@windagency/valora 2.0.1

package/data/templates/ASSERT_COMPLETENESS.md

@@ -0,0 +1,121 @@
+# Completeness Assertion Checklist
+
+**Scope**: [File paths or commit range]
+**Date**: [YYYY-MM-DD]
+**Validator**: [Agent/Human]
+
+---
+
+## Instructions
+
+Quick binary validation of implementation completeness. Mark each item Y (Yes), N (No), or N/A (Not Applicable). Target completion: ~2 minutes.
+
+---
+
+## 1. Acceptance Criteria Coverage
+
+| #    | Criterion             | Implemented   | Tested        | Notes |
+| ---- | --------------------- | ------------- | ------------- | ----- |
+| AC-1 | [Criterion from task] | [ ] Y / [ ] N | [ ] Y / [ ] N |       |
+| AC-2 | [Criterion from task] | [ ] Y / [ ] N | [ ] Y / [ ] N |       |
+| AC-3 | [Criterion from task] | [ ] Y / [ ] N | [ ] Y / [ ] N |       |
+
+**Coverage**: [ ] / [ ] criteria implemented ([ ]%)
+
+---
+
+## 2. Feature Completeness
+
+| #   | Check                               | Status        | Evidence |
+| --- | ----------------------------------- | ------------- | -------- |
+| 2.1 | All required files created/modified | [ ] Y / [ ] N |          |
+| 2.2 | No placeholder/stub implementations | [ ] Y / [ ] N |          |
+| 2.3 | No TODO/FIXME comments in new code  | [ ] Y / [ ] N |          |
+| 2.4 | All imports resolved                | [ ] Y / [ ] N |          |
+| 2.5 | All exports properly defined        | [ ] Y / [ ] N |          |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 3. Error Handling
+
+| #   | Check                     | Status        | Evidence |
+| --- | ------------------------- | ------------- | -------- |
+| 3.1 | Happy path implemented    | [ ] Y / [ ] N |          |
+| 3.2 | Error cases handled       | [ ] Y / [ ] N |          |
+| 3.3 | Edge cases considered     | [ ] Y / [ ] N |          |
+| 3.4 | Validation for user input | [ ] Y / [ ] N |          |
+| 3.5 | Meaningful error messages | [ ] Y / [ ] N |          |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 4. Integration Points
+
+| #   | Check                              | Status                  | Evidence |
+| --- | ---------------------------------- | ----------------------- | -------- |
+| 4.1 | API contracts satisfied            | [ ] Y / [ ] N / [ ] N/A |          |
+| 4.2 | Database operations complete       | [ ] Y / [ ] N / [ ] N/A |          |
+| 4.3 | External service calls implemented | [ ] Y / [ ] N / [ ] N/A |          |
+| 4.4 | Event handlers connected           | [ ] Y / [ ] N / [ ] N/A |          |
+| 4.5 | Configuration values set           | [ ] Y / [ ] N / [ ] N/A |          |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## 5. Test Coverage
+
+| #   | Check                        | Status                  | Evidence |
+| --- | ---------------------------- | ----------------------- | -------- |
+| 5.1 | Unit tests for new functions | [ ] Y / [ ] N           |          |
+| 5.2 | Integration tests for APIs   | [ ] Y / [ ] N / [ ] N/A |          |
+| 5.3 | Edge case tests present      | [ ] Y / [ ] N           |          |
+| 5.4 | Error scenario tests         | [ ] Y / [ ] N           |          |
+| 5.5 | Tests are passing            | [ ] Y / [ ] N           |          |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## Summary
+
+| Section                 | Passed | Total | Percentage |
+| ----------------------- | ------ | ----- | ---------- |
+| 1. Acceptance Criteria  |        |       |            |
+| 2. Feature Completeness |        | 5     |            |
+| 3. Error Handling       |        | 5     |            |
+| 4. Integration Points   |        |       |            |
+| 5. Test Coverage        |        |       |            |
+| **TOTAL**               |        |       |            |
+
+---
+
+## Verdict
+
+**Minimum threshold**: 80% overall, 100% acceptance criteria
+
+| Result          | Criteria                                     |
+| --------------- | -------------------------------------------- |
+| [ ] **PASS**    | >= 80% overall AND 100% acceptance criteria  |
+| [ ] **WARN**    | >= 60% overall OR < 100% acceptance criteria |
+| [ ] **BLOCKED** | < 60% overall OR critical items missing      |
+
+---
+
+## Blocking Issues
+
+| #   | Issue | Location | Remediation |
+| --- | ----- | -------- | ----------- |
+| 1   |       |          |             |
+| 2   |       |          |             |
+
+---
+
+## Next Step
+
+- If PASS: Proceed to `/test`
+- If WARN: Address issues, then `/test`
+- If BLOCKED: Return to `/implement`

package/data/templates/ASSERT_SECURITY.md

@@ -0,0 +1,186 @@
+# Security Assertion Checklist
+
+**Scope**: [File paths or commit range]
+**Date**: [YYYY-MM-DD]
+**Validator**: [Agent/Human]
+
+---
+
+## Instructions
+
+Quick security validation for implementation. Mark each item Y (Yes), N (No), or N/A (Not Applicable). Any N on critical items triggers BLOCKED status. Target completion: ~2 minutes.
