@howlil/ez-agents 2.0.0 → 2.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (106) hide show
  1. package/LICENSE +21 -21
  2. package/README.md +93 -93
  3. package/agents/ez-plan-checker.md +2 -2
  4. package/agents/ez-research-synthesizer.md +1 -1
  5. package/agents/ez-ui-researcher.md +1 -1
  6. package/agents/ez-verifier.md +1 -1
  7. package/bin/install.js +132 -132
  8. package/get-shit-done/bin/lib/assistant-adapter.cjs +205 -205
  9. package/get-shit-done/bin/lib/audit-exec.cjs +150 -150
  10. package/get-shit-done/bin/lib/auth.cjs +175 -175
  11. package/get-shit-done/bin/lib/circuit-breaker.cjs +118 -118
  12. package/get-shit-done/bin/lib/commands.cjs +666 -666
  13. package/get-shit-done/bin/lib/config.cjs +183 -183
  14. package/get-shit-done/bin/lib/core.cjs +495 -495
  15. package/get-shit-done/bin/lib/file-lock.cjs +236 -236
  16. package/get-shit-done/bin/lib/frontmatter.cjs +299 -299
  17. package/get-shit-done/bin/lib/fs-utils.cjs +153 -153
  18. package/get-shit-done/bin/lib/git-utils.cjs +203 -203
  19. package/get-shit-done/bin/lib/health-check.cjs +163 -163
  20. package/get-shit-done/bin/lib/index.cjs +113 -113
  21. package/get-shit-done/bin/lib/init.cjs +710 -710
  22. package/get-shit-done/bin/lib/logger.cjs +117 -117
  23. package/get-shit-done/bin/lib/milestone.cjs +241 -241
  24. package/get-shit-done/bin/lib/model-provider.cjs +146 -146
  25. package/get-shit-done/bin/lib/phase.cjs +908 -908
  26. package/get-shit-done/bin/lib/retry.cjs +119 -119
  27. package/get-shit-done/bin/lib/roadmap.cjs +305 -305
  28. package/get-shit-done/bin/lib/safe-exec.cjs +128 -128
  29. package/get-shit-done/bin/lib/safe-path.cjs +130 -130
  30. package/get-shit-done/bin/lib/state.cjs +721 -721
  31. package/get-shit-done/bin/lib/temp-file.cjs +239 -239
  32. package/get-shit-done/bin/lib/template.cjs +222 -222
  33. package/get-shit-done/bin/lib/test-file-lock.cjs +112 -112
  34. package/get-shit-done/bin/lib/test-graceful.cjs +93 -93
  35. package/get-shit-done/bin/lib/test-logger.cjs +60 -60
  36. package/get-shit-done/bin/lib/test-safe-exec.cjs +38 -38
  37. package/get-shit-done/bin/lib/test-safe-path.cjs +33 -33
  38. package/get-shit-done/bin/lib/test-temp-file.cjs +125 -125
  39. package/get-shit-done/bin/lib/timeout-exec.cjs +62 -62
  40. package/get-shit-done/bin/lib/verify.cjs +820 -820
  41. package/get-shit-done/references/checkpoints.md +776 -776
  42. package/get-shit-done/references/questioning.md +162 -162
  43. package/get-shit-done/references/tdd.md +263 -263
  44. package/get-shit-done/templates/codebase/concerns.md +310 -310
  45. package/get-shit-done/templates/codebase/conventions.md +307 -307
  46. package/get-shit-done/templates/codebase/integrations.md +280 -280
  47. package/get-shit-done/templates/codebase/stack.md +186 -186
  48. package/get-shit-done/templates/codebase/testing.md +480 -480
  49. package/get-shit-done/templates/config.json +37 -37
  50. package/get-shit-done/templates/continue-here.md +78 -78
  51. package/get-shit-done/templates/milestone-archive.md +123 -123
  52. package/get-shit-done/templates/milestone.md +115 -115
  53. package/get-shit-done/templates/requirements.md +231 -231
  54. package/get-shit-done/templates/research-project/ARCHITECTURE.md +204 -204
  55. package/get-shit-done/templates/research-project/FEATURES.md +147 -147
  56. package/get-shit-done/templates/research-project/PITFALLS.md +200 -200
