@uluops/setup 0.4.0 → 0.6.0

package/assets/gemini-cli/commands/pipelines/ship.toml

@@ -0,0 +1,184 @@
+description = "Final ship gate. Runs 7 core phases (Validate, Type Safety, Test Architect, Code Auditor, Public Interface, Anxiety Reader, Security) plus conditional API Contract and Release Readiness. Persists all recommendations to tracker."
+prompt = '''
+# Ship Pipeline
+
+> Final ship gate. Runs 7 core phases (Validate, Type Safety, Test Architect, Code Auditor, Public Interface, Anxiety Reader, Security) plus conditional API Contract and Release Readiness. Persists all recommendations to tracker.
+
+| Field | Value |
+|-------|-------|
+| Name | `ship` |
+| Version | 1.1.1 |
+| Domain | software |
+| Subdomain | release |
+| Tags | `ship`, `validation`, `release`, `ci-cd` |
+
+## Triggers
+
+- **Manual**
+  - Parameters:
+    - `target`: string
+
+## Stage Dependency Graph
+
+```
+preflight (Pre-Flight Detection) [parallel]
+  -> validate (Code Validation)
+    -> parallel-validation (Parallel Validation) [parallel]
+      -> code-auditor (Runtime Correctness Audit)
+        -> anxiety-reader (Resilience Anxiety Reading)
+          -> security (Security Audit)
+            -> final-checks (Final Checks) [parallel]
+```
+
+## Stages
+
+### Stage 1: Pre-Flight Detection
+
+- **ID:** `preflight`
+- **Execution:** parallel
+
+**Steps:**
+
+1. **Detect TypeScript** [continue-on-error]
+   ```bash
+   test -f tsconfig.json && echo "DETECTED" || echo "NOT_DETECTED"
+   ```
+1. **Detect API routes** [continue-on-error]
+   ```bash
+   grep -rqE --include="*.ts" --include="*.js" --exclude-dir=node_modules 'router\.|app\.get|app\.post|app\.put|app\.delete' . 2>/dev/null && echo "DETECTED" || echo "NOT_DETECTED"
+   ```
+1. **Detect private package** [continue-on-error]
+   ```bash
+   node -e "try{const p=require('./package.json');console.log(p.private===true?'DETECTED':'NOT_DETECTED')}catch(e){console.log('NOT_DETECTED')}"
+   ```
+
+**Gate:**
+- On failure: warn
+
+### Stage 2: Code Validation
+
+- **ID:** `validate`
+- **Depends on:** `preflight`
+
+**Agents:**
+- `code-validator`
+
+**Gate:**
+- Threshold: 70
+- On failure: abort
+
+### Stage 3: Parallel Validation
+
+- **ID:** `parallel-validation`
+- **Depends on:** `validate`
+- **Execution:** parallel
+
+**Agents:**
+- `type-safety-validator` (if `stages.preflight.steps['Detect TypeScript'].output == 'DETECTED'`)
+- `test-architect`
+- `public-interface-validator`
+
+**Gate:**
+- Threshold: 70
+- Aggregate: min
+- On failure: abort
+
+### Stage 4: Runtime Correctness Audit
+
+- **ID:** `code-auditor`
+- **Depends on:** `parallel-validation`
+
+**Agents:**
+- `code-auditor`
+
+**Gate:**
+- Threshold: 80
+- On failure: abort
+
+### Stage 5: Resilience Anxiety Reading
+
+- **ID:** `anxiety-reader`
+- **Depends on:** `code-auditor`
+
+**Agents:**
+- `anxiety-reader`
+
+**Gate:**
+- Threshold: 70
+- On failure: abort
+
+### Stage 6: Security Audit
+
+- **ID:** `security`
+- **Depends on:** `anxiety-reader`
+
+**Agents:**
+- `security-analyst`
+
+**Gate:**
+- Threshold: 85
+- On failure: abort
+
+### Stage 7: Final Checks
+
+- **ID:** `final-checks`
+- **Depends on:** `security`
+- **Execution:** parallel
+
+**Agents:**
+- `api-contract-validator` (if `stages.preflight.steps['Detect API routes'].output == 'DETECTED'`)
+- `release-readiness` (if `stages.preflight.steps['Detect private package'].output == 'NOT_DETECTED'`)
+
+**Gate:**
+- Threshold: 80
+- Aggregate: min
+- On failure: abort
+
+## Postflight
+
+### Tracker Persistence
+
+After all stages complete, save results to the tracker using `save_run`:
+
+- **definition_type:** `pipeline`
+- **definition_name:** `ship`
+- **definition_version:** `1.1.1`
+- **workflow_type:** `ship`
+- **project:** `{{args}}` (the target project name)
+- **agents:** Collect each agent result with name, score, decision, model, and tokens
+- **recommendations:** Collect ALL issues from ALL stages into a single recommendations array with agent, title, priority, severity, failure_code, file_path, line_number, description, and type
+- **summary:** `{ all_gates_passed: <true if all abort-gates passed>, average_score: <mean of all agent scores> }`
+
+This MUST be a single bulk call — do NOT create individual issues. The `save_run` tool auto-increments the run number and detects regressions from prior runs.
+
+**Token Metrics:**
+
+Get token metrics from the agent-metrics buffer before saving:
+```bash
+agent-metrics buffer list --since 15m -f tracker
+```
+
+Map buffer fields to tracker: `input_tokens`, `output_tokens`, `cache_creation_tokens`, `cache_read_tokens`, `total_effective_tokens`, and `model`.
+
+**Field Mappings:**
+
+| Source | Tracker Field | Notes |
+|--------|---------------|-------|
+| `stage.gate.score` | `agents[].score` | Total score |
+| `stage.gate.decision` | `agents[].decision` | Agent decision |
+| `agent-metrics` | `agents[].model` | Model identifier |
+| `stage.output.issues` | `recommendations[]` | Flatten nested structure |
+
+**Verification:** After saving, compare `json.summary.total_issues` with the saved count. Alert if mismatch.
+
+### On Success
+
+- **SHIP IT — All gates passed. Results persisted.**
+
+### On Failure
+
+- **NOT READY — Blocking issues found. Fix and re-run.**
+
+---
+*Generated from PDL v1.1.1 | Pipeline: ship*
+'''

