moai-foundation-quality

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Enterprise Code Quality Orchestrator

企业级代码质量编排器

Enterprise-grade code quality management system that combines systematic code review, proactive improvement suggestions, and automated best practices enforcement. Provides comprehensive quality assurance through TRUST 5 framework validation with Context7 integration for real-time best practices.
企业级代码质量管理系统,结合系统化代码审查、主动改进建议和自动化最佳实践强制执行。通过TRUST 5框架验证与Context7集成,提供全面的质量保证,实现实时最佳实践校验。

Quick Reference (30 seconds)

快速参考(30秒)

Core Capabilities:
  • TRUST 5 Validation: Testable, Readable, Unified, Secured, Trackable quality gates
  • Proactive Analysis: Automated issue detection and improvement suggestions
  • Best Practices Enforcement: Context7-powered real-time standards validation
  • Multi-Language Support: 25+ programming languages with specialized rules
  • Enterprise Integration: CI/CD pipelines, quality metrics, reporting
Key Patterns:
  • Quality Gate Pipeline: Automated validation with configurable thresholds
  • Proactive Scanner: Continuous analysis with improvement recommendations
  • Best Practices Engine: Context7-driven standards enforcement
  • Quality Metrics Dashboard: Comprehensive reporting and trend analysis
When to Use:
  • Code review automation and quality gate enforcement
  • Proactive code quality improvement and technical debt reduction
  • Enterprise coding standards enforcement and compliance validation
  • CI/CD pipeline integration with automated quality checks
Quick Access:
  • TRUST 5 Framework: See trust5-validation.md
  • Proactive Analysis: See proactive-analysis.md
  • Best Practices: See best-practices.md
  • Integration Patterns: See integration-patterns.md
核心能力:
  • TRUST 5验证:可测试(Testable)、可读(Readable)、统一(Unified)、安全(Secured)、可追踪(Trackable)的质量门
  • 主动分析:自动化问题检测与改进建议
  • 最佳实践强制执行:由Context7驱动的实时标准验证
  • 多语言支持:支持25+编程语言及专用规则
  • 企业级集成:CI/CD流水线、质量指标、报告
关键模式:
  • 质量门流水线:可配置阈值的自动化验证
  • 主动扫描器:持续分析并提供改进建议
  • 最佳实践引擎:Context7驱动的标准强制执行
  • 质量指标仪表盘:全面报告与趋势分析
适用场景:
  • 代码审查自动化与质量门强制执行
  • 主动提升代码质量与减少技术债务
  • 企业编码标准强制执行与合规性验证
  • 集成CI/CD流水线并实现自动化质量检查
快速访问:
  • TRUST 5框架:查看trust5-validation.md
  • 主动分析:查看proactive-analysis.md
  • 最佳实践:查看best-practices.md
  • 集成模式:查看integration-patterns.md

Implementation Guide

实施指南

Getting Started

快速开始

Basic Quality Validation: Initialize QualityOrchestrator with trust5_enabled, proactive_analysis, best_practices_enforcement, and context7_integration all set to True. Call analyze_codebase method with path parameter set to source directory, languages list including python, javascript, and typescript, and quality_threshold of 0.85. The method returns comprehensive quality results.
For quality gate validation with TRUST 5, create QualityGate instance and call validate_trust5 with codebase_path, test_coverage_threshold of 0.90, and complexity_threshold of 10.
Proactive Quality Analysis: Initialize ProactiveQualityScanner with context7_client and BestPracticesEngine rule_engine. Call scan_codebase with path and scan_types list including security, performance, maintainability, and testing. Generate recommendations by calling generate_recommendations with issues, priority set to high, and auto_fix enabled.
基础质量验证:初始化QualityOrchestrator,将trust5_enabled、proactive_analysis、best_practices_enforcement和context7_integration均设置为True。调用analyze_codebase方法,path参数设为源码目录,languages列表包含python、javascript和typescript,quality_threshold设为0.85。该方法将返回全面的质量分析结果。
如需基于TRUST 5的质量门验证,创建QualityGate实例并调用validate_trust5方法,传入codebase_path、test_coverage_threshold设为0.90、complexity_threshold设为10。
主动质量分析:初始化ProactiveQualityScanner,传入context7_client和BestPracticesEngine rule_engine。调用scan_codebase方法,传入path和scan_types列表,包含security、performance、maintainability和testing。调用generate_recommendations方法,传入issues、priority设为high、auto_fix设为enabled,生成改进建议。