  57. package/get-shit-done/templates/research-project/STACK.md +120 -120
  58. package/get-shit-done/templates/research-project/SUMMARY.md +170 -170
  59. package/get-shit-done/templates/retrospective.md +54 -54
  60. package/get-shit-done/templates/roadmap.md +202 -202
  61. package/get-shit-done/templates/summary-minimal.md +41 -41
  62. package/get-shit-done/templates/summary-standard.md +48 -48
  63. package/get-shit-done/templates/summary.md +248 -248
  64. package/get-shit-done/templates/user-setup.md +311 -311
  65. package/get-shit-done/templates/verification-report.md +322 -322
  66. package/get-shit-done/workflows/add-phase.md +112 -112
  67. package/get-shit-done/workflows/add-tests.md +351 -351
  68. package/get-shit-done/workflows/add-todo.md +158 -158
  69. package/get-shit-done/workflows/audit-milestone.md +332 -332
  70. package/get-shit-done/workflows/autonomous.md +743 -743
  71. package/get-shit-done/workflows/check-todos.md +177 -177
  72. package/get-shit-done/workflows/cleanup.md +152 -152
  73. package/get-shit-done/workflows/complete-milestone.md +766 -766
  74. package/get-shit-done/workflows/diagnose-issues.md +219 -219
  75. package/get-shit-done/workflows/discovery-phase.md +289 -289
  76. package/get-shit-done/workflows/discuss-phase.md +762 -762
  77. package/get-shit-done/workflows/execute-phase.md +468 -468
  78. package/get-shit-done/workflows/execute-plan.md +483 -483
  79. package/get-shit-done/workflows/health.md +159 -159
  80. package/get-shit-done/workflows/help.md +492 -492
  81. package/get-shit-done/workflows/insert-phase.md +130 -130
  82. package/get-shit-done/workflows/list-phase-assumptions.md +178 -178
  83. package/get-shit-done/workflows/map-codebase.md +316 -316
  84. package/get-shit-done/workflows/new-milestone.md +384 -384
  85. package/get-shit-done/workflows/new-project.md +1111 -1111
  86. package/get-shit-done/workflows/node-repair.md +92 -92
  87. package/get-shit-done/workflows/pause-work.md +122 -122
  88. package/get-shit-done/workflows/plan-milestone-gaps.md +274 -274
  89. package/get-shit-done/workflows/plan-phase.md +651 -651
  90. package/get-shit-done/workflows/progress.md +382 -382
  91. package/get-shit-done/workflows/quick.md +610 -610
  92. package/get-shit-done/workflows/remove-phase.md +155 -155
  93. package/get-shit-done/workflows/research-phase.md +74 -74
  94. package/get-shit-done/workflows/resume-project.md +307 -307
  95. package/get-shit-done/workflows/set-profile.md +81 -81
  96. package/get-shit-done/workflows/settings.md +242 -242
  97. package/get-shit-done/workflows/stats.md +57 -57
  98. package/get-shit-done/workflows/transition.md +544 -544
  99. package/get-shit-done/workflows/ui-phase.md +290 -290
  100. package/get-shit-done/workflows/ui-review.md +157 -157
  101. package/get-shit-done/workflows/update.md +320 -320
  102. package/get-shit-done/workflows/validate-phase.md +167 -167
  103. package/get-shit-done/workflows/verify-phase.md +243 -243
  104. package/package.json +1 -1
  105. package/scripts/build-hooks.js +43 -43
  106. package/scripts/run-tests.cjs +29 -29
@@ -1,316 +1,316 @@
1
- <purpose>
2
- Orchestrate parallel codebase mapper agents to analyze codebase and produce structured documents in .planning/codebase/
3
-
4
- Each agent has fresh context, explores a specific focus area, and **writes documents directly**. The orchestrator only receives confirmation + line counts, then writes a summary.
