使用动态工作流大规模编排子代理

/workflows

ultracode: audit every API endpoint under src/routes/ for missing auth checks

/effort ultracode

> Run /triage-issues on issues 1024, 1025, and 1030

> use a workflow to audit every route handler under src/routes/ for missing authentication checks, and adversarially verify each finding before reporting it

> use a workflow to run npx tsc --noEmit and keep fixing the reported errors until the type check passes or two rounds in a row make no progress

> use a workflow to migrate every component under src/components/ from styled-components to Tailwind, working on each file in its own isolated copy

> use a workflow to review every file changed in this PR for correctness issues, then merge the per-file findings into one ranked summary

> use a workflow to research how our three competitors handle rate limiting: read their public docs and recent changelog entries in parallel, then compare the approaches

> use a workflow to find flaky tests in this repo: run the suite repeatedly, record which tests fail intermittently, and stop once two rounds in a row find nothing new

export const meta = {
  name: 'audit-routes',
  description: 'Audit every route handler for missing auth checks',
}

const found = await agent('List every .ts file under src/routes/.', {
  schema: { type: 'object', required: ['files'], properties: { files: { type: 'array', items: { type: 'string' } } } },
})

const audits = await pipeline(found.files, file =>
  agent(`Audit ${file} for missing authentication checks.`, { label: file }),
)

return audits.filter(Boolean)