codeflow-hook 1.1.0 β†’ 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,14 +1,116 @@
1
- # Codeflow Hook - AI-Powered Git Hooks
1
+ # Codeflow Commander β€” Nexus Gateway CLI
2
2
 
3
- An interactive CI/CD simulator and lightweight pre-push code reviewer that uses Google Gemini AI to analyze your code changes before commits and pushes.
3
+ **The Command-Line Interface for the Autonomous Engineering Platform**
4
4
 
5
- ## πŸš€ Features
5
+ Your gateway to the Codeflow Commander Nexus Gateway β€” a comprehensive AI-driven engineering ecosystem that spans the entire software development lifecycle. This CLI tool serves as the entry point to enterprise-wide autonomous engineering capabilities, from intelligent code analysis to organization-scale workflow automation.
6
6
 
7
- - **AI Code Review**: Get intelligent code analysis powered by Gemini AI
8
- - **Automated Git Hooks**: Automatic pre-commit and pre-push checks
9
- - **CI/CD Simulation**: Simulates full pipeline including tests and security checks
10
- - **Easy Installation**: Simple CLI setup for any project
11
- - **Developer-Friendly**: Clear feedback with actionable suggestions
7
+ This is the universal command-line client for interacting with the **Phase 4 Autonomous Engineering Platform**, featuring next-generation components including the Enterprise Knowledge Graph (EKG), Autonomous Agent Network (AAN), Multi-Modal Interface Layer (MMIL), and Predictive Intelligence Engine (PIE).
8
+
9
+ ## πŸš€ Key Capabilities
10
+
11
+ ### **Enterprise Knowledge Graph (EKG)**
12
+ - **Cross-Repository Intelligence**: Unified knowledge across all organizational repositories
13
+ - **Semantic Dependency Mapping**: Understand organizational code relationships and patterns
14
+ - **Expert Discovery**: Identify domain experts through code analysis patterns
15
+ - **Supply Chain Intelligence**: Vulnerability tracking and license compliance across repositories
16
+
17
+ ### **Autonomous Agent Network (AAN)**
18
+ - **Workflow Automation**: Transform JIRA tickets into validated pull requests automatically
19
+ - **Self-Healing Operations**: Monitor, detect, diagnose, and fix production issues autonomously
20
+ - **Predictive Maintenance**: Scheduled optimization tasks and dependency updates
21
+ - **Multi-Agent Coordination**: Intelligent conflict resolution and approval workflows
22
+
23
+ ### **Multi-Modal Interface Layer (MMIL)**
24
+ - **Conversational Code Generation**: Natural language β†’ complex refactorings and implementations
25
+ - **Design-to-Code Pipeline**: Figma designs to validated production code
26
+ - **IDE Ecosystem Integration**: Native support across VSCode, IntelliJ, Vim, and more
27
+ - **API-First Architecture**: REST APIs for all platform capabilities
28
+
29
+ ### **Predictive Intelligence Engine (PIE)**
30
+ - **Tech Debt Forecasting**: Predict maintenance hotspots and cost estimates
31
+ - **Performance Prediction**: Identify regressions before deployment
32
+ - **Engineering Analytics**: Data-driven process optimization and insights
33
+ - **Risk Assessment**: Proactive security and compliance monitoring
34
+
35
+ ### **Governance Safety Framework (GSF)**
36
+ - **Autonomous Permissions**: Dynamic access control based on context and risk
37
+ - **Real-time Compliance**: Continuous regulatory and policy validation
38
+ - **Emergency Controls**: System-wide safety mechanisms and overrides
39
+ - **Human-in-the-Loop**: Graduated approval workflows for different risk levels
40
+
41
+ ### **Distributed Execution Engine (DEE)**
42
+ - **Repository Federation**: Coordinate operations across multiple repositories
43
+ - **Workflow Orchestration**: Complex process execution with dependency management
44
+ - **State Synchronization**: Federated data consistency across the enterprise
45
+ - **Resource Optimization**: Intelligent load balancing and execution management
46
+
47
+ ## πŸ—οΈ Architecture Overview
48
+
49
+ The CLI serves as your interface to the Codeflow Commander Nexus Gateway β€” a distributed, autonomous engineering platform designed for enterprise-scale operation.
