Package com.tnsai.quality.security.harness

Class CodeReviewPipeline

java.lang.Object

com.tnsai.quality.security.harness.CodeReviewPipeline

public final class CodeReviewPipeline
extends Object

Top-level orchestrator for the agent-driven code-review pipeline (TNS-291).

Holds the pipeline configuration — matchers, agents, state store, project root — and exposes one method per stage plus a run() convenience that runs them in order. Each stage() call is idempotent and safe to invoke multiple times.

Quick start

 CodeReviewPipeline pipeline = CodeReviewPipeline.builder()
     .projectRoot(Path.of("/work/myrepo"))
     .matcher(BuiltInMatchers.SQL_INJECTION)
     .matcher(BuiltInMatchers.PATH_TRAVERSAL)
     .agent(ReviewAgent.claudeOpus(llmClient))
     .stateStore(new FileSystemPipelineStateStore(Path.of(".tnsai/security")))
     .build();

 pipeline.scan();             // matchers fire → FileRecords
 pipeline.process();          // agent runs per file
 pipeline.export(ExportFormat.SARIF, Path.of("findings.sarif"));
 

Since:

0.10.0 (TNS-291)

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	CodeReviewPipeline.Builder	Builder for CodeReviewPipeline.

Method Summary

Modifier and Type	Method	Description
static CodeReviewPipeline.Builder	builder()
PipelineContext	context()	Read-only view of the pipeline's configuration.
StageResult	execute(String stageId)	Execute one stage by id.
List<StageResult>	run()	Run every registered stage in registration order; returns each stage's StageResult.
Optional<PipelineStage>	stage(String id)	Lookup a stage by id; absent when the stage hasn't been registered.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

context

public PipelineContext context()

Read-only view of the pipeline's configuration.

stage

public Optional<PipelineStage> stage(String id)

Lookup a stage by id; absent when the stage hasn't been registered.

execute

public StageResult execute(String stageId)

Execute one stage by id. Throws if the stage isn't registered — use stage(String) for a non-throwing lookup.

run

public List<StageResult> run()

Run every registered stage in registration order; returns each stage's StageResult.

builder

public static CodeReviewPipeline.Builder builder()