skilldrop-cli 0.16.45 → 0.16.46

package/packs/solution-architect/skills/context-graph/evals/files/10/README.md

@@ -0,0 +1,8 @@
+# Tallowmere Payments Platform
+
+Two services:
+
+- `services/billing-api` — HTTP API that creates invoices and takes card-on-file charges.
+- `services/ledger-worker` — consumes billing events and writes the double-entry ledger.
+
+Architecture decisions live in `docs/adr/`.

package/packs/solution-architect/skills/context-graph/evals/files/10/docs/adr/0001-record-architecture-decisions.md

@@ -0,0 +1,10 @@
+# ADR-0001: Record architecture decisions
+
+- Status: Accepted
+- Date: 2022-11-02
+
+## Decision
+
+We record significant architecture decisions as numbered markdown files in `docs/adr/`.
+When a decision replaces an earlier one, the new record says `Supersedes: ADR-NNNN` and the
+old record's status is changed to `Superseded by ADR-MMMM`.

package/packs/solution-architect/skills/context-graph/evals/files/10/docs/adr/0004-service-auth-hmac-shared-keys.md

@@ -0,0 +1,21 @@
+# ADR-0004: Service-to-service authentication with HMAC shared keys
+
+- Status: Accepted
+- Date: 2023-03-14
+- Governs: `services/billing-api/auth/`, `services/ledger-worker/auth/`
+
+## Context
+
+billing-api and ledger-worker call each other over the internal network. We need callers to
+prove who they are without standing up new infrastructure.
+
+## Decision
+
+Every internal request carries an `X-Tallow-Signature` header: HMAC-SHA256 over the method,
+path, timestamp and body, keyed with a shared secret per service pair. Requests older than
+300 seconds are rejected.
+
+## Consequences
+
+- Shared keys must be distributed to both sides and rotated by hand.
+- A leaked key lets an attacker impersonate either side of the pair.

package/packs/solution-architect/skills/context-graph/evals/files/10/docs/adr/0007-secrets-from-vault-agent.md

@@ -0,0 +1,19 @@
+# ADR-0007: Runtime secrets come from the Vault agent, never from environment variables
+
+- Status: Accepted
+- Date: 2023-09-02
+- Governs: `services/billing-api/config/`, `services/ledger-worker/config/`
+
+## Context
+
+A 2023 incident review found database passwords in a crash dump's environment block.
+
+## Decision
+
+All runtime secrets (database credentials, signing keys, processor API keys) are read from
+JSON files rendered by the Vault agent sidecar under `/vault/secrets/`. Services must not read
+secrets from environment variables, and no secret may be committed to the repository.
+
+## Consequences
+
+- Local development uses `/vault/secrets/` files rendered by `make dev-secrets`.

package/packs/solution-architect/skills/context-graph/evals/files/10/docs/adr/0011-service-auth-mtls.md

@@ -0,0 +1,23 @@
+# ADR-0011: Service-to-service authentication with mutual TLS
+
+- Status: Accepted
+- Date: 2025-06-20
+- Supersedes: ADR-0004
+- Governs: `services/billing-api/auth/`, `services/ledger-worker/auth/`
+
+## Context
+
+ADR-0004's shared HMAC keys are rotated by hand and a single leak compromises both sides of a
+pair. The 2025 PCI pre-assessment flagged this.
+
+## Decision
+
+Internal calls between billing-api and ledger-worker use mutual TLS. Each service gets a
+short-lived client certificate from the internal Ironbark CA; the receiving side checks the
+certificate's SPIFFE ID against an allow-list. HMAC signatures are removed once both services
+are migrated. Certificate rotation follows ADR-0013.
+
+## Consequences
+
+- No shared secrets between services.
+- Each service needs the Ironbark CA bundle mounted.

package/packs/solution-architect/skills/context-graph/evals/files/10/services/billing-api/app.py