50
+
51
+ ```
52
+ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
53
+ β”‚ MULTI-MODAL INTERFACE LAYER (MMIL) β”‚
54
+ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
55
+ │ │ Conversational │ │ Design→Code │ │ IDE │ │
56
+ β”‚ β”‚ Interfaces β”‚ β”‚ Pipeline β”‚ β”‚ Integrationsβ”‚ β”‚
57
+ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
58
+ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
59
+ β”‚
60
+ β–Ό
61
+ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
62
+ β”‚ AUTONOMOUS AGENT NETWORK (AAN) - ORCHESTRATOR β”‚
63
+ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
64
+ β”‚ β”‚ Workflow Agents β”‚ β”‚ Maintenance β”‚ β”‚ Self-Heal β”‚ β”‚
65
+ β”‚ β”‚ β”‚ β”‚ Bots β”‚ β”‚ Agents β”‚ β”‚
66
+ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
67
+ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
68
+ β”‚
69
+ β–Ό
70
+ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
71
+ β”‚ GOVERNANCE & SAFETY FRAMEWORK - RISK CONTROL β”‚
72
+ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
73
+ β”‚ β”‚ Permission β”‚ β”‚ Audit & β”‚ β”‚ Emergency β”‚ β”‚
74
+ β”‚ β”‚ Engine β”‚ β”‚ Compliance β”‚ β”‚ Controls β”‚ β”‚
75
+ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
76
+ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
77
+ β”‚
78
+ β–Ό
79
+ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
80
+ β”‚ ENTERPRISE KNOWLEDGE GRAPH (EKG) - INTELLIGENCE β”‚
81
+ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
82
+ β”‚ β”‚ Cross-Repo β”‚ β”‚ Semantic β”‚ β”‚ Expert β”‚ β”‚
83
+ β”‚ β”‚ Dependencies β”‚ β”‚ Mapping β”‚ β”‚ Discovery β”‚ β”‚
84
+ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
85
+ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
86
+ β”‚
87
+ β–Ό
88
+ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
89
+ β”‚ PREDICTIVE INTELLIGENCE ENGINE (PIE) - FORECASTING β”‚
90
+ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
91
+ β”‚ β”‚ Tech Debt β”‚ β”‚ Performance β”‚ β”‚ Risk β”‚ β”‚
92
+ β”‚ β”‚ Forecasting β”‚ β”‚ Prediction β”‚ β”‚ Analytics β”‚ β”‚
93
+ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
94
+ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
95
+ β”‚
96
+ β–Ό
97
+ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
98
+ β”‚ DISTRIBUTED EXECUTION ENGINE (DEE) - RUNTIME β”‚
99
+ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚
100
+ β”‚ β”‚ Repository β”‚ β”‚ Workflow β”‚ β”‚ State β”‚ β”‚
101
+ β”‚ β”‚ Federation β”‚ β”‚ Orchestration β”‚ β”‚ Sync β”‚ β”‚
102
+ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚
103
+ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
104
+ β”‚
105
+ β–Ό
106
+ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
107
+ β”‚ EXTERNAL SYSTEMS INTEGRATION β”‚
108
+ β”‚ β”Œβ”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β” β”‚
109
+ β”‚ β”‚GitHubβ”‚ β”‚GitLabβ”‚ β”‚JIRA β”‚ β”‚Slackβ”‚ β”‚Jenkinsβ”‚ β”‚
110
+ β”‚ β”‚Actionsβ”‚ β”‚ β”‚ β”‚ β”‚ β”‚ β”‚ β”‚ β”‚ β”‚
111
+ β”‚ β””β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”˜ β”‚
112
+ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
113
+ ```
12
114
 
13
115
  ## πŸ“¦ Installation
14
116
 
@@ -65,7 +167,25 @@ This creates:
65
167
  - `pre-commit`: AI analysis of staged changes
66
168
  - `pre-push`: Full CI/CD simulation (tests + AI review)
67
169
 
68
- ### 3. Check Status
170
+ ### 3. Index Project Knowledge (RAG Setup)
171
+
172
+ Build a local knowledge base for context-aware analysis:
173
+
174
+ ```bash
175
+ # Index current project files for RAG
176
+ codeflow-hook index
177
+
178
+ # Dry run to see what files would be indexed
179
+ codeflow-hook index --dry-run
180
+ ```
181
+
182
+ The knowledge base is stored in `.codeflow/index/` and includes:
183
+ - README.md and documentation files
184
+ - Source code files (.ts, .tsx, .js, .jsx, .json)
185
+ - Configuration files (package.json, jest.config.*, etc.)
