@uluops/setup 0.2.0 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (253) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +109 -89
  3. package/assets/auto-tracker-save.mjs +142 -0
  4. package/assets/claude-code/agents/anxiety-reader-agent.md +464 -0
  5. package/assets/{agents → claude-code/agents}/api-contract-validator-agent.md +9 -228
  6. package/assets/{agents → claude-code/agents}/aristotle-analyst-agent.md +51 -4
  7. package/assets/{agents → claude-code/agents}/aristotle-explorer-agent.md +6 -2
  8. package/assets/{agents → claude-code/agents}/aristotle-forecaster-agent.md +15 -230
  9. package/assets/{agents → claude-code/agents}/aristotle-validator-agent.md +12 -252
  10. package/assets/{agents → claude-code/agents}/assumption-excavator-agent.md +21 -247
  11. package/assets/{agents → claude-code/agents}/code-auditor-agent.md +12 -255
  12. package/assets/{agents → claude-code/agents}/code-optimizer-agent.md +15 -236
  13. package/assets/{agents → claude-code/agents}/code-validator-agent.md +31 -300
  14. package/assets/claude-code/agents/docs-validator-agent.md +472 -0
  15. package/assets/{agents → claude-code/agents}/frontend-validator-agent.md +15 -258
  16. package/assets/{agents → claude-code/agents}/mcp-validator-agent.md +8 -252
  17. package/assets/{agents → claude-code/agents}/pre-implementation-architect-agent.md +8 -224
  18. package/assets/{agents → claude-code/agents}/prompt-engineer-agent.md +57 -290
  19. package/assets/{agents → claude-code/agents}/prompt-pattern-analyzer-agent.md +10 -225
  20. package/assets/{agents → claude-code/agents}/prompt-quality-validator-agent.md +11 -249
  21. package/assets/{agents → claude-code/agents}/public-interface-validator-agent.md +15 -268
  22. package/assets/claude-code/agents/release-readiness-agent.md +495 -0
  23. package/assets/{agents → claude-code/agents}/security-analyst-agent.md +236 -480
  24. package/assets/{agents → claude-code/agents}/test-architect-agent.md +16 -259
  25. package/assets/{agents → claude-code/agents}/type-safety-validator-agent.md +23 -266
  26. package/assets/{agents → claude-code/agents}/workflow-synthesis-agent.md +23 -226
  27. package/assets/claude-code/commands/agents/anxiety-reader.md +157 -0
  28. package/assets/{commands → claude-code/commands}/agents/api-contract.md +156 -135
  29. package/assets/{commands → claude-code/commands}/agents/architect.md +156 -135
  30. package/assets/claude-code/commands/agents/aristotle-analyst.md +157 -0
  31. package/assets/claude-code/commands/agents/aristotle-explorer.md +157 -0
  32. package/assets/claude-code/commands/agents/aristotle-forecaster.md +157 -0
  33. package/assets/claude-code/commands/agents/aristotle-validator.md +157 -0
  34. package/assets/{commands → claude-code/commands}/agents/assumption-excavator.md +49 -6
  35. package/assets/{commands → claude-code/commands}/agents/audit.md +156 -136
  36. package/assets/{commands → claude-code/commands}/agents/docs-validate.md +156 -133
  37. package/assets/{commands → claude-code/commands}/agents/frontend.md +156 -135
  38. package/assets/{commands → claude-code/commands}/agents/mcp-validate.md +156 -136
  39. package/assets/{commands → claude-code/commands}/agents/optimize.md +156 -133
  40. package/assets/{commands → claude-code/commands}/agents/pattern-analyzer.md +150 -126
  41. package/assets/{commands → claude-code/commands}/agents/prompt-quality.md +155 -134
  42. package/assets/claude-code/commands/agents/prompt-validate.md +155 -0
  43. package/assets/{commands → claude-code/commands}/agents/public-interface.md +156 -134
  44. package/assets/{commands → claude-code/commands}/agents/release.md +156 -135
  45. package/assets/{commands → claude-code/commands}/agents/security.md +156 -137
  46. package/assets/{commands → claude-code/commands}/agents/test-review.md +156 -136
  47. package/assets/{commands → claude-code/commands}/agents/type-safety.md +156 -135
  48. package/assets/{commands → claude-code/commands}/agents/validate.md +156 -134
  49. package/assets/claude-code/commands/agents/workflow-synthesis.md +157 -0
  50. package/assets/claude-code/commands/pipelines/aristotle.md +143 -0
  51. package/assets/claude-code/commands/pipelines/ship.md +188 -0
  52. package/assets/claude-code/commands/workflows/post-implementation.md +60 -0
  53. package/assets/claude-code/commands/workflows/pre-implementation.md +46 -0
  54. package/assets/claude-code/commands/workflows/prompt-audit.md +44 -0
  55. package/assets/codex/agents/anxiety-reader-agent.toml +462 -0
  56. package/assets/codex/agents/api-contract-validator-agent.toml +738 -0
  57. package/assets/codex/agents/aristotle-analyst-agent.toml +750 -0
  58. package/assets/codex/agents/aristotle-explorer-agent.toml +155 -0
  59. package/assets/codex/agents/aristotle-forecaster-agent.toml +449 -0
  60. package/assets/codex/agents/aristotle-validator-agent.toml +424 -0
  61. package/assets/codex/agents/assumption-excavator-agent.toml +1126 -0
  62. package/assets/codex/agents/code-auditor-agent.toml +815 -0
  63. package/assets/codex/agents/code-optimizer-agent.toml +652 -0
  64. package/assets/codex/agents/code-validator-agent.toml +573 -0
  65. package/assets/codex/agents/docs-validator-agent.toml +468 -0
  66. package/assets/codex/agents/frontend-validator-agent.toml +598 -0
  67. package/assets/codex/agents/mcp-validator-agent.toml +580 -0
  68. package/assets/codex/agents/pre-implementation-architect-agent.toml +817 -0
  69. package/assets/codex/agents/prompt-engineer-agent.toml +922 -0
  70. package/assets/codex/agents/prompt-pattern-analyzer-agent.toml +689 -0
  71. package/assets/codex/agents/prompt-quality-validator-agent.toml +777 -0
  72. package/assets/codex/agents/public-interface-validator-agent.toml +695 -0
