qaas-python 0.1.1__py3-none-any.whl → 0.2.1__py3-none-any.whl

qaas/cli.py

@@ -449,16 +449,14 @@ def doctor(
 
 
 def _agent_usable(spec, caps: dict[str, bool]) -> bool:
-    """Whether an agent can do useful work with the capabilities available.
+    """Delegates to `target.agent_usable`, which the conductor also uses.
 
-    SURFACE without a browser-reachable UI has nothing to do; the rest can all
-    contribute from static analysis alone, at lower confidence.
+    Two copies of this rule meant `qaas doctor` could report an agent unusable
+    while a run dispatched it anyway.
     """
-    if spec.name == "SURFACE":
-        return caps["live_ui"]
-    if spec.name == "PROOF":
-        return caps["live_api"] or caps["static_analysis"]
-    return True
+    from qaas.target import agent_usable
+
+    return agent_usable(spec.name, caps)
 
 
 @app.command()

qaas/conductor.py

@@ -25,6 +25,7 @@ from typing import Any, Callable
 
 from qaas.config import AgentSpec, SystemConfig, load_config
 from qaas.envelope import DefectEnvelope
+from qaas.target import agent_usable
 from qaas.mcp.context import ToolContext
 from qaas.runner import RunOutcome, run_agent
 from qaas.store import RunStore, SystemMapStore
@@ -269,21 +270,44 @@ class Conductor:
     async def _phase_discover(self, specs, store, budget, report, mode, map_version) -> None:
         """Discovery agents are independent. Run them concurrently, bounded."""
         discovery = [s for name, s in specs.items() if s.layer == "discovery"]
+
+        # Skip agents this target cannot support. `qaas doctor` has always
+        # reported these ("agents that cannot: SURFACE"), but nothing acted on
+        # it, so a run against a target with no reachable UI would still
+        # dispatch SURFACE and spend its entire budget hunting a browser that
+        # was never there. Being told an agent cannot work and then watching it
+        # run is worse than not being told.
+        profile = getattr(self.config, "profile", None)
+        if profile is not None:
+            caps = profile.capabilities()
+            unusable = [s for s in discovery if not agent_usable(s.name, caps)]
+            if unusable:
+                discovery = [s for s in discovery if s not in unusable]
+                store.log(
+                    "skipped",
+                    reason="target cannot support these agents",
+                    agents=[s.name for s in unusable],
+                )
+                for spec in unusable:
+                    self._emit("skipped", agent=spec.name, reason="target lacks the capability")
+
         if not discovery:
             return
 
+        # CONDUIT and SURFACE keep bespoke tasks because they name tools only
+        # they have. Everything else gets the generic discovery task, which is
+        # what makes "a new agent is a prompt plus a YAML" true: this used to be
+        # a closed dict, so a new discovery agent was skipped with `no task
+        # builder` -- it validated, it assembled, it showed up in `--dry-run`,
+        # and then it silently did nothing.
         builders = {
-            "CONDUIT": lambda: tasks.conduit(self.config, mode),
-            "SURFACE": lambda: tasks.surface(self.config, mode),
+            "CONDUIT": lambda spec: tasks.conduit(self.config, mode),
+            "SURFACE": lambda spec: tasks.surface(self.config, mode),
         }
         jobs = [
-            (spec, builders[spec.name]())
+            (spec, builders.get(spec.name, lambda sp: tasks.discovery(self.config, mode, sp))(spec))
             for spec in discovery
-            if spec.name in builders
         ]
-        unknown = [s.name for s in discovery if s.name not in builders]
-        if unknown:
-            store.log("skipped", reason="no task builder", agents=unknown)
 
         await self._gather(jobs, store, budget, report, map_version, self.config.run_modes[mode].max_concurrency)
 

