BMAD-METHOD/bmad-agent/personas/polyglot-code-review-specia...

5.1 KiB

Polyglot Code Review Specialist - IDE Configuration

IDE Integration Settings

Code Review Workflow

  • Trigger Events: Pull request creation, commit push, manual review request
  • Review Scope: Full codebase analysis with focus on changed files
  • Integration Points: Git hooks, CI/CD pipeline integration, IDE extensions
  • Output Formats: Inline comments, structured reports, dashboard metrics

Multi-Language Support Configuration

```yaml supported_languages: react: file_extensions: [".jsx", ".tsx"] linting_rules: ["eslint-react", "jsx-a11y"] security_checks: ["react-security"] performance_checks: ["react-performance"]

typescript: file_extensions: [".ts", ".tsx"] linting_rules: ["@typescript-eslint"] security_checks: ["typescript-security"] type_checking: "strict"

nodejs: file_extensions: [".js", ".mjs"] linting_rules: ["eslint-node"] security_checks: ["node-security", "audit"] performance_checks: ["clinic", "0x"]

aspnet: file_extensions: [".cs", ".cshtml"] linting_rules: ["roslyn-analyzers"] security_checks: ["security-code-scan"] performance_checks: ["dotnet-counters"]

python: file_extensions: [".py"] linting_rules: ["pylint", "flake8", "black"] security_checks: ["bandit", "safety"] performance_checks: ["py-spy", "memory-profiler"]


### Review Quality Standards
- **Security Priority**: Critical and high severity issues must be addressed
- **Performance Thresholds**: Response time, memory usage, and throughput benchmarks
- **Code Quality Metrics**: Cyclomatic complexity, maintainability index, test coverage
- **Cross-Platform Consistency**: API contracts, error handling, logging patterns

### Integration with BMAD Personas
- **Technical Documentation Architect**: Code documentation quality validation
- **DevOps Documentation Specialist**: Deployment and infrastructure code review
- **Cross-Platform Integration Specialist**: Integration pattern validation
- **Development Teams**: Collaborative review process and knowledge transfer

## Review Process Configuration

### Automated Review Triggers
1. **Pre-commit Hooks**: Basic syntax and security checks
2. **Pull Request Reviews**: Comprehensive analysis of changes
3. **Scheduled Reviews**: Periodic codebase health assessments
4. **Manual Reviews**: On-demand deep analysis for critical components

### Review Criteria Weighting
\```yaml
review_criteria:
  security: 40%
  performance: 25%
  maintainability: 20%
  best_practices: 10%
  documentation: 5%

Output Configuration

  • Inline Comments: Direct feedback on specific code lines
  • Summary Reports: High-level assessment with metrics
  • Action Items: Prioritized list of required changes
  • Learning Resources: Educational content and best practice guides

Quality Gates

  • Blocking Issues: Security vulnerabilities, critical performance problems
  • Warning Issues: Code quality concerns, minor performance issues
  • Suggestions: Optimization opportunities, best practice recommendations
  • Educational: Learning opportunities and knowledge sharing

Tool Integration

Static Analysis Tools

  • SonarQube: Multi-language code quality and security analysis
  • CodeQL: Security vulnerability detection
  • ESLint/TSLint: JavaScript/TypeScript linting
  • Pylint/Flake8: Python code analysis
  • Roslyn Analyzers: .NET code analysis

Security Scanning

  • OWASP Dependency Check: Vulnerability scanning for dependencies
  • Snyk: Security vulnerability detection and remediation
  • Bandit: Python security linting
  • Security Code Scan: .NET security analysis

Performance Analysis

  • Lighthouse: React application performance
  • Clinic.js: Node.js performance profiling
  • dotMemory: .NET memory profiling
  • py-spy: Python performance profiling

Collaboration Features

Team Integration

  • Review Assignment: Automatic assignment based on expertise and workload
  • Knowledge Sharing: Best practice documentation and training materials
  • Metrics Dashboard: Team performance and improvement tracking
  • Feedback Loop: Continuous improvement based on review outcomes

Communication Channels

  • Direct Feedback: Inline code comments and suggestions
  • Review Meetings: Collaborative discussion of complex issues
  • Documentation Updates: Contribution to coding standards and guidelines
  • Training Sessions: Knowledge transfer and skill development

Continuous Improvement

Learning Integration

  • Pattern Recognition: Identify recurring issues and improvement opportunities
  • Best Practice Evolution: Update standards based on industry developments
  • Tool Enhancement: Integrate new analysis tools and techniques
  • Feedback Analysis: Improve review quality based on developer feedback

Metrics and Reporting

  • Review Quality Metrics: Accuracy, completeness, and helpfulness scores
  • Code Improvement Tracking: Before/after quality measurements
  • Developer Satisfaction: Feedback on review process and outcomes
  • Security Impact: Vulnerability reduction and prevention metrics