Multi-Agent Code Review

# Security reviewer
hcom 1 claude --tag security --go --headless \
  --hcom-system-prompt "You are a security-focused code reviewer. \
  Look for: SQL injection, XSS, CSRF, auth bypasses, crypto misuse, \
  secret leaks, insecure dependencies. Be thorough but pragmatic."

# Performance reviewer  
hcom 1 claude --tag performance --go --headless \
  --hcom-system-prompt "You are a performance-focused code reviewer. \
  Look for: N+1 queries, inefficient algorithms, memory leaks, \
  blocking I/O, missing indexes, unoptimized loops."

# Style reviewer
hcom 1 claude --tag style --go --headless \
  --hcom-system-prompt "You are a code style reviewer. \
  Look for: naming conventions, code organization, readability, \
  documentation gaps, test coverage, error handling patterns."

# Test reviewer
hcom 1 claude --tag tests --go --headless \
  --hcom-system-prompt "You are a test quality reviewer. \
  Look for: edge cases, test coverage gaps, flaky tests, \
  missing assertions, integration test needs."

hcom 1 claude --tag coordinator --go --hcom-prompt "
1. Wait for author to send code changes:
   hcom listen --timeout 300 --from author

2. Get the changed files from the message

3. Send review request to all reviewers:
   hcom send '@security- @performance- @style- @tests- \
     Review these changes: [list files]. \
     Send findings to @coordinator- with format: \
     SEVERITY: [critical|high|medium|low] \
     FILE:LINE: issue description' \
     --thread code-review --intent request

4. Collect reviews (wait for 4 responses):
   hcom events --wait 120 --thread code-review --type message --last 10

5. Consolidate feedback:
   - Group by severity
   - Deduplicate similar issues  
   - Prioritize critical/high issues

6. Send consolidated review to author:
   hcom send '@author ## Code Review Summary
   
   CRITICAL: [list]
   HIGH: [list]
   MEDIUM: [list]
   LOW: [list]
   
   Overall: [approve/request changes/reject]' \
     --thread code-review
"

hcom send '@coordinator- Review PR #123: \
  src/auth/login.py \
  src/auth/jwt.py \
  tests/test_login.py' \
  --from author --thread code-review --intent request

# Create bundle with changed files and related context
hcom bundle create "PR #123 - JWT authentication refactor" \
  --description "Refactored JWT handling with new refresh token flow" \
  --files src/auth/login.py,src/auth/jwt.py,tests/test_login.py \
  --transcript 10-15:detailed \
  --events 50-75

# Send to reviewers with bundle
hcom send '@security- @performance- Review attached changes' \
  --thread code-review \
  --title "PR #123 Review Request" \
  --description "JWT authentication refactor" \
  --files src/auth/login.py,src/auth/jwt.py,tests/test_login.py

#!/usr/bin/env bash
# Multi-agent code review workflow
set -euo pipefail

files="$1"
thread="review-$(date +%s)"

# Launch reviewers
echo "Launching reviewers..."

hcom 1 claude --tag security --go --headless \
  --hcom-system-prompt "Security code reviewer. Find vulnerabilities."

hcom 1 claude --tag performance --go --headless \
  --hcom-system-prompt "Performance code reviewer. Find bottlenecks."

hcom 1 claude --tag style --go --headless \
  --hcom-system-prompt "Style code reviewer. Check conventions."

# Launch coordinator
hcom 1 claude --tag coordinator --go --hcom-prompt "
Thread: ${thread}
Files: ${files}

1. Send files to reviewers:
   hcom send '@security- @performance- @style- Review ${files}' \
     --thread ${thread} --intent request

2. Wait for 3 reviews:
   hcom events --wait 180 --thread ${thread} --type message

3. Consolidate and report:
   hcom send '@author ## Review Complete
   
   [consolidated findings]' --thread ${thread}
"

echo "Review started in thread: ${thread}"
echo "Watch: hcom events --wait 300 --thread ${thread}"

hcom run review "src/auth/*.py"

## [SECURITY] Review

CRITICAL:
- src/auth/login.py:42 - SQL injection in raw query
- src/auth/jwt.py:18 - Secret key hardcoded

HIGH:
- src/auth/login.py:67 - Missing rate limiting

MEDIUM:
- src/auth/jwt.py:89 - Token expiry too long (24h)

LOW:
- tests/test_login.py:12 - Missing negative test cases

OVERALL: REQUEST CHANGES (2 critical issues)

# Coordinator tracks reviewed files
hcom config -i coordinator notes "reviewed: []"

# For each file:
# 1. Check if already reviewed
# 2. Send to reviewers
# 3. Update notes with file:status
# 4. Continue to next file

hcom list
hcom events --agent security- --last 5

hcom send '@security- Did you see the review request?' --thread code-review

hcom events --thread code-review --type message --last 20

# Instead of all files at once
hcom send '@security- Review src/auth/login.py' --thread code-review
# Wait for response
hcom send '@security- Review src/auth/jwt.py' --thread code-review