  73. package/assets/codex/agents/release-readiness-agent.toml +491 -0
  74. package/assets/codex/agents/security-analyst-agent.toml +847 -0
  75. package/assets/codex/agents/test-architect-agent.toml +615 -0
  76. package/assets/codex/agents/type-safety-validator-agent.toml +686 -0
  77. package/assets/codex/agents/workflow-synthesis-agent.toml +631 -0
  78. package/assets/gemini-cli/agents/anxiety-reader-agent.md +470 -0
  79. package/assets/gemini-cli/agents/api-contract-validator-agent.md +747 -0
  80. package/assets/gemini-cli/agents/aristotle-analyst-agent.md +758 -0
  81. package/assets/gemini-cli/agents/aristotle-explorer-agent.md +163 -0
  82. package/assets/gemini-cli/agents/aristotle-forecaster-agent.md +457 -0
  83. package/assets/gemini-cli/agents/aristotle-validator-agent.md +432 -0
  84. package/assets/gemini-cli/agents/assumption-excavator-agent.md +1134 -0
  85. package/assets/gemini-cli/agents/code-auditor-agent.md +827 -0
  86. package/assets/gemini-cli/agents/code-optimizer-agent.md +661 -0
  87. package/assets/gemini-cli/agents/code-validator-agent.md +582 -0
  88. package/assets/gemini-cli/agents/docs-validator-agent.md +477 -0
  89. package/assets/gemini-cli/agents/frontend-validator-agent.md +610 -0
  90. package/assets/gemini-cli/agents/mcp-validator-agent.md +589 -0
  91. package/assets/gemini-cli/agents/pre-implementation-architect-agent.md +826 -0
  92. package/assets/gemini-cli/agents/prompt-engineer-agent.md +931 -0
  93. package/assets/gemini-cli/agents/prompt-pattern-analyzer-agent.md +698 -0
  94. package/assets/gemini-cli/agents/prompt-quality-validator-agent.md +786 -0
  95. package/assets/gemini-cli/agents/public-interface-validator-agent.md +707 -0
  96. package/assets/gemini-cli/agents/release-readiness-agent.md +500 -0
  97. package/assets/gemini-cli/agents/security-analyst-agent.md +859 -0
  98. package/assets/gemini-cli/agents/test-architect-agent.md +624 -0
  99. package/assets/gemini-cli/agents/type-safety-validator-agent.md +695 -0
  100. package/assets/gemini-cli/agents/workflow-synthesis-agent.md +639 -0
  101. package/assets/gemini-cli/commands/agents/anxiety-reader.toml +155 -0
  102. package/assets/gemini-cli/commands/agents/api-contract.toml +154 -0
  103. package/assets/gemini-cli/commands/agents/architect.toml +154 -0
  104. package/assets/gemini-cli/commands/agents/aristotle-analyst.toml +155 -0
  105. package/assets/gemini-cli/commands/agents/aristotle-explorer.toml +155 -0
  106. package/assets/gemini-cli/commands/agents/aristotle-forecaster.toml +155 -0
  107. package/assets/gemini-cli/commands/agents/aristotle-validator.toml +155 -0
  108. package/assets/gemini-cli/commands/agents/assumption-excavator.toml +155 -0
  109. package/assets/gemini-cli/commands/agents/audit.toml +154 -0
  110. package/assets/gemini-cli/commands/agents/docs-validate.toml +154 -0
  111. package/assets/gemini-cli/commands/agents/frontend.toml +154 -0
  112. package/assets/gemini-cli/commands/agents/mcp-validate.toml +154 -0
  113. package/assets/gemini-cli/commands/agents/optimize.toml +154 -0
  114. package/assets/gemini-cli/commands/agents/pattern-analyzer.toml +148 -0
  115. package/assets/gemini-cli/commands/agents/prompt-quality.toml +153 -0
  116. package/assets/gemini-cli/commands/agents/prompt-validate.toml +153 -0
  117. package/assets/gemini-cli/commands/agents/public-interface.toml +154 -0
  118. package/assets/gemini-cli/commands/agents/release.toml +154 -0
  119. package/assets/gemini-cli/commands/agents/security.toml +154 -0
  120. package/assets/gemini-cli/commands/agents/test-review.toml +154 -0
  121. package/assets/gemini-cli/commands/agents/type-safety.toml +154 -0
  122. package/assets/gemini-cli/commands/agents/validate.toml +154 -0
  123. package/assets/gemini-cli/commands/agents/workflow-synthesis.toml +155 -0
  124. package/assets/gemini-cli/commands/pipelines/aristotle.toml +139 -0
  125. package/assets/gemini-cli/commands/pipelines/ship.toml +184 -0
  126. package/assets/gemini-cli/commands/workflows/post-implementation.toml +56 -0
  127. package/assets/gemini-cli/commands/workflows/pre-implementation.toml +42 -0
  128. package/assets/gemini-cli/commands/workflows/prompt-audit.toml +40 -0
  129. package/assets/opencode/agents/anxiety-reader-agent.md +472 -0
  130. package/assets/opencode/agents/api-contract-validator-agent.md +749 -0
  131. package/assets/opencode/agents/aristotle-analyst-agent.md +760 -0
  132. package/assets/opencode/agents/aristotle-explorer-agent.md +164 -0
  133. package/assets/opencode/agents/aristotle-forecaster-agent.md +459 -0
  134. package/assets/opencode/agents/aristotle-validator-agent.md +434 -0
  135. package/assets/opencode/agents/assumption-excavator-agent.md +1136 -0
  136. package/assets/opencode/agents/code-auditor-agent.md +826 -0
  137. package/assets/opencode/agents/code-optimizer-agent.md +663 -0
  138. package/assets/opencode/agents/code-validator-agent.md +584 -0
  139. package/assets/opencode/agents/docs-validator-agent.md +479 -0
  140. package/assets/opencode/agents/frontend-validator-agent.md +609 -0
  141. package/assets/opencode/agents/mcp-validator-agent.md +591 -0
  142. package/assets/opencode/agents/pre-implementation-architect-agent.md +828 -0
  143. package/assets/opencode/agents/prompt-engineer-agent.md +933 -0
  144. package/assets/opencode/agents/prompt-pattern-analyzer-agent.md +700 -0
  145. package/assets/opencode/agents/prompt-quality-validator-agent.md +788 -0
  146. package/assets/opencode/agents/public-interface-validator-agent.md +706 -0
  147. package/assets/opencode/agents/release-readiness-agent.md +502 -0
  148. package/assets/opencode/agents/security-analyst-agent.md +858 -0
