Skip to content
Back to skills

Alih Spec

ASecurity

Master Spec-Driven Development (SDD) conversion skill for migrating codebases across programming stacks (Laravel, Go, NestJS, FastAPI, Django, Rails, Spring Boot, etc.) with 100% behavioral parity, 7 Golden Directives, 16 Universal Conversion Pillars, and Dual-Validation Checkpoints. Activate this skill whenever the user wants to convert, migrate, refactor across languages, or build Clean Architecture backends from existing legacy source code.

  • 8 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 6, 2026
ai-agentstypescriptgosqlexpressfastapidjangorailsspringapidatabase

Works with

  • cli
  • api

Security analysis

A100/100

Pro scans all 9 files and shows the line behind each finding

Scanned October 6, 2026

npx -y skills add hanifalkauni/alih-spec --skill alih-spec --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Alih Spec?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Alih Spec
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/hanifalkauni-alih-spec/badge)](https://www.skillsdirectory.com/skills/hanifalkauni-alih-spec)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: alih-spec
description: Master Spec-Driven Development (SDD) conversion skill for migrating codebases across programming stacks (Laravel, Go, NestJS, FastAPI, Django, Rails, Spring Boot, etc.) with 100% behavioral parity, 7 Golden Directives, 16 Universal Conversion Pillars, and Dual-Validation Checkpoints. Activate this skill whenever the user wants to convert, migrate, refactor across languages, or build Clean Architecture backends from existing legacy source code.
---

# ⚑ AlihSpec β€” Master Code Conversion & SDD AI Agent Skill

This skill equips AI agents with enterprise-grade capabilities to autonomously and accurately convert legacy or source codebases into target programming stacks using the **Spec-Driven Development (SDD)** methodology without *Logic Drift*, *Shallow Specifications*, or *Hidden Production Bugs*.

---

## πŸ—‚οΈ Adaptive Workspace Detection & Capsule Wrapper Strategy

When activated, the AI Agent **MUST** automatically detect the workspace type to determine where to read source code and where to place conversion artifacts:

```mermaid
flowchart TD
    A["User triggers conversion prompt"] --> B{"Is 'source/' folder present in root?"}
    B -- "YES (Template Mode)" --> C["Mode 1: Dedicated AlihSpec Workspace\n- Source: source/\n- Specs: specs/\n- Tasks: tasks/\n- Output: output/"]
    B -- "NO (Standalone Mode)" --> D["Mode 2: In-Place External Codebase\n- Source: Workspace Root (./) [READ-ONLY]\n- Resolve Clean Wrapper Directory"]
    D --> E{"Resolve Sandbox Capsule Folder"}
    E --> F["Primary: alih-conversion/\nFallback 1: .alih-spec/\nFallback 2: _conversion/\nFallback 3: conversion-[target]/"]
    F --> G["Encapsulate all artifacts inside [WRAPPER]/\n- [WRAPPER]/specs/\n- [WRAPPER]/tasks/\n- [WRAPPER]/output/\n- [WRAPPER]/docs/"]
```

### πŸ“¦ Mode 1: Dedicated AlihSpec Template Workspace
- **Trigger**: The workspace root already contains a `source/` folder or `.sdd/config.yaml`.
- **Source**: `source/` (Strictly READ-ONLY).
- **Artifacts**: Placed at standard root paths (`specs/`, `tasks/`, `output/`, `docs/`, `evaluate/`).

