feat: rewrite Prowler Studio to use Claude Agent SDK

[puchy22]

Overview

Complete rewrite of Prowler Studio using Claude Agent SDK for automated Prowler security check creation. This implementation features a modular agent-based architecture with self-correcting workflows and comprehensive quality tooling.

Key Changes

🏗️ Architecture

• Agent-Based Design: Modular agents for different tasks (implementation, testing, PR creation)
• Claude Agent SDK Integration: Leverages latest SDK with MCP server support
• Self-Correcting Workflow: Automated verification and fix loops (up to 5 attempts)
• Type-Safe Codebase: Full Python type hints with strict mypy checking

🤖 Core Components

ChecKreatorAgent

• Creates Prowler checks from markdown tickets
• Automatic check discovery from git changes
• Verification loop that ensures checks load correctly
• Custom MCP server with mkcheck tool

Shared Tools

• Git operations: Repository preparation and branch management
• Prowler tools: Dependency installation and check verification
• Typed result models with Pydantic

Infrastructure

• CLI with Typer framework
• Jinja2 template-based prompt management
• Comprehensive error handling

🧪 Quality Assurance

Pre-commit hooks enforce:

• Ruff: Fast linting and formatting
• mypy: Strict type checking
• pyupgrade: Python 3.12+ syntax
• Bandit: Security vulnerability scanning
• interrogate: Docstring coverage (80% minimum)
• Commitizen: Conventional commit messages

Files Changed

• 14 Python files in src/ directory
• Configuration: pyproject.toml, .pre-commit-config.yaml, uv.lock
• Documentation: README.md, AGENTS.md, LICENSE

Commit Structure

1. Core infrastructure and CLI framework
2. Agent base class and architecture
3. Git and Prowler tools
4. Prompt loading utilities
5. ChecKreatorAgent implementation
6. Documentation

Usage

# Install dependencies
uv sync

# Create a check from a ticket
prowler-studio create-check check_ticket.md feat/my_new_check

Architecture Benefits

• Extensible: Add new agents without modifying existing code
• Maintainable: Clear separation of concerns with typed interfaces
• Reliable: Self-correcting verification loops ensure quality
• Developer-Friendly: Comprehensive documentation and best practices guide

Future Enhancements

• TestingAgent for automated test creation
• PRCreationAgent for GitHub PR automation
• ReviewSummaryAgent for code review summaries

Testing

• Manual test: Create check from ticket
• Verify check loads in Prowler
• Test verification loop with intentional errors
• Run all pre-commit hooks successfully