@dependabit/manifest 0.1.13 → 0.1.15

package/src/manifest.ts

@@ -1,278 +0,0 @@
-import { readFile, writeFile, mkdir } from 'node:fs/promises';
-import { dirname } from 'node:path';
-import { type DependencyManifest, type DependencyEntry } from './schema.js';
-import { validateManifest, validateDependencyEntry, safeValidateManifest } from './validator.js';
-
-/**
- * Read and parse a manifest file
- */
-export async function readManifest(path: string): Promise<DependencyManifest> {
-  const content = await readFile(path, 'utf-8');
-  const data = JSON.parse(content);
-  return validateManifest(data);
-}
-
-/**
- * Write a manifest to file
- */
-export async function writeManifest(
-  path: string,
-  manifest: DependencyManifest,
-  options?: { strict?: boolean }
-): Promise<{ validationErrors?: string[] }> {
-  const strict = options?.strict ?? false;
-  const result: { validationErrors?: string[] } = {};
-
-  // Validate before writing
-  const validation = safeValidateManifest(manifest);
-  if (!validation.success) {
-    const errors = validation.error!.getFormattedErrors();
-    if (strict) {
-      throw validation.error!;
-    }
-    // Non-strict: record warnings but still write the manifest
-    result.validationErrors = errors;
-  }
-
-  // Ensure directory exists
-  await mkdir(dirname(path), { recursive: true });
-
-  // Write formatted JSON
-  const content = JSON.stringify(manifest, null, 2);
-  await writeFile(path, content, 'utf-8');
-
-  return result;
-}
-
-/**
- * Update a dependency entry in the manifest
- */
-export async function updateDependency(
-  path: string,
-  dependencyId: string,
-  updates: Partial<DependencyEntry>
-): Promise<DependencyManifest> {
-  const manifest = await readManifest(path);
-
-  const dep = manifest.dependencies.find((d) => d.id === dependencyId);
-  if (!dep) {
-    throw new Error(`Dependency with id ${dependencyId} not found`);
-  }
-
-  // Update the dependency in place
-  Object.assign(dep, updates);
-
-  // Validate the merged dependency
-  validateDependencyEntry(dep);
-
-  // Update statistics
-  manifest.statistics = calculateStatistics(manifest.dependencies);
-
-  // Write back
-  await writeManifest(path, manifest);
-
-  return manifest;
-}
-
-/**
- * Add a new dependency to the manifest
- */
-export async function addDependency(
-  path: string,
-  dependency: DependencyEntry
-): Promise<DependencyManifest> {
-  const manifest = await readManifest(path);
-
-  // Check for duplicates by ID or URL
-  const existingById = manifest.dependencies.find((dep) => dep.id === dependency.id);
-  const existingByUrl = manifest.dependencies.find((dep) => dep.url === dependency.url);
-
-  if (existingById) {
-    throw new Error(`Dependency with id ${dependency.id} already exists`);
-  }
-
-  if (existingByUrl) {
-    throw new Error(`Dependency with url ${dependency.url} already exists`);
-  }
-
-  // Add dependency
-  manifest.dependencies.push(dependency);
-
-  // Update statistics
-  manifest.statistics = calculateStatistics(manifest.dependencies);
-
-  // Write back
-  await writeManifest(path, manifest);
-
-  return manifest;
-}
-
-/**
- * Remove a dependency from the manifest
- */
-export async function removeDependency(
-  path: string,
-  dependencyId: string
-): Promise<DependencyManifest> {
-  const manifest = await readManifest(path);
-
-  const index = manifest.dependencies.findIndex((dep) => dep.id === dependencyId);
-  if (index === -1) {
-    throw new Error(`Dependency with id ${dependencyId} not found`);
-  }
-
-  // Remove dependency
-  manifest.dependencies.splice(index, 1);
-
-  // Update statistics
-  manifest.statistics = calculateStatistics(manifest.dependencies);
-
-  // Write back
-  await writeManifest(path, manifest);
-
-  return manifest;
-}
-
-/**
- * Merge two manifests, preserving manual entries
- * Manual entries are those with detectionMethod === 'manual'
- */
-export function mergeManifests(
-  existing: DependencyManifest,
-  updated: DependencyManifest,
-  options: {
-    preserveManual?: boolean;
-    preserveHistory?: boolean;
-  } = {}
-): DependencyManifest {
-  const { preserveManual = true, preserveHistory = true } = options;
-
-  // Create a deep copy of the updated manifest to avoid mutations
-  const merged: DependencyManifest = {
-    ...updated,
-    dependencies: updated.dependencies.map((dep) => ({