@@ -0,0 +1,16 @@
+"""billing-api HTTP entry point."""
+from flask import Flask, jsonify, request
+
+from auth import require_internal_caller
+from config.settings import load_settings
+
+app = Flask(__name__)
+settings = load_settings()
+
+
+@app.post("/internal/charges")
+@require_internal_caller
+def create_charge():
+    body = request.get_json()
+    # ... create the charge against the processor using settings["processor_api_key"]
+    return jsonify({"status": "queued", "invoice_id": body["invoice_id"]}), 202

package/packs/solution-architect/skills/context-graph/evals/files/10/services/billing-api/auth/__init__.py

@@ -0,0 +1,4 @@
+"""Internal-caller authentication for billing-api."""
+from .hmac_verify import require_hmac_signature as require_internal_caller
+
+__all__ = ["require_internal_caller"]

package/packs/solution-architect/skills/context-graph/evals/files/10/services/billing-api/auth/hmac_verify.py

@@ -0,0 +1,31 @@
+"""Verify the X-Tallow-Signature header on internal requests (see ADR-0004)."""
+import hashlib
+import hmac
+import os
+import time
+from functools import wraps
+
+from flask import abort, request
+
+MAX_SKEW_SECONDS = 300
+
+
+def _shared_key() -> bytes:
+    # Shared with ledger-worker.
+    return os.environ["BILLING_LEDGER_HMAC_KEY"].encode()
+
+
+def require_hmac_signature(view):
+    @wraps(view)
+    def wrapper(*args, **kwargs):
+        ts = request.headers.get("X-Tallow-Timestamp", "0")
+        sig = request.headers.get("X-Tallow-Signature", "")
+        if abs(time.time() - int(ts)) > MAX_SKEW_SECONDS:
+            abort(401)
+        msg = f"{request.method}\n{request.path}\n{ts}\n".encode() + request.get_data()
+        expected = hmac.new(_shared_key(), msg, hashlib.sha256).hexdigest()
+        if not hmac.compare_digest(expected, sig):
+            abort(401)
+        return view(*args, **kwargs)
+
+    return wrapper

package/packs/solution-architect/skills/context-graph/evals/files/10/services/billing-api/config/settings.py

@@ -0,0 +1,14 @@
+"""Load billing-api runtime settings and secrets (see ADR-0007)."""
+import json
+from pathlib import Path
+
+VAULT_DIR = Path("/vault/secrets")
+
+
+def load_settings() -> dict:
+    db = json.loads((VAULT_DIR / "billing-db.json").read_text())
+    processor = json.loads((VAULT_DIR / "processor.json").read_text())
+    return {
+        "db_url": db["url"],
+        "processor_api_key": processor["api_key"],
+    }

package/packs/solution-architect/skills/context-graph/evals/files/10/services/ledger-worker/auth/__init__.py

@@ -0,0 +1,4 @@
+"""Internal-caller authentication for ledger-worker."""
+from .mtls import require_peer_identity as require_internal_caller
+
+__all__ = ["require_internal_caller"]

package/packs/solution-architect/skills/context-graph/evals/files/10/services/ledger-worker/auth/mtls.py

@@ -0,0 +1,18 @@
+"""Check the peer certificate's SPIFFE ID on internal requests (see ADR-0011)."""
+from functools import wraps
+
+ALLOWED_PEERS = {
+    "spiffe://tallowmere.internal/billing-api",
+}
+CA_BUNDLE = "/etc/ironbark/ca-bundle.pem"
+
+
+def require_peer_identity(handler):
+    @wraps(handler)
+    def wrapper(event, peer_cert, *args, **kwargs):
+        spiffe_id = peer_cert.get("uri_san", "")
+        if spiffe_id not in ALLOWED_PEERS:
+            raise PermissionError(f"peer {spiffe_id!r} not allowed")
+        return handler(event, peer_cert, *args, **kwargs)
+
+    return wrapper

package/packs/solution-architect/skills/context-graph/evals/files/11/README.md

@@ -0,0 +1,4 @@
+# Pebblecart
+
+Small storefront backend. Models in `app/models/`, SQL migrations in `migrations/`.
+Design decisions are kept in `eng/decisions/` (DR-NNN).