+
+---
+
+## 1. Input Validation (CRITICAL)
+
+| #   | Check                               | Status                  | Location/Notes |
+| --- | ----------------------------------- | ----------------------- | -------------- |
+| 1.1 | User input validated before use     | [ ] Y / [ ] N / [ ] N/A |                |
+| 1.2 | Input length limits enforced        | [ ] Y / [ ] N / [ ] N/A |                |
+| 1.3 | Input type validation (Zod/joi)     | [ ] Y / [ ] N / [ ] N/A |                |
+| 1.4 | File upload validation (type, size) | [ ] Y / [ ] N / [ ] N/A |                |
+| 1.5 | URL/path parameters sanitised       | [ ] Y / [ ] N / [ ] N/A |                |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## 2. Injection Prevention (CRITICAL)
+
+| #   | Check                                    | Status                  | Location/Notes |
+| --- | ---------------------------------------- | ----------------------- | -------------- |
+| 2.1 | SQL queries use parameterised statements | [ ] Y / [ ] N / [ ] N/A |                |
+| 2.2 | No string concatenation in queries       | [ ] Y / [ ] N / [ ] N/A |                |
+| 2.3 | HTML output properly escaped (XSS)       | [ ] Y / [ ] N / [ ] N/A |                |
+| 2.4 | Command execution uses safe APIs         | [ ] Y / [ ] N / [ ] N/A |                |
+| 2.5 | Template injection prevented             | [ ] Y / [ ] N / [ ] N/A |                |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## 3. Authentication & Authorisation (CRITICAL)
+
+| #   | Check                                    | Status                  | Location/Notes |
+| --- | ---------------------------------------- | ----------------------- | -------------- |
+| 3.1 | Protected routes require authentication  | [ ] Y / [ ] N / [ ] N/A |                |
+| 3.2 | Authorisation checks on resources        | [ ] Y / [ ] N / [ ] N/A |                |
+| 3.3 | Session management secure                | [ ] Y / [ ] N / [ ] N/A |                |
+| 3.4 | Password handling follows best practices | [ ] Y / [ ] N / [ ] N/A |                |
+| 3.5 | Token validation implemented             | [ ] Y / [ ] N / [ ] N/A |                |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## 4. Secrets Management (CRITICAL)
+
+| #   | Check                             | Status                  | Location/Notes |
+| --- | --------------------------------- | ----------------------- | -------------- |
+| 4.1 | No hard-coded secrets/credentials | [ ] Y / [ ] N           |                |
+| 4.2 | No API keys in source code        | [ ] Y / [ ] N           |                |
+| 4.3 | Secrets loaded from environment   | [ ] Y / [ ] N / [ ] N/A |                |
+| 4.4 | .env files in .gitignore          | [ ] Y / [ ] N / [ ] N/A |                |
+| 4.5 | No sensitive data in logs         | [ ] Y / [ ] N           |                |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## 5. Data Protection
+
+| #   | Check                                  | Status                  | Location/Notes |
+| --- | -------------------------------------- | ----------------------- | -------------- |
+| 5.1 | Sensitive data encrypted at rest       | [ ] Y / [ ] N / [ ] N/A |                |
+| 5.2 | HTTPS enforced for data in transit     | [ ] Y / [ ] N / [ ] N/A |                |
+| 5.3 | PII handling follows regulations       | [ ] Y / [ ] N / [ ] N/A |                |
+| 5.4 | Data retention policies respected      | [ ] Y / [ ] N / [ ] N/A |                |
