@dewtech/dare-cli 2.16.0 → 3.0.0

package/dist/utils/project-generator.js

@@ -1,6 +1,13 @@
 import fs from 'fs-extra';
 import path from 'path';
 import chalk from 'chalk';
+import { createRequire } from 'module';
+const requireFromHere = createRequire(import.meta.url);
+/** Reads the CLI's own version from its bundled package.json. */
+function getFrameworkVersion() {
+    const pkg = requireFromHere('../../package.json');
+    return pkg.version;
+}
 import { generateCursorRules, generateAntigravityRules, generateSharedConfig, generateMcpCursorRules, generateMcpAntigravityRules, generateClaudeCodeRules, generateMcpClaudeCodeRules, generateClaudeCommands, generateClaudeSettings, } from './templates.js';
 import { bootstrapBackend, bootstrapFrontend, bootstrapMcp, } from './stack-bootstrap.js';
 export async function generateProjectStructure(config) {
@@ -25,7 +32,19 @@ export async function generateProjectStructure(config) {
         graphrag,
         mcp,
         toolchain: config.toolchain ?? 'auto',
-        version: '0.1.0',
+        version: getFrameworkVersion(),
+        // Anti-stub gates introduced in v2.17.
+        // `review.onComplete` is opt-in (default off) so existing projects don't
+        // change behavior on upgrade; new projects get it on.
+        review: {
+            onComplete: true,
+            strict: false,
+        },
+        refine: {
+            // Thresholds map heuristic score → LOW/MED/HIGH/CRITICAL. See
+            // `complexity-analyzer.ts` for defaults; override per project here.
+            thresholds: { low: 5, med: 12, high: 20 },
+        },
     };
     if (structure === 'mcp-server') {
         configData.mcpTransport = config.mcpTransport;
@@ -125,7 +144,7 @@ export async function installDareToExistingProject(projectDir, config) {
     const { name, structure, backend, frontend, ide, graphrag, mcp } = config;
     await fs.ensureDir(path.join(outputDir, 'DARE'));
     await fs.ensureDir(path.join(outputDir, 'DARE', 'EXECUTION'));
-    const configData = { name, structure, backend, frontend, ide, graphrag, mcp, version: '0.1.0', installedAt: new Date().toISOString() };
+    const configData = { name, structure, backend, frontend, ide, graphrag, mcp, version: getFrameworkVersion(), installedAt: new Date().toISOString() };
     if (structure === 'mcp-server') {
         configData.mcpTransport = config.mcpTransport;
         configData.mcpLanguage = config.mcpLanguage;
@@ -172,94 +191,94 @@ async function generateMcpTemplate(dir, config) {
         const transportSetup = mcpTransport === 'stdio'
             ? `const transport = new StdioServerTransport();\nawait server.connect(transport);`
             : `const app = express();\napp.get('/sse', async (req, res) => {\n  const transport = new SSEServerTransport('/messages', res);\n  await server.connect(transport);\n});\napp.post('/messages', express.json(), (req, res) => { /* message handler */ });\napp.listen(3000, () => console.error('MCP SSE server running on :3000'));`;
-        const resourceSection = hasResources ? `
-import {
-  ListResourcesRequestSchema,
-  ReadResourceRequestSchema,
-} from '@modelcontextprotocol/sdk/types.js';
-
-server.setRequestHandler(ListResourcesRequestSchema, async () => ({
-  resources: [
-    {
-      uri: 'resource://example',
-      name: 'Example Resource',
-      description: 'An example resource',
-      mimeType: 'text/plain',
-    },
-  ],
-}));
-
-server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
-  if (request.params.uri === 'resource://example') {
-    return { contents: [{ uri: request.params.uri, mimeType: 'text/plain', text: 'Example content' }] };
-  }
-  throw new Error(\`Unknown resource: \${request.params.uri}\`);
-});
+        const resourceSection = hasResources ? `
+import {
+  ListResourcesRequestSchema,
+  ReadResourceRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+
+server.setRequestHandler(ListResourcesRequestSchema, async () => ({
+  resources: [
+    {
+      uri: 'resource://example',
+      name: 'Example Resource',
+      description: 'An example resource',
+      mimeType: 'text/plain',
+    },
+  ],
+}));
+
+server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
+  if (request.params.uri === 'resource://example') {
+    return { contents: [{ uri: request.params.uri, mimeType: 'text/plain', text: 'Example content' }] };
+  }
