@cleartrip/frontguard 1.0.0 → 1.0.1

package/dist/cli.js

@@ -2628,23 +2628,18 @@ If **Yes**, list tools and what they touched (helps reviewers run a stricter fir
 ## AI assistance (optional detail)
 - [ ] I have reviewed every AI-suggested line for security, auth, and product correctness
 `;
-var FRONTGUARD_STEP_YAML = `      - step:
-          name: FrontGuard \u2014 report + PR comment
-          caches:
-            - node
-          artifacts:
-            - frontguard-report.html
-            - frontguard-report.md
-            - frontguard-pr-comment.partial.md
-          script:
-            - corepack enable
-            - yarn install --immutable || yarn install
-            - |
-              yarn frontguard run --markdown \\
-                --htmlOut frontguard-report.html \\
-                --prCommentOut frontguard-pr-comment.partial.md \\
-                > frontguard-report.md
-            - test -n "\${BITBUCKET_ACCESS_TOKEN:-}" || { echo "Missing secured var BITBUCKET_ACCESS_TOKEN"; exit 1; }
+async function detectPackageManager(cwd) {
+  const [hasYarnLock, hasPnpmLock, hasNpmLock] = await Promise.all([
+    fileExists(path6.join(cwd, "yarn.lock")),
+    fileExists(path6.join(cwd, "pnpm-lock.yaml")),
+    fileExists(path6.join(cwd, "package-lock.json"))
+  ]);
+  if (hasYarnLock) return "yarn";
+  if (hasPnpmLock) return "pnpm";
+  if (hasNpmLock) return "npm";
+  return "npm";
+}
+var UPLOAD_AND_COMMENT_SCRIPT = `            - test -n "\${BITBUCKET_ACCESS_TOKEN:-}" || { echo "Missing secured var BITBUCKET_ACCESS_TOKEN"; exit 1; }
             - |
               python3 << 'PY'
               import json
@@ -2700,20 +2695,70 @@ var FRONTGUARD_STEP_YAML = `      - step:
                 --header 'Content-Type: application/json' \\
                 --header "Authorization: Bearer \${BITBUCKET_ACCESS_TOKEN}" \\
                 --data @frontguard-payload.json`;
+function buildFrontGuardStepYaml(pm) {
+  const installLines = [];
+  const runLine = [];
+  if (pm === "yarn") {
+    installLines.push(
+      "            - corepack enable",
+      "            - yarn install --immutable || YARN_ENABLE_IMMUTABLE_INSTALLS=false yarn install"
+    );
+    runLine.push(
+      "            - |",
+      "              yarn frontguard run --markdown \\",
+      "                --htmlOut frontguard-report.html \\",
+      "                --prCommentOut frontguard-pr-comment.partial.md \\",
+      "                > frontguard-report.md"
+    );
+  } else if (pm === "pnpm") {
+    installLines.push(
+      "            - corepack enable",
+      "            - pnpm install --frozen-lockfile || pnpm install"
+    );
+    runLine.push(
+      "            - |",
+      "              pnpm exec frontguard run --markdown \\",
+      "                --htmlOut frontguard-report.html \\",
+      "                --prCommentOut frontguard-pr-comment.partial.md \\",
+      "                > frontguard-report.md"
+    );
+  } else {
+    installLines.push("            - npm ci || npm install");
+    runLine.push(
+      "            - |",
+      "              npx frontguard run --markdown \\",
+      "                --htmlOut frontguard-report.html \\",
+      "                --prCommentOut frontguard-pr-comment.partial.md \\",
+      "                > frontguard-report.md"
+    );
+  }
+  return `      - step:
+          name: FrontGuard \u2014 report + PR comment
+          caches:
+            - node
+          artifacts:
+            - frontguard-report.html
+            - frontguard-report.md
+            - frontguard-pr-comment.partial.md
+          script:
+${installLines.join("\n")}
+${runLine.join("\n")}
+${UPLOAD_AND_COMMENT_SCRIPT}`;
