Hikaflow VS Code Extension

AI-powered code analysis, impact detection, and development intelligence for VS Code.

Features

Pre-Commit Analysis

• Developer Impact Report: Comprehensive analysis of your changes with severity ratings, evidence, and improvement suggestions
• Check Readiness: Assess whether changes are ready to commit with test coverage and risk analysis
• Release Impact Report: Full release impact analysis across all changed files
• Regression Risk Detector: Cross-references diff, git history, and runtime errors to predict regression risk per file
• Change Summary: Quick summary of blast radius, breaking changes, and test gaps

Impact Analysis

• Blast Radius: Compiler-accurate dependency tracking shows exactly which files are affected by your changes
• Confidence Scoring: Signal-based confidence system (high/medium/low) with provenance tracking
• Gutter Decorations: Colored dots in the editor gutter show risk level at a glance

Code Quality

• Hotspot Heatmap: Files ranked by change frequency, complexity, and risk factors
• Circular Dependency Detection: Find and visualize import cycles using Tarjan's algorithm
• Unused Export Detection: Identify dead code that can be safely removed
• Code Health Scoring: Aggregate health score for files based on multiple signals
• Risky Files: Flag files with low health scores

AI-Powered Intelligence

• Explain This File: AI explanation of a file's purpose and structure
• Generate Tests (AI): Generate comprehensive unit tests with proper mocking
• Explain Breaking Changes: Get AI explanations with migration steps
• Explain Dependencies: Understand why files are connected and coupling levels
• PR Summary Generation: Auto-generate PR descriptions from your changes
• Commit Message Generation: Generate conventional commit messages
• Catch Me Up: Summarize recent git changes to get up to speed
• Generate Docs: Generate documentation for selected code

Code Navigation (Call Hierarchy)

• Find Callers / Callees: Navigate callers and callees of any function via dedicated tree views
• Call Chain Visualization: Full call chain webview for understanding execution paths

Fix Safely (Build Agent)

• AI-Assisted Fixes: Start a fix session with validation guards (typecheck + impacted tests)
• Dedicated Sidebar: Monitor fix progress, review diffs, and apply changes
• Enriched Context: Integrates history, fragility, impact, call hierarchy, and business criticality analysis

Smart Testing

• Impacted Test Discovery: Automatically find tests affected by your changes
• Shadow Validation: Background test validation on idle
• Test Gap Analysis: Identify coverage gaps with complexity-weighted risk

Runtime Telemetry (Sentry)

• Sentry Integration: Connect your Sentry account for runtime error analysis
• Error Mapping: View Sentry errors mapped to your local files
• Stack Trace Resolution: Decode and navigate production stack traces with source maps

Trust Modes

Three modes control warning sensitivity:

• Strict: Lower thresholds, more warnings (blast radius threshold: 3)
• Balanced: Default sensible warnings (blast radius threshold: 5)
• Quiet: Higher thresholds, fewer warnings (blast radius threshold: 10)

Modes can come from .hikaflow.json in repo root or VS Code settings.

Privacy & Security

• Privacy Gate: All content is sanitized before sending to LLM
• Secret Detection: Auto-redacts API keys, tokens, passwords (12+ patterns)
• Audit Logging: Track all LLM requests (content never logged)
• Preview Mode: Review what will be sent before any LLM request

CI/CD Integration

• Export Reports: Generate deterministic JSON reports for CI pipelines
• Breaking Change Detection: Catch API/schema changes before they ship

Institutional Memory

• Git History Mining: Analyze git history for fragility patterns (reverts, bug-fix clusters, churn)
• Fragility Scoring: Score files based on historical incident data
• CodeLens Indicators: See fragility indicators inline in the editor

Commands

Pre-Commit Analysis

Impact Analysis

AI-Powered

Code Navigation

Code Quality

Testing

Fix Safely (Build Agent)

Runtime & Sentry

CI/CD & Export

Privacy

Configuration

Configuration

.hikaflow.json (Repository Config)