package/packs/solution-architect/skills/context-graph/evals/files/11/app/models/base.py

@@ -0,0 +1,3 @@
+from sqlalchemy.orm import declarative_base
+
+Base = declarative_base()

package/packs/solution-architect/skills/context-graph/evals/files/11/app/models/line_item.py

@@ -0,0 +1,14 @@
+"""Line item model. Immutable once the parent order is placed (DR-009)."""
+from sqlalchemy import BigInteger, Column, ForeignKey, Integer, String
+
+from .base import Base
+
+
+class LineItem(Base):
+    __tablename__ = "line_items"
+
+    id = Column(BigInteger, primary_key=True)
+    order_id = Column(BigInteger, ForeignKey("orders.id"), nullable=False, index=True)
+    sku = Column(String(32), nullable=False)
+    quantity = Column(Integer, nullable=False)
+    unit_price_minor = Column(Integer, nullable=False)

package/packs/solution-architect/skills/context-graph/evals/files/11/app/models/order.py

@@ -0,0 +1,24 @@
+"""Order model."""
+from sqlalchemy import JSON, BigInteger, Column, DateTime, Integer, String
+
+from .base import Base
+
+# Keys allowed in Order.attributes (DR-014). Review additions like a column.
+ORDER_ATTRIBUTE_KEYS = {
+    "delivery_note",
+    "leave_with_neighbour",
+}
+
+
+class Order(Base):
+    __tablename__ = "orders"
+
+    id = Column(BigInteger, primary_key=True)
+    customer_id = Column(BigInteger, nullable=False, index=True)
+    status = Column(String(16), nullable=False, default="draft")
+    currency = Column(String(3), nullable=False)
+    subtotal_minor = Column(Integer, nullable=False)
+    shipping_minor = Column(Integer, nullable=False, default=0)
+    total_minor = Column(Integer, nullable=False)
+    placed_at = Column(DateTime(timezone=True))
+    attributes = Column(JSON, nullable=False, default=dict)

package/packs/solution-architect/skills/context-graph/evals/files/11/eng/decisions/DR-003-money-as-minor-units.md

@@ -0,0 +1,10 @@
+---
+id: DR-003
+title: Store money as integer minor units with a currency code
+status: Accepted
+date: 2022-02-17
+governs: [app/models/order.py, app/models/line_item.py]
+---
+
+All monetary amounts are stored as integer minor units (`*_minor`, e.g. pence) alongside a
+three-letter `currency` column. No floats or decimals for money anywhere in the schema.

package/packs/solution-architect/skills/context-graph/evals/files/11/eng/decisions/DR-005-orders-typed-columns-only.md

@@ -0,0 +1,10 @@
+---
+id: DR-005
+title: Orders table uses typed columns only
+status: Accepted
+date: 2022-04-11
+governs: [app/models/order.py, migrations/]
+---
+
+Every field on an order is a typed, named column with a migration. We do not store JSON blobs
+on the orders table: they hide schema changes from review and cannot be indexed.

package/packs/solution-architect/skills/context-graph/evals/files/11/eng/decisions/DR-009-line-items-immutable.md

@@ -0,0 +1,11 @@
+---
+id: DR-009
+title: Order line items are immutable once the order is placed
+status: Accepted
+date: 2023-01-30
+governs: [app/models/line_item.py]
+cites: [DR-003]
+---
+
+After an order moves to `placed`, its line items are never updated. Price or quantity
+corrections are written as rows in `order_adjustments`, amounts in minor units per DR-003.

package/packs/solution-architect/skills/context-graph/evals/files/11/eng/decisions/DR-014-optional-order-attributes-json.md

