avorelo 0.1.0 → 0.2.0

package/scripts/lib/project-profile.js

@@ -1,555 +0,0 @@
-"use strict";
-
-// ── Project Profile ───────────────────────────────────────────────────────────
-//
-// Contract: avorelo.projectProfile.v1
-//
-// Deterministic project profile detection: infers framework, package manager,
-// build/test/dev scripts, deploy provider, and risk boundaries from local files.
-//
-// No network calls. No package installs. No script execution. No secret reading.
-
-const fs = require("fs");
-const path = require("path");
-const { ensureCcoDirs, safeWriteJson } = require("./fsx");
-const { appendProductLearningEvent } = require("./product-learning-events");
-
-const CONTRACT = "avorelo.projectProfile.v1";
-const SCHEMA_VERSION = 1;
-
-const LATEST_PROFILE_REL = ".claude/cco/orchestration/project-profile/latest-profile.json";
-
-// ── Risk boundary constants ───────────────────────────────────────────────────
-
-const DEFAULT_BLOCKED_FILES = Object.freeze([
-  ".env",
-  ".env.local",
-  ".env.production",
-  ".env.development",
-  ".env.staging",
-  ".env.test",
-  ".env.server",
-  ".env.client",
-  "*.pem",
-  "*.key",
-  "*.p12",
-  "*.pfx",
-  ".npmrc",
-  ".yarnrc",
-  "secrets.json",
-  "credentials.json",
-  "service-account.json",
-]);
-
-const DEFAULT_SENSITIVE_DIRS = Object.freeze([
-  "auth",
-  "authentication",
-  "billing",
-  "payments",
-  "payment",
-  "secrets",
-  "secret",
-  "infra",
-  "infrastructure",
-  "api/auth",
-  "api/billing",
-  "api/payments",
-  "api/admin",
-  "server/auth",
-  "server/billing",
-  "src/auth",
-  "src/billing",
-  "src/payments",
-]);
-
-const DEFAULT_BLOCKED_ACTIONS = Object.freeze([
-  "deploy",
-  "publish",
-  "push_to_production",
-  "run_migrations_production",
-  "delete_database",
-  "drop_table",
-  "truncate_table",
-  "send_email_production",
-  "charge_customer",
-  "run_env_script",
-]);
-
-const DEFAULT_ALLOWED_ACTIONS = Object.freeze([
-  "file_read",
-  "file_write_with_diff",
-  "run_tests",
-  "run_lint",
-  "run_build",
-  "run_type_check",
-  "git_status",
-  "git_diff",
-  "git_log",
-]);
-
-// ── Helpers ───────────────────────────────────────────────────────────────────
-
-function safeReadJson(absPath) {
-  try {
-    if (!fs.existsSync(absPath)) return null;
-    const raw = fs.readFileSync(absPath, "utf8").replace(/^/, "");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-
-function fileExists(cwd, ...parts) {
-  return fs.existsSync(path.join(cwd, ...parts));
-}
-
-function readText(cwd, ...parts) {
-  try {
-    const absPath = path.join(cwd, ...parts);
-    if (!fs.existsSync(absPath)) return null;
-    return fs.readFileSync(absPath, "utf8");
-  } catch {
-    return null;
-  }
-}
-
-function nowIso() {
-  return new Date().toISOString();
-}
-
-// ── Package manager detection ─────────────────────────────────────────────────
-
-function detectPackageManager(cwd, pkg) {
-  // Check packageManager field in package.json first
-  if (pkg && pkg.packageManager) {
-    const pm = pkg.packageManager;
-    if (pm.startsWith("pnpm")) return "pnpm";
-    if (pm.startsWith("yarn")) return "yarn";
-    if (pm.startsWith("bun")) return "bun";
-    if (pm.startsWith("npm")) return "npm";
-  }
-
-  // Check lockfiles
-  if (fileExists(cwd, "pnpm-lock.yaml")) return "pnpm";
-  if (fileExists(cwd, "yarn.lock")) return "yarn";
-  if (fileExists(cwd, "bun.lockb") || fileExists(cwd, "bun.lock")) return "bun";
-  if (fileExists(cwd, "package-lock.json")) return "npm";