186
+ - Architecture and design documents
187
+
188
+ ### 4. Check Status
69
189
 
70
190
  ```bash
71
191
  codeflow-hook status
@@ -73,24 +193,60 @@ codeflow-hook status
73
193
 
74
194
  ## πŸ› οΈ Commands
75
195
 
76
- ### Analyze Specific Changes
196
+ ### Core Commands
197
+
198
+ **Index Project Knowledge**:
199
+ ```bash
200
+ # Build local RAG knowledge base
201
+ codeflow-hook index
77
202
 
78
- Manually analyze a git diff:
203
+ # Preview what will be indexed
204
+ codeflow-hook index --dry-run
205
+ ```
79
206
 
207
+ **Analyze Diff**:
80
208
  ```bash
209
+ # Analyze staged changes
81
210
  git diff --staged | codeflow-hook analyze-diff
211
+
212
+ # Disable RAG context (faster but less precise)
213
+ git diff | codeflow-hook analyze-diff --no-rag
214
+
215
+ # Use legacy monolithic analysis
216
+ git diff | codeflow-hook analyze-diff --legacy
217
+ ```
218
+
219
+ **Configuration & Setup**:
220
+ ```bash
221
+ # Configure AI provider
222
+ codeflow-hook config -p gemini -k YOUR_API_KEY
223
+
224
+ # Install git hooks
225
+ codeflow-hook install
226
+
227
+ # Check installation status
228
+ codeflow-hook status
82
229
  ```
83
230
 
84
- ### Reinstall Hooks
231
+ ### Advanced Options
85
232
 
86
233
  ```bash
234
+ # Use legacy mode for backwards compatibility
235
+ codeflow-hook analyze-diff --legacy
236
+
237
+ # Skip RAG for faster analysis
238
+ codeflow-hook analyze-diff --no-rag
239
+
240
+ # Custom hooks directory
87
241
  codeflow-hook install --hooks-dir .custom-hooks
88
242
  ```
89
243
 
90
244
  ### View Help
91
245
 
92
246
  ```bash
93
- codeflow-hook --help
247
+ codeflow-hook --help # Main help
248
+ codeflow-hook index --help # Index command help
249
+ codeflow-hook analyze-diff --help # Analysis options
94
250
  ```
95
251
 
96
252
  ## πŸ”„ How It Works
@@ -113,6 +269,88 @@ codeflow-hook --help
113
269
  - Best practice recommendations
114
270
  - Maintainability evaluation
115
271
 
272
+ ## πŸ”¬ Enterprise Technology Stack
273
+
274
+ ### **Multi-Modal AI Integration**
275
+ The Nexus Gateway integrates multiple AI modalities for comprehensive engineering intelligence:
276
+
277
+ **πŸ€– Conversational Interface Layer**: Natural language processing for requirement analysis and complex code generation
278
+ **🎨 Design-to-Code Pipeline**: Computer vision and ML models for design artifact ingestion
279
+ **πŸ“Š Predictive Analytics Engine**: Time-series analysis and machine learning for trend forecasting
280
+ **πŸ” Semantic Code Analysis**: Advanced NLP for code understanding and pattern recognition
281
+
282
+ ### **Autonomous Agent Architecture**
283
+ The core platform intelligence is delivered through specialized agent networks:
284
+
285
+ **🎯 Workflow Execution Agents**:
286
+ - Ticket-to-PR automation with full engineering lifecycle management
287
+ - Self-healing operations with automated issue detection and remediation
288
+ - Dependency management with intelligent version conflict resolution
289
+
290
+ **πŸ”¬ Observational Intelligence Agents**:
291
+ - Predictive maintenance scheduling based on code analysis patterns
292
+ - Performance regression detection using historical benchmarking
293
+ - Risk assessment with real-time compliance monitoring
294
+
295
+ **🀝 Collaborative Learning Agents**:
296
+ - Cross-repository knowledge synthesis and pattern mining
297
+ - Expert identification through contribution analysis
298
+ - Team productivity optimization through workflow analysis
299
+
300
+ ### **Federated Data Architecture**
301
+ Enterprise-scale data management across distributed repositories:
302
+
303
+ **🌐 Enterprise Knowledge Graph (EKG)**:
304
+ - Multi-modal data integration (code, documentation, metrics, design artifacts)
305
+ - Semantic relationship mapping across the entire organization
306
+ - Real-time knowledge updates with conflict-free replication
307
+
308
+ **πŸ“ˆ Predictive Intelligence Engine (PIE)**:
309
+ - Time-series analytics for development velocity and quality trends
310
+ - Anomaly detection using unsupervised learning algorithms
311