package/assets/gemini-cli/commands/workflows/post-implementation.toml

@@ -0,0 +1,56 @@
+description = "Iterative validation workflow. Run after each implementation phase until all agents pass. Includes code optimization and optional TypeScript, MCP, and frontend validators. Use --frontend flag for React/Tailwind projects."
+prompt = '''
+# Post-Implementation
+
+> Iterative validation workflow. Run after each implementation phase until all agents pass. Includes code optimization and optional TypeScript, MCP, and frontend validators. Use --frontend flag for React/Tailwind projects.
+
+Duration: 6-15 minutes
+**Arguments**: `target`
+## Pre-Flight Detection
+
+- **typescript_detected**: `test -f '{{ target }}/tsconfig.json'`
+- **mcp_python_detected**: `grep -rqE --include="*.py" --exclude-dir="node_modules" --exclude-dir="dist" --exclude-dir="__pycache__" --exclude-dir=".venv" "from mcp|import mcp|FastMCP|@mcp\." {{ target }} 2>/dev/null`
+- **mcp_typescript_detected**: `grep -rqE --include="*.ts" --include="*.js" --exclude-dir="node_modules" --exclude-dir="dist" "from .@modelcontextprotocol/sdk.|new McpServer|StdioServerTransport" {{ target }} 2>/dev/null`
+- **mcp_dependency_detected**: `grep -rqE --include="package.json" --include="pyproject.toml" --include="requirements.txt" --exclude-dir="node_modules" --exclude-dir="dist" "@modelcontextprotocol|\"mcp\":" {{ target }} 2>/dev/null`
+- **frontend_detected**: `test -n "$(find {{ target }} \( -name "*.tsx" -o -name "*.jsx" \) ! -path "*/node_modules/*" ! -path "*/dist/*" -print -quit 2>/dev/null)"`
+## Execution
+
+Ask user: **Sequential** (stop on first failure) or **Parallel** (run groups concurrently)?
+```
+Group 1 (gate): validate
+Group 2 (parallel): type-safety + mcp-validator + test-architect
+Group 3 (sequential): optimizer
+Group 4 (parallel): public-interface + frontend
+Group 5 (sequential): security
+```
+## Phases
+
+| # | Agent | Threshold | Gate | Condition |
+|---|-------|-----------|------|-----------|
+| 1 | validate@latest | threshold >= 70, on fail: stop | stop | — |
+| 2 | type-safety@latest | threshold >= 75, on fail: stop | stop | context.typescript_detected |
+| 3 | mcp-validate@latest | threshold >= 80, warn if < 65, on fail: stop | stop | context.mcp_detected |
+| 4 | test-review@latest | threshold >= 70, on fail: warn | stop | — |
+| 5 | optimize@latest | threshold >= 75, on fail: warn | stop | — |
+| 6 | public-interface@latest | threshold >= 75, on fail: warn | stop | — |
+| 7 | frontend@latest | threshold >= 75, on fail: warn | stop | context.frontend_enabled |
+| 8 | security@latest | threshold >= 75, on fail: warn | stop | — |
+
+**Code Validation**: Correctness and best practices; Error handling patterns
+**TypeScript Validation** (after validate): Explicit any usage and type holes; Public API type quality
+**MCP Protocol Validation** (after validate): Tools, resources, and prompts implementation; Transport and security compliance
+**Test Architecture Review** (after validate): Test quality, not just coverage; Critical path coverage
+**Code Optimization** (after test-architect): Duplication and structure; Hot path performance
+**Public Interface Validation** (after optimizer): README accuracy and completeness; Export hygiene
+**Frontend Validation** (after optimizer): Accessibility and theme consistency; Component quality and performance
+**Security Analysis** (after public-interface): OWASP Top 10 and CWE Top 25 coverage; Input validation and injection prevention
+## Scoring
+
+**Method**: weighted_average
+ — validate: 20%, type-safety: 15%, mcp-validator: 10%, test-architect: 15%, optimizer: 10%, public-interface: 10%, frontend: 10%, security: 10%