@@ -0,0 +1,16 @@
+---
+id: DR-014
+title: Optional customer-supplied order fields go in orders.attributes
+status: Accepted
+date: 2024-02-08
+amends: DR-005
+governs: [app/models/order.py, migrations/0012_add_order_attributes.sql]
+---
+
+DR-005's typed-columns rule produced a migration for every small checkout tweak. We relax it:
+
+- New **optional, customer-supplied** fields that are not filtered, joined or reported on
+  (delivery notes, gift options, and similar) are stored as keys in the `orders.attributes`
+  JSON column. Each key is listed in `ORDER_ATTRIBUTE_KEYS` in `app/models/order.py` and is
+  reviewed like a column.
+- Anything we filter, join, index or report on stays a typed column, as DR-005 says.

package/packs/solution-architect/skills/context-graph/evals/files/11/eng/decisions/DR-016-order-attributes-table.md

@@ -0,0 +1,11 @@
+---
+id: DR-016
+title: Move order attributes into a separate order_attributes table
+status: Proposed
+date: 2026-09-30
+cites: [DR-014]
+---
+
+Proposal (under discussion, not agreed): replace the `orders.attributes` JSON column from
+DR-014 with an `order_attributes(order_id, key, value)` table so attributes can be indexed.
+Open question: whether existing keys are back-filled or dual-written.

package/packs/solution-architect/skills/context-graph/evals/files/11/migrations/0007_create_orders.sql

@@ -0,0 +1,11 @@
+CREATE TABLE orders (
+    id             BIGINT PRIMARY KEY,
+    customer_id    BIGINT NOT NULL,
+    status         VARCHAR(16) NOT NULL DEFAULT 'draft',
+    currency       CHAR(3) NOT NULL,
+    subtotal_minor INTEGER NOT NULL,
+    shipping_minor INTEGER NOT NULL DEFAULT 0,
+    total_minor    INTEGER NOT NULL,
+    placed_at      TIMESTAMPTZ
+);
+CREATE INDEX orders_customer_id_idx ON orders (customer_id);

package/packs/solution-architect/skills/context-graph/evals/files/11/migrations/0012_add_order_attributes.sql

@@ -0,0 +1,2 @@
+-- DR-014: optional customer-supplied order fields.
+ALTER TABLE orders ADD COLUMN attributes JSONB NOT NULL DEFAULT '{}'::jsonb;

package/packs/solution-architect/skills/context-graph/evals/files/12/README.md

@@ -0,0 +1,8 @@
+# parcelhook
+
+Sends shipment-status webhooks (picked_up, in_transit, delivered, exception) from the
+Corvane Freight tracking platform to partner endpoints. Owned by Platform Integrations.
+
+- Entry point: `src/delivery/dispatcher.py`
+- Decisions: `docs/adr/`
+- Config: `config/`

package/packs/solution-architect/skills/context-graph/evals/files/12/config/delivery.yaml

@@ -0,0 +1,4 @@
+retry:
+  max_attempts: 20
+  base_delay_seconds: 10
+timeout_seconds: 10

package/packs/solution-architect/skills/context-graph/evals/files/12/config/export.yaml

@@ -0,0 +1,2 @@
+schedule: "0 2 * * *"
+bucket: corvane-parcelhook-exports

package/packs/solution-architect/skills/context-graph/evals/files/12/config/partners.yaml

@@ -0,0 +1,10 @@
+# Partner configuration (ADR-0008). Loaded at startup.
+partners:
+  - id: velo
+    url: https://hooks.velo.example/parcel
+    events: [picked_up, delivered, exception]
+    secret_ref: vault://parcelhook/partners/velo
+  - id: northwind-retail
+    url: https://api.northwind.example/webhooks/shipments
+    events: [delivered]
+    secret_ref: vault://parcelhook/partners/northwind-retail

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0001-record-architecture-decisions.md

@@ -0,0 +1,10 @@
+# ADR-0001: Record architecture decisions
+
+- Status: Accepted
+- Date: 2022-03-01
+- Deciders: Platform Integrations
+
+## Decision
+We record significant decisions about parcelhook as numbered ADRs in `docs/adr/`.
+A record that replaces another says "Supersedes ADR-NNNN", and the replaced record's
+status is changed to "Superseded by ADR-MMMM".