  149. package/assets/opencode/agents/test-architect-agent.md +626 -0
  150. package/assets/opencode/agents/type-safety-validator-agent.md +697 -0
  151. package/assets/opencode/agents/workflow-synthesis-agent.md +641 -0
  152. package/dist/cli.js +22 -380
  153. package/dist/commands/helpers.d.ts +73 -0
  154. package/dist/commands/helpers.js +274 -0
  155. package/dist/commands/setup.d.ts +13 -0
  156. package/dist/commands/setup.js +93 -0
  157. package/dist/commands/uninstall.d.ts +3 -0
  158. package/dist/commands/uninstall.js +126 -0
  159. package/dist/commands/verify.d.ts +1 -0
  160. package/dist/commands/verify.js +28 -0
  161. package/dist/harnesses/claude-code.d.ts +8 -0
  162. package/dist/harnesses/claude-code.js +74 -0
  163. package/dist/harnesses/codex.d.ts +15 -0
  164. package/dist/harnesses/codex.js +54 -0
  165. package/dist/harnesses/gemini-cli.d.ts +12 -0
  166. package/dist/harnesses/gemini-cli.js +80 -0
  167. package/dist/harnesses/index.d.ts +27 -0
  168. package/dist/harnesses/index.js +54 -0
  169. package/dist/harnesses/opencode.d.ts +14 -0
  170. package/dist/harnesses/opencode.js +139 -0
  171. package/dist/harnesses/types.d.ts +106 -0
  172. package/dist/harnesses/types.js +26 -0
  173. package/dist/lib/agent-transform.d.ts +12 -0
  174. package/dist/lib/agent-transform.js +129 -0
  175. package/dist/lib/asset-catalog.d.ts +9 -0
  176. package/dist/lib/asset-catalog.js +56 -0
  177. package/dist/lib/atomic-write.d.ts +11 -0
  178. package/dist/lib/atomic-write.js +28 -0
  179. package/dist/lib/config-merger.d.ts +9 -2
  180. package/dist/lib/config-merger.js +44 -7
  181. package/dist/lib/display.d.ts +14 -0
  182. package/dist/lib/display.js +66 -0
  183. package/dist/lib/file-ops.d.ts +11 -0
  184. package/dist/lib/file-ops.js +40 -4
  185. package/dist/lib/hash.d.ts +1 -0
  186. package/dist/lib/hash.js +2 -1
  187. package/dist/lib/health.d.ts +2 -0
  188. package/dist/lib/health.js +10 -0
  189. package/dist/lib/manifest.d.ts +51 -5
  190. package/dist/lib/manifest.js +146 -13
  191. package/dist/lib/paths.d.ts +30 -3
  192. package/dist/lib/paths.js +98 -12
  193. package/dist/lib/settings-merger.d.ts +31 -8
  194. package/dist/lib/settings-merger.js +87 -24
  195. package/dist/lib/version.d.ts +2 -0
  196. package/dist/lib/version.js +10 -0
  197. package/dist/steps/agents.d.ts +4 -1
  198. package/dist/steps/agents.js +48 -9
  199. package/dist/steps/auth.js +26 -10
  200. package/dist/steps/cli.d.ts +53 -0
  201. package/dist/steps/cli.js +90 -0
  202. package/dist/steps/commands.d.ts +6 -1
  203. package/dist/steps/commands.js +36 -9
  204. package/dist/steps/detect.d.ts +3 -0
  205. package/dist/steps/detect.js +11 -0
  206. package/dist/steps/mcp.d.ts +6 -2
  207. package/dist/steps/mcp.js +39 -22
  208. package/dist/steps/metrics.d.ts +26 -10
  209. package/dist/steps/metrics.js +108 -108
  210. package/dist/steps/shell.d.ts +2 -0
  211. package/dist/steps/shell.js +26 -9
  212. package/dist/steps/signup.d.ts +7 -4
  213. package/dist/steps/signup.js +29 -20
  214. package/dist/steps/verify.d.ts +2 -2
  215. package/dist/steps/verify.js +118 -112
  216. package/package.json +40 -14
  217. package/assets/agents/docs-validator-agent.md +0 -490
  218. package/assets/agents/release-readiness-agent.md +0 -482
  219. package/assets/commands/agents/aristotle-analyst.md +0 -115
  220. package/assets/commands/agents/aristotle-explorer.md +0 -92
  221. package/assets/commands/agents/aristotle-forecaster.md +0 -114
  222. package/assets/commands/agents/aristotle-validator.md +0 -114
  223. package/assets/commands/agents/prompt-validate.md +0 -135
  224. package/assets/commands/agents/workflow-synthesis.md +0 -101
  225. package/assets/commands/workflows/aristotle.md +0 -543
  226. package/assets/commands/workflows/post-implementation.md +0 -577
  227. package/assets/commands/workflows/pre-implementation.md +0 -670
  228. package/assets/commands/workflows/prompt-audit.md +0 -754
  229. package/assets/commands/workflows/ship.md +0 -721
  230. package/dist/test/auth.test.d.ts +0 -1
  231. package/dist/test/auth.test.js +0 -43
  232. package/dist/test/config-io.test.d.ts +0 -1
  233. package/dist/test/config-io.test.js +0 -56
  234. package/dist/test/config-merger.test.d.ts +0 -1
  235. package/dist/test/config-merger.test.js +0 -94
  236. package/dist/test/detect.test.d.ts +0 -1
  237. package/dist/test/detect.test.js +0 -25
  238. package/dist/test/file-ops.test.d.ts +0 -1
  239. package/dist/test/file-ops.test.js +0 -100
  240. package/dist/test/hash.test.d.ts +0 -1
  241. package/dist/test/hash.test.js +0 -14
  242. package/dist/test/manifest.test.d.ts +0 -1
  243. package/dist/test/manifest.test.js +0 -78
  244. package/dist/test/paths.test.d.ts +0 -1
  245. package/dist/test/paths.test.js +0 -30
  246. package/dist/test/settings-merger.test.d.ts +0 -1
  247. package/dist/test/settings-merger.test.js +0 -167
  248. package/dist/test/shell-profile.test.d.ts +0 -1
  249. package/dist/test/shell-profile.test.js +0 -40
  250. package/dist/test/shell.test.d.ts +0 -1
  251. package/dist/test/shell.test.js +0 -71
  252. package/dist/test/signup.test.d.ts +0 -1
  253. package/dist/test/signup.test.js +0 -83
@@ -1,10 +1,10 @@
1
1
  ---
2
2
  name: assumption-excavator
3
- version: "1.5.0"
3
+ version: "1.8.0"
4
4
  description: Surfaces implicit assumptions buried in any artifact — agent definitions, prompts, business plans, technical specs, workflows, or documents. Identifies not what the author stated they assumed, but what they didn't realize they were assuming. Produces a ranked assumption inventory with fragility scores. Decision - EXAMINED/UNEXAMINED.
5
-
6
5
  tools: Read, Grep, Glob
7
6
  model: opus
7
+ threshold: 70
8
8
  ---
9
9
 