+ - Forecasting models trained on enterprise development data
312
+
313
+ ### **Distributed Execution Framework**
314
+ Coordination of autonomous operations across multiple systems:
315
+
316
+ **⚑ Distributed Execution Engine (DEE)**:
317
+ - Multi-repository workflow orchestration with dependency management
318
+ - Resource optimization through intelligent load balancing
319
+ - Federated state management with eventual consistency guarantees
320
+
321
+ **πŸ” Governance Safety Framework (GSF)**:
322
+ - Risk-based permission evaluation with dynamic access controls
323
+ - Multi-level audit trails with blockchain-verified immutability
324
+ - Emergency stop mechanisms with graduated escalation protocols
325
+
326
+ ### **Structured Intelligence Output Format**
327
+ Enterprise reporting with actionable insights and automated workflows:
328
+
329
+ ```
330
+ 🏒 Enterprise Code Review Summary:
331
+ πŸ”’ Organization-wide Security risks: 2
332
+ πŸ—οΈ Architecture Optimization opportunities: 7
333
+ πŸ“ Cross-repository Maintainability issues: 15
334
+ 🎯 Predictive Maintenance alerts: 3
335
+
336
+ πŸ“Š Trend Analysis:
337
+ πŸ“ˆ Code quality velocity: +12% (improving)
338
+ πŸ“‰ Tech debt accumulation: -8% (reducing)
339
+ 🎲 Risk exposure index: LOW (confidence: 94%)
340
+
341
+ πŸ“‹ Recommended Actions:
342
+ πŸ”§ Automated fixes available for 23 issues
343
+ πŸš€ Cross-repository refactor suggested for auth module
344
+ πŸ“… Maintenance window scheduled for Q4 dependency updates
345
+ ```
346
+
347
+ ### **Multi-Repository Analysis Benefits**
348
+ - **Scale**: Analyzes thousands of repositories simultaneously
349
+ - **Intelligence**: Learns organizational patterns and standards
350
+ - **Automation**: Initiates cross-cutting improvements autonomously
351
+ - **Governance**: Ensures compliance across all engineering activities
352
+ - **Prediction**: Forecasts development bottlenecks before they occur
353
+
116
354
  ## πŸ’‘ Usage Examples
117
355
 
118
356
  ### Standard Development Workflow
@@ -240,12 +478,41 @@ MIT License - see LICENSE file for details
240
478
 
241
479
  ## πŸŽ‰ Acknowledgments
242
480
 
243
- Built with ❀️ using:
244
- - Google Gemini AI
245
- - Commander.js for CLI
246
- - Chalk for terminal colors
247
- - Ora for loading spinners
481
+ Built with ❀️ using enterprise-grade technologies:
482
+
483
+ ### **Core Intelligence Stack**
484
+ - **Multi-Modal AI Integration**: Google Gemini, OpenAI GPT-4, Anthropic Claude
485
+ - **Distributed Graph Database**: Neo4j Enterprise for Knowledge Graph operations
486
+ - **Federated Learning Infrastructure**: PyTorch and TensorFlow for ML model training
487
+ - **Container Orchestration**: Kubernetes for enterprise-scale deployment
488
+
489
+ ### **Development & CLI Framework**
490
+ - **Commander.js**: Professional CLI experience and command orchestration
491
+ - **Chalk & Ora**: Advanced terminal rendering with progress indicators
492
+ - **Axios**: Enterprise HTTP client with retry logic and circuit breakers
493
+ - **Node.js & TypeScript**: Type-safe, scalable runtime environment
494
+
495
+ ### **Enterprise Integrations**
496
+ - **Git Platforms**: Native GitHub, GitLab, and Bitbucket integration
497
+ - **Project Management**: JIRA, Linear, and Azure DevOps workflows
498
+ - **Communication**: Slack, Microsoft Teams, and Discord integrations
499
+ - **Monitoring**: Datadog, New Relic, and Prometheus telemetry
500
+
501
+ ### **Security & Governance**
502
+ - **Audit Framework**: Blockchain-verified audit trails
503
+ - **Access Management**: OAuth 2.0, SAML, and LDAP integration
504
+ - **Encryption**: End-to-end encryption with key management
505
+ - **Compliance**: SOC 2, GDPR, and enterprise security standards
248
506
 
249
507
  ---
250
508
 
251
- **Ready to supercharge your development workflow? Install Codeflow Hook today!**
509
+ **πŸš€ Ready to transform your organization's engineering capabilities?**
510
+
511
+ Join the autonomous engineering revolution with Codeflow Commander Nexus Gateway β€” where AI meets enterprise-scale software development.