-
-  // Has package.json but no lockfile
-  if (pkg) return "npm";
-
-  return "unknown";
-}
-
-// ── Framework detection ───────────────────────────────────────────────────────
-
-function detectFramework(cwd, pkg) {
-  if (!pkg) return "unknown";
-
-  const deps = {
-    ...((pkg.dependencies) || {}),
-    ...((pkg.devDependencies) || {}),
-  };
-
-  const scripts = pkg.scripts || {};
-  const hasScript = (name) => Boolean(scripts[name]);
-  const hasDep = (name) => Boolean(deps[name]);
-
-  // Wasp
-  if (fileExists(cwd, "main.wasp") || fileExists(cwd, ".wasproot")) return "wasp";
-
-  // Next.js
-  if (hasDep("next")) return "nextjs";
-
-  // Remix
-  if (hasDep("@remix-run/react") || hasDep("@remix-run/node")) return "remix";
-
-  // Vite + React
-  if (hasDep("vite") && hasDep("react")) return "vite_react";
-
-  // Vite generic
-  if (hasDep("vite")) return "vite";
-
-  // React (CRA or other)
-  if (hasDep("react") && hasDep("react-dom")) return "react";
-
-  // Vue
-  if (hasDep("vue") || hasDep("@vue/core")) return "vue";
-
-  // Express
-  if (hasDep("express")) return "express_node";
-
-  // Node (generic)
-  if (hasScript("start") || hasScript("dev")) return "node";
-
-  // Static HTML (no package.json framework)
-  if (fileExists(cwd, "index.html") && !pkg) return "static_html";
-
-  return "node";
-}
-
-// ── Workspace type detection ──────────────────────────────────────────────────
-
-function detectWorkspaceType(cwd, pkg) {
-  if (!pkg) return "unknown";
-
-  // pnpm workspaces
-  if (fileExists(cwd, "pnpm-workspace.yaml")) return "monorepo";
-
-  // yarn/npm workspaces
-  if (pkg.workspaces) return "monorepo";
-
-  // Multiple apps directories
-  const appsDir = fileExists(cwd, "apps");
-  const packagesDir = fileExists(cwd, "packages");
-  if (appsDir && packagesDir) return "monorepo";
-
-  return "single";
-}
-
-// ── App detection ─────────────────────────────────────────────────────────────
-
-function detectApps(cwd) {
-  const apps = [];
-  const appsDir = path.join(cwd, "apps");
-  if (fs.existsSync(appsDir)) {
-    try {
-      const entries = fs.readdirSync(appsDir, { withFileTypes: true });
-      for (const entry of entries) {
-        if (entry.isDirectory()) {
-          const appPkg = safeReadJson(path.join(appsDir, entry.name, "package.json"));
-          apps.push({
-            name: entry.name,
-            path: `apps/${entry.name}`,
-            framework: detectFramework(path.join(appsDir, entry.name), appPkg),
-          });
-        }
-      }
-    } catch {}
-  }
-  return apps;
-}
-
-// ── Script detection ──────────────────────────────────────────────────────────
-
-function detectCommands(pkg) {
-  if (!pkg || !pkg.scripts) {
-    return {
-      build: null,
-      test: null,
-      lint: null,
-      dev: null,
-      preview: null,
-    };
-  }
-
-  const scripts = pkg.scripts;
-  return {
-    build: scripts.build || scripts["build:prod"] || null,
-    test: scripts.test || scripts["test:unit"] || scripts["test:ci"] || null,
-    lint: scripts.lint || scripts["lint:check"] || null,
-    dev: scripts.dev || scripts.start || scripts.serve || null,
-    preview: scripts.preview || scripts["preview:prod"] || null,
-  };
-}
-
-// ── Dev server detection ──────────────────────────────────────────────────────
-
-function detectDevServer(cwd, pkg, framework) {
-  const portGuesses = {
-    nextjs: 3000,
-    vite_react: 5173,
-    vite: 5173,
-    react: 3000,
-    wasp: 3000,
-    remix: 3000,
-    vue: 5173,
