
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
corbat-coco
Advanced tools
Autonomous Coding Agent with Self-Review, Quality Convergence, and Production-Ready Output
Autonomous Coding Agent with Self-Review, Quality Convergence, and Production-Ready Output
Quick Start • Features • Methodology • Examples • Docs
Corbat-Coco is an autonomous coding agent that transforms natural language requirements into production-ready code. Unlike other AI coding tools, it iteratively improves code until it meets senior-level quality standards.
"Every line of code must be worthy of a senior engineer's signature."
| Feature | Cursor/Copilot | Claude Code | Corbat-Coco |
|---|---|---|---|
| Generate code | ✅ | ✅ | ✅ |
| Self-review loops | ❌ | ❌ | ✅ |
| Quality scoring | ❌ | ❌ | ✅ (11 dimensions) |
| Architecture planning | Basic | Basic | ✅ Full ADR system |
| Progress persistence | ❌ | Session | ✅ Checkpoints |
| Production deployment | ❌ | ❌ | ✅ CI/CD generation |
# Using npm
npm install -g corbat-coco
# Using pnpm (recommended)
pnpm add -g corbat-coco
# Verify installation
coco --version
coco init my-project # Initialize & describe what you want
coco plan # Generate architecture & backlog
coco build # Build with quality iteration
$ coco init my-api
🚀 Welcome to Corbat-Coco!
? What would you like to build?
> A REST API for task management with user authentication
? Tech stack preferences?
> TypeScript, Express, PostgreSQL, JWT auth
📋 Specification generated!
$ coco plan
📐 Designing architecture...
✓ ADR-001: Express.js framework
✓ ADR-002: JWT authentication
✓ ADR-003: PostgreSQL with Prisma
📝 Backlog: 2 epics, 8 stories, 24 tasks
$ coco build
🔨 Building Sprint 0...
Task 1/6: User entity ✓ (3 iterations, score: 92/100)
Task 2/6: Auth service ✓ (4 iterations, score: 89/100)
...
📊 Sprint Complete!
├─ Average quality: 90/100
├─ Test coverage: 87%
└─ Security issues: 0
For day-to-day development work on existing projects, use coco task to execute specific tasks:
$ cd my-existing-backend
$ coco task
? Describe your task (paste from Jira, GitHub issue, etc.):
> ## JIRA-1234: Add GET endpoint for user orders
>
> **Story Points:** 5
> **Acceptance Criteria:**
> - Create GET /api/v1/users/{userId}/orders endpoint
> - Return paginated list of orders (default: 20 items)
> - Support query params: status, fromDate, toDate, page, size
> - Include order items in response
> - Return 404 if user not found
> - Add unit tests (>80% coverage)
> - Update OpenAPI spec
🔍 Analyzing codebase...
✓ Detected: Java 17 + Spring Boot 3.2
✓ Found: OrderRepository, UserRepository, existing /api/v1/* structure
✓ Style: Following existing patterns in UserController.java
📋 Task breakdown:
1. Create OrderController with GET endpoint
2. Create OrderService with business logic
3. Create OrderDTO and OrderPageDTO
4. Add validation and error handling
5. Write unit tests for Service layer
6. Write integration tests for Controller
7. Update OpenAPI documentation
? Proceed with implementation? (Y/n) Y
🔨 Executing task...
Step 1/7: OrderController ✓ (2 iterations, score: 94/100)
→ Created: src/main/java/com/example/controller/OrderController.java
→ Follows existing controller patterns
Step 2/7: OrderService ✓ (3 iterations, score: 91/100)
→ Created: src/main/java/com/example/service/OrderService.java
→ Using existing OrderRepository
Step 3/7: DTOs ✓ (1 iteration, score: 96/100)
→ Created: OrderDTO.java, OrderPageDTO.java, OrderFilterDTO.java
Step 4/7: Error handling ✓ (2 iterations, score: 93/100)
→ Added: UserNotFoundException handling
→ Updated: GlobalExceptionHandler.java
Step 5/7: Unit tests ✓ (2 iterations, score: 89/100)
→ Created: OrderServiceTest.java (12 tests)
→ Coverage: 94%
Step 6/7: Integration tests ✓ (3 iterations, score: 88/100)
→ Created: OrderControllerIntegrationTest.java (8 tests)
Step 7/7: OpenAPI ✓ (1 iteration, score: 97/100)
→ Updated: openapi.yaml with new endpoint schema
📊 Task Complete!
