zen4ttitude
Quick example: acf run "Add login rate-limiting to my FastAPI app"
Under the hood it's a 7-stage pipeline (Spec → Context gathering → Design → Implementation → Testing → Docker validation → Verification). Each stage feeds artifacts to the next, with optional human approval gates before anything risky (auth changes, secrets, etc.) gets committed. Every run creates a git branch with commits for each iteration—so you can diff, resume, or rollback easily. Key bits I find useful:
Routes tasks to different models based on needs (small one for summaries, code-specialized for generation, embedding for RAG). YAML policies for enforcement (e.g., block secrets, require >80% coverage, flag payment-code changes). RAG over your codebase so agents actually understand patterns, not just grep. Marketplace for extensions: someone writes a great security scanner skill or React profile with best practices → publish once, others install and plug in.
Why local? My code (especially proprietary stuff) stays mine. Modern local models (Qwen, Mistral variants, CodeLlama) handle most stages surprisingly well when you split work into focused agents instead of one giant prompt. The marketplace is live (though sparse), and extensions include context estimates so you know if it'll fit your hardware/model.
Current state: the core pipeline works reliably on my setup, but it's still early—one person can only test so much. Vision includes self-improving loops (learning from retry failures), configurable stages (skip Docker if you don't need it), shared policy packs for teams, and way more community extensions.
I'm looking for:
People running local models who want to stress-test with different sizes/backends Folks who've built code-review/transform agents/skills that could become extensions Security-minded people to poke at the policy system and scanners Anyone with ideas on making pipelines more composable or self-healing
Quick start (Python 3.11+, Ollama running): git clone https://github.com/Tennisee-data/acf.git cd acf pip install -e ".[dev]" acf run "Add login rate-limit" Repo: https://github.com/Tennisee-data/acf Happy to dive into the agent routing, policy engine, how the git integration works, or why I think shared local extensions could be a game-changer for offline/dev privacy workflows. What do you think—useful? Missing pieces? Fire away.
(And yes, it's possible to monetize more advanced/complex extensions if someone wants to support ongoing work, but that's secondary—the focus is open collaboration.)
Show HN: ACF – Local AI code generation pipeline with marketplace extensions
Local AI Manifesto
# memory/store.py
OUTCOME_WEIGHTS = {
RunOutcome.SUCCESS: 1.0, # Full weight
RunOutcome.PARTIAL: 0.7, # Some issues but shipped
RunOutcome.FAILED: 0.3, # Downweighted but still findable
RunOutcome.CANCELLED: 0.2, # Minimal weight
}
# Applied during scoring:
final_score = score * decay_factor * outcome_weight
C: Anti-Pattern Retrieval
# Similar features → SUCCESS/PARTIAL only
similar_features = store.search(..., outcome_filter=[SUCCESS, PARTIAL])
# Anti-patterns → FAILED only (separate section)
anti_patterns = store.search(..., outcome_filter=[FAILED])
Injected into agent prompt:
## Similar Past Features (Successful)
1. "Add rate limiting with Redis..." (Outcome: success, Score: 0.87)
## Anti-Patterns (What NOT to Do)
_These similar attempts failed - avoid these approaches:_
1. "Add rate limiting with in-memory..." (FAILED, Score: 0.72)
## Watch Out For
- **Redis connection timeout**: Set connection pool size
The flow now:
Query: "Add rate limiting"
│
├──► Similar successful features (ranked by outcome × decay × similarity)
│
├──► Failed attempts (shown as warnings)
│
└──► Agent sees both "what worked" AND "what didn't"I enjoyed this experience of CLI coding so much that I developed Market Sentiment parsing 300,000 business articles and news daily, a dividend based strategy with calendar of payouts and AI optimised strategies to extract every drop of interest, an alert system for a strategy you backtested in the playground and its key triggers are tracked automatically so you can react, an ETF risk analysis model with external factors, all quant graphs and then some, time models with Markov, candlestick patterns, Monte Carlo simulation, walk forward and other approaches I had learned over the years. There is much more.
I know you don't measure a project in terms of lines of code, but these are optimised, verified, tested, debugged and deployed. There are so much features, because I was having fun and got carried away. I'm semi-retired and this is like having my web agency back again.
I used to program in GRASP... I have a data scientist certification, did a lot of Python, Machine Learning, NLP, etc. I really enjoy the prompt based development process as it seems like you are reaching the right resource for your question from a staff of experienced dev. Of course you need to check everything as a junior dev always creeps in when you least expect it. Especially for security. Discuss best practices often and do your research on touchy subjects. Compare various AI on the same topic. GROK has really caught up. OpenAI has slowed down. CLAUDE is simply amazing. This AI thing is work in progress and constantly changing.
I have a noticed an amazing progression over the past year. I have a feeling their models are retrained, tweaked on our interactions even if you asked for them not to use the data. The temptation is too high and the payoffs abound in this market for the best AI tools.
I'm building a code factory now with agents and key checkpoints for every step. I want to remove human intervention from multiple sub steps that are time consuming so I can be even more productive in 2026...