qaas/defaults/config/agents/vault.yaml

@@ -0,0 +1,21 @@
+name: VAULT
+layer: discovery
+role: >
+  Database and data-integrity analyst. Finds schema constraints the application
+  assumes but the database does not enforce, migrations that lose or corrupt
+  data, missing indexes on paths the code queries, and cross-tenant reads that
+  the ORM makes easy to write. Reports what the schema actually says, never what
+  the model layer claims.
+prompt: VAULT.md
+model: claude-opus-5
+effort: high
+max_turns: 60
+max_budget_usd: 3.0
+mcp_servers: [envelope, env_control, defect_memory]
+builtin_tools: [Read, Grep, Glob]
+policy: {}
+
+skills: [authz-matrix-check, environment-pinning, severity-rubric, repro-minimisation]
+
+# No must_call: finding nothing is a valid outcome for a discovery agent, and
+# requiring an emission would manufacture findings to satisfy it.

qaas/defaults/config/agents/warden.yaml

@@ -0,0 +1,23 @@
+name: WARDEN
+layer: discovery
+role: >
+  Security and dependency auditor. Finds missing authorization, secrets committed
+  to the repository, dependencies with known advisories, and error paths that
+  leak internals to a caller. Reports a concrete exploit path or lowers its
+  confidence -- a security finding without one is a guess wearing a severity.
+prompt: WARDEN.md
+model: claude-opus-5
+effort: high
+max_turns: 60
+# Measured: WARDEN exhausted $3.00 on its first real run against the demo app
+# and was killed mid-audit. Building the endpoint-by-role matrix and actually
+# impersonating each role costs more than reading a spec does.
+max_budget_usd: 5.0
+mcp_servers: [envelope, env_control, defect_memory]
+builtin_tools: [Read, Grep, Glob]
+policy: {}
+
+skills: [authz-matrix-check, error-taxonomy, severity-rubric, routing-rules, repro-minimisation]
+
+# No must_call: see VAULT. Also: an auditor that must report something will
+# report something, and security noise is the fastest way to be ignored.

qaas/defaults/config/system.yaml

@@ -33,11 +33,11 @@ run_modes:
 
   nightly:
     trigger: cron
-    agents: [CARTOGRAPHER, CONDUIT, SURFACE, FORGE, CLERK]
+    agents: [CARTOGRAPHER, CONDUIT, SURFACE, VAULT, WARDEN, FORGE, CLERK]
     # FORGE runs once per finding, so the deep sweep's budget scales with how
     # much discovery found, not with the number of agents. Measured: discovery
     # ~$6, then roughly $1-2 per finding reproduced.
-    max_budget_usd: 40.0
+    max_budget_usd: 50.0
     max_wall_clock_s: 7200
     max_concurrency: 3
 
@@ -63,7 +63,7 @@ run_modes:
   # expensive mode in the system and the only one that closes the loop.
   full-loop:
     trigger: on_demand
-    agents: [CARTOGRAPHER, CONDUIT, SURFACE, FORGE, CLERK, MENDER, ARBITER, PROOF]
-    max_budget_usd: 60.0
+    agents: [CARTOGRAPHER, CONDUIT, SURFACE, VAULT, WARDEN, FORGE, CLERK, MENDER, ARBITER, PROOF]
+    max_budget_usd: 70.0
     max_wall_clock_s: 10800
     max_concurrency: 3

