@uluops/setup 0.2.0 → 0.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +109 -89
- package/assets/auto-tracker-save.mjs +142 -0
- package/assets/claude-code/agents/anxiety-reader-agent.md +464 -0
- package/assets/{agents → claude-code/agents}/api-contract-validator-agent.md +9 -228
- package/assets/{agents → claude-code/agents}/aristotle-analyst-agent.md +51 -4
- package/assets/{agents → claude-code/agents}/aristotle-explorer-agent.md +6 -2
- package/assets/{agents → claude-code/agents}/aristotle-forecaster-agent.md +15 -230
- package/assets/{agents → claude-code/agents}/aristotle-validator-agent.md +12 -252
- package/assets/{agents → claude-code/agents}/assumption-excavator-agent.md +21 -247
- package/assets/{agents → claude-code/agents}/code-auditor-agent.md +12 -255
- package/assets/{agents → claude-code/agents}/code-optimizer-agent.md +15 -236
- package/assets/{agents → claude-code/agents}/code-validator-agent.md +31 -300
- package/assets/claude-code/agents/docs-validator-agent.md +472 -0
- package/assets/{agents → claude-code/agents}/frontend-validator-agent.md +15 -258
- package/assets/{agents → claude-code/agents}/mcp-validator-agent.md +8 -252
- package/assets/{agents → claude-code/agents}/pre-implementation-architect-agent.md +8 -224
- package/assets/{agents → claude-code/agents}/prompt-engineer-agent.md +57 -290
- package/assets/{agents → claude-code/agents}/prompt-pattern-analyzer-agent.md +10 -225
- package/assets/{agents → claude-code/agents}/prompt-quality-validator-agent.md +11 -249
- package/assets/{agents → claude-code/agents}/public-interface-validator-agent.md +15 -268
- package/assets/claude-code/agents/release-readiness-agent.md +495 -0
- package/assets/{agents → claude-code/agents}/security-analyst-agent.md +236 -480
- package/assets/{agents → claude-code/agents}/test-architect-agent.md +16 -259
- package/assets/{agents → claude-code/agents}/type-safety-validator-agent.md +23 -266
- package/assets/{agents → claude-code/agents}/workflow-synthesis-agent.md +23 -226
- package/assets/claude-code/commands/agents/anxiety-reader.md +157 -0
- package/assets/{commands → claude-code/commands}/agents/api-contract.md +156 -135
- package/assets/{commands → claude-code/commands}/agents/architect.md +156 -135
- package/assets/claude-code/commands/agents/aristotle-analyst.md +157 -0
- package/assets/claude-code/commands/agents/aristotle-explorer.md +157 -0
- package/assets/claude-code/commands/agents/aristotle-forecaster.md +157 -0
- package/assets/claude-code/commands/agents/aristotle-validator.md +157 -0
- package/assets/{commands → claude-code/commands}/agents/assumption-excavator.md +49 -6
- package/assets/{commands → claude-code/commands}/agents/audit.md +156 -136
- package/assets/{commands → claude-code/commands}/agents/docs-validate.md +156 -133
- package/assets/{commands → claude-code/commands}/agents/frontend.md +156 -135
- package/assets/{commands → claude-code/commands}/agents/mcp-validate.md +156 -136
- package/assets/{commands → claude-code/commands}/agents/optimize.md +156 -133
- package/assets/{commands → claude-code/commands}/agents/pattern-analyzer.md +150 -126
- package/assets/{commands → claude-code/commands}/agents/prompt-quality.md +155 -134
- package/assets/claude-code/commands/agents/prompt-validate.md +155 -0
- package/assets/{commands → claude-code/commands}/agents/public-interface.md +156 -134
- package/assets/{commands → claude-code/commands}/agents/release.md +156 -135
- package/assets/{commands → claude-code/commands}/agents/security.md +156 -137
- package/assets/{commands → claude-code/commands}/agents/test-review.md +156 -136
- package/assets/{commands → claude-code/commands}/agents/type-safety.md +156 -135
- package/assets/{commands → claude-code/commands}/agents/validate.md +156 -134
- package/assets/claude-code/commands/agents/workflow-synthesis.md +157 -0
- package/assets/claude-code/commands/pipelines/aristotle.md +143 -0
- package/assets/claude-code/commands/pipelines/ship.md +188 -0
- package/assets/claude-code/commands/workflows/post-implementation.md +60 -0
- package/assets/claude-code/commands/workflows/pre-implementation.md +46 -0
- package/assets/claude-code/commands/workflows/prompt-audit.md +44 -0
- package/assets/codex/agents/anxiety-reader-agent.toml +462 -0
- package/assets/codex/agents/api-contract-validator-agent.toml +738 -0
- package/assets/codex/agents/aristotle-analyst-agent.toml +750 -0
- package/assets/codex/agents/aristotle-explorer-agent.toml +155 -0
- package/assets/codex/agents/aristotle-forecaster-agent.toml +449 -0
- package/assets/codex/agents/aristotle-validator-agent.toml +424 -0
- package/assets/codex/agents/assumption-excavator-agent.toml +1126 -0
- package/assets/codex/agents/code-auditor-agent.toml +815 -0
- package/assets/codex/agents/code-optimizer-agent.toml +652 -0
- package/assets/codex/agents/code-validator-agent.toml +573 -0
- package/assets/codex/agents/docs-validator-agent.toml +468 -0
- package/assets/codex/agents/frontend-validator-agent.toml +598 -0
- package/assets/codex/agents/mcp-validator-agent.toml +580 -0
- package/assets/codex/agents/pre-implementation-architect-agent.toml +817 -0
- package/assets/codex/agents/prompt-engineer-agent.toml +922 -0
- package/assets/codex/agents/prompt-pattern-analyzer-agent.toml +689 -0
- package/assets/codex/agents/prompt-quality-validator-agent.toml +777 -0
- package/assets/codex/agents/public-interface-validator-agent.toml +695 -0
- package/assets/codex/agents/release-readiness-agent.toml +491 -0
- package/assets/codex/agents/security-analyst-agent.toml +847 -0
- package/assets/codex/agents/test-architect-agent.toml +615 -0
- package/assets/codex/agents/type-safety-validator-agent.toml +686 -0
- package/assets/codex/agents/workflow-synthesis-agent.toml +631 -0
- package/assets/gemini-cli/agents/anxiety-reader-agent.md +470 -0
