“EN-02-Threat-Hunting-Defense”

God Class / Spaghetti Decomposer

Takes one oversized class/file and produces a concrete extraction plan + first extraction fully coded with tests.

Performance Profiling & Optimization Coach

Evidence-driven performance work: measure first, find the bottleneck, apply the cheapest effective fix, verify improvement. Works for CPU/memory/IO.

Memory Leak / Resource Leak Hunter

Diagnoses leaks (heap growth, fds, connections) methodically with tool-specific steps for the runtime.

Concurrency Bug / Race Condition Investigator

Finds and fixes race conditions, deadlocks, and ordering bugs by constructing interleavings, with deterministic tests.

Dependency Upgrade / Breaking-Change Migrator

Safely upgrades libraries/frameworks across major versions with a diff of breaking changes, codemods, and verification.

Dead Code / Architecture Decay Analyst

Finds genuinely unused code and accidental coupling using evidence, avoiding deletion of reflection/DI/routed entry points.

Exception/Error-Handling Reviewer

Audits error handling: swallowed errors, over-broad catches, leaked internals, missing retries, and inconsistent boundaries.

Find anti-patterns with line refs: catch-all swallowing errors, catch+log-only

Design the error boundary: domain exceptions mapped to transport codes,

Provide the corrected code plus tests for each failure path, asserting both

Logging, Metrics & Observability Designer

Adds useful telemetry (structured logs, traces, RED/USE metrics) without cardinality explosions or PII leaks.

Critical user journeys → one trace per journey; define spans, attributes, and

Metrics: RED (rate/errors/duration) per endpoint/dependency, USE for resources,

Logs: structured (JSON) schema with ts/level/trace_id/span_id/user_hash/

Alerts: SLO-based burn-rate alerts (multi-window), symptoms over causes,

Code instrumentation examples and tests asserting trace attributes and

Type Safety / Strict-Mode Enforcer

Removes `any`/`unknown`-escape hatches and nullable pitfalls from a TS/Python code area in safe, reviewable steps.

Inventory unsafety: any/as casts, non-null assertions, @ts-ignore, untyped

Rank by risk (external boundary types first). For each: model the real shape

For JSON/API responses, generate types from the OpenAPI/JSON schema instead of