qaas/prompts/VAULT.md

@@ -0,0 +1,59 @@
+You are VAULT, the database and data-integrity analyst.
+
+## Your domain
+
+The schema, and the distance between what it enforces and what the application
+assumes. Application code is full of invariants nobody wrote down; your job is to
+find the ones the database will not hold up.
+
+Detect:
+
+- **Constraints the code assumes and the schema does not enforce** — a field the
+  application treats as required with no `NOT NULL`, a relationship it treats as
+  unique with no unique index, an enum validated only in the model layer.
+- **Missing foreign keys**, or ones declared without a delete rule, so a parent
+  row can leave orphans behind.
+- **Cross-tenant reads** — a query filtered by id but not by the owning
+  organisation, on a table that has an owner column. The ORM makes this easy to
+  write and hard to see.
+- **Migrations that lose or corrupt data** — a column dropped and re-added, a type
+  narrowed without a backfill, a `NOT NULL` added without a default over existing
+  rows.
+- **Indexes the query patterns need and the schema lacks** — a column filtered or
+  joined on in application code with no index behind it. Say which query, not
+  just which column.
+- **Seed and fixture drift** — fixtures that no longer satisfy the constraints the
+  migrations now declare.
+
+## How you work
+
+1. Read the system map for the schema snapshot and the route inventory. Do not
+   rediscover them.
+2. Read the migrations in order. The current schema is the sum of them, and a
+   defect is often visible only in the sequence — a constraint added, then
+   dropped two migrations later to make a deploy pass.
+3. Read the model and query layer and compare its assumptions against what the
+   schema actually declares. The gap between the two is your finding.
+4. Where an environment is available, confirm the behaviour rather than inferring
+   it: insert the row the code believes is impossible, and see whether the
+   database refuses it.
+5. Pin the environment for anything you reproduce, so it runs the same way later.
+
+## What counts as evidence
+
+The schema text, the migration, and the query. A finding that says "this column
+should be indexed" without naming the query that scans it is an opinion. A
+finding that says "this insert succeeds and the model layer says it cannot" with
+the statement and the response is a defect.
+
+Where you could not observe the behaviour — no reachable database, no fixture
+that reaches the path — say so plainly and lower your confidence. An honest
+`unattempted` reproduction is worth more than a confident guess, because the next
+agent will treat your confidence as real.
+
+## What is not yours
+
+The HTTP surface is CONDUIT's, the UI is SURFACE's, and dependency advisories are
+WARDEN's. A cross-tenant read is yours when the defect is in the query, and
+CONDUIT's when the defect is in the missing authorization check. If both are true,
+report the one you can evidence.

qaas/prompts/WARDEN.md

@@ -0,0 +1,62 @@
+You are WARDEN, the security and dependency auditor.
+
+## Your domain
+
+The things that let someone do what they should not be able to do. You are the
+agent whose findings carry the most weight and therefore cost the most when they
+are wrong.
+
+Detect:
+
+- **Missing or wrong authorization** — an endpoint that mutates or reads data
+  without checking the caller's role, or that checks authentication and calls it
+  authorization. The presence of an auth dependency is not evidence that access
+  is checked.
+- **Cross-tenant access** — one organisation's data reachable by another's user.
+- **Secrets in the repository** — keys, tokens, passwords and connection strings
+  in source, fixtures, CI config or committed environment files.
+- **Dependencies with known advisories**, and dependencies pinned to a version
+  behind a security release.
+- **Internal detail leaking to a caller** — stack traces, SQL, file paths, library
+  versions in an error response.
+- **Mass assignment** — a handler that accepts fields the client should not
+  control, such as a role, a price, or a status.
+- **Weak or absent rate limiting** on authentication and password-reset paths.
+
+## How you work
+
+1. Read the system map for the route inventory and the role matrix. Do not
+   rediscover them.
+2. Build the endpoint-by-role matrix and look for the holes, rather than reading
+   handlers in file order and hoping to notice.
+3. Where an environment is available, **demonstrate the access** — impersonate the
+   lower-privilege role and make the call. A refusal you predicted and a refusal
+   you observed are different findings.
+4. For dependencies, name the advisory and the version that fixes it.
+
+## The bar for a security finding
+
+**A concrete exploit path, or lower your confidence.** Say which role, which
+endpoint, which field, and what they get. "This endpoint may be missing an
+authorization check" is a note to yourself; "a viewer can POST
+/v1/orders/3/refund and it succeeds" is a finding.
+
+This matters more here than anywhere else in the system. A security finding is
+routed to a restricted project, wakes people up, and is read as urgent. A false
+one spends that credibility, and the next real finding is read more slowly. If
+you cannot evidence it, report it with the confidence it actually deserves and
+say what you could not test.
+
+## Routing
+
+Security findings are routed to a restricted project, and the tracker will
+**refuse** to file one if no restricted project is configured rather than filing
+it somewhere the whole company can read. That refusal is correct; do not work
+around it by relabelling the finding as something else.
+
+## What is not yours
+
+Spec drift and error-shape inconsistency are CONDUIT's unless the leak has a
+security consequence. Schema constraints are VAULT's. A missing index is nobody's
+security problem. When a finding is genuinely both, report the security
+consequence and say which other surface it also touches.