10
10
  You are an epistemic analyst specializing in assumption archaeology. Your goal is to surface the implicit beliefs, unstated dependencies, and hidden confidence claims buried in any artifact — assumptions implicit in the text that may not have been consciously examined by the author. You are not evaluating whether the artifact is correct or well-written. You are excavating its assumption substrate.
@@ -49,6 +49,12 @@ Produce an **EXAMINED/UNEXAMINED** decision with a ranked assumption inventory a
49
49
  - Each version of this agent resolves prior assumptions while introducing residual ones. Tracker status 'completed' means the specific finding was addressed, not that the underlying concern is fully eliminated. Assumption debt asymptotes toward irreducible meta-assumptions.
50
50
 
51
51
 
52
+ ### Epistemic Nature
53
+ - **Verifiability:** Not Checkable
54
+ - **Determinism:** Stochastic
55
+ - **Claim Type:** Observational
56
+
57
+
52
58
  ## Key Definitions
53
59
 
54
60
  - **artifact**: Any document, configuration, specification, code, plan, prompt, or structured output that encodes decisions and carries implicit assumptions. An artifact can be a single file, a section of a file, or a conceptual unit spanning multiple files. Artifacts include both finished work products and drafts — drafts carry assumptions about what will be filled in later.
@@ -334,6 +340,17 @@ How catastrophically does the artifact fail if this assumption breaks?
334
340
  - **MEDIUM** (4-6): Assumption breaks → artifact produces suboptimal results but remains functional
335
341
  - **LOW** (1-3): Assumption breaks → minor quality reduction, artifact mostly intact
336
342
 
343
+ ## Classification Examples
344
+
345
+ - **Artifact assumes database will always be available without stating this dependency** → `STR-OMI/H`
346
+ Category: ENV (Environmental) → default code STR-OMI. Domain: Structural (missing declaration) Mode: OMI (Omission - unstated environmental dependency) Severity: H (High - hidden infrastructure assumption creates silent failure path)
347
+
348
+ - **Default configuration value treated as universal truth without justification** → `EPI-OVR/M`
349
+ Category: TMP (Temporal) → default code EPI-OVR. Domain: Epistemic (knowledge/verification issue) Mode: OVR (Overconfidence - assumption treated as established fact) Severity: M (Medium - unexamined default may not hold in all contexts)
350
+
351
+ - **Boundary between 'assumed known' and 'explicitly taught' is unclear** → `SEM-AMB/M`
352
+ Category: DEP (Dependency) → alternate code SEM-AMB. Domain: Semantic (meaning unclear) Mode: AMB (Ambiguity - ambiguous assumption boundary) Severity: M (Medium - unclear assumption scope makes remediation difficult)
353
+
337
354
 
338
355
  ## Analysis Framework
339
356
 
@@ -513,63 +530,13 @@ Before finalizing your assessment, verify:
513
530
  - [ ] If assumptions omitted due to token budget, omission count and categories noted
514
531
 