-    express_node: 3000,
-    node: 3000,
-  };
-
-  const scripts = (pkg && pkg.scripts) || {};
-  const hasDevScript = Boolean(scripts.dev || scripts.start);
-
-  return {
-    detected: hasDevScript || ["nextjs", "vite_react", "vite", "react", "wasp"].includes(framework),
-    defaultPort: portGuesses[framework] || 3000,
-    previewCommand: scripts.preview || scripts.dev || null,
-  };
-}
-
-// ── Deploy detection ──────────────────────────────────────────────────────────
-
-function detectDeploy(cwd) {
-  const configFiles = [];
-  let provider = "unknown";
-
-  if (fileExists(cwd, "netlify.toml")) {
-    configFiles.push("netlify.toml");
-    provider = "netlify";
-  }
-  if (fileExists(cwd, "vercel.json") || fileExists(cwd, ".vercel")) {
-    configFiles.push("vercel.json");
-    provider = provider === "netlify" ? "netlify+vercel" : "vercel";
-  }
-  if (fileExists(cwd, "railway.toml") || fileExists(cwd, "railway.json")) {
-    configFiles.push("railway.toml");
-    provider = provider === "unknown" ? "railway" : provider + "+railway";
-  }
-  if (fileExists(cwd, "fly.toml")) {
-    configFiles.push("fly.toml");
-    provider = provider === "unknown" ? "fly" : provider + "+fly";
-  }
-
-  return {
-    provider,
-    configFiles,
-    requiresApproval: configFiles.length > 0,
-  };
-}
-
-// ── Proof defaults ────────────────────────────────────────────────────────────
-
-function detectProofDefaults(commands, deploy) {
-  const proofSteps = [];
-
-  if (commands.build) proofSteps.push({ step: "build", command: commands.build, available: true });
-  if (commands.test) proofSteps.push({ step: "test", command: commands.test, available: true });
-  if (commands.lint) proofSteps.push({ step: "lint", command: commands.lint, available: true });
-
-  if (proofSteps.length === 0) {
-    proofSteps.push({ step: "manual_review", command: null, available: false, note: "not_available" });
-  }
-
-  return {
-    requiredSteps: proofSteps.filter((s) => s.available).map((s) => s.step),
-    steps: proofSteps,
-    screenshotAvailable: false,
-    deployGateRequired: deploy.requiresApproval,
-  };
-}
-
-// ── Agent config surfaces ─────────────────────────────────────────────────────
-
-function detectAgentConfigSurfaces(cwd) {
-  const surfaces = [];
-  if (fileExists(cwd, ".claude", "settings.json")) surfaces.push(".claude/settings.json");
-  if (fileExists(cwd, ".claude", "settings.local.json")) surfaces.push(".claude/settings.local.json");
-  if (fileExists(cwd, "CLAUDE.md")) surfaces.push("CLAUDE.md");
-  if (fileExists(cwd, "AGENTS.md")) surfaces.push("AGENTS.md");
-  if (fileExists(cwd, ".cursorrules")) surfaces.push(".cursorrules");
-  if (fileExists(cwd, ".codex")) surfaces.push(".codex");
-  return surfaces;
-}
-
-// ── Source signals ────────────────────────────────────────────────────────────
-
-function buildSourceSignals(cwd, pkg) {
-  const signals = [];
-
-  if (pkg) signals.push("package.json");
-  if (fileExists(cwd, "main.wasp")) signals.push("main.wasp");
-  if (fileExists(cwd, "netlify.toml")) signals.push("netlify.toml");
-  if (fileExists(cwd, "vercel.json")) signals.push("vercel.json");
-  if (fileExists(cwd, "tsconfig.json")) signals.push("tsconfig.json");
-  if (fileExists(cwd, "vite.config.ts") || fileExists(cwd, "vite.config.js")) signals.push("vite.config");
-  if (fileExists(cwd, "next.config.js") || fileExists(cwd, "next.config.mjs")) signals.push("next.config");
-  if (fileExists(cwd, "schema.prisma")) signals.push("schema.prisma");