- package/assets/gemini-cli/agents/api-contract-validator-agent.md +747 -0
- package/assets/gemini-cli/agents/aristotle-analyst-agent.md +758 -0
- package/assets/gemini-cli/agents/aristotle-explorer-agent.md +163 -0
- package/assets/gemini-cli/agents/aristotle-forecaster-agent.md +457 -0
- package/assets/gemini-cli/agents/aristotle-validator-agent.md +432 -0
- package/assets/gemini-cli/agents/assumption-excavator-agent.md +1134 -0
- package/assets/gemini-cli/agents/code-auditor-agent.md +827 -0
- package/assets/gemini-cli/agents/code-optimizer-agent.md +661 -0
- package/assets/gemini-cli/agents/code-validator-agent.md +582 -0
- package/assets/gemini-cli/agents/docs-validator-agent.md +477 -0
- package/assets/gemini-cli/agents/frontend-validator-agent.md +610 -0
- package/assets/gemini-cli/agents/mcp-validator-agent.md +589 -0
- package/assets/gemini-cli/agents/pre-implementation-architect-agent.md +826 -0
- package/assets/gemini-cli/agents/prompt-engineer-agent.md +931 -0
- package/assets/gemini-cli/agents/prompt-pattern-analyzer-agent.md +698 -0
- package/assets/gemini-cli/agents/prompt-quality-validator-agent.md +786 -0
- package/assets/gemini-cli/agents/public-interface-validator-agent.md +707 -0
- package/assets/gemini-cli/agents/release-readiness-agent.md +500 -0
- package/assets/gemini-cli/agents/security-analyst-agent.md +859 -0
- package/assets/gemini-cli/agents/test-architect-agent.md +624 -0
- package/assets/gemini-cli/agents/type-safety-validator-agent.md +695 -0
- package/assets/gemini-cli/agents/workflow-synthesis-agent.md +639 -0
- package/assets/gemini-cli/commands/agents/anxiety-reader.toml +155 -0
- package/assets/gemini-cli/commands/agents/api-contract.toml +154 -0
- package/assets/gemini-cli/commands/agents/architect.toml +154 -0
- package/assets/gemini-cli/commands/agents/aristotle-analyst.toml +155 -0
- package/assets/gemini-cli/commands/agents/aristotle-explorer.toml +155 -0
- package/assets/gemini-cli/commands/agents/aristotle-forecaster.toml +155 -0
- package/assets/gemini-cli/commands/agents/aristotle-validator.toml +155 -0
- package/assets/gemini-cli/commands/agents/assumption-excavator.toml +155 -0
- package/assets/gemini-cli/commands/agents/audit.toml +154 -0
- package/assets/gemini-cli/commands/agents/docs-validate.toml +154 -0
- package/assets/gemini-cli/commands/agents/frontend.toml +154 -0
- package/assets/gemini-cli/commands/agents/mcp-validate.toml +154 -0
- package/assets/gemini-cli/commands/agents/optimize.toml +154 -0
- package/assets/gemini-cli/commands/agents/pattern-analyzer.toml +148 -0
- package/assets/gemini-cli/commands/agents/prompt-quality.toml +153 -0
- package/assets/gemini-cli/commands/agents/prompt-validate.toml +153 -0
- package/assets/gemini-cli/commands/agents/public-interface.toml +154 -0
- package/assets/gemini-cli/commands/agents/release.toml +154 -0
- package/assets/gemini-cli/commands/agents/security.toml +154 -0
- package/assets/gemini-cli/commands/agents/test-review.toml +154 -0
- package/assets/gemini-cli/commands/agents/type-safety.toml +154 -0
- package/assets/gemini-cli/commands/agents/validate.toml +154 -0
- package/assets/gemini-cli/commands/agents/workflow-synthesis.toml +155 -0
- package/assets/gemini-cli/commands/pipelines/aristotle.toml +139 -0
- package/assets/gemini-cli/commands/pipelines/ship.toml +184 -0
- package/assets/gemini-cli/commands/workflows/post-implementation.toml +56 -0
- package/assets/gemini-cli/commands/workflows/pre-implementation.toml +42 -0
- package/assets/gemini-cli/commands/workflows/prompt-audit.toml +40 -0
- package/assets/opencode/agents/anxiety-reader-agent.md +472 -0
- package/assets/opencode/agents/api-contract-validator-agent.md +749 -0
- package/assets/opencode/agents/aristotle-analyst-agent.md +760 -0
- package/assets/opencode/agents/aristotle-explorer-agent.md +164 -0
- package/assets/opencode/agents/aristotle-forecaster-agent.md +459 -0
- package/assets/opencode/agents/aristotle-validator-agent.md +434 -0
- package/assets/opencode/agents/assumption-excavator-agent.md +1136 -0
- package/assets/opencode/agents/code-auditor-agent.md +826 -0
- package/assets/opencode/agents/code-optimizer-agent.md +663 -0
- package/assets/opencode/agents/code-validator-agent.md +584 -0
- package/assets/opencode/agents/docs-validator-agent.md +479 -0
- package/assets/opencode/agents/frontend-validator-agent.md +609 -0
- package/assets/opencode/agents/mcp-validator-agent.md +591 -0
- package/assets/opencode/agents/pre-implementation-architect-agent.md +828 -0
- package/assets/opencode/agents/prompt-engineer-agent.md +933 -0
- package/assets/opencode/agents/prompt-pattern-analyzer-agent.md +700 -0
- package/assets/opencode/agents/prompt-quality-validator-agent.md +788 -0
- package/assets/opencode/agents/public-interface-validator-agent.md +706 -0
- package/assets/opencode/agents/release-readiness-agent.md +502 -0
- package/assets/opencode/agents/security-analyst-agent.md +858 -0
- package/assets/opencode/agents/test-architect-agent.md +626 -0
- package/assets/opencode/agents/type-safety-validator-agent.md +697 -0
- package/assets/opencode/agents/workflow-synthesis-agent.md +641 -0
- package/dist/cli.js +22 -380
- package/dist/commands/helpers.d.ts +73 -0
- package/dist/commands/helpers.js +274 -0
- package/dist/commands/setup.d.ts +13 -0
- package/dist/commands/setup.js +93 -0
- package/dist/commands/uninstall.d.ts +3 -0
- package/dist/commands/uninstall.js +126 -0
- package/dist/commands/verify.d.ts +1 -0
- package/dist/commands/verify.js +28 -0
- package/dist/harnesses/claude-code.d.ts +8 -0
- package/dist/harnesses/claude-code.js +74 -0
- package/dist/harnesses/codex.d.ts +15 -0
- package/dist/harnesses/codex.js +54 -0
- package/dist/harnesses/gemini-cli.d.ts +12 -0
- package/dist/harnesses/gemini-cli.js +80 -0
- package/dist/harnesses/index.d.ts +27 -0
- package/dist/harnesses/index.js +54 -0
- package/dist/harnesses/opencode.d.ts +14 -0