515
532
 
516
- ## Failure Taxonomy Reference
517
-
518
- Compact format: `DOMAIN-MODE/SEVERITY` where:
519
- - **Domain:** STR (Structural), SEM (Semantic), PRA (Pragmatic), EPI (Epistemic)
520
- - **Mode:** 3-letter code (e.g., OMI=Omission, EXC=Excess, INC=Inconsistency, AMB=Ambiguity)
521
- - **Severity:** C (Critical), H (High), M (Medium), L (Low), I (Info)
522
-
523
- ### Domain Reference
524
- | Code | Domain | Description |
525
- |------|--------|-------------|
526
- | STR | Structural | Form, syntax, organization issues |
527
- | SEM | Semantic | Meaning, correctness, completeness issues |
528
- | PRA | Pragmatic | Practical effectiveness, efficiency issues |
529
- | EPI | Epistemic | Knowledge, claims, confidence issues |
530
-
531
- ### Common Mode Codes
532
- | Code | Mode | Domain | Meaning |
533
- |------|------|--------|---------|
534
- | OMI | Omission | STR | Missing required element |
535
- | EXC | Excess | STR | Unnecessary/redundant element |
536
- | MAL | Malformation | STR | Incorrectly structured |
537
- | INC | Inconsistency | STR/SEM | Internal contradictions |
538
- | COM | Incompleteness | SEM | Partial implementation |
539
- | AMB | Ambiguity | SEM | Unclear meaning |
540
- | COH | Incoherence | SEM | Logical disconnect |
541
- | ALI | Misalignment | PRA | Doesn't match requirements |
542
- | MAT | Mismatch | PRA | Interface/contract violation |
543
- | EFF | Inefficiency | PRA | Performance issues |
544
- | FRA | Fragility | PRA | Brittleness, poor error handling |
545
- | OVR | Overclaiming | EPI | Claims exceed evidence |
546
- | UND | Underclaiming | EPI | Evidence exceeds claims |
547
- | GRN | Granularity | EPI | Wrong level of detail |
548
- | FAL | Fallacy | EPI | Logical reasoning error |
549
-
550
- ## Failure Code Selection
551
-
552
- **1. Use the default code from the criterion that failed** (e.g., `→ SEM-COM/H`)
553
-
554
- **2. Adjust severity letter based on actual impact:**
555
- - `/C` - Security vulnerabilities, data loss risk, crashes, blocks all functionality
556
- - `/H` - Broken functionality, missing critical tests, significant user impact
557
- - `/M` - Code quality issues, maintainability concerns, moderate impact
558
- - `/L` - Style issues, minor improvements, low impact
559
- - `/I` - Suggestions, informational, no functional impact
560
-
561
- **3. Consider context when adjusting:**
562
- - A naming issue in a public API → elevate to `/M` or `/H`
563
- - A complexity issue in rarely-used code → may stay at `/L`
564
- - Missing error handling in user-facing code → `/H` or `/C`
565
- - Missing error handling in internal utility → `/M`
566
-
567
533
  ## Output Format
568
534
 
569
535
  ### Output Length Guidance
570
536
 
571
537
  - **Target:** ~3500 tokens
572
538
  - **Maximum:** 6000 tokens
539
+
573
540
  3500 targets markdown-only output (8-12 assumptions at ~200 tokens each plus ~800 overhead). When JSON output is included, target 5000 tokens. The 6000 maximum should only be reached for artifacts yielding 15+ assumptions. Quality over quantity — 8 well-evidenced assumptions beat 20 shallow ones. When budget forces a choice, drop JSON before dropping assumption detail. If assumptions must be omitted due to budget constraints, add: "N additional assumptions identified but omitted (categories: X, Y). Available on request." Never silently drop findings.
574
541
 
575
542
 
@@ -651,202 +618,9 @@ AF-002 Only stated/documented assumptions found: [✅ Clear | 🔴 TRIGGERED]
651
618
  AF-003 Assumptions listed without fragility scores: [✅ Clear | 🔴 TRIGGERED]
652
619
  AF-004 Assumptions listed without challenge conditions: [✅ Clear | 🔴 TRIGGERED]
653
620
 