-      ...dep,
-      changeHistory: dep.changeHistory ? [...dep.changeHistory] : [],
-      referencedIn: dep.referencedIn ? [...dep.referencedIn] : []
-    }))
-  };
-
-  if (preserveManual) {
-    // Find manual entries in existing manifest
-    const manualEntries = existing.dependencies.filter((dep) => dep.detectionMethod === 'manual');
-
-    // Add manual entries that aren't in the updated manifest
-    for (const manualEntry of manualEntries) {
-      const existsInUpdated = merged.dependencies.some(
-        (dep) => dep.id === manualEntry.id || dep.url === manualEntry.url
-      );
-
-      if (!existsInUpdated) {
-        merged.dependencies.push({
-          ...manualEntry,
-          changeHistory: manualEntry.changeHistory ? [...manualEntry.changeHistory] : [],
-          referencedIn: manualEntry.referencedIn ? [...manualEntry.referencedIn] : []
-        });
-      }
-    }
-  }
-
-  if (preserveHistory) {
-    // Preserve change history for matching dependencies
-    merged.dependencies = merged.dependencies.map((dep) => {
-      const existingDep = existing.dependencies.find((d) => d.id === dep.id || d.url === dep.url);
-
-      if (existingDep && existingDep.changeHistory && existingDep.changeHistory.length > 0) {
-        return {
-          ...dep,
-          changeHistory: [...existingDep.changeHistory, ...(dep.changeHistory || [])]
-        };
-      }
-
-      return dep;
-    });
-  }
-
-  // Recalculate statistics
-  merged.statistics = calculateStatistics(merged.dependencies);
-
-  return merged;
-}
-
-/**
- * Calculate statistics for a list of dependencies
- */
-function calculateStatistics(dependencies: DependencyEntry[]): DependencyManifest['statistics'] {
-  const byType: Record<string, number> = {};
-  const byAccessMethod: Record<string, number> = {};
-  const byDetectionMethod: Record<string, number> = {};
-  let totalConfidence = 0;
-  let falsePositiveCount = 0;
-  let totalChangeCount = 0;
-
-  for (const dep of dependencies) {
-    byType[dep.type] = (byType[dep.type] || 0) + 1;
-    byAccessMethod[dep.accessMethod] = (byAccessMethod[dep.accessMethod] || 0) + 1;
-    byDetectionMethod[dep.detectionMethod] = (byDetectionMethod[dep.detectionMethod] || 0) + 1;
-    totalConfidence += dep.detectionConfidence;
-
-    // Count false positives in change history
-    const changeHistory = dep.changeHistory || [];
-    const fpCount = changeHistory.filter((change) => change.falsePositive).length;
-    falsePositiveCount += fpCount;
-    totalChangeCount += changeHistory.length;
-  }
-
-  const averageConfidence = dependencies.length > 0 ? totalConfidence / dependencies.length : 0;
-
-  const falsePositiveRate =
-    totalChangeCount > 0 ? falsePositiveCount / totalChangeCount : undefined;
-
-  return {
-    totalDependencies: dependencies.length,
-    byType,
-    byAccessMethod,
-    byDetectionMethod,
-    averageConfidence,
-    falsePositiveRate
-  };
-}
-
-/**
- * Create an empty manifest template
- */
-export function createEmptyManifest(options: {
-  owner: string;
-  name: string;
-  branch: string;
-  commit: string;
-  action?: string;
-  version?: string;
-  llmProvider?: string;
-  llmModel?: string;
-}): DependencyManifest {
-  return {
-    version: '1.0.0',
-    generatedAt: new Date().toISOString(),
-    generatedBy: {
-      action: options.action || 'dependabit',
-      version: options.version || '0.1.0',
-      llmProvider: options.llmProvider || 'github-copilot',
-      llmModel: options.llmModel
-    },
-    repository: {
-      owner: options.owner,
-      name: options.name,
-      branch: options.branch,
-      commit: options.commit
-    },
-    dependencies: [],
-    statistics: {
-      totalDependencies: 0,
-      byType: {},
-      byAccessMethod: {},
-      byDetectionMethod: {},
-      averageConfidence: 0
-    }
-  };
-}

package/src/schema.test.ts

@@ -1,293 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import {
-  DependencyManifestSchema,
-  DependencyEntrySchema,
-  DependabitConfigSchema,
-  AccessMethodSchema,
-  DependencyTypeSchema,
-  DetectionMethodSchema,
-  SeveritySchema
-} from '../src/schema.js';
-
-describe('Schema Tests', () => {
-  describe('AccessMethodSchema', () => {
-    it('should accept valid access methods', () => {
-      expect(AccessMethodSchema.parse('context7')).toBe('context7');