5
-
6
- Output: .planning/codebase/ folder with 7 structured documents about the codebase state.
7
- </purpose>
8
-
9
- <philosophy>
10
- **Why dedicated mapper agents:**
11
- - Fresh context per domain (no token contamination)
12
- - Agents write documents directly (no context transfer back to orchestrator)
13
- - Orchestrator only summarizes what was created (minimal context usage)
14
- - Faster execution (agents run simultaneously)
15
-
16
- **Document quality over length:**
17
- Include enough detail to be useful as reference. Prioritize practical examples (especially code patterns) over arbitrary brevity.
18
-
19
- **Always include file paths:**
20
- Documents are reference material for Claude when planning/executing. Always include actual file paths formatted with backticks: `src/services/user.ts`.
21
- </philosophy>
22
-
23
- <process>
24
-
25
- <step name="init_context" priority="first">
26
- Load codebase mapping context:
27
-
28
- ```bash
29
- INIT=$(node "$HOME/.claude/ez-agents/bin/ez-tools.cjs" init map-codebase)
30
- if [[ "$INIT" == @file:* ]]; then INIT=$(cat "${INIT#@file:}"); fi
31
- ```
32
-
33
- Extract from init JSON: `mapper_model`, `commit_docs`, `codebase_dir`, `existing_maps`, `has_maps`, `codebase_dir_exists`.
34
- </step>
35
-
36
- <step name="check_existing">
37
- Check if .planning/codebase/ already exists using `has_maps` from init context.
38
-
39
- If `codebase_dir_exists` is true:
40
- ```bash
41
- ls -la .planning/codebase/
42
- ```
43
-
44
- **If exists:**
45
-
46
- ```
47
- .planning/codebase/ already exists with these documents:
48
- [List files found]
49
-
50
- What's next?
51
- 1. Refresh - Delete existing and remap codebase
52
- 2. Update - Keep existing, only update specific documents
53
- 3. Skip - Use existing codebase map as-is
54
- ```
55
-
56
- Wait for user response.
57
-
58
- If "Refresh": Delete .planning/codebase/, continue to create_structure
59
- If "Update": Ask which documents to update, continue to spawn_agents (filtered)
60
- If "Skip": Exit workflow
61
-
62
- **If doesn't exist:**
63
- Continue to create_structure.
64
- </step>
65
-
66
- <step name="create_structure">
67
- Create .planning/codebase/ directory:
68
-
69
- ```bash
70
- mkdir -p .planning/codebase
71
- ```
72
-
73
- **Expected output files:**
74
- - STACK.md (from tech mapper)
75
- - INTEGRATIONS.md (from tech mapper)
76
- - ARCHITECTURE.md (from arch mapper)
77
- - STRUCTURE.md (from arch mapper)
78
- - CONVENTIONS.md (from quality mapper)
79
- - TESTING.md (from quality mapper)
80
- - CONCERNS.md (from concerns mapper)
81
-
82
- Continue to spawn_agents.
83
- </step>
84
-
85
- <step name="spawn_agents">
86
- Spawn 4 parallel gsd-codebase-mapper agents.
87
-
88
- Use Task tool with `subagent_type="ez-codebase-mapper"`, `model="{mapper_model}"`, and `run_in_background=true` for parallel execution.
89
-
90
- **CRITICAL:** Use the dedicated `gsd-codebase-mapper` agent, NOT `Explore`. The mapper agent writes documents directly.
91
-
92
- **Agent 1: Tech Focus**
93
-
94
- ```
95
- Task(
96
- subagent_type="ez-codebase-mapper",
97
- model="{mapper_model}",
98
- run_in_background=true,
99
- description="Map codebase tech stack",
100
- prompt="Focus: tech
101
-
102
- Analyze this codebase for technology stack and external integrations.
103
-
104
- Write these documents to .planning/codebase/:
105
- - STACK.md - Languages, runtime, frameworks, dependencies, configuration
106
- - INTEGRATIONS.md - External APIs, databases, auth providers, webhooks
107
-
108
- Explore thoroughly. Write documents directly using templates. Return confirmation only."