qaas/target.py

@@ -259,3 +259,21 @@ def load_target(name: str, targets_dir: Path | str = "config/targets") -> Target
 # directory is the bug that hid `<project>/config/targets/` the moment anything
 # wrote into `.qaas/config/targets/`; profiles layer across every config
 # directory, and `config.target_files(dirs)` is the one place that knows it.
+
+
+def agent_usable(agent_name: str, caps: dict[str, bool]) -> bool:
+    """Whether an agent can do useful work with the capabilities available.
+
+    Lives here, beside `capabilities()`, because it has two callers that must
+    agree: `qaas doctor` reports it, and the conductor acts on it. They did not
+    agree for a while -- doctor would say "agents that cannot: SURFACE" and then
+    a run would dispatch SURFACE anyway and spend its whole budget looking for a
+    browser that was never there. Being told an agent cannot work and then
+    watching it run is worse than not being told.
+
+    Everything except SURFACE can contribute from static analysis alone, at
+    lower confidence. SURFACE without a reachable UI has nothing to do at all.
+    """
+    if agent_name == "SURFACE":
+        return caps.get("live_ui", False)
+    return True

qaas/tasks.py

@@ -11,7 +11,7 @@ one repository's directory layout or one app's seeded users works exactly once.
 
 from __future__ import annotations
 
-from qaas.config import SystemConfig
+from qaas.config import AgentSpec, SystemConfig
 from qaas.envelope import DefectEnvelope
 from qaas.target import TargetProfile
 
@@ -218,6 +218,49 @@ fails, misleads, blocks or excludes someone. Do not report what you would have
 designed differently."""
 
 
+def discovery(config: SystemConfig, mode: str, spec: "AgentSpec") -> str:
+    """The task for a discovery agent with no hand-written builder.
+
+    The architecture's claim is that adding an agent needs a prompt file and a
+    YAML file and no Python. That was not true: `_phase_discover` dispatched
+    from a hardcoded dict of builders, so a new discovery agent was silently
+    skipped with `no task builder` -- it validated, it assembled, it appeared in
+    `--dry-run`, and then it did nothing. VAULT and WARDEN were added exactly
+    that way and this is the bug they found.
+
+    What an agent should be told is: which application, what it can reach, and
+    what its own prompt says its domain is. Everything specific to a domain
+    belongs in that agent's prompt, not here -- CONDUIT and SURFACE keep their
+    bespoke builders because they name tools (`diff_openapi`, the browser) that
+    only they have.
+    """
+    p = _profile(config)
+    reach = (
+        "The application is reachable, so prove what you report: observe the "
+        "behaviour and capture the evidence. A finding you have not observed is a "
+        "hypothesis, and its confidence should say so."
+        if p.environment.is_reachable
+        else "There is no reachable instance, so every finding is a reading of the "
+        "code. Quote the lines that support it and keep your confidence honest "
+        "about not having observed the behaviour."
+    )
+    return f"""Audit {p.name} for defects in your domain.
+
+Layout — {p.layout.described()}
+
+Your own instructions define what your domain is and what counts as evidence in
+it. Work within it and leave the other surfaces to the agents that own them.
+
+{reach}
+
+Emit one envelope per distinct defect with `emit_envelope`. Finding nothing is a
+valid outcome; inventing something to report is not. Deduplicate against
+`search_similar` before you emit, so a defect this system already knows about
+comes back as an occurrence rather than a new finding.
+
+Mode: {mode}."""
+
+
 def forge(envelope: DefectEnvelope, config: SystemConfig, flake_runs: int) -> str:
     p = _profile(config)
     evidence = "\n".join(f"  - {e.type.value}: {e.uri} {e.note}".rstrip() for e in envelope.evidence)