-      expect(AccessMethodSchema.parse('arxiv')).toBe('arxiv');
-      expect(AccessMethodSchema.parse('openapi')).toBe('openapi');
-      expect(AccessMethodSchema.parse('github-api')).toBe('github-api');
-      expect(AccessMethodSchema.parse('http')).toBe('http');
-    });
-
-    it('should reject invalid access methods', () => {
-      expect(() => AccessMethodSchema.parse('invalid')).toThrow();
-    });
-  });
-
-  describe('DependencyTypeSchema', () => {
-    it('should accept valid dependency types', () => {
-      expect(DependencyTypeSchema.parse('reference-implementation')).toBe(
-        'reference-implementation'
-      );
-      expect(DependencyTypeSchema.parse('schema')).toBe('schema');
-      expect(DependencyTypeSchema.parse('documentation')).toBe('documentation');
-    });
-
-    it('should reject invalid dependency types', () => {
-      expect(() => DependencyTypeSchema.parse('invalid')).toThrow();
-    });
-  });
-
-  describe('DetectionMethodSchema', () => {
-    it('should accept valid detection methods', () => {
-      expect(DetectionMethodSchema.parse('llm-analysis')).toBe('llm-analysis');
-      expect(DetectionMethodSchema.parse('manual')).toBe('manual');
-      expect(DetectionMethodSchema.parse('package-json')).toBe('package-json');
-    });
-  });
-
-  describe('SeveritySchema', () => {
-    it('should accept valid severity levels', () => {
-      expect(SeveritySchema.parse('breaking')).toBe('breaking');
-      expect(SeveritySchema.parse('major')).toBe('major');
-      expect(SeveritySchema.parse('minor')).toBe('minor');
-    });
-  });
-
-  describe('DependencyEntrySchema', () => {
-    it('should validate a complete dependency entry', () => {
-      const entry = {
-        id: '550e8400-e29b-41d4-a716-446655440000',
-        url: 'https://github.com/microsoft/TypeScript',
-        type: 'reference-implementation',
-        accessMethod: 'github-api',
-        name: 'TypeScript',
-        description: 'TypeScript compiler',
-        currentVersion: '5.9.3',
-        currentStateHash: 'sha256:abc123',
-        detectionMethod: 'package-json',
-        detectionConfidence: 1.0,
-        detectedAt: '2026-01-29T10:30:00Z',
-        lastChecked: '2026-01-29T10:30:00Z',
-        auth: undefined,
-        referencedIn: [
-          {
-            file: 'package.json',
-            line: 15,
-            context: '"typescript": "^5.9.3"'
-          }
-        ],
-        changeHistory: []
-      };
-
-      const result = DependencyEntrySchema.parse(entry);
-      expect(result.id).toBe(entry.id);
-      expect(result.name).toBe('TypeScript');
-    });
-
-    it('should require all mandatory fields', () => {
-      expect(() =>
-        DependencyEntrySchema.parse({
-          url: 'https://example.com'
-        })
-      ).toThrow();
-    });
-
-    it('should validate UUID format', () => {
-      const entry = {
-        id: 'not-a-uuid',
-        url: 'https://github.com/microsoft/TypeScript',
-        type: 'reference-implementation',
-        accessMethod: 'github-api',
-        name: 'TypeScript',
-        currentStateHash: 'sha256:abc123',
-        detectionMethod: 'manual',
-        detectionConfidence: 1.0,
-        detectedAt: '2026-01-29T10:30:00Z',
-        lastChecked: '2026-01-29T10:30:00Z',
-        referencedIn: []
-      };
-
-      expect(() => DependencyEntrySchema.parse(entry)).toThrow();
-    });
-
-    it('should validate URL format', () => {
-      const entry = {
-        id: '550e8400-e29b-41d4-a716-446655440000',
-        url: 'not-a-url',
-        type: 'reference-implementation',
-        accessMethod: 'github-api',
-        name: 'TypeScript',
-        currentStateHash: 'sha256:abc123',
-        detectionMethod: 'manual',
-        detectionConfidence: 1.0,
-        detectedAt: '2026-01-29T10:30:00Z',
-        lastChecked: '2026-01-29T10:30:00Z',
-        referencedIn: []
-      };
-
-      expect(() => DependencyEntrySchema.parse(entry)).toThrow();
-    });
-
-    it('should validate confidence range', () => {
-      const entry = {
-        id: '550e8400-e29b-41d4-a716-446655440000',
-        url: 'https://github.com/microsoft/TypeScript',
-        type: 'reference-implementation',
-        accessMethod: 'github-api',
-        name: 'TypeScript',
-        currentStateHash: 'sha256:abc123',
