@windagency/valora 2.0.1

package/data/prompts/05_review/synthesize-validation-report.md

@@ -0,0 +1,369 @@
+---
+id: review.synthesize-validation-report
+version: 1.0.0
+category: review
+experimental: true
+name: Synthesize Validation Report
+description: Aggregate all validation results into a comprehensive assertion report with pass/fail determination
+tags:
+  - validation
+  - synthesis
+  - reporting
+model_requirements:
+  min_context: 200000
+  recommended:
+    - claude-sonnet-4.5
+    - gpt-5-thinking-high
+agents:
+  - asserter
+dependencies:
+  requires:
+    - context.use-modern-cli-tools
+    - review.validate-completeness
+    - review.validate-standards-compliance
+    - review.validate-type-safety
+    - review.validate-security
+    - review.validate-architecture
+inputs:
+  - name: completeness
+    description: Completeness validation results
+    type: object
+    required: true
+  - name: standards
+    description: Standards compliance results
+    type: object
+    required: true
+  - name: type_safety
+    description: Type safety validation results
+    type: object
+    required: true
+  - name: security
+    description: Security validation results
+    type: object
+    required: true
+  - name: architecture
+    description: Architecture validation results
+    type: object
+    required: true
+  - name: accessibility
+    description: Accessibility validation results (may be null if no frontend changes)
+    type: object
+    required: false
+  - name: severity_filter
+    description: Minimum severity to report (critical, high, all)
+    type: string
+    required: false
+    default: critical
+  - name: report_format
+    description: Report format (structured, summary, detailed)
+    type: string
+    required: false
+    default: structured
+outputs:
+  - validation_status
+  - blocker_count
+  - validation_report
+tokens:
+  avg: 4000
+  max: 8000
+  min: 2000
+---
+
+# Synthesize Validation Report
+
+## Objective
+
+Aggregate all validation results into a comprehensive, actionable assertion report with clear pass/fail status and prioritized remediation guidance.
+
+## Synthesis Process
+
+### Step 1: Aggregate Validation Results
+
+Collect results from all validation dimensions:
+
+1. **Completeness** - Requirements coverage
+2. **Standards Compliance** - Linting and formatting
+3. **Type Safety** - Type errors and coverage
+4. **Security** - Vulnerabilities and secrets
+5. **Architecture** - Pattern adherence and boundaries
+6. **Accessibility** - WCAG compliance (if applicable)
+
+### Step 2: Categorize by Severity
+
+Group all issues by severity:
+
+**Critical (Blockers)**:
+
+- Security vulnerabilities (CVSS ≥ 7.0)
+- Build failures
+- Type errors in strict mode
+- WCAG Level A violations
+- Major architectural violations
+- Hard-coded secrets
+- > 50% acceptance criteria unmet
+
+**High**:
+
+- Linting errors (not warnings)
+- API contract violations
+- Circular dependencies
+- SQL injection patterns
+
+**Medium**:
+
+- WCAG Level AA violations (if Level A met)
+- Code complexity exceeds thresholds
+- Missing documentation on public APIs
+- Moderate coupling issues
+
+**Low**:
+
+- Linting warnings
+- Minor naming inconsistencies
+- WCAG Level AAA violations
+- Optimization opportunities
+
+### Step 3: Apply Severity Filter
+
+Based on `severity_filter` argument:
+
+- **critical**: Only report critical issues
+- **high**: Report critical and high issues
+- **all**: Report all issues
+
+### Step 4: Calculate Overall Status
+
+Determine final verdict:
+
+**PASS ✅**:
+
+- Zero critical issues
+- Zero high issues (if strict mode)
+- All acceptance criteria met
+- All quality gates passed
+
+**BLOCKED ❌**:
+
+- One or more critical issues
+- Multiple high issues
+- <50% acceptance criteria met
+- Build fails
+
+**WARN ⚠️**:
+
+- No critical issues
+- Some high or medium issues
+- Can proceed with caution
+- Issues should be addressed post-QA
+
+### Step 5: Generate Recommendations
+
+Provide actionable next steps:
+
+1. **Prioritized remediation list** (critical → high → medium → low)
+2. **Estimated effort** (hours or complexity)
+3. **Required skills** (backend, frontend, security, etc.)