Core Components

核心组件

Quality Orchestration Engine

质量编排引擎

The QualityOrchestrator class provides enterprise quality orchestration with TRUST 5 framework. Initialize with QualityConfig and create instances of TRUST5Validator, ProactiveScanner, BestPracticesEngine, Context7Client, and QualityMetricsCollector.
The analyze_codebase method performs comprehensive analysis in four phases. Phase 1 runs TRUST 5 validation on the codebase with specified thresholds. Phase 2 performs proactive analysis scanning focus areas. Phase 3 checks best practices for specified languages with Context7 docs enabled. Phase 4 collects comprehensive metrics from all analysis results.
The method returns QualityResult containing trust5_validation, proactive_analysis, best_practices, metrics, and overall_score calculated from all results.
Detailed implementations available in modules:
  • TRUST 5 Validator Implementation in trust5-validation.md
  • Proactive Scanner Implementation in proactive-analysis.md
  • Best Practices Engine Implementation in best-practices.md
QualityOrchestrator类提供基于TRUST 5框架的企业级质量编排能力。通过QualityConfig初始化,并创建TRUST5Validator、ProactiveScanner、BestPracticesEngine、Context7Client和QualityMetricsCollector实例。
analyze_codebase方法分四个阶段执行全面分析:阶段1对代码库运行TRUST 5验证并应用指定阈值;阶段2针对重点领域执行主动分析扫描;阶段3结合Context7文档检查指定语言的最佳实践;阶段4收集所有分析结果的综合指标。
该方法返回QualityResult对象,包含trust5_validation、proactive_analysis、best_practices、metrics以及基于所有结果计算的overall_score。
详细实现可查看以下模块:
  • TRUST 5验证器实现:trust5-validation.md
  • 主动扫描器实现:proactive-analysis.md
  • 最佳实践引擎实现:best-practices.md

Configuration and Customization

配置与自定义

Quality Configuration: Create quality-config.yaml with quality_orchestration section.
Under trust5_framework, set enabled to true with thresholds for overall (0.85), testable (0.90), readable (0.80), unified (0.85), secured (0.90), and trackable (0.80).
Under proactive_analysis, set enabled true, scan_frequency to daily, and focus_areas list including performance, security, maintainability, and technical_debt.
Under auto_fix, set enabled true, severity_threshold to medium, and confirmation_required to true.
Under best_practices, set enabled true, context7_integration true, auto_update_standards true, and compliance_target to 0.85.
Under language_rules, configure python with pep8 style_guide, black formatter, ruff linter, and mypy type_checker. Configure javascript with airbnb style_guide, prettier formatter, and eslint linter. Configure typescript with google style_guide, prettier formatter, and eslint linter.
Under reporting, set enabled true, metrics_retention_days to 90, trend_analysis true, and executive_dashboard true.
Under notifications, enable quality_degradation, security_vulnerabilities, and technical_debt_increase.
Integration Examples: See Integration Patterns for CI/CD Pipeline Integration, GitHub Actions Integration, Quality-as-Service REST API, and Cross-Project Benchmarking.
质量配置:创建quality-config.yaml文件,包含quality_orchestration配置段。
在trust5_framework下,设置enabled为true,并指定阈值:overall(0.85)、testable(0.90)、readable(0.80)、unified(0.85)、secured(0.90)、trackable(0.80)。
在proactive_analysis下,设置enabled为true,scan_frequency为daily,focus_areas列表包含performance、security、maintainability和technical_debt。
在auto_fix下,设置enabled为true,severity_threshold为medium,confirmation_required为true。
在best_practices下,设置enabled为true,context7_integration为true,auto_update_standards为true,compliance_target为0.85。
在language_rules下,配置python使用pep8 style_guide、black formatter、ruff linter和mypy type_checker;配置javascript使用airbnb style_guide、prettier formatter和eslint linter;配置typescript使用google style_guide、prettier formatter和eslint linter。
在reporting下,设置enabled为true,metrics_retention_days为90,trend_analysis为true,executive_dashboard为true。
在notifications下,启用quality_degradation、security_vulnerabilities和technical_debt_increase通知。
集成示例:查看集成模式中的CI/CD流水线集成、GitHub Actions集成、即服务质量(Quality-as-Service)REST API和跨项目基准对比。

Advanced Patterns

高级模式

Custom Quality Rules

自定义质量规则

Create CustomQualityRule class with name, validator callable, and severity defaulting to medium. The validate async method executes the validator on codebase, wrapping in try-except. On success, return RuleResult with rule_name, passed status, severity, details, and recommendations. On exception, return RuleResult with passed false, severity error, error details, and fix recommendation.
See Best Practices - Custom Rules for complete examples.
创建CustomQualityRule类,包含name、validator可调用对象,默认severity为medium。异步validate方法在代码库上执行validator,并用try-except包裹。成功时返回RuleResult对象,包含rule_name、passed状态、severity、详情和建议;异常时返回RuleResult对象,passed设为false,severity设为error,包含错误详情和修复建议。
完整示例请查看最佳实践 - 自定义规则

Machine Learning Quality Prediction

机器学习质量预测

ML-powered quality issue prediction using code feature extraction and predictive models. See Proactive Analysis - ML Prediction for implementation details.
基于代码特征提取和预测模型的机器学习驱动型质量问题预测。实现细节请查看主动分析 - 机器学习预测

Real-time Quality Monitoring

实时质量监控

Continuous quality monitoring with automated alerting for quality degradation and security vulnerabilities. See Proactive Analysis - Real-time Monitoring for implementation details.
持续质量监控,针对质量下降和安全漏洞自动发出警报。实现细节请查看主动分析 - 实时监控