512
+
513
+ **Install today and experience organization-wide autonomous engineering:**
514
+ ```bash
515
+ npm install -g codeflow-hook
516
+ ```
517
+
518
+ **Visit [codeflow-commander-nexus-gateway](https://github.com/Sharv619/codeflow-commander---nexus-gateway) to explore the full platform.**
package/bin/agents.js ADDED
@@ -0,0 +1,324 @@
1
+ // Specialized AI Agents for code review
2
+ // Implements agentic workflow with structured outputs
3
+
4
+ import { callAIProvider } from './codeflow-hook.js';
5
+
6
+ // Security Review Agent
7
+ export async function securityReview(codeBlock, context, config) {
8
+ const prompt = `You are a Security Code Review Specialist. Your mission is to identify security vulnerabilities in the provided code changes.
9
+
10
+ ANALYSIS SCOPE:
11
+ - SQL injection vulnerabilities
12
+ - Cross-site scripting (XSS) attacks
13
+ - Cross-site request forgery (CSRF)
14
+ - Insecure dependencies or outdated packages
15
+ - Key exposure or credential leaks
16
+ - Authentication bypass vulnerabilities
17
+ - Directory traversal attacks
18
+ - Path manipulation flaws
19
+ - Deprecation warnings that could indicate security risks
20
+
21
+ INPUT CODE:
22
+ \`\`\`
23
+ ${codeBlock}
24
+ \`\`\`
25
+
26
+ CONTEXT (Reference Code from Project Knowledge Base):
27
+ ${context}
28
+
29
+ You MUST respond with valid JSON in this format. Be thorough but concise:
30
+ [
31
+ {
32
+ "type": "SECURITY",
33
+ "severity": "CRITICAL|HIGH|MEDIUM|LOW",
34
+ "description": "Clear description of the vulnerability",
35
+ "line": "Line number or range where issue occurs, or 'N/A' if not specific"
36
+ }
37
+ ]
38
+
39
+ If no security issues found, return an empty array: []`;
40
+
41
+ try {
42
+ const response = await callAIProvider(config, prompt);
43
+ const parsed = parseAgentResponse(response);
44
+ return parsed;
45
+ } catch (error) {
46
+ console.warn(`Security review failed: ${error.message}`);
47
+ return [];
48
+ }
49
+ }
50
+
51
+ // Architecture Review Agent
52
+ export async function architectureReview(codeBlock, context, config) {
53
+ const prompt = `You are an Architecture Code Review Specialist. Your mission is to evaluate architectural adherence and code organization.
54
+
55
+ ANALYSIS SCOPE:
56
+ - Design pattern violations or misuse
57
+ - Separation of concerns breaches
58
+ - Business logic in inappropriate layers (e.g., controllers, views)
59
+ - Missing dependency injection where needed
60
+ - Tight coupling between components
61
+ - Cyclomatic complexity issues (>10 branches)
62
+ - Large functions/methods (>50 lines)
63
+ - Singleton pattern misuse
64
+ - Data access patterns and ORM usage
65
+ - Error handling architecture
66
+
67
+ INPUT CODE:
68
+ \`\`\`
69
+ ${codeBlock}
70
+ \`\`\`
71
+
72
+ CONTEXT (Reference Code from Project Knowledge Base):
73
+ ${context}
74
+
75
+ You MUST respond with valid JSON in this format. Be thorough but concise:
76
+ [
77
+ {
78
+ "type": "ARCHITECTURE",
79
+ "severity": "CRITICAL|HIGH|MEDIUM|LOW",
80
+ "description": "Clear description of the architectural issue",
81
+ "line": "Line number or range where issue occurs, or 'N/A' if not specific"
82
+ }
83
+ ]
84
+
85
+ If no architectural issues found, return an empty array: []`;
86
+
87
+ try {
88
+ const response = await callAIProvider(config, prompt);
89
+ const parsed = parseAgentResponse(response);
90
+ return parsed;
91
+ } catch (error) {
92
+ console.warn(`Architecture review failed: ${error.message}`);
93
+ return [];
94
+ }
95
+ }
96
+
97
+ // Style and Documentation Review Agent
98
+ export async function styleAndDocReview(codeBlock, context, config) {
99
+ const prompt = `You are a Code Style and Documentation Review Specialist. Your mission is to assess maintainability, readability, and documentation quality.