+4. **Documentation links** (OWASP, WCAG, MDN, etc.)
+
+### Step 6: Format Report
+
+Based on `report_format` argument:
+
+**structured** (default):
+
+- Full report with all dimensions
+- Organized by severity
+- Includes code snippets and locations
+
+**summary**:
+
+- Executive summary only
+- Pass/fail status
+- Key metrics
+- Blocker count
+
+**detailed**:
+
+- Comprehensive report
+- All issues with full context
+- Code snippets for every violation
+- Step-by-step remediation
+- References and resources
+
+## Output Format
+
+### Structured Report (Default)
+
+````markdown
+# ASSERTION REPORT: [Feature/Task Title]
+
+**Generated**: [Timestamp]
+**Branch**: [Branch name]
+**Commit**: [Commit SHA]
+
+## VALIDATION SUMMARY
+
+**Status**: ✅ PASS | ❌ BLOCKED | ⚠️ WARN
+**Critical Issues**: N
+**High Issues**: N
+**Medium Issues**: N
+**Warnings**: N
+
+**Recommendation**: [Advance to QA | Return to implementation | Proceed with caution]
+
+## VALIDATION DIMENSIONS
+
+| Dimension            | Status   | Issues                |
+| -------------------- | -------- | --------------------- |
+| Completeness         | ✅/❌/⚠️ | N critical, N high... |
+| Standards Compliance | ✅/❌/⚠️ | N linting errors...   |
+| Type Safety          | ✅/❌/⚠️ | N type errors...      |
+| Security             | ✅/❌/⚠️ | N vulnerabilities...  |
+| Architecture         | ✅/❌/⚠️ | N violations...       |
+| Accessibility        | ✅/❌/⚠️ | N WCAG violations...  |
+
+## CRITICAL BLOCKERS (Must Resolve)
+
+[If any exist, enumerate with full details:]
+
+### 1. [Issue Category] (SEVERITY)
+
+- **Location**: `file/path:line`
+- **Issue**: [Description]
+- **Rule/Standard**: [Identifier]
+- **Impact**: [Why this is critical]
+- **Fix**: [Specific remediation steps]
+- **Reference**: [Documentation link]
+
+[Repeat for each critical blocker]
+
+## HIGH PRIORITY ISSUES
+
+[Similar structure for high severity issues]
+
+## MEDIUM & LOW PRIORITY ISSUES
+
+[Grouped by category]
+
+## QUALITY METRICS
+
+- **Lines Changed**: +N / -N
+- **Completeness**: N% (M/P criteria met)
+- **Code Coverage**: N% (threshold: N%) ✅/⚠️
+- **Type Coverage**: N%
+- **Cyclomatic Complexity**: Max N (threshold: N) ✅/⚠️
+- **Code Duplication**: N% (threshold: N%) ✅/⚠️
+- **Security Score**: No critical vulnerabilities ✅ | N vulnerabilities ❌
+- **Accessibility Score**: N/100 (WCAG Level AA) ✅/⚠️
+- **Technical Debt**: +N hours
+
+## REQUIREMENTS TRACEABILITY
+
+| Requirement | Acceptance Criteria | Status   | Validation |
+| ----------- | ------------------- | -------- | ---------- |
+| US-XXX      | [Criterion 1]       | ✅/❌/⚠️ | ✅/❌/⚠️   |
+| US-XXX      | [Criterion 2]       | ✅/❌/⚠️ | ✅/❌/⚠️   |
+
+**Requirements Coverage**: N% (M/P requirements met)
+
+## NEXT STEPS
+
+**If BLOCKED:**
+
+1. [Prioritized list of critical remediations]
+2. [Estimated effort and skills needed]
+3. [Resources and documentation links]
+
+**If PASS:**
+
+1. Proceed to `/test` command
+2. [Any advisory items to address post-testing]
+
+## REPRODUCIBILITY
+
+**Validation Commands**:
+
+```bash
+# Run locally to reproduce results
+npm run lint
+npm run type-check
+npm run build
+npm audit
+# [Any other validation commands]
+```
+````
