DevFlow

DevFlow is an autonomous software quality and release-readiness engine designed to bridge the gap between rapid software development and rigorous production safety. By coupling Groq AI with safe Python AST static syntax verification, DevFlow analyzes codebases, detects security flaws and regressions, synthesizes surgical code fixes, and enforces automated release gating without running untrusted code. 🌟 Key Features 🛡️ Multi-Vector AI Auditing: Detects security vulnerabilities (OWASP top 10, credential leaks, unverified JWTs), logic bugs, test coverage gaps, and maintainability antipatterns. ⚡ Sub-Second Remediation: Generates step-by-step root-cause analyses, implementation roadmaps, unified code diffs, and regression test suites. 🔒 Zero Remote Code Execution (Zero RCE): Uses Python's native AST parser (ast.parse) for strict syntax verification without executing untrusted user code. 🗂️ Zip Slip Protected: Hardened upload pipeline preventing path traversal exploits from uploaded .zip archives. 📊 Executive Release Gatekeeper: Combines syntax verification with defect severity metrics to render a clear Go/No-Go release decision. ☁️ Cloud Native & Offline Resilient: Connects to Supabase PostgreSQL with Row-Level Security (RLS) while providing automated local in-memory fallback. Technology Stack & Separation of Roles Technology Role Details Flutter (Dart) Frontend Dashboard Material 3 dark interface with live charts (fl_chart), audit flows, and remediation views. FastAPI (Python) Backend API Server Asynchronous REST API, multipart ZIP handling, CORS orchestration, and Pydantic validation. Groq Runtime Application AI High-throughput LLM runtime powering live code analysis, fix generation, and test synthesis. Python AST (ast.parse) Verification Engine Fast, deterministic, and safe syntax verification ensuring zero execution side-effects. Supabase (PostgreSQL) Cloud Persistence Normalized relational schema with Row-Level Security (RLS) policies for user data isolation. IBM Bob 2.0 AI Engineering Copilot Autonomous development partner utilized across architecture, implementation, debugging, and documentation. 💡 Architectural Clarification: Groq powers DevFlow's runtime AI features within the product, while IBM Bob 2.0 was used as an AI-assisted software engineering copilot throughout the development lifecycle.