webapp-testing

This monorepo serves as the Source-of-Truth (SoT) for all FlashFusion projects, tools, and agents. It uses a SoT canonical ownership model where all changes are made here and pushed to downstream mirrors.

Key Highlights

✅ Production Infrastructure: Complete CI/CD with automated security scanning

✅ Excellent Documentation: 95/100 score with comprehensive guides

✅ Strong Security: No critical vulnerabilities, automated dependency updates

✅ Modern Stack: pnpm workspaces, Turborepo, TypeScript 5.4+, React 19

✅ Consolidation Complete: 51/54 repos imported (94%), 3 unavailable

✅ Agent Framework: Unified AI agent architecture - All 4 agents implemented (Claude, Gemini, GitHub, Codex)

Repository Count

• Local repos: 4 (flashfusion-consolidated, HarvestFlow, INT-Smart-Triage-AI-2.0, MCP-Cloud-Demo)
• Krosebrook: 34 repos (all imported)
• flashfusionv1: 5 repos (3 unavailable/deleted)
• ChaosClubCo: 8 repos (all imported)
• Total: 54 repositories (51 imported, 3 unavailable)

```

source-of-truth-monorepo/

├── projects/ # All project code

│ ├── local/ # Local-only repos

│ ├── krosebrook/ # Krosebrook org repos

│ │ ├── core/ # Core FlashFusion projects

│ │ ├── apps/ # Applications

│ │ └── tools/ # Development tools

│ ├── flashfusionv1/ # FlashFusionv1 org repos

│ └── chaosclubco/ # ChaosClubCo org repos

├── agents/ # AI agent implementations

│ ├── claude-agent/

│ ├── codex-agent/

│ ├── gemini-agent/

│ └── github-agent/

├── shared/ # Shared utilities

│ ├── auth/ # Authentication & authorization

│ ├── contracts/ # Agent output schemas

│ ├── logging/ # Structured logging

│ ├── otel/ # Observability (OTEL)

│ └── workflows/ # CI/CD utilities

└── .github/ # GitHub workflows

```

• Package Manager: pnpm 9.x
• Build Tool: Turbo
• Versioning: Changesets (independent package versions)
• CI/CD: GitHub Actions
• Security: gitleaks, Renovate, pnpm audit
• Observability: Structured JSON logs, OTEL-ready

Prerequisites

• Node.js 20+
• pnpm 9+

Installation

```bash

# Clone the repository

git clone git@github.com:Krosebrook/source-of-truth-monorepo.git

cd source-of-truth-monorepo

# Install dependencies (includes security patches)

pnpm install

# Run all quality checks

pnpm format:check

pnpm lint

pnpm type-check

# Build all projects

pnpm build

# Run tests with coverage

pnpm test:coverage

```

Development

```bash

# Start dev mode for all projects

pnpm dev

# Build only changed projects

pnpm build --filter=...[HEAD^]

# Lint specific project

pnpm --filter @flashfusion/project-name lint

```

This monorepo includes an automated consolidation script to import additional repositories from GitHub.

Quick Start

```bash

cd scripts

# Install dependencies

pip install -r requirements.txt

# Set GitHub token

export GITHUB_TOKEN=your_github_token

# Test with dry-run

python consolidate.py --phase 1 --dry-run

# Execute consolidation

python consolidate.py --phase 1

```

Features

• ✅ Fetches all repos from GitHub user (currently configured for Krosebrook)
• ✅ Filters by language (JS/TS, Python, Java, C#, PHP, HTML/CSS)
• ✅ Auto-categorizes into apps/services/libraries/tools/etc.
• ✅ Progress tracking with real-time progress bars
• ✅ Error handling and resume capability
• ✅ Dry-run mode for testing
• ✅ Generates inventory and summary reports
• ✅ Optional: Archive old repos after verification (Phase 2)

Full Documentation: [scripts/CONSOLIDATION_README.md](scripts/CONSOLIDATION_README.md)

Quick Start Guide: [scripts/QUICK_START.md](scripts/QUICK_START.md)

SoT Canonical (default for all projects):

• All development happens in this monorepo
• Changes are pushed to downstream mirrors via git subtree split
• Never commit directly to mirror repos

Workflows

• CI (ci.yml): Runs lint, build, test on every push/PR
• Security (security.yml): gitleaks scan + dependency audit
• Subtree Push (subtree-push.yml): Pushes changes to 50 mirrors (requires deploy keys)

- Status: ✅ Infrastructure Complete - Ready for Activation

- Activation Guide: [Quick Start](docs/how-to/ACTIVATION_GUIDE.md)

- Setup Guide: [Configure Deploy Keys](docs/how-to/configure-deploy-keys.md)

- Validation: Run ./scripts/validate-setup.sh

Turbo Caching

Turbo caches build outputs to speed up CI. Only changed projects + dependencies are rebuilt.

NEW: 17 specialized AI agents with intelligent auto-selection!

The repository includes production-ready GitHub Copilot Custom Agents implementing the Symphony of Roles architecture:

Agent Auto-Selection

Simply describe what you need and GitHub Copilot recommends the right agent:

```

"Fix SQL injection vulnerability" → @security-agent

"Write user stories for payments" → @product-agent

"Debug authentication error" → @debug-agent

```

Learn more: [Agent Auto-Selection Guide](.github/agents/AUTOSELECT_GUIDE.md)

All 17 Agents

• Discovery: Visionary, Analyst, Product
• Design: UX, UI
• Build: Mobile, Database, API
• Release: Test, Deploy, Security
• Growth: Growth
• Cross-Phase: Docs, Review, Refactor, Debug, Automation

Full Documentation: [.github/agents/README.md](.github/agents/README.md)

---

All agents (Claude, Codex, Gemini, GitHub Agent) follow unified contracts:

CLI Flags

```bash

agent-cli --prompt --context --output-schema --out

📚 Core Documentation

Getting Started:

• [README.md](README.md) - Project overview and quick start (you are here)
• [GETTING_STARTED.md](GETTING_STARTED.md) - Detailed onboarding guide
• [CONTRIBUTING.md](CONTRIBUTING.md) - Contribution guidelines
• [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) - Community standards

Architecture & Design:

• [CLAUDE.md](CLAUDE.md) - ⭐ AI Assistant comprehensive guide (32KB, for Claude/GPT/Gemini)
• [GEMINI.md](GEMINI.md) - Gemini-specific AI assistant guidance
• [AGENTS.md](AGENTS.md) - ⭐ UPDATED: Complete AI agents architecture with best practices (30KB)
• [REPO_MAP.md](REPO_MAP.md) - Complete index of all 54 repositories

Planning & Roadmap:

• [ROADMAP.md](ROADMAP.md) - NEW: Comprehensive product roadmap (MVP → V2.0+)
• [AUDIT_SUMMARY.md](AUDIT_SU