LASTMILE_
v1.0.0

System Architecture

Understanding how LastMile works under the hood to scan, analyze, and remediate your codebase.

System Overview

┌─────────────────────────────────────────────────────────────────┐
│                         YOUR CODEBASE                           │
└─────────────────────────────────────────────────────────────────┘
                              │
                              ▼
┌─────────────────────────────────────────────────────────────────┐
│                      LASTMILE CLI                              │
│  ┌─────────────┐  ┌─────────────┐  ┌─────────────┐              │
│  │   Scanner   │──│   Analyzer  │──│  Generator  │              │
│  └─────────────┘  └─────────────┘  └─────────────┘              │
└─────────────────────────────────────────────────────────────────┘
                              │
              ┌───────────────┼───────────────┐
              ▼               ▼               ▼
        ┌──────────┐   ┌──────────┐   ┌──────────┐
        │  Report  │   │   PRs    │   │  Deploy  │
        └──────────┘   └──────────┘   └──────────┘

Core Components

Scanner Engine

The scanner performs static analysis across your codebase, identifying patterns that indicate production gaps:

  • >AST parsing for JavaScript, TypeScript, Python, Go
  • >Configuration file analysis (env, yaml, json)
  • >Dependency vulnerability checking
  • >Infrastructure-as-code validation

5 LLM Deep Analyzers

Full-repo analysis using specialized LLM analyzers for context-aware detection:

  • >Security: secrets, injection, XSS, auth issues
  • >Testing: coverage gaps, missing test files
  • >Error Handling: silent failures, unhandled promises
  • >Database: N+1 queries, migrations, pooling
  • >Boilerplate: missing configs, Dockerfiles, CI/CD

Generator Engine

Creates actionable outputs from analysis results:

  • >HTML/JSON/Markdown reports
  • >Auto-generated pull requests with fixes
  • >Deployment manifests and configs

Data Flow

All processing happens locally by default. Your code never leaves your machine unless you explicitly enable remote syncing.

Privacy First: Scan results and generated fixes are stored locally. Remote sync is opt-in and uses end-to-end encryption.