### πŸ“¦ Mode 2: In-Place External / Standalone Codebase (Capsule Mode)
- **Trigger**: The skill `.agents/` folder is copied directly into a raw legacy project (e.g. an existing Laravel, Django, Express, or Spring project where code is at `./` or `./app`, `./src`).
- **Source**: Read the legacy project directly from the workspace root (`./` or specified subfolder) in **STRICT READ-ONLY MODE**. Never modify existing legacy files.
- **Anti-Pollution & Collision-Free Wrapper Strategy**:
  To prevent scattering files across the user's existing repository or colliding with existing folders (like existing `specs/` or `tasks/`), the agent **MUST encapsulate all AlihSpec artifacts inside ONE dedicated wrapper directory**:
  1. **Primary Wrapper Choice**: `alih-conversion/`
  2. **Fallback 1 (if primary exists)**: `.alih-spec/`
  3. **Fallback 2 (if fallback 1 exists)**: `_conversion/`
  4. **Fallback 3 (if fallback 2 exists)**: `conversion-[target-stack]/` (e.g. `conversion-go/`)
- **Internal Capsule Layout**:
  ```text
  [WRAPPER]/                  # e.g., alih-conversion/
  β”œβ”€β”€ specs/                  # Living specs (overview.md, architecture.md, modules/)
  β”œβ”€β”€ tasks/                  # Task queue & master dashboard (_index.md)
  β”œβ”€β”€ output/                 # 🟒 Clean Architecture target implementation
  └── docs/                   # Decisions (ADR), progress log & mapping log
  ```

---

## πŸ›οΈ Core Principles & The 7 Golden Directives

Every time this skill is active, the AI agent **MUST STRICTLY ENFORCE** these 7 non-negotiable directives:

1. **Deep Controller AST Inspection**: Bedah baris-demi-baris seluruh query parameter (`menu`, `tab`, `filter`), percabangan `if/switch`, relasi multi-tabel database, subquery, dan validasi di controller sumber. Dilarang hanya membaca nama route atau nama model secara sekilas.
2. **Iterative Per-Module Execution**: Dilarang memproses spesifikasi atau penulisan kode massal (*bulk*) jika > 10 endpoint. Eksekusi modul demi modul secara bertahap:
   `[ 1. Spec Modul ] βž” [ 2. Checkpoint 1 ] βž” [ 3. Tasks Modul ] βž” [ 4. Checkpoint 2 ] βž” [ 5. Target Code in output/ ] βž” [ 6. QA Parity ]`
3. **Pointer Nullability Parity**: Gunakan tipe pointer (`*int64`, `*string`, `*bool` di Go, atau `T | null` di TypeScript) untuk seluruh field DTO dan skema database yang bersifat opsional/nullable agar tidak menghasilkan *false zero-value* (`0` atau `""`) pada output JSON.
4. **Strict No Dummy Fallback**: Dilarang keras mengembalikan hardcoded dummy data (`return 5000, nil` atau `[]map{}`) pada Repository atau Handler layer. Setiap method Repository wajib menuliskan query database SQL/ORM riil yang terhubung ke skema tabel.
5. **Spec Definition of Done (DoD) Checklist**: Seluruh spesifikasi modul wajib lolos checklist DoD (Validation Parity, Branching Parity, SQL & Join Parity, Pointer Nullability) sebelum task dibuat.
6. **Checkpoint 1 (Spec vs Source Alignment)**: Validasi spesifikasi terhadap controller sumber sebelum breakdown task di `[WRAPPER]/tasks/`.
7. **Checkpoint 2 (Task vs Spec Alignment)**: Validasi kriteria task terhadap spesifikasi sebelum menulis kode di `[WRAPPER]/output/`.

