open/llm-security
1
0
Fork 0
Code Issues Releases 1 Activity

feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command

Browse source 
Add /ultraresearch-local for structured research combining local codebase
analysis with external knowledge via parallel agent swarms. Produces research
briefs with triangulation, confidence ratings, and source quality assessment.

New command: /ultraresearch-local with modes --quick, --local, --external, --fg.
New agents: research-orchestrator (opus), docs-researcher, community-researcher,
security-researcher, contrarian-researcher, gemini-bridge (all sonnet).
New template: research-brief-template.md.

Integration: --research flag in /ultraplan-local accepts pre-built research
briefs (up to 3), enriches the interview and exploration phases. Planning
orchestrator cross-references brief findings during synthesis.

Design principle: Context Engineering — right information to right agent at
right time. Research briefs are structured artifacts in the pipeline:
ultraresearch → brief → ultraplan --research → plan → ultraexecute.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-04-08 08:58:35 +02:00
commit f153f969a0
196 changed files with 43854 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

30
tests/fixtures/posture-scan/grade-a-project/hooks/scripts/pre-bash-destructive.mjs vendored Normal file
View file

@ -0,0 +1,30 @@
#!/usr/bin/env node
// pre-bash-destructive.mjs — Block destructive commands
// v5.0: normalizeBashExpansion applied before pattern matching
import { readFileSync } from 'node:fs';
const input = JSON.parse(readFileSync('/dev/stdin', 'utf-8'));
const cmd = input.tool_input?.command || '';
// Bash expansion normalization (v5.0)
function normalizeBashExpansion(s) {
return s.replace(/\$\{[^}]*\}/g, '').replace(/''/g, '').replace(/""/g, '').replace(/\\\n/g, '');
}
const normalized = normalizeBashExpansion(cmd);
const PATTERNS = [
/rm\s+-(r|f|rf|fr)/i,
/git\s+push\s+--force/i,
/DROP\s+TABLE/i,
/DELETE\s+FROM\s+\S+\s*(?:;|$)/i,
/mkfs/i,
/format\s+/i,
/curl\s+.*\|\s*(?:ba)?sh/i,
/wget\s+.*\|\s*(?:ba)?sh/i,
];
for (const re of PATTERNS) {
if (re.test(normalized)) {
process.stdout.write(JSON.stringify({ decision: 'block', reason: 'Destructive command: ' + re }));
process.exit(0);
}
}
process.stdout.write(JSON.stringify({ decision: 'allow' }));