109
- )
110
- ```
111
-
112
- **Agent 2: Architecture Focus**
113
-
114
- ```
115
- Task(
116
- subagent_type="ez-codebase-mapper",
117
- model="{mapper_model}",
118
- run_in_background=true,
119
- description="Map codebase architecture",
120
- prompt="Focus: arch
121
-
122
- Analyze this codebase architecture and directory structure.
123
-
124
- Write these documents to .planning/codebase/:
125
- - ARCHITECTURE.md - Pattern, layers, data flow, abstractions, entry points
126
- - STRUCTURE.md - Directory layout, key locations, naming conventions
127
-
128
- Explore thoroughly. Write documents directly using templates. Return confirmation only."
129
- )
130
- ```
131
-
132
- **Agent 3: Quality Focus**
133
-
134
- ```
135
- Task(
136
- subagent_type="ez-codebase-mapper",
137
- model="{mapper_model}",
138
- run_in_background=true,
139
- description="Map codebase conventions",
140
- prompt="Focus: quality
141
-
142
- Analyze this codebase for coding conventions and testing patterns.
143
-
144
- Write these documents to .planning/codebase/:
145
- - CONVENTIONS.md - Code style, naming, patterns, error handling
146
- - TESTING.md - Framework, structure, mocking, coverage
147
-
148
- Explore thoroughly. Write documents directly using templates. Return confirmation only."
149
- )
150
- ```
151
-
152
- **Agent 4: Concerns Focus**
153
-
154
- ```
155
- Task(
156
- subagent_type="ez-codebase-mapper",
157
- model="{mapper_model}",
158
- run_in_background=true,
159
- description="Map codebase concerns",
160
- prompt="Focus: concerns
161
-
162
- Analyze this codebase for technical debt, known issues, and areas of concern.
163
-
164
- Write this document to .planning/codebase/:
165
- - CONCERNS.md - Tech debt, bugs, security, performance, fragile areas
166
-
167
- Explore thoroughly. Write document directly using template. Return confirmation only."
168
- )
169
- ```
170
-
171
- Continue to collect_confirmations.
172
- </step>
173
-
174
- <step name="collect_confirmations">
175
- Wait for all 4 agents to complete.
176
-
177
- Read each agent's output file to collect confirmations.
178
-
179
- **Expected confirmation format from each agent:**
180
- ```
181
- ## Mapping Complete
182
-
183
- **Focus:** {focus}
184
- **Documents written:**
185
- - `.planning/codebase/{DOC1}.md` ({N} lines)
186
- - `.planning/codebase/{DOC2}.md` ({N} lines)
187
-
188
- Ready for orchestrator summary.
189
- ```
190
-
191
- **What you receive:** Just file paths and line counts. NOT document contents.
192
-
193
- If any agent failed, note the failure and continue with successful documents.
194
-
195
- Continue to verify_output.
196
- </step>
197
-
198
- <step name="verify_output">
199
- Verify all documents created successfully:
200
-
201
- ```bash
202
- ls -la .planning/codebase/
203
- wc -l .planning/codebase/*.md
204
- ```
205
-
206
- **Verification checklist:**
207
- - All 7 documents exist
208
- - No empty documents (each should have >20 lines)
209
-
210
- If any documents missing or empty, note which agents may have failed.
211
-
212
- Continue to scan_for_secrets.
213
- </step>
214
-
215
- <step name="scan_for_secrets">
216
- **CRITICAL SECURITY CHECK:** Scan output files for accidentally leaked secrets before committing.