654
- ## JSON OUTPUT
655
-
656
- <!-- Machine-readable output for API consumption and validation-tracker integration -->
657
- <!-- Schema: udl/agent-output-schema-v1.4.json -->
658
- ```json
659
- {
660
- "schema_version": "1.3.0",
661
- "validator": {
662
- "name": "assumption-excavator",
663
- "model": "opus",
664
- "adl_schema": "/home/alexs/uluops/uluops-agent-workflows/udl/adl/v3/assumption-excavator.agent.yaml",
665
- "tokens": {
666
- "input_tokens": 0,
667
- "output_tokens": 0
668
- }
669
- },
670
- "target": "[path/to/validated/directory]",
671
- "timestamp": "[ISO 8601 timestamp]",
672
- "result": {
673
- "score": "[X]",
674
- "max_score": 100,
675
- "decision": "[EXAMINED|UNEXAMINED]",
676
- "threshold": 70
677
- },
678
- "categories": [
679
- {
680
- "name": "Environmental Assumptions",
681
- "score": "[X]",
682
- "max_points": 18,
683
- "findings": [
684
- {
685
- "criterion": "[criterion name from framework]",
686
- "points_earned": "[X]",
687
- "points_possible": "[X]",
688
- "issues": [
689
- {
690
- "title": "[Short issue title]",
691
- "priority": "[critical|suggested|backlog]",
692
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
693
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
694
- "file_path": "[path/to/file]",
695
- "line_number": "[N]",
696
- "description": "[Full explanation]"
697
- }
698
- ]
699
- }
700
- ]
701
- },
702
- {
703
- "name": "Dependency Assumptions",
704
- "score": "[X]",
705
- "max_points": 18,
706
- "findings": [
707
- {
708
- "criterion": "[criterion name from framework]",
709
- "points_earned": "[X]",
710
- "points_possible": "[X]",
711
- "issues": [
712
- {
713
- "title": "[Short issue title]",
714
- "priority": "[critical|suggested|backlog]",
715
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
716
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
717
- "file_path": "[path/to/file]",
718
- "line_number": "[N]",
719
- "description": "[Full explanation]"
720
- }
721
- ]
722
- }
723
- ]
724
- },
725
- {
726
- "name": "Behavioral Assumptions",
727
- "score": "[X]",
728
- "max_points": 18,
729
- "findings": [
730
- {
731
- "criterion": "[criterion name from framework]",
732
- "points_earned": "[X]",
733
- "points_possible": "[X]",
734
- "issues": [
735
- {
736
- "title": "[Short issue title]",
737
- "priority": "[critical|suggested|backlog]",
738
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
739
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
740
- "file_path": "[path/to/file]",
741
- "line_number": "[N]",
742
- "description": "[Full explanation]"
743
- }
744
- ]
745
- }
746
- ]
747
- },
748
- {
749
- "name": "Temporal Assumptions",
750
- "score": "[X]",
751
- "max_points": 18,
752
- "findings": [
753
- {
754
- "criterion": "[criterion name from framework]",
755
- "points_earned": "[X]",
756
- "points_possible": "[X]",
757
- "issues": [
758
- {
759
- "title": "[Short issue title]",
760
- "priority": "[critical|suggested|backlog]",
761
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
762
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
763
- "file_path": "[path/to/file]",
764
- "line_number": "[N]",
765
- "description": "[Full explanation]"
766
- }
767
- ]
768
- }
769
- ]
770
- },
771
- {
772
- "name": "Scale & Scope Assumptions",
773
- "score": "[X]",
774
- "max_points": 18,
775
- "findings": [
776
- {
777
- "criterion": "[criterion name from framework]",
778
- "points_earned": "[X]",
779
- "points_possible": "[X]",
780
- "issues": [
781
- {
782
- "title": "[Short issue title]",
783
- "priority": "[critical|suggested|backlog]",
784
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
785
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
786
- "file_path": "[path/to/file]",
787
- "line_number": "[N]",
788
- "description": "[Full explanation]"
789
- }
790
- ]
791
- }
792
- ]
793
- },
794
- {
795
- "name": "Cross-Cutting Assumptions",
796
- "score": "[X]",
797
- "max_points": 10,
798
- "findings": [
799
- {
800
- "criterion": "[criterion name from framework]",
801
- "points_earned": "[X]",
802
- "points_possible": "[X]",
803
- "issues": [
804
- {
805
- "title": "[Short issue title]",
806
- "priority": "[critical|suggested|backlog]",
807
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
808
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
809
- "file_path": "[path/to/file]",
810
- "line_number": "[N]",
811
- "description": "[Full explanation]"
812
- }
813
- ]
814
- }
815
- ]
816
- }
817
- ],
818
- "summary": {
819
- "total_issues": "[N]",
820
- "by_priority": {
821
- "critical": "[N]",
822
- "suggested": "[N]",
823
- "backlog": "[N]"
824
- },
825
- "by_severity": {
826
- "critical": "[N]",
827
- "high": "[N]",
828
- "medium": "[N]",
829
- "low": "[N]",
830
- "info": "[N]"
831
- },
832
- "by_type": {
833
- "feature": "[N]",
834
- "bug": "[N]",
835
- "refactor": "[N]",
836
- "config": "[N]",
837
- "docs": "[N]",
838
- "infra": "[N]",
839
- "security": "[N]",
840
- "test": "[N]",
841
- "observation": "[N]",
842
- "deficiency": "[N]",
843
- "ambiguity": "[N]"
844
- }
845
- }
846
- }
847
- ```
848
621
  ```
849
622
 
623
+
850
624
  ### Output Templates
851
625
 
852
626
  #### header
@@ -1,12 +1,9 @@
1
1
  ---
2
2
  name: code-auditor
3
- version: "2.0.0"
3
+ version: "2.4.0"
4
4
  description: Deep inspection for runtime correctness issues that pass compilation, linting, and tests but could fail in production. Focuses on async safety, null handling, error propagation, and edge cases. Use as FINAL gate in ship workflow. Catches the bugs that will wake someone up at 3 AM.
5
-
6
5
  tools: Read, Grep, Glob, Bash
7
6
  model: opus
8
- adl_schema: /home/alexs/uluops/uluops-agent-workflows/udl/adl/v3/code-auditor.agent.yaml
9
- taxonomy_version: "0.2.2"
10
7
  threshold: 80
11
8
  auto_fail_severity: [critical, high]
12
9
  ---
@@ -44,6 +41,12 @@ Every issue you identify MUST include a failure classification code from the tax
44
41
  - Do NOT accept 'AUDIT-OK' comments without verifying the justification is valid
45
42
 
46
43
 
44
+ ### Epistemic Nature
45
+ - **Verifiability:** Mechanically Checkable
46
+ - **Determinism:** Stochastic
47
+ - **Claim Type:** Factual
48
+
49
+
47
50
  ## Reference Examples
48
51
 
49
52
  Use these examples to calibrate your judgment.
@@ -354,40 +357,6 @@ Use these examples to classify issues with the correct failure codes:
354
357
  Domain: Semantic (type handling) Mode: INC (Inconsistency - zero treated as falsy) Severity: H (High - valid value incorrectly rejected)
355
358
 
356
359
 
357
- ## Failure Taxonomy Reference
358
-
359
- Compact format: `DOMAIN-MODE/SEVERITY` where:
360
- - **Domain:** STR (Structural), SEM (Semantic), PRA (Pragmatic), EPI (Epistemic)
361
- - **Mode:** 3-letter code (e.g., OMI=Omission, EXC=Excess, INC=Inconsistency, AMB=Ambiguity)
362
- - **Severity:** C (Critical), H (High), M (Medium), L (Low), I (Info)
363
-
364
- ### Domain Reference
365
- | Code | Domain | Description |
366
- |------|--------|-------------|
367
- | STR | Structural | Form, syntax, organization issues |
368
- | SEM | Semantic | Meaning, correctness, completeness issues |
369
- | PRA | Pragmatic | Practical effectiveness, efficiency issues |
370
- | EPI | Epistemic | Knowledge, claims, confidence issues |
371
-
372
- ### Common Mode Codes
373
- | Code | Mode | Domain | Meaning |
374
- |------|------|--------|---------|
375
- | OMI | Omission | STR | Missing required element |
376
- | EXC | Excess | STR | Unnecessary/redundant element |
377
- | MAL | Malformation | STR | Incorrectly structured |
378
- | INC | Inconsistency | STR/SEM | Internal contradictions |
379
- | COM | Incompleteness | SEM | Partial implementation |
380
- | AMB | Ambiguity | SEM | Unclear meaning |
381
- | COH | Incoherence | SEM | Logical disconnect |
382
- | ALI | Misalignment | PRA | Doesn't match requirements |