---

## πŸ›‘οΈ The 16 Universal Conversion Pillars (4 Quadrants)

When designing specifications, DTOs, database queries, and handlers, follow the 16 Universal Pillars:

```text
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚                16 PILAR PELAJARAN UNIVERSAL KONVERSI KODE                   β”‚
β”œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€
β”‚ 🌐 A. PROTOKOL, ROUTING & KONFIGURASI (Config & Gateway)                   β”‚
β”‚  1. Zero Environment Key Drift  β”‚ Selaraskan nama key .env 100% dari sumber β”‚
β”‚  2. URL Builder Resiliency      β”‚ Anti double-slash (//) pada base URL      β”‚
β”‚  3. Universal Context Claims    β”‚ Ekstraksi multi-key session/JWT dinamis   β”‚
β”‚  4. Route Prefix Dual-Mounting  β”‚ Dukung prefix /api dan root secara serentakβ”‚
β”‚                                                                             β”‚
β”‚ 🎯 B. KONTRAK DATA, TIPE & PAYLOAD (Contract & Validation)                  β”‚
β”‚  5. Domain Valuation & Locale   β”‚ Bedah helper multiplier & format currency β”‚
β”‚  6. Smart Query Normalization   β”‚ Defaulting parameter sebelum validasi DTO β”‚
β”‚  7. Pointer Nullability Parity  β”‚ Gunakan pointer/optional untuk field null β”‚
β”‚  8. Flexible Payload Coercion   β”‚ Tangani form-urlencoded & stringed numbersβ”‚
β”‚                                                                             β”‚
β”‚ πŸ—„οΈ C. DATABASE, TRANSAKSI & ACID (Database & Persistence)                   β”‚
β”‚  9. Strict Zero Dummy Fallback  β”‚ Query database riil, dilarang hardcoded   β”‚
β”‚ 10. Explicit DB Tx Propagation  β”‚ Oper tx context ke seluruh multi-repo     β”‚
β”‚ 11. Explicit ORM Table Binding  β”‚ Anotasi TableName() & kolom eksplisit     β”‚
β”‚ 12. Idempotency & Safe Mutation β”‚ Anti double-charge pada mutasi finansial  β”‚
β”‚                                                                             β”‚
β”‚ ⚑ D. RESOURCE SAFETY & OBSERVABILITY (I/O, Concurrency & SRE)              β”‚
β”‚ 13. Async & Shutdown Safety     β”‚ Anti-job drop saat container restart      β”‚
β”‚ 14. HTTP Client Timeout Parity  β”‚ Timeout eksplisit anti-hang network calls β”‚
β”‚ 15. Safe File Upload Streaming  β”‚ Streaming I/O anti-RAM OOM pada upload    β”‚
β”‚ 16. Structured Observability    β”‚ Structured JSON logging & Trace/Request IDβ”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
```

---

## 🧭 The 5-Phase Conversion Lifecycle

```mermaid
flowchart TD
    S["Read Source Code (READ-ONLY)"] --> P1["Fase 1: Overview & Architecture ([WRAPPER]/specs/overview.md)"]
    P1 --> P2["Fase 2: Module Spec (Deep AST Inspection)"]
    P2 --> CP1{"πŸ›‘ Checkpoint 1: Spec vs Source Match?"}
    CP1 -- No (Missing params/branches) --> P2
    CP1 -- Yes --> P3["Fase 3: Task Breakdown ([WRAPPER]/tasks/)"]
    P3 --> CP2{"πŸ›‘ Checkpoint 2: Task vs Spec Match?"}
    CP2 -- No (Missing criteria/DTOs) --> P3
    CP2 -- Yes --> P4["Fase 4: Write Target Code in [WRAPPER]/output/"]
    P4 --> P5["Fase 5: QA Parity Audit & Validation"]
```

### πŸ“‹ Fase 1: Analisis Menyeluruh & Arsitektur Global
1. Bedah codebase sumber untuk memetakan seluruh modul bisnis, daftar endpoint/rute, dependensi package, dan schema database.
2. Tuliskan ringkasan arsitektur ke `[WRAPPER]/specs/overview.md` dan `[WRAPPER]/specs/architecture.md`.