{qaas_python-0.1.1.dist-info → qaas_python-0.2.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: qaas-python
-Version: 0.1.1
+Version: 0.2.1
 Summary: A multi-agent QA system: finds real defects, reproduces them, files tickets, fixes them, and proves the fix
 Project-URL: Homepage, https://github.com/allaabdella2-us/qa-multi-agent-system
 Project-URL: Repository, https://github.com/allaabdella2-us/qa-multi-agent-system
@@ -22,7 +22,7 @@ Requires-Dist: claude-agent-sdk>=0.2.127
 Requires-Dist: pydantic>=2.9
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: rich>=13.9
-Requires-Dist: typer>=0.15
+Requires-Dist: typer>=0.16
 Provides-Extra: dev
 Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
 Requires-Dist: pytest>=8.3; extra == 'dev'
@@ -51,7 +51,7 @@ Description-Content-Type: text/markdown
 
 Most "AI QA" tools generate tests. **This one behaves like a QA team.**
 
-Eight agents, each with its own context, tool allowlist and budget, coordinated by
+Ten agents, each with its own context, tool allowlist and budget, coordinated by
 a state machine that is ordinary Python — because a model cannot enforce a budget
 it is itself spending.
 
@@ -245,20 +245,20 @@ Every tool call, denial, verdict and escalation is on the record.
 
 ```console
 $ qaas trace run-20260908T182034-c6ed26
-    t+  agent         kind            detail                                    cost
-    0s  -             run_started     mode=nightly  agents=[5]  budget_usd=40
+    t+  agent         kind            detail
+    0s  -             run_started     mode=nightly  agents=[7]
     0s  CARTOGRAPHER  agent_started   model=claude-sonnet-5
     4s  CARTOGRAPHER  tool_call ×34   Read×25, Glob×6, ToolSearch×2
     6s  CARTOGRAPHER  denial          tool=Bash  reason=Bash is not in CARTOGRAPHER's
                                       tool allowlist (Read, Grep, Glob).
   146s  CARTOGRAPHER  system_map      version=20260907T233530  sections=[12]
-  156s  CARTOGRAPHER  agent_finished  subtype=success  num_turns=45            $0.60
+  156s  CARTOGRAPHER  agent_finished  subtype=success  num_turns=45
 ```
 
 ```bash
 qaas trace <run-id> --agent proof --kind verdict   # filter
 qaas trace <run-id> --json                         # export
-qaas show <run-id>                                 # mode, commit, cost, tickets, escalations
+qaas show <run-id>                                 # mode, commit, tickets, escalations
 qaas runs                                          # everything that ever ran
 ```
 
@@ -296,7 +296,6 @@ Two runs against the demo app, scored automatically:
 | 🎯 recall | **81%** — 13 of 16 | **69%** — 11 of 16 |
 | 🔇 precision | **100%** — 0 FP | **92%** — 1 FP |
 | 🏷️ severity agreement | **100%** | **100%** |
-| 💵 cost per accepted finding | $1.12 | $0.64 |
 
 **Both numbers are shown on purpose.** A single figure would be the flattering
 one, and it would not survive contact with a second run. These are stochastic
@@ -319,7 +318,8 @@ precision is measured rather than assumed.
 
 Honest about what exists:
 
-- ✅ **8 of the 16 agents** in the design are built — CARTOGRAPHER, CONDUIT, SURFACE, FORGE, CLERK, MENDER, ARBITER, PROOF. CONDUCTOR is the Python state machine rather than an agent. **Seven Phase-2 agents are designed, not written.**
+- ✅ **10 of the 16 agents** in the design are built — CARTOGRAPHER, CONDUIT, SURFACE, VAULT, WARDEN, FORGE, CLERK, MENDER, ARBITER, PROOF. CONDUCTOR is the Python state machine rather than an agent. The five that remain (KEYSTONE, PULSE, USHER, GAUGE, CHRONICLE) are additional discovery specialists, not missing parts of the loop.
+- ✅ **Adding an agent needs a prompt file and a YAML file — no Python.** VAULT and WARDEN were added exactly that way, which is how the claim finally got tested.
 - ✅ The fix loop has closed end to end on a real defect: `NOT_FIXED → MENDER → ARBITER APPROVE → VERIFIED`.
 - ✅ 30 skills, 7 in-process MCP servers, 649 offline tests.
 - ⚠️ Running the bundled demo needs `export CORVID_PASSWORD=password123` — credentials come from the environment, including the demo's.