100
+
101
+ ANALYSIS SCOPE:
102
+ - Missing or inadequate JSDoc/TypeScript documentation
103
+ - Poor variable/function naming conventions
104
+ - Inconsistent code formatting
105
+ - Missing error handling documentation
106
+ - Inadequate function comments for complex logic
107
+ - Violation of language-specific style guides
108
+ - Long parameter lists (>4 parameters)
109
+ - Magic numbers without constants
110
+ - Inconsistent spacing or indentation
111
+ - Missing type annotations (TypeScript)
112
+
113
+ INPUT CODE:
114
+ \`\`\`
115
+ ${codeBlock}
116
+ \`\`\`
117
+
118
+ CONTEXT (Reference Code from Project Knowledge Base):
119
+ ${context}
120
+
121
+ You MUST respond with valid JSON in this format. Be thorough but concise:
122
+ [
123
+ {
124
+ "type": "MAINTAINABILITY",
125
+ "severity": "CRITICAL|HIGH|MEDIUM|LOW",
126
+ "description": "Clear description of the style/documentation issue",
127
+ "line": "Line number or range where issue occurs, or 'N/A' if not specific"
128
+ }
129
+ ]
130
+
131
+ If no issues found, return an empty array: []`;
132
+
133
+ try {
134
+ const response = await callAIProvider(config, prompt);
135
+ const parsed = parseAgentResponse(response);
136
+ return parsed;
137
+ } catch (error) {
138
+ console.warn(`Style/Doc review failed: ${error.message}`);
139
+ return [];
140
+ }
141
+ }
142
+
143
+ // Utility function to parse agent responses
144
+ function parseAgentResponse(response) {
145
+ try {
146
+ // Extract JSON from response (agents may add extra text)
147
+ const jsonMatch = response.match(/\[[\s\S]*\]/);
148
+ if (jsonMatch) {
149
+ const parsed = JSON.parse(jsonMatch[0]);
150
+ return Array.isArray(parsed) ? parsed : [];
151
+ }
152
+
153
+ // Try parsing the whole response
154
+ const parsed = JSON.parse(response);
155
+ return Array.isArray(parsed) ? parsed : [];
156
+ } catch (error) {
157
+ console.warn(`Failed to parse agent response: ${error.message}`);
158
+ return [];
159
+ }
160
+ }
161
+
162
+ // Code decomposition utilities
163
+ export class CodeDecomposer {
164
+ static decomposeDiff(diffContent) {
165
+ const scopes = [];
166
+ const lines = diffContent.split('\n');
167
+
168
+ let currentFile = null;
169
+ let currentHunk = null;
170
+ let hunkLines = [];
171
+
172
+ for (const line of lines) {
173
+ if (line.startsWith('diff --git')) {
174
+ // New file
175
+ const fileMatch = line.match(/b\/(.+)/);
176
+ if (fileMatch) {
177
+ currentFile = fileMatch[1];
178
+ }
179
+ } else if (line.startsWith('@@')) {
180
+ // New hunk
181
+ if (currentHunk && hunkLines.length > 0) {
182
+ scopes.push(this.analyzeHunk(currentFile, currentHunk, hunkLines));
183
+ }
184
+ currentHunk = line;
185
+ hunkLines = [];
186
+ } else if (line.startsWith('+') || line.startsWith('-')) {
187
+ // Changed line
188
+ hunkLines.push(line);
189
+ }
190
+ }
191
+
192
+ // Process final hunk
193
+ if (currentHunk && hunkLines.length > 0) {
194
+ scopes.push(this.analyzeHunk(currentFile, currentHunk, hunkLines));
195
+ }
196
+
197
+ return scopes;
198
+ }
199
+
200
+ static analyzeHunk(filePath, hunkHeader, lines) {
201
+ const addedLines = lines.filter(line => line.startsWith('+')).map(line => line.substring(1));
202
+ const removedLines = lines.filter(line => line.startsWith('-')).map(line => line.substring(1));
203
+
204
+ // Parse hunk header for line numbers
205
+ const lineMatch = hunkHeader.match(/@@ -\d+(?:,\d+)? \+(\d+)(?:,(\d+))? @@/);
206
+ const startLine = lineMatch ? parseInt(lineMatch[1]) : 1;
207
+
208
+ // Group lines into logical scopes
209
+ return this.groupIntoScopes(addedLines, removedLines, startLine, filePath);
210
+ }
211
+
212