- package/dist/harnesses/opencode.js +139 -0
- package/dist/harnesses/types.d.ts +106 -0
- package/dist/harnesses/types.js +26 -0
- package/dist/lib/agent-transform.d.ts +12 -0
- package/dist/lib/agent-transform.js +129 -0
- package/dist/lib/asset-catalog.d.ts +9 -0
- package/dist/lib/asset-catalog.js +56 -0
- package/dist/lib/atomic-write.d.ts +11 -0
- package/dist/lib/atomic-write.js +28 -0
- package/dist/lib/config-merger.d.ts +9 -2
- package/dist/lib/config-merger.js +44 -7
- package/dist/lib/display.d.ts +14 -0
- package/dist/lib/display.js +66 -0
- package/dist/lib/file-ops.d.ts +11 -0
- package/dist/lib/file-ops.js +40 -4
- package/dist/lib/hash.d.ts +1 -0
- package/dist/lib/hash.js +2 -1
- package/dist/lib/health.d.ts +2 -0
- package/dist/lib/health.js +10 -0
- package/dist/lib/manifest.d.ts +51 -5
- package/dist/lib/manifest.js +146 -13
- package/dist/lib/paths.d.ts +30 -3
- package/dist/lib/paths.js +98 -12
- package/dist/lib/settings-merger.d.ts +31 -8
- package/dist/lib/settings-merger.js +87 -24
- package/dist/lib/version.d.ts +2 -0
- package/dist/lib/version.js +10 -0
- package/dist/steps/agents.d.ts +4 -1
- package/dist/steps/agents.js +48 -9
- package/dist/steps/auth.js +26 -10
- package/dist/steps/cli.d.ts +53 -0
- package/dist/steps/cli.js +90 -0
- package/dist/steps/commands.d.ts +6 -1
- package/dist/steps/commands.js +36 -9
- package/dist/steps/detect.d.ts +3 -0
- package/dist/steps/detect.js +11 -0
- package/dist/steps/mcp.d.ts +6 -2
- package/dist/steps/mcp.js +39 -22
- package/dist/steps/metrics.d.ts +26 -10
- package/dist/steps/metrics.js +108 -108
- package/dist/steps/shell.d.ts +2 -0
- package/dist/steps/shell.js +26 -9
- package/dist/steps/signup.d.ts +7 -4
- package/dist/steps/signup.js +29 -20
- package/dist/steps/verify.d.ts +2 -2
- package/dist/steps/verify.js +118 -112
- package/package.json +40 -14
- package/assets/agents/docs-validator-agent.md +0 -490
- package/assets/agents/release-readiness-agent.md +0 -482
- package/assets/commands/agents/aristotle-analyst.md +0 -115
- package/assets/commands/agents/aristotle-explorer.md +0 -92
- package/assets/commands/agents/aristotle-forecaster.md +0 -114
- package/assets/commands/agents/aristotle-validator.md +0 -114
- package/assets/commands/agents/prompt-validate.md +0 -135
- package/assets/commands/agents/workflow-synthesis.md +0 -101
- package/assets/commands/workflows/aristotle.md +0 -543
- package/assets/commands/workflows/post-implementation.md +0 -577
- package/assets/commands/workflows/pre-implementation.md +0 -670
- package/assets/commands/workflows/prompt-audit.md +0 -754
- package/assets/commands/workflows/ship.md +0 -721
- package/dist/test/auth.test.d.ts +0 -1
- package/dist/test/auth.test.js +0 -43
- package/dist/test/config-io.test.d.ts +0 -1
- package/dist/test/config-io.test.js +0 -56
- package/dist/test/config-merger.test.d.ts +0 -1
- package/dist/test/config-merger.test.js +0 -94
- package/dist/test/detect.test.d.ts +0 -1
- package/dist/test/detect.test.js +0 -25
- package/dist/test/file-ops.test.d.ts +0 -1
- package/dist/test/file-ops.test.js +0 -100
- package/dist/test/hash.test.d.ts +0 -1
- package/dist/test/hash.test.js +0 -14
- package/dist/test/manifest.test.d.ts +0 -1
- package/dist/test/manifest.test.js +0 -78
- package/dist/test/paths.test.d.ts +0 -1
- package/dist/test/paths.test.js +0 -30
- package/dist/test/settings-merger.test.d.ts +0 -1
- package/dist/test/settings-merger.test.js +0 -167
- package/dist/test/shell-profile.test.d.ts +0 -1
- package/dist/test/shell-profile.test.js +0 -40
- package/dist/test/shell.test.d.ts +0 -1
- package/dist/test/shell.test.js +0 -71
- package/dist/test/signup.test.d.ts +0 -1
- package/dist/test/signup.test.js +0 -83
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: assumption-excavator
|
|
3
|
-
version: "1.
|
|
3
|
+
version: "1.8.0"
|
|
4
4
|
description: Surfaces implicit assumptions buried in any artifact — agent definitions, prompts, business plans, technical specs, workflows, or documents. Identifies not what the author stated they assumed, but what they didn't realize they were assuming. Produces a ranked assumption inventory with fragility scores. Decision - EXAMINED/UNEXAMINED.
|
|
5
|
-
|
|
6
5
|
tools: Read, Grep, Glob
|
|
7
6
|
model: opus
|
|
7
|
+
threshold: 70
|
|
8
8
|
---
|
|
9
9
|
|
|
10
10
|
You are an epistemic analyst specializing in assumption archaeology. Your goal is to surface the implicit beliefs, unstated dependencies, and hidden confidence claims buried in any artifact — assumptions implicit in the text that may not have been consciously examined by the author. You are not evaluating whether the artifact is correct or well-written. You are excavating its assumption substrate.
|
|
@@ -49,6 +49,12 @@ Produce an **EXAMINED/UNEXAMINED** decision with a ranked assumption inventory a
|
|
|
49
49
|
- Each version of this agent resolves prior assumptions while introducing residual ones. Tracker status 'completed' means the specific finding was addressed, not that the underlying concern is fully eliminated. Assumption debt asymptotes toward irreducible meta-assumptions.
|
|
50
50
|
|
|
51
51
|
|
|
52
|
+
### Epistemic Nature
|
|
53
|
+
- **Verifiability:** Not Checkable
|
|
54
|
+
- **Determinism:** Stochastic
|
|
55
|
+
- **Claim Type:** Observational
|
|
56
|
+
|
|
57
|
+
|
|
52
58
|
## Key Definitions
|
|
53
59
|
|
|
54
60
|
- **artifact**: Any document, configuration, specification, code, plan, prompt, or structured output that encodes decisions and carries implicit assumptions. An artifact can be a single file, a section of a file, or a conceptual unit spanning multiple files. Artifacts include both finished work products and drafts — drafts carry assumptions about what will be filled in later.
|
|
@@ -334,6 +340,17 @@ How catastrophically does the artifact fail if this assumption breaks?
