@glxmart/boss-cli 1.0.0 → 1.2.0

package/dist/assets/git-hooks/commit-msg.sh

@@ -1,17 +1,14 @@
-#!/bin/sh
 # Commit message validation hook
 # Strictly enforces Conventional Commits v1.0.0 specification
 # See: https://www.conventionalcommits.org/en/v1.0.0/
 
-. "$(dirname "$0")/_/husky.sh"
-
 commit_msg=$(cat "$1")
 
 # Extract the first line (subject line)
 first_line=$(echo "$commit_msg" | head -n1)
 
 # Validate format: <type>[optional scope][optional !]: <description>
-# According to spec: "Commits MUST be prefixed with a type, which consists of a noun, 
+# According to spec: "Commits MUST be prefixed with a type, which consists of a noun,
 # feat, fix, etc., followed by the OPTIONAL scope, OPTIONAL !, and REQUIRED terminal colon and space."
 
 # Pattern breakdown:
@@ -20,7 +17,7 @@ first_line=$(echo "$commit_msg" | head -n1)
 # - Optional !: for breaking changes
 # - Required: : (colon) followed by space
 # - Description: rest of the line (at least one character)
-if ! echo "$first_line" | grep -qE "^[a-z]+(\\([a-z0-9-]+\\))?(!)?: .+"; then
+if ! echo "$first_line" | grep -qE "^[a-z]+(\([a-z0-9-]+\))?(!)?: .+"; then
   echo "❌ Invalid commit message format!"
   echo ""
   echo "Commit messages MUST follow Conventional Commits v1.0.0 specification:"
@@ -62,7 +59,7 @@ if ! echo "$first_line" | grep -qE "^[a-z]+(\\([a-z0-9-]+\\))?(!)?: .+"; then
 fi
 
 # Validate minimum description length (at least 3 characters after colon and space)
-description=$(echo "$first_line" | sed -E 's/^[a-z]+(\\([a-z0-9-]+\\))?(!)?: //')
+description=$(echo "$first_line" | sed -E 's/^[a-z]+(\([a-z0-9-]+\))?(!)?: //')
 if [ ${#description} -lt 3 ]; then
   echo "❌ Commit description too short (minimum 3 characters)"
   echo ""
@@ -85,7 +82,7 @@ if [ ${#first_line} -gt 100 ]; then
 fi
 
 # Validate that type is lowercase (spec says case insensitive, but lowercase is conventional)
-type=$(echo "$first_line" | sed -E 's/^([a-z]+).*/\\1/')
+type=$(echo "$first_line" | sed -E 's/^([a-z]+).*/\1/')
 if ! echo "$type" | grep -qE '^[a-z]+$'; then
   echo "⚠️  Warning: Commit type should be lowercase"
   echo "   Found: '$type'"
@@ -99,4 +96,3 @@ if echo "$commit_msg" | grep -qiE "^BREAKING CHANGE:"; then
 fi
 
 echo "✅ Commit message follows Conventional Commits specification"
-

package/dist/assets/git-hooks/pre-commit.sh

@@ -1,6 +1,2 @@
-#!/usr/bin/env sh
-. "$(dirname -- "$0")/_/husky.sh"
-
 # Run pre-commit checks script
 bash scripts/pre-commit-check.sh
-

package/dist/assets/git-hooks/pre-push.sh

@@ -72,6 +72,27 @@ if ! pnpm test:unit > /dev/null 2>&1; then
   exit 1
 fi
 
+# Run integration tests (to catch template/bootstrap issues before CI)
+# Skip for first empty push to main
+if [ "$FIRST_PUSH_TO_MAIN" != "true" ]; then
+  echo "  ✓ Running integration tests..."
+  if ! pnpm test:integration > /dev/null 2>&1; then
+    echo "❌ Integration tests failing. Fix them before pushing."
+    pnpm test:integration
+    exit 1
+  fi
+
+  # Run E2E tests if they exist
+  if grep -q "test:e2e" package.json 2>/dev/null; then
+    echo "  ✓ Running E2E tests..."
+    if ! pnpm test:e2e > /dev/null 2>&1; then
+      echo "❌ E2E tests failing. Fix them before pushing."
+      pnpm test:e2e
+      exit 1
+    fi
+  fi
+fi
+
 # Check for unused exports (warn only, not blocking)
 echo "  ✓ Checking for unused exports..."
 if ! pnpm check:unused > /dev/null 2>&1; then

package/dist/assets/github-workflows/CODEOWNERS

@@ -1,3 +1,22 @@
-# BOSS Project Code Owners
-* @${githubUser}
+# CODEOWNERS file for {{githubUser}}
 
