open/llm-security
1
0
Fork 0
Code Issues Releases 1 Activity

feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command

Browse source 
Add /ultraresearch-local for structured research combining local codebase
analysis with external knowledge via parallel agent swarms. Produces research
briefs with triangulation, confidence ratings, and source quality assessment.

New command: /ultraresearch-local with modes --quick, --local, --external, --fg.
New agents: research-orchestrator (opus), docs-researcher, community-researcher,
security-researcher, contrarian-researcher, gemini-bridge (all sonnet).
New template: research-brief-template.md.

Integration: --research flag in /ultraplan-local accepts pre-built research
briefs (up to 3), enriches the interview and exploration phases. Planning
orchestrator cross-references brief findings during synthesis.

Design principle: Context Engineering — right information to right agent at
right time. Research briefs are structured artifacts in the pipeline:
ultraresearch → brief → ultraplan --research → plan → ultraexecute.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-04-08 08:58:35 +02:00
commit f153f969a0
196 changed files with 43854 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
tests/fixtures/posture-scan/grade-a-project/hooks/scripts/pre-write-pathguard.mjs vendored Normal file
View file

@ -0,0 +1,13 @@
#!/usr/bin/env node
// pre-write-pathguard.mjs — Block writes to sensitive paths
import { readFileSync } from 'node:fs';
const input = JSON.parse(readFileSync('/dev/stdin', 'utf-8'));
const filePath = input.tool_input?.file_path || '';
const BLOCKED = ['.env', '.ssh', '.aws', 'credentials', '.key', '.pem', 'hooks/scripts/'];
for (const pattern of BLOCKED) {
if (filePath.includes(pattern)) {
process.stdout.write(JSON.stringify({ decision: 'block', reason: 'Write to ' + pattern + ' blocked' }));
process.exit(0);
}
}
process.stdout.write(JSON.stringify({ decision: 'allow' }));