@comate/zulu 1.4.0-beta.5 → 1.4.0-beta.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. package/comate-engine/assets/skills/auto-commit/SKILL.md +2 -0
  2. package/comate-engine/assets/skills/auto-commit-sandbox-comate/SKILL.md +2 -2
  3. package/comate-engine/assets/skills/code-security/SKILL.md +110 -41
  4. package/comate-engine/assets/skills/code-security/references/credential_hosting.md +190 -28
  5. package/comate-engine/assets/skills/code-security/references/vul_analysis-go_sql_injection.md +149 -0
  6. package/comate-engine/assets/skills/code-security/references/vul_analysis-java_sql_injection.md +185 -0
  7. package/comate-engine/assets/skills/code-security/references/vul_analysis-php_sql_injection.md +147 -0
  8. package/comate-engine/assets/skills/code-security/references/vul_analysis-python_sql_injection.md +143 -0
  9. package/comate-engine/assets/skills/code-security/references/vul_repair-go_sql_injection.md +2 -2
  10. package/comate-engine/assets/skills/code-security/references/vul_repair-sca.md +225 -0
  11. package/comate-engine/assets/skills/code-security/scripts/credential_hosting.py +12 -10
  12. package/comate-engine/assets/skills/code-security/scripts/credential_open_page.py +125 -0
  13. package/comate-engine/assets/skills/code-security/scripts/credential_poll.py +12 -9
  14. package/comate-engine/assets/skills/code-security/scripts/credential_url.py +81 -0
  15. package/comate-engine/assets/skills/code-security/scripts/ducc/get_claude_session_id.sh +33 -0
  16. package/comate-engine/assets/skills/code-security/scripts/ducc/open_browser.py +191 -0
  17. package/comate-engine/assets/skills/code-security/scripts/parse_scan_result.py +99 -16
  18. package/comate-engine/assets/skills/code-security/scripts/repair_vulnerability.py +66 -13
  19. package/comate-engine/assets/skills/code-security/scripts/scan_vulnerability.py +44 -12
  20. package/comate-engine/assets/skills/create-automation/SKILL.md +3 -0
  21. package/comate-engine/assets/skills/create-subagent/SKILL.md +16 -4
  22. package/comate-engine/server.js +137 -77
  23. package/dist/bundle/index.js +3 -3
  24. package/package.json +1 -1
@@ -30,6 +30,18 @@ When multiple subagents share the same name, the higher-priority location wins.
30
30
 
31
31
  **Personal subagents** (`~/.comate/agents/`): Personal agents available across all your projects.
32
32
 
33
+ ## Available Models
34
+
35
+ Subagents can optionally use a different model than the main agent via the `model` frontmatter field. Valid values are:
36
+
37
+ - `inherit` — use the main agent's current model (default when `model` is omitted or the value is unrecognized)
38
+ - `fast` — a cheaper, faster model
39
+ - An exact model name from the list below:
40
+
41
+ ${COMATE_AVAILABLE_MODELS}
42
+
43
+ Models listed with a `-Thinking` suffix support extended thinking/reasoning mode.
44
+
33
45
  ## Subagent File Format
34
46
 
35
47
  Create a `.md` file with YAML frontmatter and a markdown body (the system prompt):
@@ -51,7 +63,7 @@ specific, actionable feedback on quality, security, and best practices.
51
63
  |-------|-------------|
52
64
  | `name` | Unique identifier (lowercase letters and hyphens only) |
53
65
  | `description` | When to delegate to this subagent (be specific!) |
54
- | `model` | (Optional) Model this subagent uses. One of: `inherit` (inherit from main agent, default), `fast` (cheaper/faster model), or a specific model display name. For specific models, the user must pick from their available list at https://ku.baidu-int.com/knowledge/HFVrC7hq1Q/_SKPgSwp2G/jyGhbHUQQG/ZS3uu0XgQjLm31 (**models supporting thinking have `-Thinking` appended to the displayName, e.g. `Claude Sonnet 4.6-Thinking`** MUST tell user this, she may not know). Unrecognized names fall back to `inherit`. |
66
+ | `model` | (Optional) Model this subagent uses. Must be one of the valid values from the **Available Models** section above: `inherit` (default), `fast`, or an exact model name from that list (including `-Thinking` variants). Unrecognized names fall back to `inherit`. |
55
67
 
56
68
  ## Writing Effective Descriptions
57
69
 
@@ -202,8 +214,8 @@ If you are not sure with some tools, ask her directly.
202
214
  Empty means only selecting default read-only tools; Lack of this key means selecting all tools
203
215
 
204
216
  ### Step 3: Clarify the Agent's Model
205
- **If the user requests a specific model, ask her to confirm the exact displayName from the user's available model list** [model name](https://ku.baidu-int.com/knowledge/HFVrC7hq1Q/_SKPgSwp2G/jyGhbHUQQG/ZS3uu0XgQjLm31).
206
- Otherwise, tell her can use inherit or fast.
217
+ **If the user requests a specific model, confirm the exact name from the **Available Models** list above**.
218
+ Otherwise, tell her she can use `inherit` or `fast`.
207
219
 
208
220
  ### Step 4: Create the File
209
221
 
@@ -219,7 +231,7 @@ touch ~/.comate/agents/my-agent.md
219
231
 
220
232
  ### Step 5: Define Configuration
221
233
 
222
- Write the frontmatter with the required fields (`name` and `description`). Optionally add `model` (placed after `description`) with one of: `inherit`, `fast`, or a specific model display name from the user's available model list (https://ku.baidu-int.com/knowledge/HFVrC7hq1Q/_SKPgSwp2G/jyGhbHUQQG/ZS3uu0XgQjLm31). If the user requests a specific model, ask them to confirm the exact displayName from that list.
234
+ Write the frontmatter with the required fields (`name` and `description`). Optionally add `model` (placed after `description`) using one of the valid values from the **Available Models** section: `inherit`, `fast`, or an exact model name from that list. If the user requests a specific model, confirm the exact name from the **Available Models** list.
223
235
 
224
236
  ### Step 6: Write the System Prompt
225
237