-
-  return signals;
-}
-
-// ── Risk boundaries ───────────────────────────────────────────────────────────
-
-function buildRiskBoundaries(cwd, pkg, deploy) {
-  const blockedFiles = [...DEFAULT_BLOCKED_FILES];
-  const sensitiveDirs = [...DEFAULT_SENSITIVE_DIRS];
-
-  // Add deploy config files to blocked (require explicit approval)
-  if (deploy.configFiles.length > 0) {
-    blockedFiles.push(...deploy.configFiles);
-  }
-
-  // package-lock.json is risky to auto-modify
-  if (fileExists(cwd, "package-lock.json")) {
-    if (!blockedFiles.includes("package-lock.json")) {
-      blockedFiles.push("package-lock.json");
-    }
-  }
-
-  // schema.prisma is risky (production DB schema)
-  if (fileExists(cwd, "schema.prisma")) {
-    blockedFiles.push("schema.prisma");
-  }
-
-  return {
-    blockedFiles: [...new Set(blockedFiles)],
-    sensitiveDirs: [...new Set(sensitiveDirs)],
-    blockedActions: [...DEFAULT_BLOCKED_ACTIONS],
-    allowedDefaultActions: [...DEFAULT_ALLOWED_ACTIONS],
-  };
-}
-
-// ── Profile status determination ──────────────────────────────────────────────
-
-function determineStatus(pkg, framework, packageManager) {
-  if (!pkg) return "unknown";
-  if (framework === "unknown" || packageManager === "unknown") return "partial";
-  return "ready";
-}
-
-// ── Build functions ───────────────────────────────────────────────────────────
-
-function detectProjectProfile(cwd, options = {}) {
-  const pkgPath = path.join(cwd, "package.json");
-  const pkg = safeReadJson(pkgPath);
-
-  const packageManager = detectPackageManager(cwd, pkg);
-  const framework = detectFramework(cwd, pkg);
-  const workspaceType = detectWorkspaceType(cwd, pkg);
-  const apps = detectApps(cwd);
-  const commands = detectCommands(pkg);
-  const devServer = detectDevServer(cwd, pkg, framework);
-  const deploy = detectDeploy(cwd);
-  const riskBoundaries = buildRiskBoundaries(cwd, pkg, deploy);
-  const proofDefaults = detectProofDefaults(commands, deploy);
-  const agentConfigSurfaces = detectAgentConfigSurfaces(cwd);
-  const sourceSignals = buildSourceSignals(cwd, pkg);
-  const status = determineStatus(pkg, framework, packageManager);
-
-  const caveats = [];
-  if (!pkg) caveats.push("No package.json found. Profile is partial.");
-  if (deploy.requiresApproval) caveats.push("Deploy config found. Deploy actions require explicit approval.");
-  caveats.push("Risk boundaries are defaults. Review for project-specific exceptions.");
-  caveats.push("No script execution was performed during profile detection.");
-
-  return {
-    contract: CONTRACT,
-    schemaVersion: SCHEMA_VERSION,
-    status,
-    framework,
-    packageManager,
-    workspaceType,
-    apps,
-    commands,
-    devServer,
-    deploy,
-    riskBoundaries,
-    proofDefaults,
-    agentConfigSurfaces,
-    sourceSignals,
-    caveats,
-    redacted: true,
-  };
-}
-
-function buildProjectProfile(cwd, options = {}) {
-  return detectProjectProfile(cwd, options);
-}
-
-function writeProjectProfile(cwd, profile) {
-  ensureCcoDirs(cwd);
-  const dir = path.join(cwd, ".claude", "cco", "orchestration", "project-profile");
-  fs.mkdirSync(dir, { recursive: true });
-  const absPath = path.join(cwd, LATEST_PROFILE_REL);
-  fs.writeFileSync(absPath, JSON.stringify(profile, null, 2), "utf8");
-
-  try {
-    appendProductLearningEvent(cwd, {
-      eventName: "project_profile_detected",
-      category: "project_profile",
-      surface: "local",
-      status: "observed",