217
-
218
- Run secret pattern detection:
219
-
220
- ```bash
221
- # Check for common API key patterns in generated docs
222
- grep -E '(sk-[a-zA-Z0-9]{20,}|sk_live_[a-zA-Z0-9]+|sk_test_[a-zA-Z0-9]+|ghp_[a-zA-Z0-9]{36}|gho_[a-zA-Z0-9]{36}|glpat-[a-zA-Z0-9_-]+|AKIA[A-Z0-9]{16}|xox[baprs]-[a-zA-Z0-9-]+|-----BEGIN.*PRIVATE KEY|eyJ[a-zA-Z0-9_-]+\.eyJ[a-zA-Z0-9_-]+\.)' .planning/codebase/*.md 2>/dev/null && SECRETS_FOUND=true || SECRETS_FOUND=false
223
- ```
224
-
225
- **If SECRETS_FOUND=true:**
226
-
227
- ```
228
- ⚠️ SECURITY ALERT: Potential secrets detected in codebase documents!
229
-
230
- Found patterns that look like API keys or tokens in:
231
- [show grep output]
232
-
233
- This would expose credentials if committed.
234
-
235
- **Action required:**
236
- 1. Review the flagged content above
237
- 2. If these are real secrets, they must be removed before committing
238
- 3. Consider adding sensitive files to Claude Code "Deny" permissions
239
-
240
- Pausing before commit. Reply "safe to proceed" if the flagged content is not actually sensitive, or edit the files first.
241
- ```
242
-
243
- Wait for user confirmation before continuing to commit_codebase_map.
244
-
245
- **If SECRETS_FOUND=false:**
246
-
247
- Continue to commit_codebase_map.
248
- </step>
249
-
250
- <step name="commit_codebase_map">
251
- Commit the codebase map:
252
-
253
- ```bash
254
- node "$HOME/.claude/ez-agents/bin/ez-tools.cjs" commit "docs: map existing codebase" --files .planning/codebase/*.md
255
- ```
256
-
257
- Continue to offer_next.
258
- </step>
259
-
260
- <step name="offer_next">
261
- Present completion summary and next steps.
262
-
263
- **Get line counts:**
264
- ```bash
265
- wc -l .planning/codebase/*.md
266
- ```
267
-
268
- **Output format:**
269
-
270
- ```
271
- Codebase mapping complete.
272
-
273
- Created .planning/codebase/:
274
- - STACK.md ([N] lines) - Technologies and dependencies
275
- - ARCHITECTURE.md ([N] lines) - System design and patterns
276
- - STRUCTURE.md ([N] lines) - Directory layout and organization
277
- - CONVENTIONS.md ([N] lines) - Code style and patterns
278
- - TESTING.md ([N] lines) - Test structure and practices
279
- - INTEGRATIONS.md ([N] lines) - External services and APIs
280
- - CONCERNS.md ([N] lines) - Technical debt and issues
281
-
282
-
283
- ---
284
-
285
- ## ▶ Next Up
286
-
287
- **Initialize project** — use codebase context for planning
288
-
289
- `/ez:new-project`
290
-
291
- <sub>`/clear` first → fresh context window</sub>
292
-
293
- ---
294
-
295
- **Also available:**
296
- - Re-run mapping: `/ez:map-codebase`
297
- - Review specific file: `cat .planning/codebase/STACK.md`
298
- - Edit any document before proceeding
299
-
300
- ---
301
- ```
302
-
303
- End workflow.
304
- </step>
305
-
306
- </process>
307
-
308
- <success_criteria>
309
- - .planning/codebase/ directory created
310
- - 4 parallel gsd-codebase-mapper agents spawned with run_in_background=true
311
- - Agents write documents directly (orchestrator doesn't receive document contents)
312
- - Read agent output files to collect confirmations
313
- - All 7 codebase documents exist
314
- - Clear completion summary with line counts
315
- - User offered clear next steps in GSD style
316
- </success_criteria>
1
+ <purpose>
2
+ Orchestrate parallel codebase mapper agents to analyze codebase and produce structured documents in .planning/codebase/
3
+
4
+ Each agent has fresh context, explores a specific focus area, and **writes documents directly**. The orchestrator only receives confirmation + line counts, then writes a summary.
5
+
6
+ Output: .planning/codebase/ folder with 7 structured documents about the codebase state.