+  throw new Error(\`Unknown resource: \${request.params.uri}\`);
+});
 ` : '';
-        const promptSection = hasPrompts ? `
-import {
-  ListPromptsRequestSchema,
-  GetPromptRequestSchema,
-} from '@modelcontextprotocol/sdk/types.js';
-
-server.setRequestHandler(ListPromptsRequestSchema, async () => ({
-  prompts: [
-    {
-      name: 'example-prompt',
-      description: 'An example prompt template',
-      arguments: [{ name: 'topic', description: 'Topic to write about', required: true }],
-    },
-  ],
-}));
-
-server.setRequestHandler(GetPromptRequestSchema, async (request) => {
-  if (request.params.name === 'example-prompt') {
-    const topic = request.params.arguments?.topic ?? 'general';
-    return {
-      description: 'Example prompt',
-      messages: [{ role: 'user', content: { type: 'text', text: \`Write about: \${topic}\` } }],
-    };
-  }
-  throw new Error(\`Unknown prompt: \${request.params.name}\`);
-});
+        const promptSection = hasPrompts ? `
+import {
+  ListPromptsRequestSchema,
+  GetPromptRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+
+server.setRequestHandler(ListPromptsRequestSchema, async () => ({
+  prompts: [
+    {
+      name: 'example-prompt',
+      description: 'An example prompt template',
+      arguments: [{ name: 'topic', description: 'Topic to write about', required: true }],
+    },
+  ],
+}));
+
+server.setRequestHandler(GetPromptRequestSchema, async (request) => {
+  if (request.params.name === 'example-prompt') {
+    const topic = request.params.arguments?.topic ?? 'general';
+    return {
+      description: 'Example prompt',
+      messages: [{ role: 'user', content: { type: 'text', text: \`Write about: \${topic}\` } }],
+    };
+  }
+  throw new Error(\`Unknown prompt: \${request.params.name}\`);
+});
 ` : '';
-        const indexContent = `import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-${transportImport}
-import {
-  CallToolRequestSchema,
-  ListToolsRequestSchema,
-} from '@modelcontextprotocol/sdk/types.js';
-
-const server = new Server(
-  { name: '${config.name}', version: '0.1.0' },
-  { capabilities: { ${capabilities.join(', ')} } }
-);
-
-server.setRequestHandler(ListToolsRequestSchema, async () => ({
-  tools: [
-    {
-      name: 'hello',
-      description: 'Says hello to a given name',
-      inputSchema: {
-        type: 'object',
-        properties: {
-          name: { type: 'string', description: 'Name to greet' },
-        },
-        required: ['name'],
-      },
-    },
-  ],
-}));
-
-server.setRequestHandler(CallToolRequestSchema, async (request) => {
-  if (request.params.name === 'hello') {
-    const { name } = request.params.arguments as { name: string };
-    return { content: [{ type: 'text', text: \`Hello, \${name}!\` }] };
-  }
-  throw new Error(\`Unknown tool: \${request.params.name}\`);
-});
-${resourceSection}${promptSection}
-${transportSetup}
+        const indexContent = `import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+${transportImport}
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+
+const server = new Server(
+  { name: '${config.name}', version: '0.1.0' },
+  { capabilities: { ${capabilities.join(', ')} } }
+);
+
+server.setRequestHandler(ListToolsRequestSchema, async () => ({
+  tools: [
+    {
+      name: 'hello',
+      description: 'Says hello to a given name',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          name: { type: 'string', description: 'Name to greet' },
+        },
+        required: ['name'],
+      },
+    },
+  ],
+}));
+
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  if (request.params.name === 'hello') {
+    const { name } = request.params.arguments as { name: string };
+    return { content: [{ type: 'text', text: \`Hello, \${name}!\` }] };
+  }
+  throw new Error(\`Unknown tool: \${request.params.name}\`);
+});
+${resourceSection}${promptSection}
+${transportSetup}
 `;
         await fs.writeFile(path.join(dir, 'src', 'index.ts'), indexContent);
         const extraDeps = mcpTransport !== 'stdio' ? { express: '^4.18.0' } : {};
@@ -305,45 +324,45 @@ ${transportSetup}
         // Python MCP
         const hasResources = mcpFeatures.includes('resources');
         const hasPrompts = mcpFeatures.includes('prompts');
-        const resourceSection = hasResources ? `
-
-@mcp.resource("resource://example")
-def example_resource() -> str:
-    """An example resource."""