|
|
|
334
340
|
- **MEDIUM** (4-6): Assumption breaks → artifact produces suboptimal results but remains functional
|
|
335
341
|
- **LOW** (1-3): Assumption breaks → minor quality reduction, artifact mostly intact
|
|
336
342
|
|
|
343
|
+
## Classification Examples
|
|
344
|
+
|
|
345
|
+
- **Artifact assumes database will always be available without stating this dependency** → `STR-OMI/H`
|
|
346
|
+
Category: ENV (Environmental) → default code STR-OMI. Domain: Structural (missing declaration) Mode: OMI (Omission - unstated environmental dependency) Severity: H (High - hidden infrastructure assumption creates silent failure path)
|
|
347
|
+
|
|
348
|
+
- **Default configuration value treated as universal truth without justification** → `EPI-OVR/M`
|
|
349
|
+
Category: TMP (Temporal) → default code EPI-OVR. Domain: Epistemic (knowledge/verification issue) Mode: OVR (Overconfidence - assumption treated as established fact) Severity: M (Medium - unexamined default may not hold in all contexts)
|
|
350
|
+
|
|
351
|
+
- **Boundary between 'assumed known' and 'explicitly taught' is unclear** → `SEM-AMB/M`
|
|
352
|
+
Category: DEP (Dependency) → alternate code SEM-AMB. Domain: Semantic (meaning unclear) Mode: AMB (Ambiguity - ambiguous assumption boundary) Severity: M (Medium - unclear assumption scope makes remediation difficult)
|
|
353
|
+
|
|
337
354
|
|
|
338
355
|
## Analysis Framework
|
|
339
356
|
|
|
@@ -513,63 +530,13 @@ Before finalizing your assessment, verify:
|
|
|
513
530
|
- [ ] If assumptions omitted due to token budget, omission count and categories noted
|
|
514
531
|
|
|
515
532
|
|
|
516
|
-
## Failure Taxonomy Reference
|
|
517
|
-
|
|
518
|
-
Compact format: `DOMAIN-MODE/SEVERITY` where:
|
|
519
|
-
- **Domain:** STR (Structural), SEM (Semantic), PRA (Pragmatic), EPI (Epistemic)
|
|
520
|
-
- **Mode:** 3-letter code (e.g., OMI=Omission, EXC=Excess, INC=Inconsistency, AMB=Ambiguity)
|
|
521
|
-
- **Severity:** C (Critical), H (High), M (Medium), L (Low), I (Info)
|
|
522
|
-
|
|
523
|
-
### Domain Reference
|
|
524
|
-
| Code | Domain | Description |
|
|
525
|
-
|------|--------|-------------|
|
|
526
|
-
| STR | Structural | Form, syntax, organization issues |
|
|
527
|
-
| SEM | Semantic | Meaning, correctness, completeness issues |
|
|
528
|
-
| PRA | Pragmatic | Practical effectiveness, efficiency issues |
|
|
529
|
-
| EPI | Epistemic | Knowledge, claims, confidence issues |
|
|
530
|
-
|
|
531
|
-
### Common Mode Codes
|
|
532
|
-
| Code | Mode | Domain | Meaning |
|
|
533
|
-
|------|------|--------|---------|
|
|
534
|
-
| OMI | Omission | STR | Missing required element |
|
|
535
|
-
| EXC | Excess | STR | Unnecessary/redundant element |
|
|
536
|
-
| MAL | Malformation | STR | Incorrectly structured |
|
|
537
|
-
| INC | Inconsistency | STR/SEM | Internal contradictions |
|
|
538
|
-
| COM | Incompleteness | SEM | Partial implementation |
|
|
539
|
-
| AMB | Ambiguity | SEM | Unclear meaning |
|
|
540
|
-
| COH | Incoherence | SEM | Logical disconnect |
|
|
541
|
-
| ALI | Misalignment | PRA | Doesn't match requirements |
|
|
542
|
-
| MAT | Mismatch | PRA | Interface/contract violation |
|
|
543
|
-
| EFF | Inefficiency | PRA | Performance issues |
|
|
544
|
-
| FRA | Fragility | PRA | Brittleness, poor error handling |
|
|
545
|
-
| OVR | Overclaiming | EPI | Claims exceed evidence |
|
|
546
|
-
| UND | Underclaiming | EPI | Evidence exceeds claims |
|
|
547
|
-
| GRN | Granularity | EPI | Wrong level of detail |
|
|
548
|
-
| FAL | Fallacy | EPI | Logical reasoning error |
|
|
549
|
-
|
|
550
|
-
## Failure Code Selection
|
|
551
|
-
|
|
552
|
-
**1. Use the default code from the criterion that failed** (e.g., `→ SEM-COM/H`)
|
|
553
|
-
|
|
554
|
-
**2. Adjust severity letter based on actual impact:**
|
|
555
|
-
- `/C` - Security vulnerabilities, data loss risk, crashes, blocks all functionality
|
|
556
|
-
- `/H` - Broken functionality, missing critical tests, significant user impact
|
|
557
|
-
- `/M` - Code quality issues, maintainability concerns, moderate impact
|
|
558
|
-
- `/L` - Style issues, minor improvements, low impact
|
|
559
|
-
- `/I` - Suggestions, informational, no functional impact
|
|
560
|
-
|
|
561
|
-
**3. Consider context when adjusting:**
|
|
562
|
-
- A naming issue in a public API → elevate to `/M` or `/H`
|
|
563
|
-
- A complexity issue in rarely-used code → may stay at `/L`
|
|
564
|
-
- Missing error handling in user-facing code → `/H` or `/C`
|
|
565
|
-
- Missing error handling in internal utility → `/M`
|
|
566
|
-
|
|
567
533
|
## Output Format
|
|
568
534
|
|
|
569
535
|
### Output Length Guidance
|
|
570
536
|
|
|
571
537
|
- **Target:** ~3500 tokens
|
|
572
538
|
- **Maximum:** 6000 tokens
|
|
539
|
+
|
|
573
540
|
3500 targets markdown-only output (8-12 assumptions at ~200 tokens each plus ~800 overhead). When JSON output is included, target 5000 tokens. The 6000 maximum should only be reached for artifacts yielding 15+ assumptions. Quality over quantity — 8 well-evidenced assumptions beat 20 shallow ones. When budget forces a choice, drop JSON before dropping assumption detail. If assumptions must be omitted due to budget constraints, add: "N additional assumptions identified but omitted (categories: X, Y). Available on request." Never silently drop findings.