+| 5.5 | Audit logging for sensitive operations | [ ] Y / [ ] N / [ ] N/A |                |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## 6. Dependency Security
+
+| #   | Check                                       | Status        | Location/Notes |
+| --- | ------------------------------------------- | ------------- | -------------- |
+| 6.1 | No known CVEs in dependencies               | [ ] Y / [ ] N | `pnpm audit`   |
+| 6.2 | Dependencies from trusted sources           | [ ] Y / [ ] N |                |
+| 6.3 | Lock file committed                         | [ ] Y / [ ] N |                |
+| 6.4 | No deprecated packages with vulnerabilities | [ ] Y / [ ] N |                |
+
+**Score**: [ ] / 4 items passed
+
+---
+
+## 7. Error Handling Security
+
+| #   | Check                                | Status                  | Location/Notes |
+| --- | ------------------------------------ | ----------------------- | -------------- |
+| 7.1 | No stack traces exposed to users     | [ ] Y / [ ] N           |                |
+| 7.2 | Error messages don't leak internals  | [ ] Y / [ ] N           |                |
+| 7.3 | Failed auth returns generic message  | [ ] Y / [ ] N / [ ] N/A |                |
+| 7.4 | Rate limiting on sensitive endpoints | [ ] Y / [ ] N / [ ] N/A |                |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## Summary
+
+| Section                 | Passed | Total | Critical |
+| ----------------------- | ------ | ----- | -------- |
+| 1. Input Validation     |        |       | Yes      |
+| 2. Injection Prevention |        |       | Yes      |
+| 3. Auth & Authz         |        |       | Yes      |
+| 4. Secrets Management   |        |       | Yes      |
+| 5. Data Protection      |        |       | No       |
+| 6. Dependency Security  |        | 4     | No       |
+| 7. Error Handling       |        |       | No       |
+| **TOTAL**               |        |       |          |
+
+---
+
+## Verdict
+
+**Critical requirement**: All critical sections must have 100% pass rate
+
+| Result          | Criteria                                      |
+| --------------- | --------------------------------------------- |
+| [ ] **PASS**    | All critical sections 100% AND overall >= 80% |
+| [ ] **WARN**    | All critical sections 100% AND overall >= 60% |
+| [ ] **BLOCKED** | Any critical section < 100% OR overall < 60%  |
+
+---
+
+## OWASP Top 10 Quick Check
+
+| #   | Vulnerability             | Status                        |
+| --- | ------------------------- | ----------------------------- |
+| A01 | Broken Access Control     | [ ] Safe / [ ] Risk           |
+| A02 | Cryptographic Failures    | [ ] Safe / [ ] Risk / [ ] N/A |
+| A03 | Injection                 | [ ] Safe / [ ] Risk           |
+| A04 | Insecure Design           | [ ] Safe / [ ] Risk           |
+| A05 | Security Misconfiguration | [ ] Safe / [ ] Risk           |
+| A06 | Vulnerable Components     | [ ] Safe / [ ] Risk           |
+| A07 | Auth Failures             | [ ] Safe / [ ] Risk / [ ] N/A |
+| A08 | Data Integrity Failures   | [ ] Safe / [ ] Risk / [ ] N/A |
+| A09 | Logging Failures          | [ ] Safe / [ ] Risk           |
+| A10 | SSRF                      | [ ] Safe / [ ] Risk / [ ] N/A |
+
+---
+
+## Critical Issues
+
+| #   | Severity | Issue | Location | Remediation |
+| --- | -------- | ----- | -------- | ----------- |
+| 1   | CRITICAL |       |          |             |
+| 2   | HIGH     |       |          |             |
+
+---
+
+## Commands to Verify
+
+```bash
+# Check for secrets
+pnpm exec secretlint .