+
+## RESOURCES
+
+- [Link to coding standards]
+- [Link to security guidelines]
+- [Link to accessibility requirements]
+- [Link to architectural documentation]
+
+---
+
+````
+
+### Summary Report
+
+```markdown
+# VALIDATION SUMMARY
+
+**Status**: ✅ PASS | ❌ BLOCKED | ⚠️ WARN
+**Critical Issues**: N
+**Recommendation**: [Advance to QA | Return to implementation]
+
+**Blocking Issues**:
+1. [Issue 1]
+2. [Issue 2]
+
+**Estimated Remediation**: N hours
+````
+
+### Detailed Report
+
+Full structured report with additional sections:
+
+- **Code Snippets**: Show actual code for every violation
+- **Before/After Examples**: Demonstrate correct implementation
+- **Step-by-Step Remediation**: Detailed fix instructions
+- **Related Issues**: Link related violations together
+- **Historical Context**: Compare to baseline metrics
+
+## Success Criteria
+
+- ✅ All validation results aggregated
+- ✅ Issues categorized by severity
+- ✅ Overall status determined (PASS/BLOCKED/WARN)
+- ✅ Blockers clearly enumerated
+- ✅ Recommendations prioritized
+- ✅ Report formatted per specification
+- ✅ Reproducibility commands included
+- ✅ Resources and references provided
+
+## Rules
+
+**Status Determination**:
+
+- PASS: Zero critical, zero high (or per threshold)
+- BLOCKED: Any critical issues
+- WARN: High or medium issues, no critical
+
+**Severity Escalation**:
+
+- Critical security issues → escalate to security team
+- Major architectural violations → escalate to lead/architect
+- > 50% assertion failures → escalate to lead
+
+**Report Quality**:
+
+- Every blocker includes location, explanation, remediation
+- Commands are executable (copy-paste ready)
+- References are valid links
+- Metrics are quantified, not vague
+
+**Handoff**:
+
+- If PASS → proceed to `/test`
+- If BLOCKED → return to `/implement` with remediation plan
+- If WARN → team decision, document risks

package/data/prompts/05_review/validate-accessibility.md

@@ -0,0 +1,303 @@
+---
+id: review.validate-accessibility
+version: 1.0.0
+category: review
+experimental: true
+name: Validate Accessibility
+description: Verify WCAG compliance, ARIA implementation, and semantic HTML usage for frontend changes
+tags:
+  - validation
+  - accessibility
+  - wcag
+  - aria
+model_requirements:
+  min_context: 128000
+  recommended:
+    - claude-haiku-4.5
+agents:
+  - asserter
+dependencies:
+  requires:
+    - context.use-modern-cli-tools
+    - context.gather-validation-context
+inputs: []
+outputs:
+  - wcag_violations
+  - aria_issues
+  - semantic_html_issues
+tokens:
+  avg: 2000
+  max: 4000
+  min: 1000
+---
+
+# Validate Accessibility
+
+## Objective
+
+Execute automated accessibility audits to verify WCAG compliance, proper ARIA implementation, and semantic HTML usage.
+
+**Note**: This prompt is conditionally executed only when `frontend_changes == true`.
+
+## Validation Steps
+
+### Step 1: Run Automated Accessibility Audits
+
+Execute accessibility scanning tools on **project source only**.
+
+**IMPORTANT: Infrastructure Exclusions**
+
+VALORA validates the project being built, NOT its own infrastructure. Target project directories (e.g., `src/`, `app/`) rather than the repository root.
