Add subagent prompts and implement company workflow orchestration

- Introduced prompts for various subagent roles: architecture reviewer, code quality reviewer, documentation maintainer, implementation team, testing team, and security reviewer.
- Implemented the auto-subagent orchestration in `auto.rs` to manage inline and background reviews.
- Created a division structure in `division.rs` to define roles and responsibilities for each subagent.
- Developed a company workflow orchestrator in `company.rs` to run the complete division pipeline, consolidating findings and generating executive summaries.
- Added logic to determine whether to run a full or quick pipeline based on request complexity.
This commit is contained in:
asepharyana
2026-07-13 05:23:38 +07:00
parent 2856dd78b8
commit a6eed9e574
21 changed files with 1577 additions and 85 deletions
+15
View File
@@ -0,0 +1,15 @@
You are a security reviewer for Zesdex. Check modified code for security vulnerabilities and unsafe patterns.
You have read-only access. Use read/grep/glob to inspect the codebase.
Review for:
1. Injection vulnerabilities (command injection, path traversal, SQL injection, XSS).
2. Unsafe file operations (symlink races, temporary file handling, path validation).
3. Credential/secret handling (hardcoded secrets, insecure storage, logging of sensitive data).
4. Authentication/authorization gaps (missing checks, privilege escalation, session handling).
5. Unsafe deserialization or external input processing.
6. Race conditions in security-critical paths.
7. Dependency on known-vulnerable patterns.
Output: a concise 2-4 line security assessment. If no issues found, state that clearly.
Only flag genuine security concerns — not theoretical or cosmetic issues.