-        detectionMethod: 'manual',
-        detectionConfidence: 1.5,
-        detectedAt: '2026-01-29T10:30:00Z',
-        lastChecked: '2026-01-29T10:30:00Z',
-        referencedIn: []
-      };
-
-      expect(() => DependencyEntrySchema.parse(entry)).toThrow();
-    });
-  });
-
-  describe('DependencyManifestSchema', () => {
-    it('should validate a complete manifest', () => {
-      const manifest = {
-        version: '1.0.0',
-        generatedAt: '2026-01-29T10:30:00Z',
-        generatedBy: {
-          action: 'dependabit',
-          version: '1.0.0',
-          llmProvider: 'github-copilot',
-          llmModel: 'gpt-4'
-        },
-        repository: {
-          owner: 'pradeepmouli',
-          name: 'dependabit',
-          branch: 'main',
-          commit: 'abc123def456'
-        },
-        dependencies: [
-          {
-            id: '550e8400-e29b-41d4-a716-446655440000',
-            url: 'https://github.com/microsoft/TypeScript',
-            type: 'reference-implementation',
-            accessMethod: 'github-api',
-            name: 'TypeScript',
-            currentStateHash: 'sha256:abc123',
-            detectionMethod: 'package-json',
-            detectionConfidence: 1.0,
-            detectedAt: '2026-01-29T10:30:00Z',
-            lastChecked: '2026-01-29T10:30:00Z',
-            referencedIn: []
-          }
-        ],
-        statistics: {
-          totalDependencies: 1,
-          byType: { 'reference-implementation': 1 },
-          byAccessMethod: { 'github-api': 1 },
-          byDetectionMethod: { 'package-json': 1 },
-          averageConfidence: 1.0
-        }
-      };
-
-      const result = DependencyManifestSchema.parse(manifest);
-      expect(result.version).toBe('1.0.0');
-      expect(result.dependencies).toHaveLength(1);
-    });
-
-    it('should require correct version', () => {
-      const manifest = {
-        version: '2.0.0',
-        generatedAt: '2026-01-29T10:30:00Z',
-        generatedBy: {
-          action: 'dependabit',
-          version: '1.0.0',
-          llmProvider: 'github-copilot'
-        },
-        repository: {
-          owner: 'pradeepmouli',
-          name: 'dependabit',
-          branch: 'main',
-          commit: 'abc123'
-        },
-        dependencies: [],
-        statistics: {
-          totalDependencies: 0,
-          byType: {},
-          byAccessMethod: {},
-          byDetectionMethod: {},
-          averageConfidence: 0
-        }
-      };
-
-      expect(() => DependencyManifestSchema.parse(manifest)).toThrow();
-    });
-  });
-
-  describe('DependabitConfigSchema', () => {
-    it('should validate a complete config', () => {
-      const config = {
-        version: '1',
-        llm: {
-          provider: 'github-copilot',
-          model: 'gpt-4',
-          maxTokens: 4000,
-          temperature: 0.3
-        },
-        schedule: {
-          interval: 'daily',
-          time: '02:00',
-          timezone: 'UTC'
-        },
-        issues: {
-          labels: ['dependabit', 'dependency-update'],
-          assignees: ['pradeepmouli'],
-          titleTemplate: '[dependabit] {name}: {change}'
-        },
-        monitoring: {
-          enabled: true,
-          autoUpdate: true,
-          falsePositiveThreshold: 0.1
-        }
-      };
-
-      const result = DependabitConfigSchema.parse(config);
-      expect(result.version).toBe('1');
-      expect(result.llm?.provider).toBe('github-copilot');
-    });
-
-    it('should apply defaults', () => {
-      const config = {
-        version: '1'
-      };
-
-      const result = DependabitConfigSchema.parse(config);
-      expect(result.schedule.interval).toBe('daily');
-      expect(result.schedule.timezone).toBe('UTC');
-    });
-
-    it('should validate schedule time format', () => {
-      const config = {
-        version: '1',
-        schedule: {
-          interval: 'daily',
-          time: '25:00',
-          timezone: 'UTC'
-        }
-      };
-
-      expect(() => DependabitConfigSchema.parse(config)).toThrow();
-    });
-
-    it('should validate LLM temperature range', () => {
-      const config = {
-        version: '1',
-        llm: {
-          provider: 'github-copilot',
-          temperature: 3.0
-        }
-      };
-
-      expect(() => DependabitConfigSchema.parse(config)).toThrow();
-    });
-  });
-});