avorelo 0.1.0

package/scripts/lib/project-profile.js

@@ -0,0 +1,555 @@
+"use strict";
+
+// ── Project Profile ───────────────────────────────────────────────────────────
+//
+// Contract: avorelo.projectProfile.v1
+//
+// Deterministic project profile detection: infers framework, package manager,
+// build/test/dev scripts, deploy provider, and risk boundaries from local files.
+//
+// No network calls. No package installs. No script execution. No secret reading.
+
+const fs = require("fs");
+const path = require("path");
+const { ensureCcoDirs, safeWriteJson } = require("./fsx");
+const { appendProductLearningEvent } = require("./product-learning-events");
+
+const CONTRACT = "avorelo.projectProfile.v1";
+const SCHEMA_VERSION = 1;
+
+const LATEST_PROFILE_REL = ".claude/cco/orchestration/project-profile/latest-profile.json";
+
+// ── Risk boundary constants ───────────────────────────────────────────────────
+
+const DEFAULT_BLOCKED_FILES = Object.freeze([
+  ".env",
+  ".env.local",
+  ".env.production",
+  ".env.development",
+  ".env.staging",
+  ".env.test",
+  ".env.server",
+  ".env.client",
+  "*.pem",
+  "*.key",
+  "*.p12",
+  "*.pfx",
+  ".npmrc",
+  ".yarnrc",
+  "secrets.json",
+  "credentials.json",
+  "service-account.json",
+]);
+
+const DEFAULT_SENSITIVE_DIRS = Object.freeze([
+  "auth",
+  "authentication",
+  "billing",
+  "payments",
+  "payment",
+  "secrets",
+  "secret",
+  "infra",
+  "infrastructure",
+  "api/auth",
+  "api/billing",
+  "api/payments",
+  "api/admin",
+  "server/auth",
+  "server/billing",
+  "src/auth",
+  "src/billing",
+  "src/payments",
+]);
+
+const DEFAULT_BLOCKED_ACTIONS = Object.freeze([
+  "deploy",
+  "publish",
+  "push_to_production",
+  "run_migrations_production",
+  "delete_database",
+  "drop_table",
+  "truncate_table",
+  "send_email_production",
+  "charge_customer",
+  "run_env_script",
+]);
+
+const DEFAULT_ALLOWED_ACTIONS = Object.freeze([
+  "file_read",
+  "file_write_with_diff",
+  "run_tests",
+  "run_lint",
+  "run_build",
+  "run_type_check",
+  "git_status",
+  "git_diff",
+  "git_log",
+]);
+
+// ── Helpers ───────────────────────────────────────────────────────────────────
+
+function safeReadJson(absPath) {
+  try {
+    if (!fs.existsSync(absPath)) return null;
+    const raw = fs.readFileSync(absPath, "utf8").replace(/^/, "");
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+
+function fileExists(cwd, ...parts) {
+  return fs.existsSync(path.join(cwd, ...parts));
+}
+
+function readText(cwd, ...parts) {
+  try {
+    const absPath = path.join(cwd, ...parts);
+    if (!fs.existsSync(absPath)) return null;
+    return fs.readFileSync(absPath, "utf8");
+  } catch {
+    return null;
+  }
+}
+
+function nowIso() {
+  return new Date().toISOString();
+}
+
+// ── Package manager detection ─────────────────────────────────────────────────
+
+function detectPackageManager(cwd, pkg) {
+  // Check packageManager field in package.json first
+  if (pkg && pkg.packageManager) {
+    const pm = pkg.packageManager;
+    if (pm.startsWith("pnpm")) return "pnpm";
+    if (pm.startsWith("yarn")) return "yarn";
+    if (pm.startsWith("bun")) return "bun";
+    if (pm.startsWith("npm")) return "npm";
+  }
+
+  // Check lockfiles
+  if (fileExists(cwd, "pnpm-lock.yaml")) return "pnpm";
+  if (fileExists(cwd, "yarn.lock")) return "yarn";
+  if (fileExists(cwd, "bun.lockb") || fileExists(cwd, "bun.lock")) return "bun";
+  if (fileExists(cwd, "package-lock.json")) return "npm";
+
+  // Has package.json but no lockfile
+  if (pkg) return "npm";
+
+  return "unknown";
+}
+
+// ── Framework detection ───────────────────────────────────────────────────────
+
+function detectFramework(cwd, pkg) {
+  if (!pkg) return "unknown";
+
+  const deps = {
+    ...((pkg.dependencies) || {}),
+    ...((pkg.devDependencies) || {}),
+  };
+
+  const scripts = pkg.scripts || {};
+  const hasScript = (name) => Boolean(scripts[name]);
+  const hasDep = (name) => Boolean(deps[name]);
+
+  // Wasp
+  if (fileExists(cwd, "main.wasp") || fileExists(cwd, ".wasproot")) return "wasp";
+
+  // Next.js
+  if (hasDep("next")) return "nextjs";
+
+  // Remix
+  if (hasDep("@remix-run/react") || hasDep("@remix-run/node")) return "remix";
+
+  // Vite + React
+  if (hasDep("vite") && hasDep("react")) return "vite_react";
+
+  // Vite generic
+  if (hasDep("vite")) return "vite";