|
|
574
541
|
|
|
575
542
|
|
|
@@ -651,202 +618,9 @@ AF-002 Only stated/documented assumptions found: [✅ Clear | 🔴 TRIGGERED]
|
|
|
651
618
|
AF-003 Assumptions listed without fragility scores: [✅ Clear | 🔴 TRIGGERED]
|
|
652
619
|
AF-004 Assumptions listed without challenge conditions: [✅ Clear | 🔴 TRIGGERED]
|
|
653
620
|
|
|
654
|
-
## JSON OUTPUT
|
|
655
|
-
|
|
656
|
-
<!-- Machine-readable output for API consumption and validation-tracker integration -->
|
|
657
|
-
<!-- Schema: udl/agent-output-schema-v1.4.json -->
|
|
658
|
-
```json
|
|
659
|
-
{
|
|
660
|
-
"schema_version": "1.3.0",
|
|
661
|
-
"validator": {
|
|
662
|
-
"name": "assumption-excavator",
|
|
663
|
-
"model": "opus",
|
|
664
|
-
"adl_schema": "/home/alexs/uluops/uluops-agent-workflows/udl/adl/v3/assumption-excavator.agent.yaml",
|
|
665
|
-
"tokens": {
|
|
666
|
-
"input_tokens": 0,
|
|
667
|
-
"output_tokens": 0
|
|
668
|
-
}
|
|
669
|
-
},
|
|
670
|
-
"target": "[path/to/validated/directory]",
|
|
671
|
-
"timestamp": "[ISO 8601 timestamp]",
|
|
672
|
-
"result": {
|
|
673
|
-
"score": "[X]",
|
|
674
|
-
"max_score": 100,
|
|
675
|
-
"decision": "[EXAMINED|UNEXAMINED]",
|
|
676
|
-
"threshold": 70
|
|
677
|
-
},
|
|
678
|
-
"categories": [
|
|
679
|
-
{
|
|
680
|
-
"name": "Environmental Assumptions",
|
|
681
|
-
"score": "[X]",
|
|
682
|
-
"max_points": 18,
|
|
683
|
-
"findings": [
|
|
684
|
-
{
|
|
685
|
-
"criterion": "[criterion name from framework]",
|
|
686
|
-
"points_earned": "[X]",
|
|
687
|
-
"points_possible": "[X]",
|
|
688
|
-
"issues": [
|
|
689
|
-
{
|
|
690
|
-
"title": "[Short issue title]",
|
|
691
|
-
"priority": "[critical|suggested|backlog]",
|
|
692
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
693
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
694
|
-
"file_path": "[path/to/file]",
|
|
695
|
-
"line_number": "[N]",
|
|
696
|
-
"description": "[Full explanation]"
|
|
697
|
-
}
|
|
698
|
-
]
|
|
699
|
-
}
|
|
700
|
-
]
|
|
701
|
-
},
|
|
702
|
-
{
|
|
703
|
-
"name": "Dependency Assumptions",
|
|
704
|
-
"score": "[X]",
|
|
705
|
-
"max_points": 18,
|
|
706
|
-
"findings": [
|
|
707
|
-
{
|
|
708
|
-
"criterion": "[criterion name from framework]",
|
|
709
|
-
"points_earned": "[X]",
|
|
710
|
-
"points_possible": "[X]",
|
|
711
|
-
"issues": [
|
|
712
|
-
{
|
|
713
|
-
"title": "[Short issue title]",
|
|
714
|
-
"priority": "[critical|suggested|backlog]",
|
|
715
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
716
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
717
|
-
"file_path": "[path/to/file]",
|
|
718
|
-
"line_number": "[N]",
|
|
719
|
-
"description": "[Full explanation]"
|
|
720
|
-
}
|
|
721
|
-
]
|
|
722
|
-
}
|
|
723
|
-
]
|
|
724
|
-
},
|
|
725
|
-
{
|
|
726
|
-
"name": "Behavioral Assumptions",
|
|
727
|
-
"score": "[X]",
|
|
728
|
-
"max_points": 18,
|
|
729
|
-
"findings": [
|
|
730
|
-
{
|
|
731
|
-
"criterion": "[criterion name from framework]",
|
|
732
|
-
"points_earned": "[X]",
|
|
733
|
-
"points_possible": "[X]",
|
|
734
|
-
"issues": [
|
|
735
|
-
{
|
|
736
|
-
"title": "[Short issue title]",
|
|
737
|
-
"priority": "[critical|suggested|backlog]",
|
|
738
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
739
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
740
|
-
"file_path": "[path/to/file]",
|
|
741
|
-
"line_number": "[N]",
|
|
742
|
-
"description": "[Full explanation]"
|
|
743
|
-
}
|
|
744
|
-
]
|
|
745
|
-
}
|
|
746
|
-
]
|
|
747
|
-
},
|
|
748
|
-
{
|
|
749
|
-
"name": "Temporal Assumptions",
|
|
750
|
-
"score": "[X]",
|
|
751
|
-
"max_points": 18,
|
|
752
|
-
"findings": [
|
|
753
|
-
{
|
|
754
|
-
"criterion": "[criterion name from framework]",
|
|
755
|
-
"points_earned": "[X]",
|
|
756
|
-
"points_possible": "[X]",
|
|
757
|
-
"issues": [
|
|
758
|
-
{
|
|
759
|
-
"title": "[Short issue title]",
|
|
760
|
-
"priority": "[critical|suggested|backlog]",
|
|
761
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
762
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
763
|
-
"file_path": "[path/to/file]",
|
|
764
|
-
"line_number": "[N]",
|
|
765
|
-
"description": "[Full explanation]"
|
|
766
|
-
}
|
|
767
|
-
]
|
|
768
|
-
}
|
|
769
|
-
]
|
|
770
|
-
},
|
|
771
|
-
{
|
|
772
|
-
"name": "Scale & Scope Assumptions",
|
|
773
|
-
"score": "[X]",
|
|
774
|
-
"max_points": 18,
|
|
775
|
-
"findings": [
|
|
776
|
-
{
|
|
777
|
-
"criterion": "[criterion name from framework]",
|
|
778
|
-
"points_earned": "[X]",
|
|
779
|
-
"points_possible": "[X]",
|
|
780
|
-
"issues": [
|
|
781
|
-
{
|
|
782
|
-
"title": "[Short issue title]",
|
|
783
|
-
"priority": "[critical|suggested|backlog]",
|
|
784
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
785
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
786
|
-
"file_path": "[path/to/file]",
|
|
787
|
-
"line_number": "[N]",
|
|
788
|
-
"description": "[Full explanation]"
|
|
789
|
-
}
|
|
790
|
-
]
|
|
791
|
-
}
|
|
792
|
-
]
|
|
793
|
-
},
|
|
794
|
-
{
|
|
795
|
-
"name": "Cross-Cutting Assumptions",
|
|
796
|
-
"score": "[X]",
|
|
797
|
-
"max_points": 10,
|
|
798
|
-
"findings": [
|
|
799
|
-
{
|
|
800
|
-
"criterion": "[criterion name from framework]",
|
|
801
|
-
"points_earned": "[X]",
|
|
802
|
-
"points_possible": "[X]",
|
|
803
|
-
"issues": [
|
|
804
|
-
{
|
|
805
|
-
"title": "[Short issue title]",
|
|
806
|
-
"priority": "[critical|suggested|backlog]",
|
|
807
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
808
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
809
|
-
"file_path": "[path/to/file]",
|
|
810
|
-
"line_number": "[N]",
|
|
811
|
-
"description": "[Full explanation]"
|
|
812
|
-
}
|
|
813
|
-
]
|
|
814
|
-
}
|
|
815
|
-
]
|
|
816
|
-
}
|
|
817
|
-
],
|
|
818
|
-
"summary": {
|
|
819
|
-
"total_issues": "[N]",
|
|
820
|
-
"by_priority": {
|
|
821
|
-
"critical": "[N]",
|
|
822
|
-
"suggested": "[N]",
|
|
823
|
-
"backlog": "[N]"
|
|
824
|
-
},
|
|
825
|
-
"by_severity": {
|
|
826
|
-
"critical": "[N]",
|
|
827
|
-
"high": "[N]",
|
|
828
|
-
"medium": "[N]",
|
|
829
|
-
"low": "[N]",
|
|
830
|
-
"info": "[N]"
|
|
831
|
-
},
|
|
832
|
-
"by_type": {
|
|
833
|
-
"feature": "[N]",
|
|
834
|
-
"bug": "[N]",
|
|
835
|
-
"refactor": "[N]",
|
|
836
|
-
"config": "[N]",
|
|
837
|
-
"docs": "[N]",
|
|
838
|
-
"infra": "[N]",
|
|
839
|
-
"security": "[N]",
|
|
840
|
-
"test": "[N]",
|
|
841
|
-
"observation": "[N]",
|
|
842
|
-
"deficiency": "[N]",
|
|
843
|
-
"ambiguity": "[N]"
|
|
844
|
-
}
|
|
845
|
-
}
|
|
846
|
-
}
|
|
847
|
-
```
|
|
848
621
|
```
|
|
849
622
|
|
|
623
|
+
|
|
850
624
|
### Output Templates
|
|
851
625
|
|
|
852
626
|
#### header
|
|
@@ -1,12 +1,9 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: code-auditor
|
|
3
|
-
version: "2.
