dxkit-flowlisted

# dxkit-flow This skill owns the **UI→API integration gate**: dxkit statically reconstructs which client calls (`METHOD url`) bind to which server routes, and fails a PR that net-new breaks one — a frontend call to an endpoint no backend serves, or a removed route a consumer still calls. It is **thin orchestration over the deterministic CLI.** It never re-implements extraction: it runs `init` / `doctor` / `guardrail check` / `flow publish`, reads their structured output, and supplies judgment + code edits. The determinism stays in the CLI; the agent supplies the reasoning. **Language coverage.** Source extraction is per language pack: TypeScript/JavaScript (fetch/axios/wrappers; Express/LoopBack/NestJS/Next.js routes), Python (requests/httpx; FastAPI/Flask/Django routes — a Django `path()` route is method-agnostic and matches any verb; `re_path()` regex routes are out of scope), Go (http.Get/Post + http.NewRequest + client wrappers; stdlib HandleFunc/Handle incl. Go 1.22 `"GET /x"` patterns, chi/echo/gin/fiber verb methods on conventional receiver names — an unusually-named router falls back to `flow.specs`), Java (Spring MVC/WebFlux annotations with class-level `@RequestMapping` prefixes, JAX-RS `@GET`+`@Path` pairs; RestTemplate verbs, WebClient/java.net.http/OkHttp builder chains, Retrofit interfaces — `exchange(...)`'s enum verb is counted as a dynamic call, not extracted), Kotlin (the Ktor routing DSL incl. nested `route(...)` prefixes and Spring annotations; the Ktor