-      payload: {
-        profileStatus: profile.status,
-        framework: profile.framework,
-        packageManager: profile.packageManager,
-        workspaceType: profile.workspaceType,
-        deployProvider: profile.deploy?.provider || "unknown",
-        deployRequiresApproval: profile.deploy?.requiresApproval || false,
-        proofStepCount: (profile.proofDefaults?.steps || []).filter((s) => s.available).length,
-        sourceSignalCount: (profile.sourceSignals || []).length,
-        agentConfigSurfaceCount: (profile.agentConfigSurfaces || []).length,
-      },
-    });
-  } catch {
-    // non-blocking
-  }
-
-  return { profilePath: LATEST_PROFILE_REL };
-}
-
-function buildProjectProfileSurface(cwd, options = {}) {
-  const absPath = path.join(cwd, LATEST_PROFILE_REL);
-  const profile = safeReadJson(absPath);
-  if (!profile) {
-    return {
-      status: "not_run",
-      latestProfilePath: null,
-      framework: null,
-      packageManager: null,
-      buildAvailable: false,
-      testAvailable: false,
-      nextAction: "Run `avorelo project-profile` to detect project profile.",
-    };
-  }
-  return {
-    status: profile.status,
-    latestProfilePath: LATEST_PROFILE_REL,
-    framework: profile.framework,
-    packageManager: profile.packageManager,
-    buildAvailable: Boolean(profile.commands?.build),
-    testAvailable: Boolean(profile.commands?.test),
-    deployProvider: profile.deploy?.provider || "unknown",
-    deployRequiresApproval: profile.deploy?.requiresApproval || false,
-    nextAction: null,
-  };
-}
-
-function formatProjectProfileText(profile, options = {}) {
-  const lines = [
-    "Avorelo Project Profile",
-    "",
-    `Status:         ${profile.status}`,
-    `Framework:      ${profile.framework}`,
-    `Package Mgr:    ${profile.packageManager}`,
-    `Workspace:      ${profile.workspaceType}`,
-    profile.apps?.length > 0 ? `Apps:           ${profile.apps.map((a) => a.name).join(", ")}` : null,
-    "",
-    "Commands:",
-    profile.commands?.build ? `  build:   ${profile.commands.build}` : "  build:   not detected",
-    profile.commands?.test ? `  test:    ${profile.commands.test}` : "  test:    not detected",
-    profile.commands?.lint ? `  lint:    ${profile.commands.lint}` : "  lint:    not detected",
-    profile.commands?.dev ? `  dev:     ${profile.commands.dev}` : "  dev:     not detected",
-    "",
-    "Deploy:",
-    `  Provider:  ${profile.deploy?.provider || "none"}`,
-    `  Requires approval: ${profile.deploy?.requiresApproval ? "yes" : "no"}`,
-    profile.deploy?.configFiles?.length > 0 ? `  Config:    ${profile.deploy.configFiles.join(", ")}` : null,
-    "",
-    "Risk Boundaries:",
-    `  Blocked files: ${(profile.riskBoundaries?.blockedFiles || []).length} patterns`,
-    `  Sensitive dirs: ${(profile.riskBoundaries?.sensitiveDirs || []).length} dirs`,
-    `  Blocked actions: ${(profile.riskBoundaries?.blockedActions || []).length}`,
-    "",
-    "Proof defaults:",
-    (profile.proofDefaults?.requiredSteps || []).length > 0
-      ? `  Steps: ${profile.proofDefaults.requiredSteps.join(", ")}`
-      : "  Steps: none detected",
-    "",
-    `Profile: ${LATEST_PROFILE_REL}`,
-  ].filter((l) => l !== null);
-
-  return lines.join("\n") + "\n";
-}
-
-module.exports = {
-  CONTRACT,
-  SCHEMA_VERSION,
-  LATEST_PROFILE_REL,
-  detectProjectProfile,
-  buildProjectProfile,
-  writeProjectProfile,
-  buildProjectProfileSurface,
-  formatProjectProfileText,
-};