Co-Pilot
Updated 24 days ago

source-of-truth-monorepo

KKrosebrook
0.0k
krosebrook/source-of-truth-monorepo
80
Agent Score

πŸ’‘ Summary

A monorepo consolidating 54 repositories for the FlashFusion ecosystem with robust CI/CD and AI agent support.

🎯 Target Audience

Software developers working on FlashFusion projectsDevOps engineers managing CI/CD pipelinesProject managers overseeing multi-repo projectsAI researchers developing agent frameworksTechnical writers creating documentation

πŸ€– AI Roast: β€œPowerful, but the setup might scare off the impatient.”

Security AnalysisCritical Risk

Risk: Critical. Review: shell/CLI command execution; outbound network access (SSRF, data egress); API keys/tokens handling and storage; filesystem read/write scope and path traversal; dependency pinning and supply-chain risk. Run with least privilege and audit before enabling in production.

FlashFusion Source-of-Truth Monorepo

Status: MVP β†’ Beta Transition | Score: 78/100 | Version: 1.0.0

Unified consolidation of 54 repositories across the FlashFusion ecosystem into a production-ready monorepo with comprehensive tooling, documentation, and CI/CD.

Overview

This monorepo serves as the Source-of-Truth (SoT) for all FlashFusion projects, tools, and agents. It uses a SoT canonical ownership model where all changes are made here and pushed to downstream mirrors.

Key Highlights

βœ… Production Infrastructure: Complete CI/CD with automated security scanning
βœ… Excellent Documentation: 95/100 score with comprehensive guides
βœ… Strong Security: No critical vulnerabilities, automated dependency updates
βœ… Modern Stack: pnpm workspaces, Turborepo, TypeScript 5.4+, React 19
βœ… Consolidation Complete: 51/54 repos imported (94%), 3 unavailable
βœ… Agent Framework: Unified AI agent architecture - All 4 agents implemented (Claude, Gemini, GitHub, Codex)

Repository Count

  • Local repos: 4 (flashfusion-consolidated, HarvestFlow, INT-Smart-Triage-AI-2.0, MCP-Cloud-Demo)
  • Krosebrook: 34 repos (all imported)
  • flashfusionv1: 5 repos (3 unavailable/deleted)
  • ChaosClubCo: 8 repos (all imported)
  • Total: 54 repositories (51 imported, 3 unavailable)

Structure

source-of-truth-monorepo/
β”œβ”€β”€ projects/                    # All project code
β”‚   β”œβ”€β”€ local/                   # Local-only repos
β”‚   β”œβ”€β”€ krosebrook/              # Krosebrook org repos
β”‚   β”‚   β”œβ”€β”€ core/                # Core FlashFusion projects
β”‚   β”‚   β”œβ”€β”€ apps/                # Applications
β”‚   β”‚   └── tools/               # Development tools
β”‚   β”œβ”€β”€ flashfusionv1/           # FlashFusionv1 org repos
β”‚   └── chaosclubco/             # ChaosClubCo org repos
β”œβ”€β”€ agents/                      # AI agent implementations
β”‚   β”œβ”€β”€ claude-agent/
β”‚   β”œβ”€β”€ codex-agent/
β”‚   β”œβ”€β”€ gemini-agent/
β”‚   └── github-agent/
β”œβ”€β”€ shared/                      # Shared utilities
β”‚   β”œβ”€β”€ auth/                    # Authentication & authorization
β”‚   β”œβ”€β”€ contracts/               # Agent output schemas
β”‚   β”œβ”€β”€ logging/                 # Structured logging
β”‚   β”œβ”€β”€ otel/                    # Observability (OTEL)
β”‚   └── workflows/               # CI/CD utilities
└── .github/                     # GitHub workflows

Tech Stack

  • Package Manager: pnpm 9.x
  • Build Tool: Turbo
  • Versioning: Changesets (independent package versions)
  • CI/CD: GitHub Actions
  • Security: gitleaks, Renovate, pnpm audit
  • Observability: Structured JSON logs, OTEL-ready

Quick Start

Prerequisites

  • Node.js 20+
  • pnpm 9+

Installation

# Clone the repository git clone git@github.com:Krosebrook/source-of-truth-monorepo.git cd source-of-truth-monorepo # Install dependencies (includes security patches) pnpm install # Run all quality checks pnpm format:check pnpm lint pnpm type-check # Build all projects pnpm build # Run tests with coverage pnpm test:coverage

Development

# Start dev mode for all projects pnpm dev # Build only changed projects pnpm build --filter=...[HEAD^] # Lint specific project pnpm --filter @flashfusion/project-name lint

Consolidating Additional Repositories

This monorepo includes an automated consolidation script to import additional repositories from GitHub.