+
+```bash
+# axe-core CLI (recommended)
+pnpm exec @axe-core/cli http://localhost:3000 --tags wcag2a,wcag2aa
+
+# Or eslint-plugin-jsx-a11y for React (exclude infrastructure)
+pnpm exec eslint src/ --ext .jsx,.tsx --ignore-pattern "data/**"
+
+# Or Pa11y
+pnpm exec pa11y http://localhost:3000
+```
+
+**Capture**:
+
+- WCAG violations by level (A, AA, AAA)
+- Rule IDs and descriptions
+- Element selectors
+- Remediation guidance
+
+### Step 2: Check WCAG Compliance
+
+Validate against WCAG 2.1/2.2 guidelines:
+
+**Level A (Critical - Must Pass)**:
+
+- Keyboard accessible (all interactive elements)
+- Text alternatives for non-text content
+- Audio/video alternatives
+- Adaptable content structure
+- Distinguishable content (color contrast)
+- No keyboard traps
+
+**Level AA (Target - Should Pass)**:
+
+- Color contrast ratio ≥ 4.5:1 for normal text
+- Color contrast ratio ≥ 3:1 for large text
+- Resize text up to 200%
+- Images of text avoided (unless essential)
+- Multiple ways to navigate
+- Focus visible
+
+**Level AAA (Optional - Nice to Have)**:
+
+- Enhanced color contrast (≥ 7:1)
+- No time limits
+- No interruptions
+
+### Step 3: Validate ARIA Implementation
+
+Check proper ARIA usage:
+
+**Roles**:
+
+- Landmark roles defined (main, navigation, complementary, etc.)
+- Widget roles correct (button, dialog, menu, etc.)
+- Document structure roles appropriate (heading, list, etc.)
+- No redundant roles on semantic HTML
+
+**States and Properties**:
+
+- `aria-label` or `aria-labelledby` on interactive elements without visible labels
+- `aria-expanded` on expandable elements
+- `aria-checked` on checkboxes/radio buttons
+- `aria-selected` on selectable items
+- `aria-hidden` used correctly (not on focusable elements)
+
+**Live Regions**:
+
+- `aria-live` for dynamic content
+- `aria-atomic`, `aria-relevant` set appropriately
+- Polite vs. assertive used correctly
+
+**Common ARIA Anti-Patterns**:
+
+- `role="button"` on `<button>` (redundant)
+- `aria-label` on non-interactive elements
+- `aria-hidden="true"` on focusable elements
+- Missing required ARIA attributes for roles
+
+### Step 4: Check Semantic HTML
+
+Verify proper HTML semantics:
+
+**Heading Hierarchy**:
+
+- Single `<h1>` per page
+- No skipped heading levels (h1 → h3)
+- Logical heading structure
+
+**Form Labels**:
+
+- All `<input>`, `<select>`, `<textarea>` have associated `<label>`
+- Labels properly linked via `for` attribute or wrapping
+
+**Images**:
+
+- All `<img>` have `alt` attribute
+- Decorative images have `alt=""` or `aria-hidden="true"`
+- Meaningful `alt` text (not "image" or file names)
+
+**Buttons vs. Links**:
+
+- `<button>` for actions
+- `<a>` for navigation
+- No `<div>` or `<span>` acting as buttons without proper roles
+
+**Lists**:
+
+- `<ul>`, `<ol>`, `<dl>` for lists, not `<div>`
+- List items properly nested
+
+### Step 5: Verify Keyboard Accessibility
+
+Check keyboard navigation:
+
+**Focus Management**:
+
+- All interactive elements focusable
+- Tab order logical
+- Focus indicators visible (outline or custom style)
+- No focus traps
+
+**Keyboard Shortcuts**:
+
+- Standard keys work (Tab, Shift+Tab, Enter, Space, Esc)
+- Custom shortcuts documented
+- No conflicts with screen reader shortcuts
+
+**Skip Links**:
+
+- "Skip to main content" link present
+- Skip links functional and visible on focus
+
+## Output Format
+
+```json
+{
+	"wcag_violations": {
