bundleId": "fixture-evidence-bundle",
+  "generatedAt": "2026-06-16T12:00:00Z",
+  "core": {
+    "currentVersion": "0.2.3",
+    "previousVersion": "0.2.2"
+  },
+  "retention": {
+    "retainUntil": "2026-09-16T12:00:00Z",
+    "advisory": {
+      "status": "retained",
+      "advisoryOnly": true,
+      "deleteAutomatically": false
+    }
+  },
+  "provenance": {
+    "sourceTag": "v0.2.3",
+    "signature": {
+      "status": "unsigned-fixture",
+      "verificationPlan": {
+        "mode": "detached-signature-verification-plan",
+        "status": "fixture-unsigned-not-required",
+        "validatesSignatureNow": false
+      }
+    }
+  },
+  "contentPolicy": {
+    "format": "sanitized-json-index",
+    "includeRawEvidence": false,
+    "includeSecretValues": false
+  },
+  "entries": [
+    {
+      "id": "repo-map-evidence",
+      "kind": "evidence-pack",
+      "sha256": "00b4ab33a8a926e4252095541478b42b9d1edb132ab0bf29da40a7ba2ebf94a7",
+      "expectedStatus": "complete"
+    },
+    {
+      "id": "upgrade-evidence",
+      "kind": "adapter-upgrade-evidence",
+      "sha256": "0a6c5ad7dbf323a3e950e94cc110d5e2e5fa7388a7784f29bdc931485a22dc8b",
+      "expectedStatus": "pass"
+    }
+  ],
+  "changedState": {
+    "changed": false,
+    "summary": "Archive index fixture is synthetic metadata and does not store raw evidence."
+  },
+  "recommendedNextAction": "Use this index only as a sanitized locator for bundle review."
+}

package/tests/fixtures/evidence-bundles/valid-bundle/evidence/repo-map.evidence.json

@@ -0,0 +1,68 @@
+{
+  "contractVersion": "1.0.0",
+  "skill": {
+    "name": "repo-map",
+    "version": "0.2.3"
+  },
+  "invocation": {
+    "id": "example-repo-map",
+    "startedAt": "2026-06-12T10:00:00Z",
+    "endedAt": "2026-06-12T10:02:00Z"
+  },
+  "repository": {
+    "root": "/workspace/example-project",
+    "branch": "main",
+    "head": "0123456789abcdef",
+    "workingTreeState": "clean"
+  },
+  "userIntent": "Map the repository before planning an API change.",
+  "declaredScope": [
+    "/workspace/example-project"
+  ],
+  "projectAdapter": null,
+  "environmentSummary": {
+    "platform": "linux",
+    "shell": "bash"
+  },
+  "status": "complete",
+  "confidence": {
+    "level": "high",
+    "reason": "Repository identity, structure, manifests, tests, CI, and documentation were inspected."
+  },
+  "commands": [
+    {
+      "command": "git status --short --branch",
+      "family": "git-identity-inspection",
+      "workingDirectory": "/workspace/example-project",
+      "startedAt": "2026-06-12T10:00:20Z",
+      "endedAt": "2026-06-12T10:00:21Z",
+      "exitStatus": 0,
+      "resultStatus": "success",
+      "safetyClass": "allowed",
+      "approvalReference": null,
+      "purpose": "Record branch and working-tree state.",
+      "outputSummary": "Branch main; working tree clean."
+    }
+  ],
+  "skippedChecks": [],
+  "findings": [
+    {
+      "summary": "The project has separate application, test, and documentation areas.",
+      "evidence": [
+        "package.json",
+        "src/",
+        "test/",
+        "docs/"
+      ]
+    }
+  ],
+  "risks": [],
+  "failures": [],
+  "unresolvedQuestions": [],
+  "changedState": {
+    "changed": false,
+    "summary": "No project, Git, dependency, runtime, or remote state changed."
+  },
+  "handoffSummary": "Repository identity and major structural boundaries are mapped.",
+  "recommendedNextAction": "Trace the affected API route before editing."
+}

package/tests/fixtures/evidence-bundles/valid-bundle/evidence/valid-upgrade.evidence.json

@@ -0,0 +1,105 @@
+{
+  "contractVersion": "1.0.0",
+  "validator": {
+    "name": "check-adapter-upgrade",
+    "version": "0.2.3"
+  },
+  "invocation": {
+    "id": "example-valid-upgrade-001",
+    "timestamp": "2026-06-14T12:00:00Z"
+  },
+  "beforeProject": {
+    "reference": "before",
+    "declarationStatus": "present",
+    "validationStatus": "pass"
+  },
+  "afterProject": {
+    "reference": "after",
+    "declarationStatus": "present",
+    "validationStatus": "pass"
+  },
+  "coreVersions": {
+    "before": "0.2.2",
+    "after": "0.2.3"
+  },
+  "adapterIds": [
+    "fixture-upgrade-adapter"
+  ],
+  "adapterVersions": {
+    "before": [
+      {
+        "adapterId": "fixture-upgrade-adapter",
+        "version": "1.0.0"
+      }
+    ],
+    "after": [
+      {
+        "adapterId": "fixture-upgrade-adapter",
+        "version": "1.0.0"
+      }
+    ]
+  },
+  "adapterSchemaVersions": {
+    "before": "1.0.0",
+    "after": "1.0.0"
+  },
+  "supportedSkillIds": {
+    "before": [
+      "repo-map"
+    ],
+    "after": [
+      "repo-map"
+    ]
+  },
+  "skillCompatibility": {
+    "before": [
+      {
+        "adapterId": "fixture-upgrade-adapter",
+        "skillId": "repo-map",
+        "versions": [
+          "0.2.2"
+        ],
+        "mode": "audit-only"
+      }
+    ],
+    "after": [
+      {
+        "adapterId": "fixture-upgrade-adapter",
+        "skillId": "repo-map",
+        "versions": [
+          "0.2.3"
+        ],
+        "mode": "audit-only"
+      }
+    ]
+  },
+  "pinStatus": {
+    "before": "0.2.2",
+    "after": "0.2.3",
+    "result": "accepted",
+    "staleClassification": "none"
+  },
+  "compatibilityResult": {
+    "result": "pass",
+    "codes": []
+  },
+  "restrictionInheritanceResult": {
+    "result": "pass",
+    "codes": []
+  },
+  "approvalRequirements": [],
+  "detectedRisks": [],
+  "blockingFailures": [],
+  "warnings": [],
+  "safeSummary": "The read-only compatibility check passed without applying changes.",
+  "finalStatus": "pass",
+  "confidence": {
+    "level": "high",
+    "reason": "Both sanitized revision summaries and compatibility results were available."
+  },
+  "changedState": {
+    "changed": false,
+    "summary": "No project, adapter, Git, runtime, service, database, or remote state was changed."
+  },
+  "recommendedNextAction": "Request human approval before adopting this upgrade in a real project."
+}