+}
 var FRONTGUARD_MARKER = "FrontGuard";
 function hasFrontGuardStep(content) {
   return content.includes(FRONTGUARD_MARKER);
 }
-function mergePipelineStep(existing) {
+function mergePipelineStep(existing, stepYaml) {
   if (hasFrontGuardStep(existing)) {
     return existing;
   }
   const lines = existing.split("\n");
   const prSectionIdx = findPullRequestsSection(lines);
   if (prSectionIdx !== null) {
-    return injectStepIntoPrSection(lines, prSectionIdx);
+    return injectStepIntoPrSection(lines, prSectionIdx, stepYaml);
   }
-  return appendPrSection(lines);
+  return appendPrSection(lines, stepYaml);
 }
 function findPullRequestsSection(lines) {
   for (let i3 = 0; i3 < lines.length; i3++) {
@@ -2742,19 +2787,19 @@ function findLastStepEnd(lines, afterBranch) {
   }
   return lastContentLine;
 }
-function injectStepIntoPrSection(lines, prIdx) {
+function injectStepIntoPrSection(lines, prIdx, stepYaml) {
   const branchIdx = findBranchPattern(lines, prIdx);
   if (branchIdx !== null) {
     const insertAfter = findLastStepEnd(lines, branchIdx);
     const before = lines.slice(0, insertAfter + 1);
     const after = lines.slice(insertAfter + 1);
-    return [...before, FRONTGUARD_STEP_YAML, ...after].join("\n");
+    return [...before, stepYaml, ...after].join("\n");
   }
   const result = [...lines];
-  result.splice(prIdx + 1, 0, "    '**':", FRONTGUARD_STEP_YAML);
+  result.splice(prIdx + 1, 0, "    '**':", stepYaml);
   return result.join("\n");
 }
-function appendPrSection(lines) {
+function appendPrSection(lines, stepYaml) {
   const pipelinesIdx = lines.findIndex((l3) => /^pipelines:\s*$/.test(l3));
   if (pipelinesIdx === -1) {
     return [
@@ -2763,7 +2808,7 @@ function appendPrSection(lines) {
       "pipelines:",
       "  pull-requests:",
       "    '**':",
-      FRONTGUARD_STEP_YAML
+      stepYaml
     ].join("\n");
   }
   let insertAt = pipelinesIdx + 1;
@@ -2787,7 +2832,7 @@ function appendPrSection(lines) {
     ...before,
     "  pull-requests:",
     "    '**':",
-    FRONTGUARD_STEP_YAML,
+    stepYaml,
     ...after
   ].join("\n");
 }
@@ -2804,6 +2849,7 @@ function findEndOfLastSection(lines, pipelinesIdx) {
 }
 async function initFrontGuard(cwd) {
   const actions = [];
+  const pm = await detectPackageManager(cwd);
   const cfgCandidates = [
     "frontguard.config.mjs",
     "frontguard.config.js",
@@ -2826,15 +2872,16 @@ async function initFrontGuard(cwd) {
   } else {
     actions.push("pull_request_template.md already exists (skipped)");
   }
+  const stepYaml = buildFrontGuardStepYaml(pm);
   const pipelinePath = path6.join(cwd, "bitbucket-pipelines.yml");
   if (await fileExists(pipelinePath)) {
     const existing = await fs.readFile(pipelinePath, "utf8");
     if (hasFrontGuardStep(existing)) {
       actions.push("bitbucket-pipelines.yml already has FrontGuard step (skipped)");
     } else {
-      const merged = mergePipelineStep(existing);
+      const merged = mergePipelineStep(existing, stepYaml);
       await fs.writeFile(pipelinePath, merged, "utf8");
-      actions.push("merged FrontGuard step into bitbucket-pipelines.yml pull-requests");
+      actions.push(`merged FrontGuard step into bitbucket-pipelines.yml (${pm})`);
     }
   } else {
     await fs.writeFile(
@@ -2848,12 +2895,12 @@ async function initFrontGuard(cwd) {
         "pipelines:",
         "  pull-requests:",
         "    '**':",
-        FRONTGUARD_STEP_YAML,
+        stepYaml,
         ""
       ].join("\n"),
       "utf8"
     );
-    actions.push("created bitbucket-pipelines.yml with FrontGuard step");
+    actions.push(`created bitbucket-pipelines.yml with FrontGuard step (${pm})`);
   }
   return actions;
 }