383
- | MAT | Mismatch | PRA | Interface/contract violation |
384
- | EFF | Inefficiency | PRA | Performance issues |
385
- | FRA | Fragility | PRA | Brittleness, poor error handling |
386
- | OVR | Overclaiming | EPI | Claims exceed evidence |
387
- | UND | Underclaiming | EPI | Evidence exceeds claims |
388
- | GRN | Granularity | EPI | Wrong level of detail |
389
- | FAL | Fallacy | EPI | Logical reasoning error |
390
-
391
360
  ## Code Auditor Framework
392
361
 
393
362
  ### Category Overview
@@ -423,16 +392,16 @@ Each criterion has a default failure code—use it when that criterion fails.
423
392
  - [ ] Errors propagate to actionable handlers (4 pts) `→ SEM-COM/H` *Verify:* Errors reach handlers that log, return message, retry, or exit, No catch blocks that neither rethrow nor indicate error
424
393
 
425
394
  ### 4. Data Integrity (15 points)
426
- - [ ] No truthy checks on potentially-zero values (5 pts) `→ SEM-INC/H` *Verify:* Numeric values checked with !== undefined or != null, No if (value) where value could be 0
395
+ - [ ] No truthy checks on potentially-zero values (5 pts) `→ SEM-LOG/H` *Verify:* Numeric values checked with !== undefined or != null, No if (value) where value could be 0
427
396
  - [ ] JSON.parse has try/catch (4 pts) `→ SEM-COM/C` *Verify:* Every JSON.parse call wrapped in try/catch, Safe parser used for external data
428
397
  - [ ] No mutation of shared state (3 pts) `→ SEM-INC/H` *Verify:* Objects passed between functions cloned before modification, Arrays cloned before push/pop/splice on parameters
429
- - [ ] Type coercion handled explicitly (3 pts) `→ SEM-INC/M` *Verify:* String-to-number uses parseInt/parseFloat with validation, No implicit type coercion (use === not ==)
398
+ - [ ] Type coercion handled explicitly (3 pts) `→ SEM-TYP/M` *Verify:* String-to-number uses parseInt/parseFloat with validation, No implicit type coercion (use === not ==)
430
399
 
431
400
  ### 5. API Boundary Safety (15 points)
432
401
  - [ ] HTTP responses validated (5 pts) `→ SEM-COM/H` *Verify:* response.ok or response.status checked before body access, Non-2xx responses throw or return error object
433
402
  - [ ] External data validated before use (4 pts) `→ SEM-COM/H` *Verify:* API responses validated via Zod, yup, or manual checks, Destructuring external data uses defaults
434
403
  - [ ] Timeout handling present (3 pts) `→ SEM-COM/M` *Verify:* Network calls have timeout (AbortController, axios timeout), Long operations have timeout or progress indication
435
- - [ ] Retry logic is safe (3 pts) `→ SEM-INC/H` *Verify:* Retries have exponential backoff and max attempts, POST/PUT/DELETE not retried unless idempotent
404
+ - [ ] Retry logic is safe (3 pts) `→ SEM-LOG/H` *Verify:* Retries have exponential backoff and max attempts, POST/PUT/DELETE not retried unless idempotent
436
405
 
437
406
  **Total Score: /100**
438
407
 
@@ -530,6 +499,7 @@ Before finalizing your decision, verify:
530
499
 
531
500
  - **Target:** ~3500 tokens
532
501
  - **Maximum:** 8000 tokens
502
+
533
503
  Target ~3500 tokens for typical audits. Include actual code snippets for all findings. Expand for larger codebases with many issues. Critical issues warrant detailed explanation.
534
504
 
535
505
 
@@ -621,177 +591,7 @@ OR
621
591
 
622
592
  Reasoning: [Explain decision]
623
593
 
624
- ## JSON OUTPUT
625
-
626
- <!-- Machine-readable output for API consumption and validation-tracker integration -->
627
- <!-- Schema: udl/agent-output-schema-v1.4.json -->
628
- ```json
629
- {
630
- "schema_version": "1.3.0",
631
- "validator": {
632
- "name": "code-auditor",
633
- "model": "opus",
634
- "adl_schema": "/home/alexs/uluops/uluops-agent-workflows/udl/adl/v3/code-auditor.agent.yaml",
635
- "tokens": {
636
- "input_tokens": 0,
637
- "output_tokens": 0
638
- }
639
- },
640
- "target": "[path/to/validated/directory]",
641
- "timestamp": "[ISO 8601 timestamp]",
642
- "result": {
643
- "score": "[X]",
644
- "max_score": 100,
645
- "decision": "[SOUND|REVIEW|UNSOUND]",
646
- "threshold": 80
647
- },
648
- "categories": [
649
- {
650
- "name": "Async Safety",
651
- "score": "[X]",
652
- "max_points": 25,
653
- "findings": [
654
- {
655
- "criterion": "[criterion name from framework]",
656
- "points_earned": "[X]",
657
- "points_possible": "[X]",
658
- "issues": [
659
- {
660
- "title": "[Short issue title]",
661
- "priority": "[critical|suggested|backlog]",
662
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
663
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
664
- "file_path": "[path/to/file]",
665
- "line_number": "[N]",
666
- "description": "[Full explanation]"
667
- }
668
- ]
669
- }
670
- ]
671
- },
672
- {
673
- "name": "Null/Undefined Safety",
674
- "score": "[X]",
675
- "max_points": 25,
676
- "findings": [
677
- {
678
- "criterion": "[criterion name from framework]",
679
- "points_earned": "[X]",
680
- "points_possible": "[X]",
681
- "issues": [
682
- {
683
- "title": "[Short issue title]",
684
- "priority": "[critical|suggested|backlog]",
685
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
686
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
687
- "file_path": "[path/to/file]",
688
- "line_number": "[N]",
689
- "description": "[Full explanation]"
690
- }
691
- ]
692
- }
693
- ]
694
- },
695
- {
696
- "name": "Error Handling",
697
- "score": "[X]",
698
- "max_points": 20,
699
- "findings": [
700
- {
701
- "criterion": "[criterion name from framework]",
702
- "points_earned": "[X]",
703
- "points_possible": "[X]",
704
- "issues": [
705
- {
706
- "title": "[Short issue title]",
707
- "priority": "[critical|suggested|backlog]",
708
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
709
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
710
- "file_path": "[path/to/file]",
711
- "line_number": "[N]",
712
- "description": "[Full explanation]"
713
- }
714
- ]
715
- }
716
- ]
717
- },
718
- {
719
- "name": "Data Integrity",
720
- "score": "[X]",
721
- "max_points": 15,
722
- "findings": [
723
- {
724
- "criterion": "[criterion name from framework]",
725
- "points_earned": "[X]",
726
- "points_possible": "[X]",
727
- "issues": [
728
- {
729
- "title": "[Short issue title]",
730
- "priority": "[critical|suggested|backlog]",
731
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
732
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
733
- "file_path": "[path/to/file]",
734
- "line_number": "[N]",
735
- "description": "[Full explanation]"
736
- }
737
- ]
738
- }
739
- ]
740
- },
741
- {
742
- "name": "API Boundary Safety",
743
- "score": "[X]",
744
- "max_points": 15,
745
- "findings": [
746
- {
747
- "criterion": "[criterion name from framework]",
748
- "points_earned": "[X]",
749
- "points_possible": "[X]",
750
- "issues": [
751
- {
752
- "title": "[Short issue title]",
753
- "priority": "[critical|suggested|backlog]",
754
- "type": "[feature|bug|refactor|config|docs|infra|security|test|observation|deficiency|ambiguity]",
755
- "failure_code": "[DOMAIN-MODE/SEVERITY]",
756
- "file_path": "[path/to/file]",
757
- "line_number": "[N]",
758
- "description": "[Full explanation]"
759
- }
760
- ]
761
- }
762
- ]
763
- }
764
- ],
765
- "summary": {
766
- "total_issues": "[N]",
767
- "by_priority": {
768
- "critical": "[N]",
769
- "suggested": "[N]",
770
- "backlog": "[N]"
771
- },
772
- "by_severity": {
773
- "critical": "[N]",
774
- "high": "[N]",
775
- "medium": "[N]",
776
- "low": "[N]",
777
- "info": "[N]"
778
- },
779
- "by_type": {
780
- "feature": "[N]",
781
- "bug": "[N]",
782
- "refactor": "[N]",
783
- "config": "[N]",
784
- "docs": "[N]",
785
- "infra": "[N]",
786
- "security": "[N]",
787
- "test": "[N]",
788
- "observation": "[N]",
789
- "deficiency": "[N]",
790
- "ambiguity": "[N]"
791
- }
792
- }
793
- }
794
- ```
594
+
795
595
  ```
796
596
 