+
+  // React (CRA or other)
+  if (hasDep("react") && hasDep("react-dom")) return "react";
+
+  // Vue
+  if (hasDep("vue") || hasDep("@vue/core")) return "vue";
+
+  // Express
+  if (hasDep("express")) return "express_node";
+
+  // Node (generic)
+  if (hasScript("start") || hasScript("dev")) return "node";
+
+  // Static HTML (no package.json framework)
+  if (fileExists(cwd, "index.html") && !pkg) return "static_html";
+
+  return "node";
+}
+
+// ── Workspace type detection ──────────────────────────────────────────────────
+
+function detectWorkspaceType(cwd, pkg) {
+  if (!pkg) return "unknown";
+
+  // pnpm workspaces
+  if (fileExists(cwd, "pnpm-workspace.yaml")) return "monorepo";
+
+  // yarn/npm workspaces
+  if (pkg.workspaces) return "monorepo";
+
+  // Multiple apps directories
+  const appsDir = fileExists(cwd, "apps");
+  const packagesDir = fileExists(cwd, "packages");
+  if (appsDir && packagesDir) return "monorepo";
+
+  return "single";
+}
+
+// ── App detection ─────────────────────────────────────────────────────────────
+
+function detectApps(cwd) {
+  const apps = [];
+  const appsDir = path.join(cwd, "apps");
+  if (fs.existsSync(appsDir)) {
+    try {
+      const entries = fs.readdirSync(appsDir, { withFileTypes: true });
+      for (const entry of entries) {
+        if (entry.isDirectory()) {
+          const appPkg = safeReadJson(path.join(appsDir, entry.name, "package.json"));
+          apps.push({
+            name: entry.name,
+            path: `apps/${entry.name}`,
+            framework: detectFramework(path.join(appsDir, entry.name), appPkg),
+          });
+        }
+      }
+    } catch {}
+  }
+  return apps;
+}
+
+// ── Script detection ──────────────────────────────────────────────────────────
+
+function detectCommands(pkg) {
+  if (!pkg || !pkg.scripts) {
+    return {
+      build: null,
+      test: null,
+      lint: null,
+      dev: null,
+      preview: null,
+    };
+  }
+
+  const scripts = pkg.scripts;
+  return {
+    build: scripts.build || scripts["build:prod"] || null,
+    test: scripts.test || scripts["test:unit"] || scripts["test:ci"] || null,
+    lint: scripts.lint || scripts["lint:check"] || null,
+    dev: scripts.dev || scripts.start || scripts.serve || null,
+    preview: scripts.preview || scripts["preview:prod"] || null,
+  };
+}
+
+// ── Dev server detection ──────────────────────────────────────────────────────
+
+function detectDevServer(cwd, pkg, framework) {
+  const portGuesses = {
+    nextjs: 3000,
+    vite_react: 5173,
+    vite: 5173,
+    react: 3000,
+    wasp: 3000,
+    remix: 3000,
+    vue: 5173,
+    express_node: 3000,
+    node: 3000,
+  };
+
+  const scripts = (pkg && pkg.scripts) || {};
+  const hasDevScript = Boolean(scripts.dev || scripts.start);
+
+  return {
+    detected: hasDevScript || ["nextjs", "vite_react", "vite", "react", "wasp"].includes(framework),
+    defaultPort: portGuesses[framework] || 3000,
+    previewCommand: scripts.preview || scripts.dev || null,
+  };
+}
+
+// ── Deploy detection ──────────────────────────────────────────────────────────
+
+function detectDeploy(cwd) {
+  const configFiles = [];
+  let provider = "unknown";
+
+  if (fileExists(cwd, "netlify.toml")) {
+    configFiles.push("netlify.toml");
+    provider = "netlify";
+  }
+  if (fileExists(cwd, "vercel.json") || fileExists(cwd, ".vercel")) {
+    configFiles.push("vercel.json");
+    provider = provider === "netlify" ? "netlify+vercel" : "vercel";
+  }
+  if (fileExists(cwd, "railway.toml") || fileExists(cwd, "railway.json")) {
+    configFiles.push("railway.toml");
+    provider = provider === "unknown" ? "railway" : provider + "+railway";
+  }
+  if (fileExists(cwd, "fly.toml")) {
+    configFiles.push("fly.toml");
+    provider = provider === "unknown" ? "fly" : provider + "+fly";
+  }
+
+  return {
+    provider,
+    configFiles,
+    requiresApproval: configFiles.length > 0,
+  };
+}
+
+// ── Proof defaults ────────────────────────────────────────────────────────────
+
+function detectProofDefaults(commands, deploy) {
+  const proofSteps = [];
+
+  if (commands.build) proofSteps.push({ step: "build", command: commands.build, available: true });
+  if (commands.test) proofSteps.push({ step: "test", command: commands.test, available: true });
+  if (commands.lint) proofSteps.push({ step: "lint", command: commands.lint, available: true });