-    return "Example content"
+        const resourceSection = hasResources ? `
+
+@mcp.resource("resource://example")
+def example_resource() -> str:
+    """An example resource."""
+    return "Example content"
 ` : '';
-        const promptSection = hasPrompts ? `
-
-@mcp.prompt()
-def example_prompt(topic: str) -> str:
-    """An example prompt template."""
-    return f"Write about: {topic}"
+        const promptSection = hasPrompts ? `
+
+@mcp.prompt()
+def example_prompt(topic: str) -> str:
+    """An example prompt template."""
+    return f"Write about: {topic}"
 ` : '';
         const transportLine = mcpTransport === 'stdio' ? '' : '\n# For SSE transport:\n# mcp.run(transport="sse", host="0.0.0.0", port=8000)\n';
-        await fs.writeFile(path.join(dir, 'main.py'), `from mcp.server.fastmcp import FastMCP
-
-mcp = FastMCP("${config.name}")
-
-
-@mcp.tool()
-def hello(name: str) -> str:
-    """Says hello to a given name."""
-    return f"Hello, {name}!"
-${resourceSection}${promptSection}
-
-if __name__ == "__main__":
-    mcp.run()${transportLine}
+        await fs.writeFile(path.join(dir, 'main.py'), `from mcp.server.fastmcp import FastMCP
+
+mcp = FastMCP("${config.name}")
+
+
+@mcp.tool()
+def hello(name: str) -> str:
+    """Says hello to a given name."""
+    return f"Hello, {name}!"
+${resourceSection}${promptSection}
+
+if __name__ == "__main__":
+    mcp.run()${transportLine}
 `);
         await fs.writeFile(path.join(dir, 'requirements.txt'), `mcp>=1.0.0\n`);
-        await fs.writeFile(path.join(dir, 'pyproject.toml'), `[project]
-name = "${config.name}"
-version = "0.1.0"
-requires-python = ">=3.11"
-dependencies = ["mcp>=1.0.0"]
-
-[build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
+        await fs.writeFile(path.join(dir, 'pyproject.toml'), `[project]
+name = "${config.name}"
+version = "0.1.0"
+requires-python = ">=3.11"
+dependencies = ["mcp>=1.0.0"]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
 `);
     }
 }
@@ -413,92 +432,92 @@ async function writeGraphragConfig(dir, config) {
     const { graphrag } = config;
     let content;
     if (graphrag === 'sqlite') {
-        content = `# DARE Knowledge Graph — SQLite
-backend: sqlite
-
-sqlite:
-  path: .dare/graph.db
-
-# Node types tracked in the graph
-nodes:
-  - task
-  - file
-  - schema
-  - endpoint
-  - component
-  - entity
-  - concept
-
-# Relationship types
-edges:
-  - depends_on
-  - implements
-  - uses
-  - references
-  - related_to
-  - contains
-  - extends
+        content = `# DARE Knowledge Graph — SQLite
+backend: sqlite
+
+sqlite:
+  path: .dare/graph.db
+
+# Node types tracked in the graph
+nodes:
+  - task
+  - file
+  - schema
+  - endpoint
+  - component
+  - entity
+  - concept
+
+# Relationship types
+edges:
+  - depends_on
+  - implements
+  - uses
+  - references
+  - related_to
+  - contains
+  - extends
 `;
     }
     else if (graphrag === 'neo4j') {
-        content = `# DARE Knowledge Graph — Neo4j
-backend: neo4j
-
-neo4j:
-  url: http://localhost:7474   # Neo4j HTTP API endpoint (not Bolt)
-  database: dare               # database name
-  username: neo4j
-  password: password
-  # auth: "Bearer <token>"     # alternative to username/password
-
-# Node types tracked in the graph
