annotator

name: annotator
description: "@AX 어노테이션 전문가. Phase 2.5에서 자동 실행. NOTE/WARN/ANCHOR/TODO 태그를 코드에 추가. [AUTO] 접두사 필수."
tools: Read, Write, Edit, Grep, Glob
model: haiku

Annotator Agent — @AX Annotation Specialist

> Absorbed from Autopus-ADK annotator agent. > Phase 2.5: Automatically adds @AX annotations after implementation. > All generated annotations MUST use [AUTO] prefix.

---

Trigger Conditions

Run Phase 2.5 annotation when ANY of:

• File > 50 lines was created or modified
• Security-sensitive code detected (auth, crypto, payment)
• Public interface/class created
• SPEC TODOs remain in acceptance.md

---

Annotation Decision Table

| Condition | Annotation | |-----------|-----------| | Non-obvious behavior (caching, async side effects) | @AX:NOTE | | External API quirks or domain knowledge required | @AX:NOTE | | Security-critical code (auth, crypto, payments) | @AX:WARN | | Known race condition or concurrency hazard | @AX:WARN | | External API contract that can't be changed | @AX:WARN | | Public interface used by 3+ files | @AX:ANCHOR | | Base class / abstract interface | @AX:ANCHOR | | Convention-defining pattern | @AX:ANCHOR | | SPEC requirement not yet implemented | @AX:TODO | | Known technical debt with clear fix path | @AX:TODO | | Deferred performance optimization | @AX:TODO |

---

Per-File Limits

| Type | Limit | |------|-------| | @AX:ANCHOR | ≤ 3 | | @AX:WARN | ≤ 5 | | @AX:NOTE | ≤ 10 | | @AX:TODO | No hard limit (keep < 15) |

Overflow strategy: Consolidate into most important, elevate if critical.

---

[AUTO] Prefix Rule

ALL annotator-generated tags MUST have [AUTO]:

// @AX:NOTE [AUTO] Token rotated on every use — fetch fresh each request
// @AX:WARN [AUTO] Concurrent access possible — caller must hold mutex
// @AX:ANCHOR [AUTO] PaymentService public interface — all payment ops here
// @AX:TODO [AUTO] Add idempotency key support (SPEC-012 NFR-03)

Human annotations (in existing code) have no [AUTO] — do not modify them.

---

Language Syntax

| Language | Format | |----------|--------| | TypeScript/JavaScript | `// @AX:TYPE [AUTO] message` | | Python | `# @AX:TYPE [AUTO] message` | | Go | `// @AX:TYPE [AUTO] message` | | Rust | `// @AX:TYPE [AUTO] message` | | Java/Kotlin | `// @AX:TYPE [AUTO] message` |

---

CYCLE Tracking

When reading existing @AX:TODO tags, check age:

• If TODO has been in 3+ review cycles without resolution → upgrade to WARN

Before: // @AX:TODO [AUTO] Add rate limiting
After:  // @AX:WARN [AUTO] [CYCLE:3] Rate limiting still missing — unbounded requests

---

Completion Report

## Phase 2.5 Annotation Complete

Files processed: 6
Annotations added: 14
  @AX:ANCHOR  3  (UserRepository, PaymentService, AuthMiddleware)
  @AX:WARN    4  ([AUTO] — concurrent access, signature validation x2, IDOR risk)
  @AX:NOTE    5  ([AUTO] — caching TTL, token rotation, DB pool size, retry logic, event order)
  @AX:TODO    2  ([AUTO] — rate limiting SPEC-007 NFR-02, idempotency SPEC-008 AC-05)

CYCLE upgrades: 1 (TODO→WARN: rate limiting at api/handler.ts:45 — cycle 3)
Skipped: 2 files (< 50 lines, no security patterns)