+
+# Audit dependencies
+pnpm audit
+
+# Type check
+pnpm tsc:check
+
+# Lint security rules
+pnpm lint
+```
+
+---
+
+## Next Step
+
+- If PASS: Proceed to `/test`
+- If WARN: Address issues, then `/test`
+- If BLOCKED: Return to `/implement` - SECURITY ISSUES MUST BE FIXED

package/data/templates/ASSERT_TYPESCRIPT.md

@@ -0,0 +1,195 @@
+# TypeScript Assertion Checklist
+
+**Scope**: [File paths or commit range]
+**Date**: [YYYY-MM-DD]
+**Validator**: [Agent/Human]
+
+---
+
+## Instructions
+
+Quick TypeScript-specific validation. Mark each item Y (Yes), N (No), or N/A (Not Applicable). Target completion: ~2 minutes.
+
+---
+
+## 1. Type Safety (CRITICAL)
+
+| #   | Check                                 | Status        | Command/Notes             |
+| --- | ------------------------------------- | ------------- | ------------------------- |
+| 1.1 | `pnpm tsc:check` passes               | [ ] Y / [ ] N | `pnpm tsc:check`          |
+| 1.2 | No `any` types without justification  | [ ] Y / [ ] N | `grep -r ": any"`         |
+| 1.3 | No `@ts-ignore` without justification | [ ] Y / [ ] N | `grep -r "@ts-ignore"`    |
+| 1.4 | No `as unknown as` casts              | [ ] Y / [ ] N | `grep -r "as unknown as"` |
+| 1.5 | Strict mode enabled in tsconfig       | [ ] Y / [ ] N | Check `strict: true`      |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 2. Naming Conventions
+
+| #   | Check                              | Status        | Notes |
+| --- | ---------------------------------- | ------------- | ----- |
+| 2.1 | Classes/Interfaces: PascalCase     | [ ] Y / [ ] N |       |
+| 2.2 | Functions/Methods: camelCase       | [ ] Y / [ ] N |       |
+| 2.3 | Constants: UPPER_SNAKE_CASE        | [ ] Y / [ ] N |       |
+| 2.4 | Files: kebab-case.ts               | [ ] Y / [ ] N |       |
+| 2.5 | No Hungarian notation (IInterface) | [ ] Y / [ ] N |       |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 3. Code Quality
+
+| #   | Check                                | Status        | Command/Notes           |
+| --- | ------------------------------------ | ------------- | ----------------------- |
+| 3.1 | `pnpm lint` passes                   | [ ] Y / [ ] N | `pnpm lint`             |
+| 3.2 | `pnpm format` shows no changes       | [ ] Y / [ ] N | `pnpm format --check`   |
+| 3.3 | No circular dependencies             | [ ] Y / [ ] N |                         |
+| 3.4 | Absolute imports used (path aliases) | [ ] Y / [ ] N | Check for `../../../`   |
+| 3.5 | No console.log in production code    | [ ] Y / [ ] N | `grep -r "console.log"` |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 4. Type Definitions
+
+| #   | Check                                | Status        | Notes |
+| --- | ------------------------------------ | ------------- | ----- |
+| 4.1 | Interfaces for extensible objects    | [ ] Y / [ ] N |       |
+| 4.2 | Types for unions/primitives          | [ ] Y / [ ] N |       |
+| 4.3 | Function parameters explicitly typed | [ ] Y / [ ] N |       |
+| 4.4 | Public API return types explicit     | [ ] Y / [ ] N |       |
+| 4.5 | No implicit any in function params   | [ ] Y / [ ] N |       |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 5. Modern Patterns
+
+| #   | Check                           | Status        | Notes                   |
+| --- | ------------------------------- | ------------- | ----------------------- |
+| 5.1 | Prefer `const` over `let`       | [ ] Y / [ ] N |                         |
+| 5.2 | Use functional array methods    | [ ] Y / [ ] N | map/filter/reduce       |
+| 5.3 | Use object literal lookups      | [ ] Y / [ ] N | Not switch for mappings |
+| 5.4 | Use async/await (not callbacks) | [ ] Y / [ ] N |                         |
+| 5.5 | Use optional chaining (?.)      | [ ] Y / [ ] N |                         |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 6. Error Handling