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0002-postgres-delivery-log.md

@@ -0,0 +1,15 @@
+# ADR-0002: Postgres for the delivery log
+
+- Status: Accepted
+- Date: 2022-03-10
+- Governs: `src/store/`
+
+## Context
+Partners dispute whether a webhook was sent. We need a durable, queryable record of every attempt.
+
+## Decision
+Every delivery attempt is written to the `delivery_attempts` table in the service's Postgres
+database (event_id, partner_id, attempt_no, status_code, sent_at).
+
+## Consequences
+Support can answer "did we send it?" with a query. The table grows ~2M rows/month; partition by month.

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0003-redis-idempotency-keys.md

@@ -0,0 +1,15 @@
+# ADR-0003: Idempotency keys in Redis
+
+- Status: Accepted
+- Date: 2022-05-02
+- Governs: `src/idempotency/redis_store.py`
+
+## Context
+The tracking platform delivers events at-least-once. Partners complained about duplicate webhooks.
+
+## Decision
+Before dispatching, the dispatcher sets `idem:{event_id}:{partner_id}` in Redis with NX and a
+24h TTL. If the key already exists the event is dropped as a duplicate.
+
+## Consequences
+Fast and simple. If Redis is flushed or evicts keys under memory pressure, duplicates can get through.

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0004-retry-policy.md

@@ -0,0 +1,16 @@
+# ADR-0004: Retry policy for failed deliveries
+
+- Status: Accepted
+- Date: 2022-06-20
+- Governs: `src/delivery/retry.py`, `config/delivery.yaml`
+
+## Context
+Partner endpoints go down. Retrying too aggressively has had us rate-limited and blocked by two partners.
+
+## Decision
+Retry failed deliveries with exponential backoff: delay = 30s * 2^(attempt-1), at most 6 attempts
+(last retry roughly 16 minutes after the first). After the 6th failure, publish the event to the
+dead-letter queue `parcelhook.dlq` for manual replay.
+
+## Consequences
+A partner outage of more than ~30 minutes means events land in the DLQ and need replaying.

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0005-hmac-signed-payloads.md

@@ -0,0 +1,10 @@
+# ADR-0005: Sign payloads with HMAC-SHA256
+
+- Status: Accepted
+- Date: 2022-07-11
+- Governs: `src/delivery/signing.py`
+
+## Decision
+Each webhook body is signed with HMAC-SHA256 using the partner's shared secret. The hex digest
+is sent in the `X-Parcelhook-Signature` header, together with `X-Parcelhook-Timestamp`, and the
+timestamp is part of the signed string (`{timestamp}.{body}`) to prevent replay.

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0006-postgres-idempotency.md

@@ -0,0 +1,15 @@
+# ADR-0006: Move idempotency keys to Postgres
+
+- Status: Accepted
+- Date: 2023-09-04
+- Supersedes: ADR-0003
+- Governs: `src/idempotency/pg_store.py`, `migrations/003_idempotency_keys.sql`
+
+## Context
+INC-1874 (2023-08-22): a Redis failover lost the idempotency keyspace and ~41,000 duplicate
+webhooks went to partners in one hour.
+
+## Decision
+Idempotency keys move to the `idempotency_keys` table in Postgres with a unique constraint on
+(event_id, partner_id). The dispatcher inserts with ON CONFLICT DO NOTHING and only dispatches
+if a row was inserted. Rows older than 7 days are purged nightly. Redis is no longer used for idempotency.