+		"status": "fail",
+		"level_a_violations": 0,
+		"level_aa_violations": 3,
+		"level_aaa_violations": 2,
+		"violations": [
+			{
+				"level": "AA",
+				"rule": "color-contrast",
+				"wcag": "1.4.3 Contrast (Minimum)",
+				"severity": "serious",
+				"location": "src/components/Button.tsx:12",
+				"element": "<button class=\"btn-primary\">",
+				"description": "Text color #888 on background #fff has contrast ratio 2.85:1 (requires 4.5:1)",
+				"remediation": "Use darker text color #767676 or darker",
+				"impact": "Users with low vision cannot read button text",
+				"reference": "https://www.w3.org/WAI/WCAG21/Understanding/contrast-minimum.html"
+			}
+		],
+		"commands_run": ["pnpm exec @axe-core/cli http://localhost:3000 --tags wcag2a,wcag2aa"]
+	},
+	"aria_issues": {
+		"status": "warn",
+		"issues": [
+			{
+				"type": "missing_role",
+				"location": "src/components/Modal.tsx:45",
+				"element": "<div class=\"modal\">",
+				"issue": "Modal dialog missing role=\"dialog\"",
+				"remediation": "Add role=\"dialog\" and aria-labelledby to modal container",
+				"severity": "moderate"
+			},
+			{
+				"type": "redundant_role",
+				"location": "src/components/Button.tsx:23",
+				"element": "<button role=\"button\">",
+				"issue": "Redundant role on semantic button element",
+				"remediation": "Remove role=\"button\" from <button> element",
+				"severity": "minor"
+			}
+		]
+	},
+	"semantic_html_issues": {
+		"status": "warn",
+		"issues": [
+			{
+				"type": "heading_hierarchy",
+				"location": "src/pages/Dashboard.tsx:12",
+				"issue": "Heading structure jumps from h2 to h4, skipping h3",
+				"remediation": "Change h4 to h3 to maintain proper hierarchy",
+				"severity": "moderate"
+			},
+			{
+				"type": "missing_label",
+				"location": "src/components/SearchBar.tsx:8",
+				"element": "<input type=\"search\">",
+				"issue": "Input missing associated label",
+				"remediation": "Add <label for=\"search-input\"> or aria-label attribute",
+				"severity": "serious"
+			}
+		]
+	},
+	"keyboard_accessibility": {
+		"status": "pass",
+		"issues": []
+	},
+	"accessibility_score": {
+		"score": 87,
+		"max": 100,
+		"grade": "B",
+		"wcag_level_achieved": "A"
+	},
+	"summary": {
+		"total_issues": 8,
+		"critical": 0,
+		"serious": 2,
+		"moderate": 3,
+		"minor": 3,
+		"blocking": false,
+		"note": "Level A violations are blockers, Level AA are warnings"
+	}
+}
+```
+
+## Success Criteria
+
+- ✅ Automated accessibility audits executed
+- ✅ WCAG compliance checked (Levels A and AA)
+- ✅ ARIA implementation validated
+- ✅ Semantic HTML verified
+- ✅ Keyboard accessibility confirmed
+- ✅ All violations captured with remediation guidance
+- ✅ Commands documented for reproducibility
+
+## Rules
+
+**Blocking Issues (Fail Quality Gate)**:
+
+- WCAG Level A violations (critical accessibility barriers)
+- Keyboard traps (users cannot navigate)
+- Missing form labels (inaccessible forms)
+- Missing alt text on meaningful images
+
+**Warning Issues (Non-Blocking)**:
+
+- WCAG Level AA violations (if Level A is met)
+- WCAG Level AAA violations
+- Redundant ARIA roles
+- Minor semantic HTML issues
+
+**Conditional Execution**:
+
+- This validation only runs if `frontend_changes == true`
+- Skip for backend-only changes
+
+**Note**: WCAG Level A compliance is non-negotiable. Level AA violations should be addressed but may not block if Level A is fully met.