+
+| #   | Check                                  | Status                  | Notes |
+| --- | -------------------------------------- | ----------------------- | ----- |
+| 6.1 | Custom error classes where appropriate | [ ] Y / [ ] N / [ ] N/A |       |
+| 6.2 | try/catch in async operations          | [ ] Y / [ ] N           |       |
+| 6.3 | Error types properly narrowed          | [ ] Y / [ ] N           |       |
+| 6.4 | No swallowed errors (empty catch)      | [ ] Y / [ ] N           |       |
+| 6.5 | Errors logged with context             | [ ] Y / [ ] N           |       |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 7. Testing (Vitest)
+
+| #   | Check                                  | Status        | Command/Notes        |
+| --- | -------------------------------------- | ------------- | -------------------- |
+| 7.1 | Tests use Vitest (not Jest)            | [ ] Y / [ ] N |                      |
+| 7.2 | Test files: `*.test.ts` or `*.spec.ts` | [ ] Y / [ ] N |                      |
+| 7.3 | `pnpm test:quick` passes               | [ ] Y / [ ] N | `pnpm test:quick`    |
+| 7.4 | Coverage meets threshold (>60%)        | [ ] Y / [ ] N | `pnpm test:coverage` |
+| 7.5 | No skipped tests (.skip) committed     | [ ] Y / [ ] N | `grep -r ".skip("`   |
+
+**Score**: [ ] / 5 items passed
+
+---
+
+## 8. Architecture Compliance
+
+| #   | Check                                | Status                  | Notes |
+| --- | ------------------------------------ | ----------------------- | ----- |
+| 8.1 | Adapter pattern for third-party libs | [ ] Y / [ ] N / [ ] N/A |       |
+| 8.2 | Dependency injection used            | [ ] Y / [ ] N / [ ] N/A |       |
+| 8.3 | No God classes (SRP violation)       | [ ] Y / [ ] N           |       |
+| 8.4 | Props drilling < 3 levels            | [ ] Y / [ ] N / [ ] N/A |       |
+| 8.5 | Zod for input validation             | [ ] Y / [ ] N / [ ] N/A |       |
+
+**Score**: [ ] / [ ] applicable items passed
+
+---
+
+## Summary
+
+| Section               | Passed | Total | Critical |
+| --------------------- | ------ | ----- | -------- |
+| 1. Type Safety        |        | 5     | Yes      |
+| 2. Naming Conventions |        | 5     | No       |
+| 3. Code Quality       |        | 5     | Yes      |
+| 4. Type Definitions   |        | 5     | No       |
+| 5. Modern Patterns    |        | 5     | No       |
+| 6. Error Handling     |        | 5     | No       |
+| 7. Testing            |        | 5     | Yes      |
+| 8. Architecture       |        |       | No       |
+| **TOTAL**             |        |       |          |
+
+---
+
+## Verdict
+
+**Minimum threshold**: 80% overall, critical sections 100%
+
+| Result          | Criteria                                     |
+| --------------- | -------------------------------------------- |
+| [ ] **PASS**    | Critical sections 100% AND overall >= 80%    |
+| [ ] **WARN**    | Critical sections 100% AND overall >= 60%    |
+| [ ] **BLOCKED** | Any critical section < 100% OR overall < 60% |
+
+---
+
+## Quick Validation Commands
+
+```bash
+# Type check
+pnpm tsc:check
+
+# Lint
+pnpm lint
+
+# Format check
+pnpm format --check
+
+# Quick tests
+pnpm test:quick
+
+# Find any types
+grep -rn ": any" src/ --include="*.ts" --include="*.tsx"
+
+# Find ts-ignore
+grep -rn "@ts-ignore" src/ --include="*.ts" --include="*.tsx"
+
+# Find relative imports
+grep -rn "from '\.\./\.\./\.\." src/ --include="*.ts" --include="*.tsx"
+```
+
+---
+
+## Issues Found
+
+| #   | Severity | Issue | Location | Remediation |
+| --- | -------- | ----- | -------- | ----------- |
+| 1   |          |       |          |             |
+| 2   |          |       |          |             |
+
+---
+
+## Next Step
+
+- If PASS: Proceed to `/test`
+- If WARN: Address issues, then `/test`
+- If BLOCKED: Return to `/implement`