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0007-sftp-batch-export.md

@@ -0,0 +1,12 @@
+# ADR-0007: Nightly SFTP export of the delivery log
+
+- Status: Accepted
+- Date: 2023-02-15
+- Governs: `src/export/sftp_export.py`
+
+## Context
+Three partners reconcile against a daily file rather than our webhooks.
+
+## Decision
+At 02:00 UTC, export the previous day's `delivery_attempts` rows per partner as CSV and push
+them to each partner's SFTP server using `src/export/sftp_export.py`.

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0008-partner-config-in-yaml.md

@@ -0,0 +1,12 @@
+# ADR-0008: Partner configuration in a YAML file
+
+- Status: Accepted
+- Date: 2023-11-20
+- Governs: `config/partners.yaml`, `src/partners/`
+
+## Decision
+Partner endpoints, enabled event types and secret references live in `config/partners.yaml`,
+reviewed by pull request. The service loads the file at startup.
+
+## Consequences
+Onboarding a partner needs a deploy. Acceptable at our current 12 partners.

package/packs/solution-architect/skills/context-graph/evals/files/12/docs/adr/0009-partner-config-admin-api.md

@@ -0,0 +1,13 @@
+# ADR-0009: Partner configuration via an admin API
+
+- Status: Accepted
+- Date: 2024-05-13
+- Governs: `src/partners/`, `migrations/004_partners.sql`
+
+## Context
+We now have 60+ partners and onboarding through a YAML PR and a deploy takes days.
+
+## Decision
+Partner configuration is stored in the `partners` table and edited through an internal admin API.
+The service reloads partners from the table every 60 seconds. See ADR-0011 for the authentication
+model of the admin API.

package/packs/solution-architect/skills/context-graph/evals/files/12/migrations/003_idempotency_keys.sql

@@ -0,0 +1,6 @@
+CREATE TABLE idempotency_keys (
+    event_id   text        NOT NULL,
+    partner_id text        NOT NULL,
+    created_at timestamptz NOT NULL DEFAULT now(),
+    PRIMARY KEY (event_id, partner_id)
+);

package/packs/solution-architect/skills/context-graph/evals/files/12/migrations/004_partners.sql

@@ -0,0 +1,7 @@
+CREATE TABLE partners (
+    id         text PRIMARY KEY,
+    url        text NOT NULL,
+    events     text[] NOT NULL,
+    secret_ref text NOT NULL,
+    enabled    boolean NOT NULL DEFAULT true
+);

package/packs/solution-architect/skills/context-graph/evals/files/12/src/delivery/dispatcher.py

@@ -0,0 +1,29 @@
+"""Consume tracking events and deliver them to partner endpoints."""
+import json
+import urllib.request
+
+from src.idempotency import redis_store
+from src.partners.loader import load_partners
+from src.delivery.signing import sign
+from src.delivery.retry import schedule_retry
+from src.store.delivery_log import record_attempt
+
+
+def dispatch(event, attempt_no=1):
+    for partner in load_partners():
+        if event["type"] not in partner["events"]:
+            continue
+        # drop duplicates from the at-least-once feed
+        if not redis_store.claim(event["id"], partner["id"]):
+            continue
+        body = json.dumps(event).encode()
+        headers = {"Content-Type": "application/json", **sign(partner, body)}
+        req = urllib.request.Request(partner["url"], data=body, headers=headers, method="POST")
+        try:
+            with urllib.request.urlopen(req, timeout=10) as resp:
+                status = resp.status
+        except Exception:
+            status = 0
+        record_attempt(event["id"], partner["id"], attempt_no, status)
+        if not 200 <= status < 300:
+            schedule_retry(event, partner, attempt_no)

package/packs/solution-architect/skills/context-graph/evals/files/12/src/delivery/retry.py