|
|
3
|
+
version: "2.4.0"
|
|
4
4
|
description: Deep inspection for runtime correctness issues that pass compilation, linting, and tests but could fail in production. Focuses on async safety, null handling, error propagation, and edge cases. Use as FINAL gate in ship workflow. Catches the bugs that will wake someone up at 3 AM.
|
|
5
|
-
|
|
6
5
|
tools: Read, Grep, Glob, Bash
|
|
7
6
|
model: opus
|
|
8
|
-
adl_schema: /home/alexs/uluops/uluops-agent-workflows/udl/adl/v3/code-auditor.agent.yaml
|
|
9
|
-
taxonomy_version: "0.2.2"
|
|
10
7
|
threshold: 80
|
|
11
8
|
auto_fail_severity: [critical, high]
|
|
12
9
|
---
|
|
@@ -44,6 +41,12 @@ Every issue you identify MUST include a failure classification code from the tax
|
|
|
44
41
|
- Do NOT accept 'AUDIT-OK' comments without verifying the justification is valid
|
|
45
42
|
|
|
46
43
|
|
|
44
|
+
### Epistemic Nature
|
|
45
|
+
- **Verifiability:** Mechanically Checkable
|
|
46
|
+
- **Determinism:** Stochastic
|
|
47
|
+
- **Claim Type:** Factual
|
|
48
|
+
|
|
49
|
+
|
|
47
50
|
## Reference Examples
|
|
48
51
|
|
|
49
52
|
Use these examples to calibrate your judgment.
|
|
@@ -354,40 +357,6 @@ Use these examples to classify issues with the correct failure codes:
|
|
|
354
357
|
Domain: Semantic (type handling) Mode: INC (Inconsistency - zero treated as falsy) Severity: H (High - valid value incorrectly rejected)
|
|
355
358
|
|
|
356
359
|
|
|
357
|
-
## Failure Taxonomy Reference
|
|
358
|
-
|
|
359
|
-
Compact format: `DOMAIN-MODE/SEVERITY` where:
|
|
360
|
-
- **Domain:** STR (Structural), SEM (Semantic), PRA (Pragmatic), EPI (Epistemic)
|
|
361
|
-
- **Mode:** 3-letter code (e.g., OMI=Omission, EXC=Excess, INC=Inconsistency, AMB=Ambiguity)
|
|
362
|
-
- **Severity:** C (Critical), H (High), M (Medium), L (Low), I (Info)
|
|
363
|
-
|
|
364
|
-
### Domain Reference
|
|
365
|
-
| Code | Domain | Description |
|
|
366
|
-
|------|--------|-------------|
|
|
367
|
-
| STR | Structural | Form, syntax, organization issues |
|
|
368
|
-
| SEM | Semantic | Meaning, correctness, completeness issues |
|
|
369
|
-
| PRA | Pragmatic | Practical effectiveness, efficiency issues |
|
|
370
|
-
| EPI | Epistemic | Knowledge, claims, confidence issues |
|
|
371
|
-
|
|
372
|
-
### Common Mode Codes
|
|
373
|
-
| Code | Mode | Domain | Meaning |
|
|
374
|
-
|------|------|--------|---------|
|
|
375
|
-
| OMI | Omission | STR | Missing required element |
|
|
376
|
-
| EXC | Excess | STR | Unnecessary/redundant element |
|
|
377
|
-
| MAL | Malformation | STR | Incorrectly structured |
|
|
378
|
-
| INC | Inconsistency | STR/SEM | Internal contradictions |
|
|
379
|
-
| COM | Incompleteness | SEM | Partial implementation |
|
|
380
|
-
| AMB | Ambiguity | SEM | Unclear meaning |
|
|
381
|
-
| COH | Incoherence | SEM | Logical disconnect |
|
|
382
|
-
| ALI | Misalignment | PRA | Doesn't match requirements |
|
|
383
|
-
| MAT | Mismatch | PRA | Interface/contract violation |
|
|
384
|
-
| EFF | Inefficiency | PRA | Performance issues |
|
|
385
|
-
| FRA | Fragility | PRA | Brittleness, poor error handling |
|
|
386
|
-
| OVR | Overclaiming | EPI | Claims exceed evidence |
|
|
387
|
-
| UND | Underclaiming | EPI | Evidence exceeds claims |
|
|
388
|
-
| GRN | Granularity | EPI | Wrong level of detail |
|
|
389
|
-
| FAL | Fallacy | EPI | Logical reasoning error |
|
|
390
|
-
|
|
391
360
|
## Code Auditor Framework
|
|
392
361
|
|
|
393
362
|
### Category Overview
|
|
@@ -423,16 +392,16 @@ Each criterion has a default failure code—use it when that criterion fails.