+## Results Submission
+
+Write markdown report to: `{{ target_path }}/{{ features_file }}`
+Save ALL findings to tracker via `mcp_uluops-tracker_save_run` with project=`{{ target_name }}`, workflow_type=`post-implementation`, definition_type=`workflow`, definition_name=`post-implementation`, definition_version=`3.2.1`. Include agents array (name, score, decision, model, tokens) and recommendations array (agent, title, priority, severity, description, file_path, line_number). Each file:line reference becomes a separate recommendation. Priority: blocking=critical, warnings=suggested, post-ship=backlog.
+After saving, query tracker and compare counts. Mismatches from cross-phase deduplication are expected — warn only, do not re-attempt.
+'''

package/assets/gemini-cli/commands/workflows/pre-implementation.toml

@@ -0,0 +1,42 @@
+description = "Validates proposed design and architecture BEFORE implementation begins. Runs architect review plus optional docs validation. Blocks implementation if design has critical flaws."
+prompt = '''
+# Pre-Implementation
+
+> Validates proposed design and architecture BEFORE implementation begins. Runs architect review plus optional docs validation. Blocks implementation if design has critical flaws.
+
+Duration: 3-10 minutes
+**Arguments**: `target` (required)
+## Pre-Flight Detection
+
+- **design_docs_detected**: `test -n "$(find . \( -name '*design*' -o -name '*spec*' -o -name '*prd*' -o -name '*plan*' -o -name 'README.md' \) ! -path '*/node_modules/*' ! -path '*/dist/*' ! -path '*/.venv/*' -print -quit 2>/dev/null)"`
+## Execution
+
+Ask user: **Sequential** (stop on first failure) or **Parallel** (run groups concurrently)?
+```
+Group 1 (parallel): architect + docs-validator
+Group 2 (sequential): assumption-review
+Group 3 (always): persist
+```
+## Phases
+
+| # | Agent | Threshold | Gate | Condition |
+|---|-------|-----------|------|-----------|
+| 1 |  | threshold >= 75, on fail: stop | stop | — |
+| 2 |  | threshold >= 75, on fail: warn | stop | context.has_design_docs |
+| 3 |  | threshold >= 70, on fail: warn | stop | — |
+| 4 | workflow-synthesis@latest | threshold >= 0, on fail: warn | stop | — |
+
+**Architecture Review**: Architectural fit with existing codebase; Design quality and complexity; Scope bounds (LOC, files, dependencies); Completeness of error handling and data flow
+**Documentation Validation**: Design doc completeness; API contract clarity; Data flow documentation
+**Epistemic Assumption Review** (after architect): Implicit assumptions in proposed design; Overclaiming of capabilities or guarantees; Reasoning quality behind architectural decisions
+**Persist Results**: Synthesize findings and persist to tracker
+## Scoring
+
+**Method**: weighted_average
+ — architect: 55%, assumption-review: 20%, docs-validator: 25%
+## Results Submission
+
+Write markdown report to: `{{ target_path }}/{{ report_file }}`
+Save ALL findings to tracker via `mcp_uluops-tracker_save_run` with project=`{{ target_name }}`, workflow_type=`pre-implementation`, definition_type=`workflow`, definition_name=`pre-implementation`, definition_version=`2.0.1`. Include agents array (name, score, decision, model, tokens) and recommendations array (agent, title, priority, severity, description, file_path, line_number). Each file:line reference becomes a separate recommendation. Priority: blocking=critical, warnings=suggested, post-ship=backlog.
+After saving, query tracker and compare counts. Mismatches from cross-phase deduplication are expected — warn only, do not re-attempt.
+'''