@@ -0,0 +1,15 @@
+"""Retry scheduling for failed deliveries."""
+from src.config import load_yaml
+from src.store.delivery_log import mark_failed
+from src.queue import enqueue_delayed
+
+CFG = load_yaml("config/delivery.yaml")["retry"]
+
+
+def schedule_retry(event, partner, attempt_no):
+    if attempt_no >= CFG["max_attempts"]:
+        mark_failed(event["id"], partner["id"])
+        return
+    # TODO(INC-2291): backoff disabled while partner Velo's endpoint flaps; restore afterwards
+    delay = CFG["base_delay_seconds"]
+    enqueue_delayed(event, partner, attempt_no + 1, delay_seconds=delay)

package/packs/solution-architect/skills/context-graph/evals/files/12/src/delivery/signing.py

@@ -0,0 +1,13 @@
+"""HMAC-SHA256 signing of webhook bodies."""
+import hashlib
+import hmac
+import time
+
+from src.secrets import partner_secret
+
+
+def sign(partner, body: bytes) -> dict:
+    ts = str(int(time.time()))
+    msg = ts.encode() + b"." + body
+    digest = hmac.new(partner_secret(partner["id"]), msg, hashlib.sha256).hexdigest()
+    return {"X-Parcelhook-Signature": digest, "X-Parcelhook-Timestamp": ts}

package/packs/solution-architect/skills/context-graph/evals/files/12/src/export/s3_export.py

@@ -0,0 +1,24 @@
+"""Nightly export of the delivery log to per-partner S3 prefixes."""
+import csv
+import io
+
+from src.config import load_yaml
+from src.db import execute
+from src.s3 import put_object
+
+CFG = load_yaml("config/export.yaml")
+
+
+def run(day):
+    rows = execute(
+        "SELECT partner_id, event_id, attempt_no, status_code, sent_at FROM delivery_attempts "
+        "WHERE sent_at::date = %s ORDER BY partner_id",
+        (day,),
+    )
+    by_partner = {}
+    for r in rows:
+        by_partner.setdefault(r[0], []).append(r)
+    for partner_id, prows in by_partner.items():
+        buf = io.StringIO()
+        csv.writer(buf).writerows(prows)
+        put_object(CFG["bucket"], f"{partner_id}/{day}.csv", buf.getvalue())

package/packs/solution-architect/skills/context-graph/evals/files/12/src/idempotency/pg_store.py

@@ -0,0 +1,11 @@
+"""Idempotency claims in Postgres (see ADR-0006)."""
+from src.db import execute
+
+
+def claim(event_id, partner_id) -> bool:
+    rows = execute(
+        "INSERT INTO idempotency_keys (event_id, partner_id) VALUES (%s, %s) "
+        "ON CONFLICT DO NOTHING RETURNING 1",
+        (event_id, partner_id),
+    )
+    return len(rows) == 1

package/packs/solution-architect/skills/context-graph/evals/files/12/src/idempotency/redis_store.py

@@ -0,0 +1,8 @@
+"""Idempotency claims in Redis (see ADR-0003)."""
+from src.redis_client import redis
+
+TTL_SECONDS = 24 * 3600
+
+
+def claim(event_id, partner_id) -> bool:
+    return bool(redis.set(f"idem:{event_id}:{partner_id}", 1, nx=True, ex=TTL_SECONDS))

package/packs/solution-architect/skills/context-graph/evals/files/12/src/partners/loader.py

@@ -0,0 +1,15 @@
+"""Load partner configuration."""
+import time
+
+from src.db import execute
+
+_cache = {"at": 0, "partners": []}
+RELOAD_SECONDS = 60
+
+
+def load_partners():
+    if time.time() - _cache["at"] > RELOAD_SECONDS:
+        rows = execute("SELECT id, url, events FROM partners WHERE enabled")
+        _cache["partners"] = [{"id": r[0], "url": r[1], "events": r[2]} for r in rows]
+        _cache["at"] = time.time()
+    return _cache["partners"]