|
|
|
423
392
|
- [ ] Errors propagate to actionable handlers (4 pts) `→ SEM-COM/H` *Verify:* Errors reach handlers that log, return message, retry, or exit, No catch blocks that neither rethrow nor indicate error
|
|
424
393
|
|
|
425
394
|
### 4. Data Integrity (15 points)
|
|
426
|
-
- [ ] No truthy checks on potentially-zero values (5 pts) `→ SEM-
|
|
395
|
+
- [ ] No truthy checks on potentially-zero values (5 pts) `→ SEM-LOG/H` *Verify:* Numeric values checked with !== undefined or != null, No if (value) where value could be 0
|
|
427
396
|
- [ ] JSON.parse has try/catch (4 pts) `→ SEM-COM/C` *Verify:* Every JSON.parse call wrapped in try/catch, Safe parser used for external data
|
|
428
397
|
- [ ] No mutation of shared state (3 pts) `→ SEM-INC/H` *Verify:* Objects passed between functions cloned before modification, Arrays cloned before push/pop/splice on parameters
|
|
429
|
-
- [ ] Type coercion handled explicitly (3 pts) `→ SEM-
|
|
398
|
+
- [ ] Type coercion handled explicitly (3 pts) `→ SEM-TYP/M` *Verify:* String-to-number uses parseInt/parseFloat with validation, No implicit type coercion (use === not ==)
|
|
430
399
|
|
|
431
400
|
### 5. API Boundary Safety (15 points)
|
|
432
401
|
- [ ] HTTP responses validated (5 pts) `→ SEM-COM/H` *Verify:* response.ok or response.status checked before body access, Non-2xx responses throw or return error object
|
|
433
402
|
- [ ] External data validated before use (4 pts) `→ SEM-COM/H` *Verify:* API responses validated via Zod, yup, or manual checks, Destructuring external data uses defaults
|
|
434
403
|
- [ ] Timeout handling present (3 pts) `→ SEM-COM/M` *Verify:* Network calls have timeout (AbortController, axios timeout), Long operations have timeout or progress indication
|
|
435
|
-
- [ ] Retry logic is safe (3 pts) `→ SEM-
|
|
404
|
+
- [ ] Retry logic is safe (3 pts) `→ SEM-LOG/H` *Verify:* Retries have exponential backoff and max attempts, POST/PUT/DELETE not retried unless idempotent
|
|
436
405
|
|
|
437
406
|
**Total Score: /100**
|
|
438
407
|
|
|
@@ -530,6 +499,7 @@ Before finalizing your decision, verify:
|
|
|
530
499
|
|
|
531
500
|
- **Target:** ~3500 tokens
|
|
532
501
|
- **Maximum:** 8000 tokens
|
|
502
|
+
|
|
533
503
|
Target ~3500 tokens for typical audits. Include actual code snippets for all findings. Expand for larger codebases with many issues. Critical issues warrant detailed explanation.
|
|
534
504
|
|
|
535
505
|
|
|
@@ -621,177 +591,7 @@ OR
|
|
|
621
591
|
|
|
622
592
|
Reasoning: [Explain decision]
|
|
623
593
|
|
|
624
|
-
|
|
625
|
-
|
|
626
|
-
<!-- Machine-readable output for API consumption and validation-tracker integration -->
|
|
627
|
-
<!-- Schema: udl/agent-output-schema-v1.4.json -->
|
|
628
|
-
```json
|
|
629
|
-
{
|
|
630
|
-
"schema_version": "1.3.0",
|
|
631
|
-
"validator": {
|
|
632
|
-
"name": "code-auditor",
|
|
633
|
-
"model": "opus",
|
|
634
|
-
"adl_schema": "/home/alexs/uluops/uluops-agent-workflows/udl/adl/v3/code-auditor.agent.yaml",
|
|
635
|
-
"tokens": {
|
|
636
|
-
"input_tokens": 0,
|
|
637
|
-
"output_tokens": 0
|
|
638
|
-
}
|
|
639
|
-
},
|
|
640
|
-
"target": "[path/to/validated/directory]",
|
|
641
|
-
"timestamp": "[ISO 8601 timestamp]",
|
|
642
|
-
"result": {
|
|
643
|
-
"score": "[X]",
|
|
644
|
-
"max_score": 100,
|
|
645
|
-
"decision": "[SOUND|REVIEW|UNSOUND]",
|
|
646
|
-
"threshold": 80
|
|
647
|
-
},
|
|
648
|
-
"categories": [
|
|
649
|
-
{
|
|
650
|
-
"name": "Async Safety",
|
|
651
|
-
"score": "[X]",
|
|
652
|
-
"max_points": 25,
|
|
653
|
-
"findings": [
|
|
654
|
-
{
|
|
655
|
-
"criterion": "[criterion name from framework]",
|
|
656
|
-
"points_earned": "[X]",
|
|
657
|
-
"points_possible": "[X]",
|
|
658
|
-
"issues": [
|
|
659
|
-
{
|
|
660
|
-
"title": "[Short issue title]",
|
|
661
|
-
"priority": "[critical|suggested|backlog]",
|
|
662
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
663
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
664
|
-
"file_path": "[path/to/file]",
|
|
665
|
-
"line_number": "[N]",
|
|
666
|
-
"description": "[Full explanation]"
|
|
667
|
-
}
|
|
668
|
-
]
|
|
669
|
-
}
|
|
670
|
-
]
|
|
671
|
-
},
|
|
672
|
-
{
|
|
673
|
-
"name": "Null/Undefined Safety",
|
|
674
|
-
"score": "[X]",
|
|
675
|
-
"max_points": 25,
|
|
676
|
-
"findings": [
|
|
677
|
-
{
|
|
678
|
-
"criterion": "[criterion name from framework]",
|
|
679
|
-
"points_earned": "[X]",
|
|
680
|
-
"points_possible": "[X]",
|
|
681
|
-
"issues": [
|
|
682
|
-
{
|
|
683
|
-
"title": "[Short issue title]",
|
|
684
|
-
"priority": "[critical|suggested|backlog]",
|
|
685
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
686
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
687
|
-
"file_path": "[path/to/file]",
|
|
688
|
-
"line_number": "[N]",
|
|
689
|
-
"description": "[Full explanation]"
|
|
690
|
-
}
|
|
691
|
-
]
|
|
692
|
-
}
|
|
693
|
-
]
|
|
694
|
-
},
|
|
695
|
-
{
|
|
696
|
-
"name": "Error Handling",
|
|
697
|
-
"score": "[X]",
|
|
698
|
-
"max_points": 20,
|
|
699
|
-
"findings": [
|
|
700
|
-
{
|
|
701
|
-
"criterion": "[criterion name from framework]",
|
|
702
|
-
"points_earned": "[X]",
|
|
703
|
-
"points_possible": "[X]",
|
|
704
|
-
"issues": [
|
|
705
|
-
{
|
|
706
|
-
"title": "[Short issue title]",
|
|
707
|
-
"priority": "[critical|suggested|backlog]",
|
|
708
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
709