{qaas_python-0.1.1.dist-info → qaas_python-0.2.1.dist-info}/RECORD

@@ -1,5 +1,5 @@
-qaas/cli.py,sha256=L12m7SGyCYNcraUXzu0bCp9A1UtiSF0L6CLzS7xVnVc,65477
-qaas/conductor.py,sha256=Tz0sfw-t4ytglu52FBMxRtq9E_VNpe9kYNWOnp7BYxA,22773
+qaas/cli.py,sha256=X8CZfVzVWxRpk3No1i-Ev0vD_Sle8Zba-b_uY9jv8c8,65366
+qaas/conductor.py,sha256=woPR7tGiGWTWIqikn69ucMP_C5Bjo4NGwBK6RUpE9fI,24181
 qaas/config.py,sha256=ZzgK0KUy7MR31w0o7fe1D2tYl--jkZCN_VaWR2kK1Xs,17528
 qaas/discover.py,sha256=L5ejBsYs_s41OWAL-Dhc8VlQ5EWw2hGayWTDzfj05R8,8524
 qaas/envelope.py,sha256=IiqyOy96CHZw2A0pSDWBNIg6yQ2MzfcwkpQWmgMNvzY,9095
@@ -10,13 +10,13 @@ qaas/runner.py,sha256=ED0arzgx0_Y6R_mcG6OXqzh3GeSOpqVUNa4NJ0QcRk8,7417
 qaas/scorecard.py,sha256=aUU7g5OtXIW4752A4NxpIZH-OdC8bpNtzJUvCi41JYg,15809
 qaas/sdk_compat.py,sha256=ftE6PK0jZY85zkYqS7UJTGYwRkYDlH4NspiKbKVfVXQ,1678
 qaas/store.py,sha256=aDJmeCog17zo_Dw2Pw_JHTcWnDQlDW3QKzNnUttVvg8,11038
-qaas/target.py,sha256=-wgFDOPm8tCYzideEJV4hdVb1aakLqAM-KJT4Egfgzw,10378
-qaas/tasks.py,sha256=s17e8ykqG61Uthq_pHKYK7BPIY2qzkdFH1aAdVAgCSo,15125
+qaas/target.py,sha256=j0G7EGlI6FtdzM5vTvLOjhTIsX2qDU8kFiNrSrq83Gs,11222
+qaas/tasks.py,sha256=vQh3leld5OE6zK3gfxZxbCM5ZixOQOzheJ_8ZomgHgE,17146
 qaas/trace.py,sha256=V-uFqh1iCYRqgWL3VzDbRdHgAkwLsr1uRFfwwycWZ94,11461
 qaas/adapters/__init__.py,sha256=bw2pqtDqhZGP730gwV28BJ-8TF-rhanwCEjdIizjP6A,882
 qaas/adapters/tracker.py,sha256=K1U7weiA_K2MM58yji3WQn3PEATVqDD9_qcRbrcZwik,54348
 qaas/adapters/vcs.py,sha256=9su-4QLLxR6yTyLZWCJAky9BROJci80M5jV6nGo6pjg,19430
-qaas/defaults/config/system.yaml,sha256=UOKIZ5GHxtUTJEoIDNQR8tcH_0zJ4jeYlzbNYu44LZU,2807
+qaas/defaults/config/system.yaml,sha256=io7NRqtiU9HLvV5dUkQn7YUNxCCzi5TOdnnQUOK5bc0,2837
 qaas/defaults/config/agents/arbiter.yaml,sha256=HuPv4E9-p2LW3-bzt3ard9QTJSw98HZYKf-ae6Skd1o,739
 qaas/defaults/config/agents/cartographer.yaml,sha256=9FWySvbwD1bHuMm8CkyaJhmrtgIJrRuRGrli_ZZa_pw,772
 qaas/defaults/config/agents/clerk.yaml,sha256=VgjdqROYr7khipxmou-Ol3Bv-FWj5CZENspUQDA1UB4,768
@@ -25,6 +25,8 @@ qaas/defaults/config/agents/forge.yaml,sha256=WGwkueX0HvaKep-5m2bWR7v6Hx29bs-nuo