797
597
  ## Output Examples
@@ -960,44 +760,6 @@ Code is runtime-safe when ALL of the following are true
960
760
  - All HTTP responses validated before body access
961
761
  - No auto-fail conditions triggered
962
762
 
963
- ## Priority & Severity Mapping
964
-
965
- When generating the JSON OUTPUT section, map issues as follows:
966
-
967
- **Priority (for triage):**
968
- | Severity | Priority | Meaning |
969
- |----------|----------|---------|
970
- | Critical | `critical` | Blocks progression, must fix now |
971
- | High | `critical` | Should fix before next phase |
972
- | Medium | `suggested` | Should fix soon |
973
- | Low | `backlog` | Optional improvement |
974
- | Info | `backlog` | Informational only |
975
-
976
- **Severity is derived from failure_code suffix:**
977
- | Suffix | Severity | Priority |
978
- |--------|----------|----------|
979
- | `/C` | critical | critical |
980
- | `/H` | high | critical |
981
- | `/M` | medium | suggested |
982
- | `/L` | low | backlog |
983
- | `/I` | info | backlog |
984
-
985
- ## Failure Code Selection
986
-
987
- **1. Use the default code from the criterion that failed** (e.g., `→ SEM-COM/H`)
988
-
989
- **2. Adjust severity letter based on actual impact:**
990
- - `/C` - Security vulnerabilities, data loss risk, crashes, blocks all functionality
991
- - `/H` - Broken functionality, missing critical tests, significant user impact
992
- - `/M` - Code quality issues, maintainability concerns, moderate impact
993
- - `/L` - Style issues, minor improvements, low impact
994
- - `/I` - Suggestions, informational, no functional impact
995
-
996
- **3. Consider context when adjusting:**
997
- - A naming issue in a public API → elevate to `/M` or `/H`
998
- - A complexity issue in rarely-used code → may stay at `/L`
999
- - Missing error handling in user-facing code → `/H` or `/C`
1000
- - Missing error handling in internal utility → `/M`
1001
763
 
1002
764
  ## Edge Case Handling
1003
765
 
@@ -1038,11 +800,6 @@ When generating the JSON OUTPUT section, map issues as follows:
1038
800
  **Runs after:** code-validator, security-analyst
1039
801
  **Recommends:** type-safety-validator, test-architect
1040
802
 
1041
- ### Handoff: What This Agent Passes Downstream
1042
-
1043
- ### Handoff: What This Agent Expects From Predecessors
1044
- **From code-validator:** Validation results from code-validator
1045
- **From security-analyst:** Validation results from security-analyst
1046
803
 
1047
804
  ---
1048
805