### πŸ“‹ Fase 2: Spesifikasi Modul Detail (Deep AST Inspection)
1. Tulis spesifikasi modul di `[WRAPPER]/specs/modules/[nama-modul].md`.
2. Cantumkan:
   - **DTO Request & Response**: Wajib mencantumkan seluruh query param (`menu`, `tab`, `filter`, `limit`, `offset`) dan menggunakan pointer untuk field nullable.
   - **Branching Matrix**: Petakan seluruh kombinasi kondisi `if/switch` dari controller sumber.
   - **SQL & Query Spec**: Catat nama tabel asli, klausa JOIN, WHERE, GROUP BY, dan Locking.
   - **Definition of Done (DoD) Checklist**.
3. **Eksekusi Checkpoint 1**: Cocokkan spesifikasi terhadap controller sumber line-by-line.

### πŸ“‹ Fase 3: Pembuatan Task Atomik
1. Buat berkas task di `[WRAPPER]/tasks/` (misal: `task-001-dto.md`, `task-002-repo.md`, dst.).
2. Cantumkan Acceptance Criteria teknis, skenario pengujian, dan dependensi task.
3. Daftarkan dan update progress di `[WRAPPER]/tasks/_index.md`.
4. **Eksekusi Checkpoint 2**: Validasi keselarasan task terhadap spesifikasi sebelum menulis kode.

### πŸ“‹ Fase 4: Penulisan Kode Target di `[WRAPPER]/output/` (Clean Architecture)
1. Seluruh implementasi kode target ditulis secara eksklusif di dalam folder `[WRAPPER]/output/`.
2. Ikuti Clean Architecture satu arah:
   `Handler (HTTP Delivery) βž” Service / UseCase (Business Logic) βž” Repository (Real SQL/ORM Queries) βž” Domain / Entities`
3. **Pantangan Arsitektur**:
   - Dilarang menaruh business logic di Handler.
   - Dilarang mengakses database langsung di Handler.
   - Dilarang mengembalikan dummy mock data di Repository.
   - Seluruh mutasi multi-tabel dalam satu usecase wajib dioper di dalam satu transaksi database (`tx`).

### πŸ“‹ Fase 5: QA Parity Audit & Validasi Integritas
1. Jalankan unit test dan integration test terhadap seluruh usecase.
2. Verifikasi terhadap checklist mutu (DateTime, Currency `int64`, Pagination envelope, 422 error object, Soft deletes, JWT claims, Empty states).
3. Tandai task selesai `[x]` di `[WRAPPER]/tasks/_index.md` dan catat milestone di `[WRAPPER]/docs/progress.md`.

---

## πŸ“š Skill References Directory

When deep contextual guidance is needed, consult the following bundled reference files:
- [16 Universal Pillars Reference](./references/16-pillars-cheatsheet.md)
- [8 Critical Quality Standards](./references/8-quality-standards.md)
- [Cross-Stack Pattern Mappings Catalog](./references/pattern-mappings-catalog.md)
- [Deep Controller AST Inspection Guide](./references/ast-inspection-guide.md)
- [Dual-Validation Checkpoints Protocol](./references/dual-checkpoints.md)

---

## πŸ“‹ Scaffolding Resource Templates

Use the following ready-to-use template files when creating SDD artifacts in any project:
- **Module Spec Template**: [`resources/templates/spec-module.md`](./resources/templates/spec-module.md) (with DoD Checklist & Branching Matrix)
- **Atomic Task Template**: [`resources/templates/task.md`](./resources/templates/task.md) (with Technical Acceptance Criteria)
- **QA Parity Checklist Template**: [`resources/templates/qa-checklist.md`](./resources/templates/qa-checklist.md) (Comprehensive post-conversion validation)

Files in this skill

  • SKILL.md12 KB
  • references/16-pillars-cheatsheet.md2.9 KB
  • references/8-quality-standards.md4.3 KB
  • references/ast-inspection-guide.md1.8 KB
  • references/dual-checkpoints.md1.8 KB
  • references/pattern-mappings-catalog.md4.8 KB
  • resources/templates/qa-checklist.md2.2 KB
  • resources/templates/spec-module.md3.4 KB
  • resources/templates/task.md1.5 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…