7
+ </purpose>
8
+
9
+ <philosophy>
10
+ **Why dedicated mapper agents:**
11
+ - Fresh context per domain (no token contamination)
12
+ - Agents write documents directly (no context transfer back to orchestrator)
13
+ - Orchestrator only summarizes what was created (minimal context usage)
14
+ - Faster execution (agents run simultaneously)
15
+
16
+ **Document quality over length:**
17
+ Include enough detail to be useful as reference. Prioritize practical examples (especially code patterns) over arbitrary brevity.
18
+
19
+ **Always include file paths:**
20
+ Documents are reference material for Claude when planning/executing. Always include actual file paths formatted with backticks: `src/services/user.ts`.
21
+ </philosophy>
22
+
23
+ <process>
24
+
25
+ <step name="init_context" priority="first">
26
+ Load codebase mapping context:
27
+
28
+ ```bash
29
+ INIT=$(node "$HOME/.claude/ez-agents/bin/ez-tools.cjs" init map-codebase)
30
+ if [[ "$INIT" == @file:* ]]; then INIT=$(cat "${INIT#@file:}"); fi
31
+ ```
32
+
33
+ Extract from init JSON: `mapper_model`, `commit_docs`, `codebase_dir`, `existing_maps`, `has_maps`, `codebase_dir_exists`.
34
+ </step>
35
+
36
+ <step name="check_existing">
37
+ Check if .planning/codebase/ already exists using `has_maps` from init context.
38
+
39
+ If `codebase_dir_exists` is true:
40
+ ```bash
41
+ ls -la .planning/codebase/
42
+ ```
43
+
44
+ **If exists:**
45
+
46
+ ```
47
+ .planning/codebase/ already exists with these documents:
48
+ [List files found]
49
+
50
+ What's next?
51
+ 1. Refresh - Delete existing and remap codebase
52
+ 2. Update - Keep existing, only update specific documents
53
+ 3. Skip - Use existing codebase map as-is
54
+ ```
55
+
56
+ Wait for user response.
57
+
58
+ If "Refresh": Delete .planning/codebase/, continue to create_structure
59
+ If "Update": Ask which documents to update, continue to spawn_agents (filtered)
60
+ If "Skip": Exit workflow
61
+
62
+ **If doesn't exist:**
63
+ Continue to create_structure.
64
+ </step>
65
+
66
+ <step name="create_structure">
67
+ Create .planning/codebase/ directory:
68
+
69
+ ```bash
70
+ mkdir -p .planning/codebase
71
+ ```
72
+
73
+ **Expected output files:**
74
+ - STACK.md (from tech mapper)
75
+ - INTEGRATIONS.md (from tech mapper)
76
+ - ARCHITECTURE.md (from arch mapper)
77
+ - STRUCTURE.md (from arch mapper)
78
+ - CONVENTIONS.md (from quality mapper)
79
+ - TESTING.md (from quality mapper)
80
+ - CONCERNS.md (from concerns mapper)
81
+
82
+ Continue to spawn_agents.
83
+ </step>
84
+
85
+ <step name="spawn_agents">
86
+ Spawn 4 parallel gsd-codebase-mapper agents.
87
+
88
+ Use Task tool with `subagent_type="ez-codebase-mapper"`, `model="{mapper_model}"`, and `run_in_background=true` for parallel execution.
89
+
90
+ **CRITICAL:** Use the dedicated `gsd-codebase-mapper` agent, NOT `Explore`. The mapper agent writes documents directly.
91
+
92
+ **Agent 1: Tech Focus**
93
+
94
+ ```
95
+ Task(
96
+ subagent_type="ez-codebase-mapper",
97
+ model="{mapper_model}",
98
+ run_in_background=true,
99
+ description="Map codebase tech stack",
100
+ prompt="Focus: tech
101
+
102
+ Analyze this codebase for technology stack and external integrations.