Cross-Project Quality Benchmarking

跨项目质量基准对比

Compare project quality metrics against similar projects in your industry. See Integration Patterns - Benchmarking for implementation details.
将项目质量指标与行业内同类项目进行对比。实现细节请查看集成模式 - 基准对比

Module Reference

模块参考

Core Modules

核心模块

  • TRUST 5 Validation - Comprehensive quality framework validation
  • Proactive Analysis - Automated issue detection and improvements
  • Best Practices - Context7-powered standards enforcement
  • Integration Patterns - CI/CD and enterprise integrations
  • TRUST 5验证 - 全面的质量框架验证
  • 主动分析 - 自动化问题检测与改进
  • 最佳实践 - Context7驱动的标准强制执行
  • 集成模式 - CI/CD与企业级集成

Key Components by Module

各模块关键组件

TRUST 5 Validation: TRUST5Validator for five-pillar quality validation, TestableValidator for test coverage and quality, SecuredValidator for security and OWASP compliance, and quality gate pipeline integration.
Proactive Analysis: ProactiveQualityScanner for automated issue detection, QualityPredictionEngine for ML-powered predictions, RealTimeQualityMonitor for continuous monitoring, and performance and maintainability analysis.
Best Practices: BestPracticesEngine for standards validation, Context7 integration for latest docs, custom quality rules, and language-specific validators.
Integration Patterns: CI/CD pipeline integration, GitHub Actions workflows, Quality-as-Service REST API, and cross-project benchmarking.
TRUST 5验证:TRUST5Validator用于五大支柱质量验证,TestableValidator用于测试覆盖率与质量验证,SecuredValidator用于安全与OWASP合规性验证,以及质量门流水线集成。
主动分析:ProactiveQualityScanner用于自动化问题检测,QualityPredictionEngine用于机器学习驱动的预测,RealTimeQualityMonitor用于持续监控,以及性能与可维护性分析。
最佳实践:BestPracticesEngine用于标准验证,Context7集成用于获取最新文档,自定义质量规则,以及特定语言验证器。
集成模式:CI/CD流水线集成、GitHub Actions工作流、即服务质量(Quality-as-Service)REST API和跨项目基准对比。

Context7 Library Mappings

Context7库映射

Essential library mappings for quality analysis tools and frameworks. See Best Practices - Library Mappings for complete list.
质量分析工具与框架的核心库映射。完整列表请查看最佳实践 - 库映射

Works Well With

协同工具

Agents:
  • core-planner - Quality requirements planning
  • workflow-ddd - DDD implementation validation
  • security-expert - Security vulnerability analysis
  • code-backend - Backend code quality
  • code-frontend - Frontend code quality
Skills:
  • moai-foundation-core - TRUST 5 framework reference
  • moai-workflow-ddd - DDD workflow validation
  • moai-security-owasp - Security compliance
  • moai-context7-integration - Context7 best practices
  • moai-performance-optimization - Performance analysis
Commands:
  • /moai:2-run - DDD validation integration
  • /moai:3-sync - Documentation quality checks
  • /moai:9-feedback - Quality improvement feedback
Agents:
  • core-planner - 质量需求规划
  • workflow-ddd - DDD实现验证
  • security-expert - 安全漏洞分析
  • code-backend - 后端代码质量
  • code-frontend - 前端代码质量
Skills:
  • moai-foundation-core - TRUST 5框架参考
  • moai-workflow-ddd - DDD工作流验证
  • moai-security-owasp - 安全合规
  • moai-context7-integration - Context7最佳实践
  • moai-performance-optimization - 性能分析
Commands:
  • /moai:2-run - DDD验证集成
  • /moai:3-sync - 文档质量检查
  • /moai:9-feedback - 质量改进反馈

Quick Reference Summary

快速参考总结

Core Capabilities: TRUST 5 validation, proactive scanning, Context7-powered best practices, multi-language support, enterprise integration
Key Classes: QualityOrchestrator, TRUST5Validator, ProactiveQualityScanner, BestPracticesEngine, QualityMetricsCollector
Essential Methods: analyze_codebase(), validate_trust5(), scan_for_issues(), validate_best_practices(), generate_quality_report()
Integration Ready: CI/CD pipelines, GitHub Actions, REST APIs, real-time monitoring, cross-project benchmarking
Enterprise Features: Custom rules, ML prediction, real-time monitoring, benchmarking, comprehensive reporting
Quality Standards: OWASP compliance, TRUST 5 framework, Context7 integration, automated improvement recommendations
核心能力:TRUST 5验证、主动扫描、Context7驱动的最佳实践、多语言支持、企业级集成
关键类:QualityOrchestrator、TRUST5Validator、ProactiveQualityScanner、BestPracticesEngine、QualityMetricsCollector
核心方法:analyze_codebase()、validate_trust5()、scan_for_issues()、validate_best_practices()、generate_quality_report()
集成就绪:CI/CD流水线、GitHub Actions、REST API、实时监控、跨项目基准对比
企业级特性:自定义规则、机器学习预测、实时监控、基准对比、全面报告
质量标准:OWASP合规、TRUST 5框架、Context7集成、自动化改进建议