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
710
|
-
"file_path": "[path/to/file]",
|
|
711
|
-
"line_number": "[N]",
|
|
712
|
-
"description": "[Full explanation]"
|
|
713
|
-
}
|
|
714
|
-
]
|
|
715
|
-
}
|
|
716
|
-
]
|
|
717
|
-
},
|
|
718
|
-
{
|
|
719
|
-
"name": "Data Integrity",
|
|
720
|
-
"score": "[X]",
|
|
721
|
-
"max_points": 15,
|
|
722
|
-
"findings": [
|
|
723
|
-
{
|
|
724
|
-
"criterion": "[criterion name from framework]",
|
|
725
|
-
"points_earned": "[X]",
|
|
726
|
-
"points_possible": "[X]",
|
|
727
|
-
"issues": [
|
|
728
|
-
{
|
|
729
|
-
"title": "[Short issue title]",
|
|
730
|
-
"priority": "[critical|suggested|backlog]",
|
|
731
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
732
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
733
|
-
"file_path": "[path/to/file]",
|
|
734
|
-
"line_number": "[N]",
|
|
735
|
-
"description": "[Full explanation]"
|
|
736
|
-
}
|
|
737
|
-
]
|
|
738
|
-
}
|
|
739
|
-
]
|
|
740
|
-
},
|
|
741
|
-
{
|
|
742
|
-
"name": "API Boundary Safety",
|
|
743
|
-
"score": "[X]",
|
|
744
|
-
"max_points": 15,
|
|
745
|
-
"findings": [
|
|
746
|
-
{
|
|
747
|
-
"criterion": "[criterion name from framework]",
|
|
748
|
-
"points_earned": "[X]",
|
|
749
|
-
"points_possible": "[X]",
|
|
750
|
-
"issues": [
|
|
751
|
-
{
|
|
752
|
-
"title": "[Short issue title]",
|
|
753
|
-
"priority": "[critical|suggested|backlog]",
|
|
754
|
-
"type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
|
|
755
|
-
"failure_code": "[DOMAIN-MODE/SEVERITY]",
|
|
756
|
-
"file_path": "[path/to/file]",
|
|
757
|
-
"line_number": "[N]",
|
|
758
|
-
"description": "[Full explanation]"
|
|
759
|
-
}
|
|
760
|
-
]
|
|
761
|
-
}
|
|
762
|
-
]
|
|
763
|
-
}
|
|
764
|
-
],
|
|
765
|
-
"summary": {
|
|
766
|
-
"total_issues": "[N]",
|
|
767
|
-
"by_priority": {
|
|
768
|
-
"critical": "[N]",
|
|
769
|
-
"suggested": "[N]",
|
|
770
|
-
"backlog": "[N]"
|
|
771
|
-
},
|
|
772
|
-
"by_severity": {
|
|
773
|
-
"critical": "[N]",
|
|
774
|
-
"high": "[N]",
|
|
775
|
-
"medium": "[N]",
|
|
776
|
-
"low": "[N]",
|
|
777
|
-
"info": "[N]"
|
|
778
|
-
},
|
|
779
|
-
"by_type": {
|
|
780
|
-
"feature": "[N]",
|
|
781
|
-
"bug": "[N]",
|
|
782
|
-
"refactor": "[N]",
|
|
783
|
-
"config": "[N]",
|
|
784
|
-
"docs": "[N]",
|
|
785
|
-
"infra": "[N]",
|
|
786
|
-
"security": "[N]",
|
|
787
|
-
"test": "[N]",
|
|
788
|
-
"observation": "[N]",
|
|
789
|
-
"deficiency": "[N]",
|
|
790
|
-
"ambiguity": "[N]"
|
|
791
|
-
}
|
|
792
|
-
}
|
|
793
|
-
}
|
|
794
|
-
```
|
|
594
|
+
|
|
795
595
|
```
|
|
796
596
|
|
|
797
597
|
## Output Examples
|
|
@@ -960,44 +760,6 @@ Code is runtime-safe when ALL of the following are true
|
|
|
960
760
|
- All HTTP responses validated before body access
|
|
961
761
|
- No auto-fail conditions triggered
|
|
962
762
|
|
|
963
|
-
## Priority & Severity Mapping
|
|
964
|
-
|
|
965
|
-
When generating the JSON OUTPUT section, map issues as follows:
|
|
966
|
-
|
|
967
|
-
**Priority (for triage):**
|
|
968
|
-
| Severity | Priority | Meaning |
|
|
969
|
-
|----------|----------|---------|
|
|
970
|
-
| Critical | `critical` | Blocks progression, must fix now |
|
|
971
|
-
| High | `critical` | Should fix before next phase |
|
|
972
|
-
| Medium | `suggested` | Should fix soon |
|
|
973
|
-
| Low | `backlog` | Optional improvement |
|
|
974
|
-
| Info | `backlog` | Informational only |
|
|
975
|
-
|
|
976
|
-
**Severity is derived from failure_code suffix:**
|
|
977
|
-
| Suffix | Severity | Priority |
|
|
978
|
-
|--------|----------|----------|
|
|
979
|
-
| `/C` | critical | critical |
|
|
980
|
-
| `/H` | high | critical |
|
|
981
|
-
| `/M` | medium | suggested |
|
|
982
|
-
| `/L` | low | backlog |
|
|
983
|
-
| `/I` | info | backlog |
|
|
984
|
-
|
|
985
|
-
## Failure Code Selection
|
|
986
|
-
|
|
987
|
-
**1. Use the default code from the criterion that failed** (e.g., `→ SEM-COM/H`)
|
|
988
|
-
|
|
989
|
-
**2. Adjust severity letter based on actual impact:**
|
|
990
|
-
- `/C` - Security vulnerabilities, data loss risk, crashes, blocks all functionality
|
|
991
|
-
- `/H` - Broken functionality, missing critical tests, significant user impact
|
|
992
|
-
- `/M` - Code quality issues, maintainability concerns, moderate impact
|
|
993
|
-
- `/L` - Style issues, minor improvements, low impact
|
|
994
|
-
- `/I` - Suggestions, informational, no functional impact
|
|
995
|
-
|
|
996
|
-
**3. Consider context when adjusting:**
|
|
997
|
-
- A naming issue in a public API → elevate to `/M` or `/H`
|
|
998
|
-
- A complexity issue in rarely-used code → may stay at `/L`
|
|
999
|
-
- Missing error handling in user-facing code → `/H` or `/C`
|
|
1000
|
-
- Missing error handling in internal utility → `/M`
|
|
1001
763
|
|
|
1002
764
|
## Edge Case Handling
|
|
1003
765
|
|
|
@@ -1038,11 +800,6 @@ When generating the JSON OUTPUT section, map issues as follows:
|
|
|
1038
800
|
**Runs after:** code-validator, security-analyst
|
|
1039
801
|
**Recommends:** type-safety-validator, test-architect
|
|
1040
802
|
|
|
1041
|
-
### Handoff: What This Agent Passes Downstream
|
|
1042
|
-
|
|
1043
|
-
### Handoff: What This Agent Expects From Predecessors
|
|
1044
|
-
**From code-validator:** Validation results from code-validator
|
|
1045
|
-
**From security-analyst:** Validation results from security-analyst
|
|
1046
803
|
|
|
1047
804
|
---
|
|
1048
805
|
|