Quick Start

cd scripts # Install dependencies pip install -r requirements.txt # Set GitHub token export GITHUB_TOKEN=your_github_token # Test with dry-run python consolidate.py --phase 1 --dry-run # Execute consolidation python consolidate.py --phase 1

Features

  • βœ… Fetches all repos from GitHub user (currently configured for Krosebrook)
  • βœ… Filters by language (JS/TS, Python, Java, C#, PHP, HTML/CSS)
  • βœ… Auto-categorizes into apps/services/libraries/tools/etc.
  • βœ… Progress tracking with real-time progress bars
  • βœ… Error handling and resume capability
  • βœ… Dry-run mode for testing
  • βœ… Generates inventory and summary reports
  • βœ… Optional: Archive old repos after verification (Phase 2)

Full Documentation: scripts/CONSOLIDATION_README.md
Quick Start Guide: scripts/QUICK_START.md

Ownership Model

SoT Canonical (default for all projects):

  • All development happens in this monorepo
  • Changes are pushed to downstream mirrors via git subtree split
  • Never commit directly to mirror repos

CI/CD

Workflows

  • CI (ci.yml): Runs lint, build, test on every push/PR
  • Security (security.yml): gitleaks scan + dependency audit
  • Subtree Push (subtree-push.yml): Pushes changes to 50 mirrors (requires deploy keys)
    • Status: βœ… Infrastructure Complete - Ready for Activation
    • Activation Guide: Quick Start
    • Setup Guide: Configure Deploy Keys
    • Validation: Run ./scripts/validate-setup.sh

Turbo Caching

Turbo caches build outputs to speed up CI. Only changed projects + dependencies are rebuilt.

GitHub Copilot Custom Agents 🎯

NEW: 17 specialized AI agents with intelligent auto-selection!

The repository includes production-ready GitHub Copilot Custom Agents implementing the Symphony of Roles architecture:

Agent Auto-Selection

Simply describe what you need and GitHub Copilot recommends the right agent:

"Fix SQL injection vulnerability" β†’ @security-agent
"Write user stories for payments" β†’ @product-agent
"Debug authentication error" β†’ @debug-agent

Learn more: Agent Auto-Selection Guide

All 17 Agents

  • Discovery: Visionary, Analyst, Product
  • Design: UX, UI
  • Build: Mobile, Database, API
  • Release: Test, Deploy, Security
  • Growth: Growth
  • Cross-Phase: Docs, Review, Refactor, Debug, Automation

Full Documentation: .github/agents/README.md


Agent Parity

All agents (Claude, Codex, Gemini, GitHub Agent) follow unified contracts:

CLI Flags

agent-cli --prompt <path> --context <path> --output-schema <path> --out <dir>

Output Schema

All agents output JSON conforming to shared/contracts/agent-output.schema.json.

See: shared/contracts/README.md

GitHub Copilot Agent Auto-Select πŸ€–

NEW: Automatic agent suggestions based on your file changes!

When you create a pull request, our AI system automatically analyzes your changed files and suggests the most relevant GitHub Copilot agents to help you:

  • πŸ” Automatic Detection: Workflow analyzes PR file changes
  • πŸ’¬ Smart Suggestions: Top 5 agents ranked by relevance
  • πŸ› οΈ Local Tool: CLI utility for pre-PR suggestions
  • βš™οΈ Configurable: Pattern-based matching system

Quick Start:

# Get agent suggestions for your current changes node .github/scripts/suggest-agents.cjs # Or let the PR workflow do it automatically!

See: .github/AGENT_AUTOSELECT_README.md for full documentation

Documentation

πŸ“š Core Documentation

Getting Started:

Architecture & Design:

  • CLAUDE.md - ⭐ AI Assistant comprehensive guide (32KB, for Claude/GPT/Gemini)
  • GEMINI.md - Gemini-specific AI assistant guidance
  • AGENTS.md - ⭐ UPDATED: Complete AI agents architecture with best practices (30KB)
  • REPO_MAP.md - Complete index of all 54 repositories

Planning & Roadmap:

Development:

Security & Operations:

πŸ“– Additional Resources

AI & Agents:

Shared Utilities:

Deployment & Infrastructure:

  • [docs/how-to
5-Dim Analysis
Clarity8/10
Novelty7/10
Utility8/10
Completeness9/10
Maintainability8/10
Pros & Cons

Pros

  • Comprehensive tooling and documentation
  • Strong CI/CD and security practices
  • Unified architecture for AI agents

Cons

  • Complexity may overwhelm new users
  • Requires familiarity with multiple technologies
  • Initial setup can be time-consuming

Related Skills

pytorch

S
toolCode Lib
92/ 100

β€œIt's the Swiss Army knife of deep learning, but good luck figuring out which of the 47 installation methods is the one that won't break your system.”

agno

S
toolCode Lib
90/ 100

β€œIt promises to be the Kubernetes for agents, but let's see if developers have the patience to learn yet another orchestration layer.”

nuxt-skills

S
toolCo-Pilot
90/ 100

β€œIt's essentially a well-organized cheat sheet that turns your AI assistant into a Nuxt framework parrot.”

Disclaimer: This content is sourced from GitHub open source projects for display and rating purposes only.

Copyright belongs to the original author Krosebrook.