 qaas/defaults/config/agents/mender.yaml,sha256=-HoSJtm5GQSlozgr0O5BOvyibJanYSuJuUYhSs7MRQE,2182
 qaas/defaults/config/agents/proof.yaml,sha256=JbXl2yKUHRv7q-A6MEcz88E3gJn78vNxw6fdmsDbXus,853
 qaas/defaults/config/agents/surface.yaml,sha256=IqmWhQQYArEsNiiRKyw2uTue04CfYreHF9yxJ6z7p_Y,532
+qaas/defaults/config/agents/vault.yaml,sha256=Ib8gqKxW7LGSlxQ4UGWSZgJB7t78FYPQrphxKrgef1g,795
+qaas/defaults/config/agents/warden.yaml,sha256=iu3FHRRxsRraN68PtlfrlUqbBu4x9OIjc4F0XAjQsYQ,1002
 qaas/mcp/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 qaas/mcp/context.py,sha256=Z45wQuP0nIZOmM5GTfxs6KHxFckLQ61H4zbsVqiVqr8,2551
 qaas/mcp/contract_diff.py,sha256=efuma0WQSnxHC0NE7adF_8ctCZoovdB4k080QdiEJK8,43942
@@ -73,9 +75,11 @@ qaas/prompts/FORGE.md,sha256=7KvnMrzS1UtucIoE8IbWtAd6BC9J-0YO-e2fSdyptds,2269
 qaas/prompts/MENDER.md,sha256=eot0WsyilfpWkJ9OsEmzeimikHXVSzd3jFKdslSn5GI,2921
 qaas/prompts/PROOF.md,sha256=xJ5pi4O0N1AFq_xZwAeUawJrP6kknRhnkfpDLqgyo2Q,2026
 qaas/prompts/SURFACE.md,sha256=cZ9df27bXXRh39yEkwByyxvHskpcNmh6HvC9C3Jt83Y,2220
+qaas/prompts/VAULT.md,sha256=Ansowimx-wMbinQkn9_gGgZFmvmMFMc9v_N8s2Ahws4,2915
+qaas/prompts/WARDEN.md,sha256=39KsbwWRwe7mtjYEik1owBIDgu4qyD52UHG_T_7gTMw,2950
 qaas/prompts/_shared.md,sha256=lN_s_rAmakhGuyRuWItC--iyy-Er6ohT_dzGeE_g-fo,2620
-qaas_python-0.1.1.dist-info/METADATA,sha256=2GBnUPXesAFGYlBN8dhCfYscf6EN4_-BKLM9D3eaHqY,15396
-qaas_python-0.1.1.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
-qaas_python-0.1.1.dist-info/entry_points.txt,sha256=6UScfruyhP9N_xGx3tXJGkaoAiB36dkINuKyOH6OkK4,38
-qaas_python-0.1.1.dist-info/licenses/LICENSE,sha256=pHWke5oMtv7PLjIQbN6hRa31J0AKj51VCd5TCTUbbX0,1069
-qaas_python-0.1.1.dist-info/RECORD,,
+qaas_python-0.2.1.dist-info/METADATA,sha256=c2_LshHPkPyckSLCZGx4aN0AMGqDxIj1L7p7xvTAm5Y,15528
+qaas_python-0.2.1.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
+qaas_python-0.2.1.dist-info/entry_points.txt,sha256=6UScfruyhP9N_xGx3tXJGkaoAiB36dkINuKyOH6OkK4,38
+qaas_python-0.2.1.dist-info/licenses/LICENSE,sha256=pHWke5oMtv7PLjIQbN6hRa31J0AKj51VCd5TCTUbbX0,1069
+qaas_python-0.2.1.dist-info/RECORD,,