Copy# Review current branch against main
/agileflow:review
 
# Review specific branch
/agileflow:review BRANCH=feature/auth
 
# Review with focus on security
/agileflow:review FOCUS=security

Copy🔴 CRITICAL - Must fix before merge
🟠 HIGH    - Fix before merge (blocks release)
🟡 MEDIUM  - Address soon (technical debt)
⚪ LOW     - Nice to have (style/consistency)

CopyCode Quality Score: 72/100
 
Breakdown:
- Security: 40/100 (critical issues found)
- Performance: 75/100 (one N+1 query)
- Maintainability: 80/100 (some complexity)
- Testing: 65/100 (coverage gaps)
- Style: 90/100 (mostly consistent)

Copy/agileflow:review

Copy/agileflow:review BRANCH=feature/user-auth

Copy/agileflow:review BRANCH=feature/auth BASE=develop

Copy# Security-only review
/agileflow:review FOCUS=security
 
# Performance-only review
/agileflow:review FOCUS=performance
 
# Testing coverage review
/agileflow:review FOCUS=tests

Copy# Show only critical/high issues
/agileflow:review SEVERITY=high
 
# Show all issues
/agileflow:review SEVERITY=all

Copy/agileflow:review
 
# Output:
# AI Code Review Report
# Branch: feature/user-auth
# Files Changed: 5
# Critical: 1 | High: 3 | Medium: 5 | Low: 2
# Code Quality Score: 72/100
#
# 🔴 CRITICAL ISSUES
# - Hardcoded API key in stripe.ts:15
#
# 🟠 HIGH ISSUES
# - N+1 query in posts API
# - Missing error handling in login
# ...

Copy/agileflow:review FOCUS=security
 
# Analyzes only for:
# - Hardcoded secrets
# - SQL injection risks
# - XSS vulnerabilities
# - Authentication issues
# - CORS misconfiguration

Copy/agileflow:review FOCUS=performance
 
# Checks for:
# - N+1 database queries
# - Inefficient algorithms
# - Missing indexes
# - Memory leaks
# - Bundle size issues

Copy# AI Code Review Report
 
**Branch**: feature/user-auth
**Base**: main
**Files Changed**: 8
**Lines Added**: 245
**Lines Removed**: 32
**Generated**: 2025-10-16T10:30:00Z

Copy## Summary
 
**Critical**: 2 | **High**: 5 | **Medium**: 12 | **Low**: 8
**Must Fix Before Merge**: 7 issues

Copy### 1. Hardcoded API Key (SECURITY)
**File**: src/api/payments/stripe.ts:15
**Severity**: CRITICAL
 
// ❌ BAD
const stripeKey = "sk_live_abc123...";
 
// ✅ GOOD
const stripeKey = process.env.STRIPE_SECRET_KEY;
if (!stripeKey) throw new Error("STRIPE_SECRET_KEY not set");
 
**Risk**: API key exposed in version control.
**Fix**: Move to environment variable. Rotate immediately.
**Priority**: Block merge

Copy## Positive Observations ✅
 
- ✅ Good use of TypeScript strict mode
- ✅ Consistent error handling pattern
- ✅ Well-structured component separation
- ✅ Clear commit messages

Copy## Code Quality Score: 72/100
 
**Breakdown**:
- Security: 40/100 (2 critical issues)
- Performance: 75/100 (1 N+1 query)
- Maintainability: 80/100 (some complexity)
- Testing: 65/100 (coverage gaps)
- Style: 90/100 (mostly consistent)

Copy# Code Review Rules
 
## Critical
- No console.log in production code
- All API endpoints must have rate limiting
- All database queries must use ORM
 
## High
- Functions >30 lines should be refactored
- Test coverage must be >85%

CopyReview asks: "Fix auto-fixable issues? (YES/NO)"
 
If YES:
  - Runs npm run lint -- --fix
  - Fixes 8 style issues automatically
  - Shows which issues were fixed

CopyReview asks: "Create stories for follow-up work?"
 
If YES:
  - Creates story for each medium/low issue
  - Adds to your backlog
  - Links to code review report

CopyReview asks: "Block merge for critical/high issues?"
 
If YES:
  - Marks merge as blocked
  - Provides failure reason
  - Suggests resolution steps

Copydocs/08-project/code-reviews/<YYYYMMDD>-<BRANCH>.md

Copydocs/08-project/code-reviews/20251016-feature-user-auth.md

Copy1. Remove hardcoded API key (critical)
2. Fix SQL injection (critical)
3. Add error handling to login (high)

Copy4. Add tests for auth endpoints (high)
5. Fix N+1 query in posts API (high)
6. Reduce complexity in validator.ts (medium)

Copy7. Standardize naming conventions (medium)
8. Add ESLint rule for secrets (medium)
9. Set up automated security scanning (low)

Copy- name: AI Code Review
  run: npx claude-code /agileflow:review BRANCH=${{ github.head_ref }}
 
- name: Check for critical issues
  run: |
    if grep -q "CRITICAL" code-review-report.md; then
      echo "::error::Critical issues found."
      exit 1
    fi

Copy/agileflow:review
# Fix any CRITICAL or HIGH issues
# Address MEDIUM issues if possible
# Then submit PR with confidence

Copy# After feedback, run review again
/agileflow:review
 
# See if score improved
# Ensure critical issues fixed
# Check test coverage

Copy# Always check security first
/agileflow:review FOCUS=security
 
# Fix any CRITICAL security issues
# Then review other categories