103
+
104
+ Write these documents to .planning/codebase/:
105
+ - STACK.md - Languages, runtime, frameworks, dependencies, configuration
106
+ - INTEGRATIONS.md - External APIs, databases, auth providers, webhooks
107
+
108
+ Explore thoroughly. Write documents directly using templates. Return confirmation only."
109
+ )
110
+ ```
111
+
112
+ **Agent 2: Architecture Focus**
113
+
114
+ ```
115
+ Task(
116
+ subagent_type="ez-codebase-mapper",
117
+ model="{mapper_model}",
118
+ run_in_background=true,
119
+ description="Map codebase architecture",
120
+ prompt="Focus: arch
121
+
122
+ Analyze this codebase architecture and directory structure.
123
+
124
+ Write these documents to .planning/codebase/:
125
+ - ARCHITECTURE.md - Pattern, layers, data flow, abstractions, entry points
126
+ - STRUCTURE.md - Directory layout, key locations, naming conventions
127
+
128
+ Explore thoroughly. Write documents directly using templates. Return confirmation only."
129
+ )
130
+ ```
131
+
132
+ **Agent 3: Quality Focus**
133
+
134
+ ```
135
+ Task(
136
+ subagent_type="ez-codebase-mapper",
137
+ model="{mapper_model}",
138
+ run_in_background=true,
139
+ description="Map codebase conventions",
140
+ prompt="Focus: quality
141
+
142
+ Analyze this codebase for coding conventions and testing patterns.
143
+
144
+ Write these documents to .planning/codebase/:
145
+ - CONVENTIONS.md - Code style, naming, patterns, error handling
146
+ - TESTING.md - Framework, structure, mocking, coverage
147
+
148
+ Explore thoroughly. Write documents directly using templates. Return confirmation only."
149
+ )
150
+ ```
151
+
152
+ **Agent 4: Concerns Focus**
153
+
154
+ ```
155
+ Task(
156
+ subagent_type="ez-codebase-mapper",
157
+ model="{mapper_model}",
158
+ run_in_background=true,
159
+ description="Map codebase concerns",
160
+ prompt="Focus: concerns
161
+
162
+ Analyze this codebase for technical debt, known issues, and areas of concern.
163
+
164
+ Write this document to .planning/codebase/:
165
+ - CONCERNS.md - Tech debt, bugs, security, performance, fragile areas
166
+
167
+ Explore thoroughly. Write document directly using template. Return confirmation only."
168
+ )
169
+ ```
170
+
171
+ Continue to collect_confirmations.
172
+ </step>
173
+
174
+ <step name="collect_confirmations">
175
+ Wait for all 4 agents to complete.
176
+
177
+ Read each agent's output file to collect confirmations.
178
+
179
+ **Expected confirmation format from each agent:**
180
+ ```
181
+ ## Mapping Complete
182
+
183
+ **Focus:** {focus}
184
+ **Documents written:**
185
+ - `.planning/codebase/{DOC1}.md` ({N} lines)
186
+ - `.planning/codebase/{DOC2}.md` ({N} lines)
187
+
188
+ Ready for orchestrator summary.
189
+ ```
190
+
191
+ **What you receive:** Just file paths and line counts. NOT document contents.
192
+
193
+ If any agent failed, note the failure and continue with successful documents.
194
+
195
+ Continue to verify_output.
196
+ </step>
197
+
198
+ <step name="verify_output">
199
+ Verify all documents created successfully:
200
+
201
+ ```bash
202
+ ls -la .planning/codebase/
203
+ wc -l .planning/codebase/*.md
204
+ ```
205
+
206
+ **Verification checklist:**
207
+ - All 7 documents exist
208
+ - No empty documents (each should have >20 lines)
209
+
210
+ If any documents missing or empty, note which agents may have failed.
211
+
212
+ Continue to scan_for_secrets.
213
+ </step>
214
+
215
+ <step name="scan_for_secrets">
216
+ **CRITICAL SECURITY CHECK:** Scan output files for accidentally leaked secrets before committing.