+ static groupIntoScopes(addedLines, removedLines, startLine, filePath) {
213
+ const scopes = [];
214
+
215
+ // For simplicity, we'll treat all changes as one scope per hunk
216
+ // In a more advanced implementation, we could parse AST to identify functions/classes
217
+ const scope = {
218
+ filePath,
219
+ startLine,
220
+ endLine: startLine + addedLines.length,
221
+ code: addedLines.join('\n'),
222
+ addedLines,
223
+ removedLines,
224
+ type: this.inferScopeType(filePath, addedLines.join('\n'))
225
+ };
226
+
227
+ scopes.push(scope);
228
+ return scopes;
229
+ }
230
+
231
+ static inferScopeType(filePath, code) {
232
+ if (code.includes('function ') || code.includes('=>') || code.includes('const ') && code.includes('= (')) {
233
+ return 'function';
234
+ }
235
+ if (code.includes('class ')) {
236
+ return 'class';
237
+ }
238
+ if (code.includes('import ')) {
239
+ return 'imports';
240
+ }
241
+ if (code.includes('interface ') || code.includes('type ')) {
242
+ return 'type_definition';
243
+ }
244
+ return 'general';
245
+ }
246
+ }
247
+
248
+ // Main orchestration function
249
+ export async function orchestrateReview(diffContent, config, projectRoot = process.cwd()) {
250
+ const { decomposeDiff } = CodeDecomposer;
251
+
252
+ // Import retrieveContext dynamically to avoid circular imports
253
+ const { retrieveContext } = await import('./rag.js');
254
+
255
+ // Decompose diff into scopes
256
+ const scopes = decomposeDiff(diffContent);
257
+ const allResults = [];
258
+
259
+ for (const scope of scopes) {
260
+ if (!scope.code.trim()) continue;
261
+
262
+ // Retrieve context for this scope
263
+ const context = await retrieveContext(scope.code, config, projectRoot, 3);
264
+
265
+ // Run all specialized reviews in parallel
266
+ const [securityResults, architectureResults, styleResults] = await Promise.all([
267
+ securityReview(scope.code, context, config),
268
+ architectureReview(scope.code, context, config),
269
+ styleAndDocReview(scope.code, context, config)
270
+ ]);
271
+
272
+ // Combine and annotate results
273
+ const scopeResults = [
274
+ ...this.annotateResults(securityResults, scope),
275
+ ...this.annotateResults(architectureResults, scope),
276
+ ...this.annotateResults(styleResults, scope)
277
+ ];
278
+
279
+ allResults.push(...scopeResults);
280
+ }
281
+
282
+ return allResults;
283
+ }
284
+
285
+ // Annotate results with scope information
286
+ function annotateResults(results, scope) {
287
+ return results.map(result => ({
288
+ ...result,
289
+ file: scope.filePath,
290
+ lineRange: `${scope.startLine}-${scope.endLine}`,
291
+ scopeType: scope.type
292
+ }));
293
+ }
294
+
295
+ // Version without RAG context retrieval
296
+ export async function orchestrateReviewWithoutRAG(diffContent, config, projectRoot = process.cwd()) {
297
+ const scopes = CodeDecomposer.decomposeDiff(diffContent);
298
+ const allResults = [];
299
+
300
+ for (const scope of scopes) {
301
+ if (!scope.code.trim()) continue;
302
+
303
+ // Skip context retrieval - use empty context
304
+ const context = '';
305
+
306
+ // Run all specialized reviews in parallel
307
+ const [securityResults, architectureResults, styleResults] = await Promise.all([
308
+ securityReview(scope.code, context, config),
309
+ architectureReview(scope.code, context, config),
310
+ styleAndDocReview(scope.code, context, config)
311
+ ]);
312
+
313
+ // Combine and annotate results
314
+ const scopeResults = [
315
+ ...annotateResults(securityResults, scope),
316
+ ...annotateResults(architectureResults, scope),
317
+ ...annotateResults(styleResults, scope)
318
+ ];
319
+
320
+ allResults.push(...scopeResults);
321
+ }
322
+
323
+ return allResults;
324
+ }