PDE Ecosystem Demo
What it is
The PDE Ecosystem Demo is the production-stable, publicly deployed reference implementation of the Professional Development Ecosystem — a framework for enforcing enterprise-grade quality, security, and maintainability across any software project. Where the PDE / IPDE page describes the philosophy, this is the deployed artefact: a pip-installable Python package, a compiled VS Code extension (.vsix), a containerised Flask dashboard, and a CI pipeline that validates everything across four Python versions on every push.
The core premise: quality gates, privacy protection, and automated analysis should be infrastructure, not afterthoughts. PDE wires those primitives into a single ecosystem any project can adopt with one command — and the demo repo is the proof that it works.
System layers
PrivacyQualityAgent with consent gating, 15+ sensitive data pattern detection (API keys, PII, credentials), Fernet encryption at rest, and right-to-delete. Local-only processing by default — code never leaves the machine.
/api/health, and docker-compose orchestration. Demo slice deployed to Vercel for public access.
Architecture
Quality thresholds enforced
Current CI test results
Quick start
Key design decisions
- Provider-agnostic stack detection: The project detector infers framework from file patterns, directory structure, and import signatures — no config required. The same CLI command works on a Django monolith and a React SPA.
- Privacy as a layer, not a feature:
PrivacyQualityAgentsubclasses the base agent and gates every operation through explicit consent checks. Sensitive data is filtered before analysis using 15+ pattern detectors, file paths are anonymised in reports, and GDPR right-to-delete is a first-class API method. - Multi-layer memory with encryption: Quality patterns are persisted in Redis for speed, backed to the ORM for durability, and sensitive fields are Fernet-encrypted (AES-128 CBC, PBKDF2 100k iterations) at rest — so cross-project learning never leaks project-specific context.
- GitHub Actions as the contract: The CI matrix (3.8–3.11, Redis, PostgreSQL) is the authoritative definition of "this works." Local dev is fast; the pipeline is the proof.
- Extension-backend separation: The VS Code extension hosts only the TypeScript UI layer; all analysis runs in the Python backend over WebSocket. Swapping the editor surface leaves the analysis engine untouched.
- Privacy module as first-class citizen: PII detection, anonymisation, consent management, and encryption live in a dedicated
pde/privacy/module — not bolted on after the fact.
Implementation phases
Relationship to PDE / IPDE
PDE / IPDE is the upstream vision — natural-language specs producing governed, reproducible code artefacts. The PDE Ecosystem Demo is what you run around that process: the quality infrastructure that validates, monitors, and persists everything PDE / IPDE generates. One converts intent to code; the other ensures that code meets the bar before it ships.