package/assets/gemini-cli/commands/workflows/prompt-audit.toml

@@ -0,0 +1,40 @@
+description = "Comprehensive prompt audit with ecosystem context. Pattern analyzer provides ecosystem baseline, prompt engineer validates structure and scoring, prompt quality validates clarity and effectiveness. Sequential with gating."
+prompt = '''
+# Prompt Audit
+
+> Comprehensive prompt audit with ecosystem context. Pattern analyzer provides ecosystem baseline, prompt engineer validates structure and scoring, prompt quality validates clarity and effectiveness. Sequential with gating.
+
+Duration: 6-15 minutes
+**Arguments**: `file` (required)
+## Pre-Flight Detection
+
+- **is_agent_definition**: `grep -rqE --include='{{ file }}'  '^(name|description|type):' . 2>/dev/null`
+- **is_agent_command**: `grep -rqE --include='{{ file }}'  'subagent_type|\[validator:' . 2>/dev/null`
+## Execution
+
+```
+Group 1 (sequential): pattern-analyzer
+Group 2 (sequential): prompt-engineer
+Group 3 (sequential): prompt-quality
+```
+## Phases
+
+| # | Agent | Threshold | Gate | Condition |
+|---|-------|-----------|------|-----------|
+| 1 | pattern-analyzer@latest | threshold >= 50, on fail: warn | stop | — |
+| 2 | prompt-validate@latest | threshold >= 75, on fail: stop | stop | — |
+| 3 | prompt-quality@latest | threshold >= 70, on fail: warn | stop | — |
+
+**Ecosystem Pattern Analysis**: Ecosystem scoring patterns and conventions; Decision vocabulary and threshold standards
+**Prompt Engineering Validation** (after pattern-analyzer): Clarity, structure, and completeness; Scoring framework and effectiveness
+**Prompt Quality Validation** (after prompt-engineer): Clarity and specificity; Objective effectiveness criteria
+## Scoring
+
+**Method**: weighted_average
+ — pattern-analyzer: 15%, prompt-engineer: 55%, prompt-quality: 30%
+## Results Submission
+
+Write markdown report to: `{{ target_path }}/{{ report_file }}`
+Save ALL findings to tracker via `mcp_uluops-tracker_save_run` with project=`{{ target_name }}`, workflow_type=`prompt-audit`, definition_type=`workflow`, definition_name=`prompt-audit`, definition_version=`2.0.1`. Include agents array (name, score, decision, model, tokens) and recommendations array (agent, title, priority, severity, description, file_path, line_number). Each file:line reference becomes a separate recommendation. Priority: blocking=critical, warnings=suggested, post-ship=backlog.
+After saving, query tracker and compare counts. Mismatches from cross-phase deduplication are expected — warn only, do not re-attempt.
+'''