-nodes:
-  - task
-  - file
-  - schema
-  - endpoint
-  - component
-  - entity
-  - concept
-
-# Relationship types
-edges:
-  - depends_on
-  - implements
-  - uses
-  - references
-  - related_to
-  - contains
-  - extends
+        content = `# DARE Knowledge Graph — Neo4j
+backend: neo4j
+
+neo4j:
+  url: http://localhost:7474   # Neo4j HTTP API endpoint (not Bolt)
+  database: dare               # database name
+  username: neo4j
+  password: password
+  # auth: "Bearer <token>"     # alternative to username/password
+
+# Node types tracked in the graph
+nodes:
+  - task
+  - file
+  - schema
+  - endpoint
+  - component
+  - entity
+  - concept
+
+# Relationship types
+edges:
+  - depends_on
+  - implements
+  - uses
+  - references
+  - related_to
+  - contains
+  - extends
 `;
     }
     else {
         // json
-        content = `# DARE Knowledge Graph — JSON
-backend: json
-
-json:
-  path: .dare/graph.json
-
-# Node types tracked in the graph
-nodes:
-  - task
-  - file
-  - schema
-  - endpoint
-  - component
-  - entity
-  - concept
-
-# Relationship types
-edges:
-  - depends_on
-  - implements
-  - uses
-  - references
-  - related_to
-  - contains
-  - extends
+        content = `# DARE Knowledge Graph — JSON
+backend: json
+
+json:
+  path: .dare/graph.json
+
+# Node types tracked in the graph
+nodes:
+  - task
+  - file
+  - schema
+  - endpoint
+  - component
+  - entity
+  - concept
+
+# Relationship types
+edges:
+  - depends_on
+  - implements
+  - uses
+  - references
+  - related_to
+  - contains
+  - extends
 `;
     }
     const destPath = path.join(dir, 'dare-graph.yml');
@@ -620,27 +639,27 @@ async function generateFrontendTemplate(dir, stack, projectName = 'frontend') {
 }
 function generateMcpStackSkill(language) {
     if (language === 'python') {
-        return `---
-description: Python MCP server development skill
----
-# Python MCP Skill
-- Use FastMCP for rapid server development
-- Decorate tools with @mcp.tool(), resources with @mcp.resource(), prompts with @mcp.prompt()
-- Use type hints — FastMCP derives the JSON schema automatically
-- Test with: npx @modelcontextprotocol/inspector python main.py
-- Use mcp.run() for stdio, mcp.run(transport="sse") for SSE
+        return `---
+description: Python MCP server development skill
+---
+# Python MCP Skill
+- Use FastMCP for rapid server development
+- Decorate tools with @mcp.tool(), resources with @mcp.resource(), prompts with @mcp.prompt()
+- Use type hints — FastMCP derives the JSON schema automatically
+- Test with: npx @modelcontextprotocol/inspector python main.py
+- Use mcp.run() for stdio, mcp.run(transport="sse") for SSE
 `;
     }
-    return `---
-description: Node.js/TypeScript MCP server development skill
----
-# TypeScript MCP Skill
-- Import Server from @modelcontextprotocol/sdk/server/index.js
-- Use StdioServerTransport for CLI tools, SSEServerTransport for web integrations
-- Define tools with ListToolsRequestSchema + CallToolRequestSchema handlers
-- Keep inputSchema strict — Claude uses it to call your tools correctly
-- Test with: npm run inspect (uses @modelcontextprotocol/inspector)
-- Build before shipping: npm run build
+    return `---
+description: Node.js/TypeScript MCP server development skill