Place a .hikaflow.json file in your repository root to configure project-specific settings:

{
  "mode": "balanced",
  "framework": "nextjs",
  "domainKeywords": ["checkout", "payment", "auth"]
}

VS Code Settings

See hikaflow.* settings in VS Code preferences for full configuration. Key settings:

Architecture

src/
├── core/
│   ├── DependencyGraph.ts           # Central import/export graph
│   ├── ImpactCalculator.ts          # Blast radius and risk levels
│   ├── AnalysisScheduler.ts         # Debounced analysis orchestration
│   ├── BusinessCriticalityDetector.ts
│   ├── SemanticAffinityScorer.ts
│   ├── typescript/                  # TypeScript Language Service adapter
│   │   ├── TypeScriptLanguageServiceAdapter.ts
│   │   ├── SymbolResolver.ts
│   │   └── CallHierarchyResolver.ts
│   ├── callgraph/                   # Call graph analysis
│   │   ├── CallGraphBuilder.ts
│   │   ├── CallGraphWatcher.ts
│   │   └── CrossFileChainTracker.ts
│   ├── signals/                     # Signal confidence system
│   │   ├── SignalGateway.ts
│   │   └── SignalExplainer.ts
│   ├── privacy/                     # Privacy gate system
│   │   ├── PrivacyGate.ts
│   │   ├── ContentSanitizer.ts
│   │   └── AuditLog.ts
│   ├── calibration/                 # Threshold calibration
│   └── IntegrationWiring.ts         # Connects all subsystems
├── features/
│   ├── blastRadius/                 # Gutter decorations
│   ├── breakingChangeGuard/         # API/schema change detection
│   ├── callHierarchy/               # Call hierarchy tree views
│   ├── chatAgent/                   # Mastra-based chat agent
│   ├── checkReadiness/              # Commit readiness analysis
│   │   └── frameworkProfiles/       # Framework-specific profiles
│   ├── ciExport/                    # CI/CD report generation
│   ├── codeActionAutomation/        # Smart fix suggestions
│   ├── confidenceScore/             # Confidence aggregation
│   ├── contextHud/                  # CodeLens context display
│   ├── fixSafely/                   # Build Agent (AI-assisted fixes)
│   ├── institutionalMemory/         # Git history fragility
│   ├── intelligenceHub/             # Circular deps, unused exports, health
│   ├── llmIntelligence/             # Verdict synthesis, risk intelligence
│   ├── preCommitSummary/            # Change summary webview
│   ├── refactorPropagation/         # Refactor detection and propagation
│   ├── refactoringWorkflow/         # Multi-step refactoring workflows
│   ├── regressionRisk/              # Regression risk detector
│   ├── runtimeTelemetry/            # Sentry integration
│   ├── shadowValidation/            # Background test validation
│   ├── smartTesting/                # Test impact analysis
│   ├── taskPrioritization/          # Hotspot and priority analysis
│   ├── testGapAnalysis/             # Coverage gap detection
│   ├── trustModes/                  # Strict/balanced/quiet modes
│   ├── unifiedCodeLens/             # Verdict CodeLens
│   ├── unifiedSidebar/              # Simplified sidebar
│   └── unifiedStatusBar/            # Consolidated status bar
├── commands/                        # Command registrations
├── services/                        # Auth, API, Git, Cache
├── workers/                         # Background worker isolation
└── views/                           # UI components

Data Flow: File Edit -> AnalysisScheduler -> DependencyGraph -> ImpactCalculator -> Signal Wrapper -> SignalGateway -> UI

Development

# Install dependencies
npm install
cd webview-ui && npm install && cd ..

# Build extension + webview
npm run build

# Watch mode (extension + webview)
npm run dev

# Run tests
npm test

# Package extension
npm run package

Testing

# Unit tests (Vitest)
npm test

# Watch mode
npm run test:watch

# Coverage
npm run test:coverage

# Golden snapshot tests
npm run test:golden

License

MIT