├─ Files created: 6
├─ Files modified: 2
├─ Tests added: 20 (all passing)
├─ Coverage: 92%
├─ Average quality: 92/100
└─ Time: 12 minutes
? Create commit? (Y/n) Y
✓ Committed: feat(orders): add GET endpoint for user orders [JIRA-1234]
? Push to remote? (Y/n) Y
✓ Pushed to origin/feature/JIRA-1234-user-orders
Pro tips for existing projects:
coco task --dry-run to preview without changescoco task --no-commit to skip auto-commitCode is automatically reviewed and improved until it meets quality standards:
Generate → Test → Review → Improve → Repeat until excellent
11 dimensions measured on every iteration:
| Dimension | Weight | Description |
|---|---|---|
| Correctness | 15% | Tests pass, logic correct |
| Completeness | 10% | All requirements met |
| Robustness | 10% | Edge cases handled |
| Readability | 10% | Code clarity |
| Maintainability | 10% | Easy to modify |
| Complexity | 8% | Cyclomatic complexity |
| Duplication | 7% | DRY score |
| Test Coverage | 10% | Line/branch coverage |
| Test Quality | 5% | Test meaningfulness |
| Security | 8% | No vulnerabilities |
| Documentation | 4% | Doc coverage |
| Style | 3% | Linting compliance |
Never lose progress:
Generated automatically:
Outputs ready for deployment:
Four phases from idea to deployment:
┌──────────┐ ┌────────────┐ ┌──────────┐ ┌────────┐
│ CONVERGE │ → │ ORCHESTRATE│ → │ COMPLETE │ → │ OUTPUT │
└──────────┘ └────────────┘ └──────────┘ └────────┘
│ │ │ │
Understand Plan & Execute & Deploy &
Requirements Design Iterate Document
| Phase | Purpose | Output |
|---|---|---|
| Converge | Understand requirements through Q&A | Specification document |
| Orchestrate | Design architecture, create plan | ADRs, Backlog, Standards |
| Complete | Build with quality iteration | Quality code + tests |
| Output | Prepare for production | CI/CD, Docs, Deployment |
# New projects
coco init [path] # Initialize new project
coco plan # Run discovery and planning
coco build # Execute tasks with quality iteration
coco build --sprint=N # Build specific sprint
# Existing projects (day-to-day workflow)
coco task # Execute a single task (Jira, GitHub issue, etc.)
coco task --dry-run # Preview changes without applying
coco task --no-commit # Skip auto-commit after task
# Utilities
coco status # Show current progress
coco status --verbose # Detailed status
coco resume # Resume from checkpoint
coco config set <key> <value> # Configure settings
coco config get <key> # Get configuration value
Configuration is stored in .coco/config.json:
{
"project": {
"name": "my-project",
"version": "0.1.0"
},
"provider": {
"type": "anthropic",
"model": "claude-sonnet-4-20250514"
},
"quality": {
"minScore": 85,
"minCoverage": 80,
"maxIterations": 10,
"convergenceThreshold": 2
},
"persistence": {
"checkpointInterval": 300000,
"maxCheckpoints": 50
}
}
| Setting | Default | Description |
|---|---|---|
minScore | 85 | Minimum quality score (0-100) |
minCoverage | 80 | Minimum test coverage (%) |
maxIterations | 10 | Max iterations per task |
convergenceThreshold | 2 | Score delta to consider converged |
See the examples/ directory for complete examples:
| Example | Description | Time |
|---|---|---|
| REST API (TypeScript) | Task management API with auth | ~30 min |
| CLI Tool | Image processing CLI | ~25 min |
| Spring Boot (Java) | Order management microservice | ~40 min |
export ANTHROPIC_API_KEY="sk-ant-..." # Required
export COCO_CONFIG_PATH="..." # Optional: custom config path
# Clone the repository
git clone https://github.com/corbat/corbat-coco.git
cd corbat-coco
# Install dependencies
pnpm install
# Run in development
pnpm dev --help
# Run tests
pnpm test
# Run all checks
pnpm check # typecheck + lint + test
# Build
pnpm build
Contributions are welcome! Please read the Contributing Guide first.
git checkout -b feat/amazing-feature)pnpm check)export ANTHROPIC_API_KEY="sk-ant-..."
.coco/versions/task-XXX/maxIterationscoco resume --from-checkpoint=<id>
# Or start fresh:
coco build --restart
For more help, see Issues.
MIT License - see LICENSE for details.
Built with ❤️ by Corbat
FAQs
Autonomous Coding Agent with Self-Review, Quality Convergence, and Production-Ready Output
The npm package corbat-coco receives a total of 7 weekly downloads. As such, corbat-coco popularity was classified as not popular.
We found that corbat-coco demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.