+---
+# TypeScript MCP Skill
+- Import Server from @modelcontextprotocol/sdk/server/index.js
+- Use StdioServerTransport for CLI tools, SSEServerTransport for web integrations
+- Define tools with ListToolsRequestSchema + CallToolRequestSchema handlers
+- Keep inputSchema strict — Claude uses it to call your tools correctly
+- Test with: npm run inspect (uses @modelcontextprotocol/inspector)
+- Build before shipping: npm run build
 `;
 }
 // ─────────────────────────────────────────────────────────────────────────────
@@ -819,9 +838,9 @@ async function createRustFullstackWorkspace(outputDir, projectName, layout, fron
     ].join('\n'));
     // Root .cargo/config.toml guard
     await fs.ensureDir(path.join(outputDir, '.cargo'));
-    await fs.writeFile(path.join(outputDir, '.cargo', 'config.toml'), `# DARE: Do NOT add a global [build] target here.
-# This workspace mixes Leptos WASM crates with native Axum crates.
-# A global target breaks one or the other — cargo-leptos manages wasm32 internally.
+    await fs.writeFile(path.join(outputDir, '.cargo', 'config.toml'), `# DARE: Do NOT add a global [build] target here.
+# This workspace mixes Leptos WASM crates with native Axum crates.
+# A global target breaks one or the other — cargo-leptos manages wasm32 internally.
 `);
     // Multi-crate: create core and cli scaffold crates
     if (layout === 'multi') {
@@ -902,38 +921,38 @@ async function createCliCrate(outputDir, slug) {
 }
 function generateStackSkill(stack) {
     const skills = {
-        'rust-leptos': `---
-description: Leptos fullstack (SSR + WASM) development skill
----
-# Leptos Fullstack Skill
-- Use \`#[component]\` macro for all components — no class components
-- State: \`signal()\` (RwSignal), \`ReadSignal\`/\`WriteSignal\` — fine-grained reactivity
-- Async data: \`Resource\` for fetching, never \`Effect\` that calls fetch
-- Mutations: \`Action\` for server calls (forms, submits)
-- Loading states: \`Suspense\` and \`Transition\` — never block the render
-- Conditionals: \`Show\`, \`For\` components — not if/for in view!
-- Server functions: \`#[server]\` macro — only available with \`ssr\` feature
-- Shared types (server + WASM): use \`#[cfg_attr(feature = "ssr", derive(sqlx::FromRow))]\`
-- Avoid: \`tokio::spawn\` on client (no async runtime in WASM), \`panic!\` in components, \`wasm_bindgen\` direct
-- Build: \`cargo leptos build\` (not \`cargo build\`)
-- Test: \`cargo test --workspace\` (not \`cargo leptos test\` — that doesn't exist)
-- Lint: \`cargo clippy --all-targets --all-features -- -D warnings && cargo fmt --check\`
-- Dev server: \`cargo leptos watch\` (port 3000 + hot reload on port 3001)
+        'rust-leptos': `---
+description: Leptos fullstack (SSR + WASM) development skill
+---
+# Leptos Fullstack Skill
+- Use \`#[component]\` macro for all components — no class components
+- State: \`signal()\` (RwSignal), \`ReadSignal\`/\`WriteSignal\` — fine-grained reactivity
+- Async data: \`Resource\` for fetching, never \`Effect\` that calls fetch
+- Mutations: \`Action\` for server calls (forms, submits)
+- Loading states: \`Suspense\` and \`Transition\` — never block the render
+- Conditionals: \`Show\`, \`For\` components — not if/for in view!