217
+
218
+ Run secret pattern detection:
219
+
220
+ ```bash
221
+ # Check for common API key patterns in generated docs
222
+ grep -E '(sk-[a-zA-Z0-9]{20,}|sk_live_[a-zA-Z0-9]+|sk_test_[a-zA-Z0-9]+|ghp_[a-zA-Z0-9]{36}|gho_[a-zA-Z0-9]{36}|glpat-[a-zA-Z0-9_-]+|AKIA[A-Z0-9]{16}|xox[baprs]-[a-zA-Z0-9-]+|-----BEGIN.*PRIVATE KEY|eyJ[a-zA-Z0-9_-]+\.eyJ[a-zA-Z0-9_-]+\.)' .planning/codebase/*.md 2>/dev/null && SECRETS_FOUND=true || SECRETS_FOUND=false
223
+ ```
224
+
225
+ **If SECRETS_FOUND=true:**
226
+
227
+ ```
228
+ ⚠️ SECURITY ALERT: Potential secrets detected in codebase documents!
229
+
230
+ Found patterns that look like API keys or tokens in:
231
+ [show grep output]
232
+
233
+ This would expose credentials if committed.
234
+
235
+ **Action required:**
236
+ 1. Review the flagged content above
237
+ 2. If these are real secrets, they must be removed before committing
238
+ 3. Consider adding sensitive files to Claude Code "Deny" permissions
239
+
240
+ Pausing before commit. Reply "safe to proceed" if the flagged content is not actually sensitive, or edit the files first.
241
+ ```
242
+
243
+ Wait for user confirmation before continuing to commit_codebase_map.
244
+
245
+ **If SECRETS_FOUND=false:**
246
+
247
+ Continue to commit_codebase_map.
248
+ </step>
249
+
250
+ <step name="commit_codebase_map">
251
+ Commit the codebase map:
252
+
253
+ ```bash
254
+ node "$HOME/.claude/ez-agents/bin/ez-tools.cjs" commit "docs: map existing codebase" --files .planning/codebase/*.md
255
+ ```
256
+
257
+ Continue to offer_next.
258
+ </step>
259
+
260
+ <step name="offer_next">
261
+ Present completion summary and next steps.
262
+
263
+ **Get line counts:**
264
+ ```bash
265
+ wc -l .planning/codebase/*.md
266
+ ```
267
+
268
+ **Output format:**
269
+
270
+ ```
271
+ Codebase mapping complete.
272
+
273
+ Created .planning/codebase/:
274
+ - STACK.md ([N] lines) - Technologies and dependencies
275
+ - ARCHITECTURE.md ([N] lines) - System design and patterns
276
+ - STRUCTURE.md ([N] lines) - Directory layout and organization
277
+ - CONVENTIONS.md ([N] lines) - Code style and patterns
278
+ - TESTING.md ([N] lines) - Test structure and practices
279
+ - INTEGRATIONS.md ([N] lines) - External services and APIs
280
+ - CONCERNS.md ([N] lines) - Technical debt and issues
281
+
282
+
283
+ ---
284
+
285
+ ## ▶ Next Up
286
+
287
+ **Initialize project** — use codebase context for planning
288
+
289
+ `/ez:new-project`
290
+
291
+ <sub>`/clear` first → fresh context window</sub>
292
+
293
+ ---
294
+
295
+ **Also available:**
296
+ - Re-run mapping: `/ez:map-codebase`
297
+ - Review specific file: `cat .planning/codebase/STACK.md`
298
+ - Edit any document before proceeding
299
+
300
+ ---
301
+ ```
302
+
303
+ End workflow.
304
+ </step>
305
+
306
+ </process>
307
+
308
+ <success_criteria>
309
+ - .planning/codebase/ directory created
310
+ - 4 parallel gsd-codebase-mapper agents spawned with run_in_background=true
311
+ - Agents write documents directly (orchestrator doesn't receive document contents)
312
+ - Read agent output files to collect confirmations
313
+ - All 7 codebase documents exist
314
+ - Clear completion summary with line counts
315
+ - User offered clear next steps in GSD style
316
+ </success_criteria>