+# Default owners for everything in the repo
+* @{{githubUser}}
+
+# Apps
+/apps/web/ @{{githubUser}}
+/apps/admin/ @{{githubUser}}
+
+# Packages
+/packages/ui/ @{{githubUser}}
+/packages/database/ @{{githubUser}}
+/packages/trpc/ @{{githubUser}}
+/packages/auth/ @{{githubUser}}
+/packages/config/ @{{githubUser}}
+/packages/utils/ @{{githubUser}}
+
+# Configuration
+/docker/ @{{githubUser}}
+/.github/ @{{githubUser}}
+/turbo.json @{{githubUser}}
+/pnpm-workspace.yaml @{{githubUser}}

package/dist/assets/github-workflows/boss-ci.yml

@@ -1,40 +1,180 @@
-name: BOSS CI
+name: CI
 
 on:
   push:
-    branches: [main, develop]
+    branches: [main, develop, 'feature/**']
   pull_request:
     branches: [main, develop]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
-  ci:
+  lint-and-typecheck:
+    name: Lint & Type Check
     runs-on: ubuntu-latest
+
     steps:
-      - uses: actions/checkout@v4
-      
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - name: Checkout
+        uses: actions/checkout@v4
         with:
-          node-version: '22'
-      
+          fetch-depth: 0
+
       - name: Setup pnpm
-        uses: pnpm/action-setup@v2
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          version: latest
-      
+          node-version: 20
+          cache: 'pnpm'
+
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
-      
-      - name: Type check
-        run: pnpm typecheck
-      
+
+      - name: Generate Prisma Client
+        run: pnpm db:generate
+
       - name: Lint
         run: pnpm lint
-      
-      - name: Test
-        run: pnpm test
-      
-      - name: Coverage
-        run: pnpm test:coverage
-        continue-on-error: true
 
+      - name: Type Check
+        run: pnpm typecheck
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: postgres:16-alpine
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: test_db
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Generate Prisma Client
+        run: pnpm db:generate
+
+      - name: Run Database Migrations
+        run: pnpm --filter database prisma migrate deploy
+        env:
+          DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test_db
+
+      - name: Run Tests
+        run: pnpm test -- --coverage
+        env:
+          DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test_db
+
+      - name: Upload Coverage
+        uses: codecov/codecov-action@v4
+        if: always()
+        with:
+          files: ./coverage/coverage-final.json
+          flags: unittests
+          name: codecov-umbrella
+
+  build:
+    name: Build (${{ matrix.app }})
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        app: [web, admin]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Generate Prisma Client
+        run: pnpm db:generate
+
+      - name: Build ${{ matrix.app }}
+        run: pnpm --filter ${{ matrix.app }} build
+        env:
+          NEXT_TELEMETRY_DISABLED: 1
+
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.app }}-build
+          path: apps/${{ matrix.app }}/.next
+          retention-days: 1
+
+  storybook:
+    name: Build Storybook
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build Storybook
+        run: pnpm --filter ui build-storybook
+
+      - name: Upload Storybook
+        uses: actions/upload-artifact@v4
+        with:
+          name: storybook-static
+          path: packages/ui/storybook-static
+          retention-days: 7

package/dist/assets/github-workflows/boss-gates.yml

@@ -1,28 +1,115 @@
-name: BOSS Quality Gates
+name: Quality Gates
 
 on:
   pull_request:
-    types: [opened, synchronize, reopened]
+    branches: [main, develop]
 
 jobs:
-  quality-gates:
+  security:
+    name: Security Audit
     runs-on: ubuntu-latest
+
     steps:
-      - uses: actions/checkout@v4
-      
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '22'
-      
+          node-version: 20
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run pnpm audit
+        run: pnpm audit --audit-level=moderate
+        continue-on-error: true
+
+      - name: Check for secrets
+        uses: trufflesecurity/trufflehog@main
+        with:
+          path: ./
+          base: ${{ github.event.repository.default_branch }}
+          head: HEAD
+
+  coverage:
+    name: Coverage Check
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: postgres:16-alpine
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: test_db
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
       - name: Setup pnpm
-        uses: pnpm/action-setup@v2
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          version: latest
-      
+          node-version: 20
+          cache: 'pnpm'
+
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
-      
-      - name: Run quality gates
-        run: pnpm test:gates
 
+      - name: Generate Prisma Client
+        run: pnpm db:generate
+
+      - name: Run Tests with Coverage
+        run: pnpm test -- --coverage
+        env:
+          DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test_db
+
+      - name: Check Coverage Thresholds
+        uses: codecov/codecov-action@v4
+        with:
+          files: ./coverage/coverage-final.json
+          fail_ci_if_error: true
+
+  dependencies:
+    name: Dependency Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'pnpm'
+
+      - name: Check for outdated dependencies
+        run: pnpm outdated || true
+
+      - name: Check for duplicate dependencies
+        run: pnpm dedupe --check || true