+- Server functions: \`#[server]\` macro — only available with \`ssr\` feature
+- Shared types (server + WASM): use \`#[cfg_attr(feature = "ssr", derive(sqlx::FromRow))]\`
+- Avoid: \`tokio::spawn\` on client (no async runtime in WASM), \`panic!\` in components, \`wasm_bindgen\` direct
+- Build: \`cargo leptos build\` (not \`cargo build\`)
+- Test: \`cargo test --workspace\` (not \`cargo leptos test\` — that doesn't exist)
+- Lint: \`cargo clippy --all-targets --all-features -- -D warnings && cargo fmt --check\`
+- Dev server: \`cargo leptos watch\` (port 3000 + hot reload on port 3001)
 `,
-        'rust-leptos-csr': `---
-description: Leptos CSR (WASM + trunk) development skill
----
-# Leptos CSR Skill
-- Pure client-side WASM — no server rendering, no \`#[server]\` functions
-- Use \`#[component]\` macro for all components
-- State: \`signal()\`, \`create_memo()\` for derived state
-- Async data: \`Resource\` — never \`Effect\` that calls fetch
-- Entry point: \`leptos::mount::mount_to_body(App)\` called from \`main()\`
-- Build tool: \`trunk build\` (NOT \`cargo leptos build\` — wrong tool for CSR)
-- Dev server: \`trunk serve\` (port 3001 by default, configured in Trunk.toml)
-- Test: \`cargo test --workspace\`
-- Lint: \`cargo clippy --all-targets --all-features -- -D warnings && cargo fmt --check\`
-- Deploy: \`trunk build --release\` produces \`dist/\` — static files, deployable to any CDN
+        'rust-leptos-csr': `---
+description: Leptos CSR (WASM + trunk) development skill
+---
+# Leptos CSR Skill
+- Pure client-side WASM — no server rendering, no \`#[server]\` functions
+- Use \`#[component]\` macro for all components
+- State: \`signal()\`, \`create_memo()\` for derived state
+- Async data: \`Resource\` — never \`Effect\` that calls fetch
+- Entry point: \`leptos::mount::mount_to_body(App)\` called from \`main()\`
+- Build tool: \`trunk build\` (NOT \`cargo leptos build\` — wrong tool for CSR)
+- Dev server: \`trunk serve\` (port 3001 by default, configured in Trunk.toml)
+- Test: \`cargo test --workspace\`
+- Lint: \`cargo clippy --all-targets --all-features -- -D warnings && cargo fmt --check\`
+- Deploy: \`trunk build --release\` produces \`dist/\` — static files, deployable to any CDN
 `,
         'rust-axum': `---\ndescription: Rust/Axum API development skill\n---\n# Rust/Axum Skill\n- Use Axum for HTTP routing\n- Use Tokio for async runtime\n- Use SQLx for database\n- Run clippy and cargo test\n`,
         'go-gin': `---\ndescription: Go/Gin API development skill\n---\n# Go + Gin Skill\n- Use Gin for HTTP routing (github.com/gin-gonic/gin)\n- Project layout: cmd/api/main.go (entrypoint), internal/handlers, internal/middleware, internal/services, internal/repository\n- Use context.Context propagation in every handler/service\n- Use struct tags for binding/validation (binding:"required" on DTOs)\n- For SQL: prefer database/sql + sqlx, parametrize ALL queries, no string concat\n- Errors: return wrapped errors (fmt.Errorf("...: %w", err)), not panics\n- Tests: use net/http/httptest + table-driven tests; place *_test.go alongside the package\n- Ralph Loop: \`go build ./...\`, \`go test ./...\`, \`go vet ./...\`\n`,