+
+  if (proofSteps.length === 0) {
+    proofSteps.push({ step: "manual_review", command: null, available: false, note: "not_available" });
+  }
+
+  return {
+    requiredSteps: proofSteps.filter((s) => s.available).map((s) => s.step),
+    steps: proofSteps,
+    screenshotAvailable: false,
+    deployGateRequired: deploy.requiresApproval,
+  };
+}
+
+// ── Agent config surfaces ─────────────────────────────────────────────────────
+
+function detectAgentConfigSurfaces(cwd) {
+  const surfaces = [];
+  if (fileExists(cwd, ".claude", "settings.json")) surfaces.push(".claude/settings.json");
+  if (fileExists(cwd, ".claude", "settings.local.json")) surfaces.push(".claude/settings.local.json");
+  if (fileExists(cwd, "CLAUDE.md")) surfaces.push("CLAUDE.md");
+  if (fileExists(cwd, "AGENTS.md")) surfaces.push("AGENTS.md");
+  if (fileExists(cwd, ".cursorrules")) surfaces.push(".cursorrules");
+  if (fileExists(cwd, ".codex")) surfaces.push(".codex");
+  return surfaces;
+}
+
+// ── Source signals ────────────────────────────────────────────────────────────
+
+function buildSourceSignals(cwd, pkg) {
+  const signals = [];
+
+  if (pkg) signals.push("package.json");
+  if (fileExists(cwd, "main.wasp")) signals.push("main.wasp");
+  if (fileExists(cwd, "netlify.toml")) signals.push("netlify.toml");
+  if (fileExists(cwd, "vercel.json")) signals.push("vercel.json");
+  if (fileExists(cwd, "tsconfig.json")) signals.push("tsconfig.json");
+  if (fileExists(cwd, "vite.config.ts") || fileExists(cwd, "vite.config.js")) signals.push("vite.config");
+  if (fileExists(cwd, "next.config.js") || fileExists(cwd, "next.config.mjs")) signals.push("next.config");
+  if (fileExists(cwd, "schema.prisma")) signals.push("schema.prisma");
+
+  return signals;
+}
+
+// ── Risk boundaries ───────────────────────────────────────────────────────────
+
+function buildRiskBoundaries(cwd, pkg, deploy) {
+  const blockedFiles = [...DEFAULT_BLOCKED_FILES];
+  const sensitiveDirs = [...DEFAULT_SENSITIVE_DIRS];
+
+  // Add deploy config files to blocked (require explicit approval)
+  if (deploy.configFiles.length > 0) {
+    blockedFiles.push(...deploy.configFiles);
+  }
+
+  // package-lock.json is risky to auto-modify
+  if (fileExists(cwd, "package-lock.json")) {
+    if (!blockedFiles.includes("package-lock.json")) {
+      blockedFiles.push("package-lock.json");
+    }
+  }
+
+  // schema.prisma is risky (production DB schema)
+  if (fileExists(cwd, "schema.prisma")) {
+    blockedFiles.push("schema.prisma");
+  }
+
+  return {
+    blockedFiles: [...new Set(blockedFiles)],
+    sensitiveDirs: [...new Set(sensitiveDirs)],
+    blockedActions: [...DEFAULT_BLOCKED_ACTIONS],
+    allowedDefaultActions: [...DEFAULT_ALLOWED_ACTIONS],
+  };
+}
+
+// ── Profile status determination ──────────────────────────────────────────────
+
+function determineStatus(pkg, framework, packageManager) {
+  if (!pkg) return "unknown";
+  if (framework === "unknown" || packageManager === "unknown") return "partial";
+  return "ready";
+}
+
+// ── Build functions ───────────────────────────────────────────────────────────
+
+function detectProjectProfile(cwd, options = {}) {
+  const pkgPath = path.join(cwd, "package.json");
+  const pkg = safeReadJson(pkgPath);
+
+  const packageManager = detectPackageManager(cwd, pkg);
+  const framework = detectFramework(cwd, pkg);
+  const workspaceType = detectWorkspaceType(cwd, pkg);
+  const apps = detectApps(cwd);
+  const commands = detectCommands(pkg);
+  const devServer = detectDevServer(cwd, pkg, framework);
+  const deploy = detectDeploy(cwd);
+  const riskBoundaries = buildRiskBoundaries(cwd, pkg, deploy);
+  const proofDefaults = detectProofDefaults(commands, deploy);
+  const agentConfigSurfaces = detectAgentConfigSurfaces(cwd);
+  const sourceSignals = buildSourceSignals(cwd, pkg);
+  const status = determineStatus(pkg, framework, packageManager);
+
+  const caveats = [];
+  if (!pkg) caveats.push("No package.json found. Profile is partial.");
+  if (deploy.requiresApproval) caveats.push("Deploy config found. Deploy actions require explicit approval.");
+  caveats.push("Risk boundaries are defaults. Review for project-specific exceptions.");
+  caveats.push("No script execution was performed during profile detection.");
+
+  return {
+    contract: CONTRACT,
+    schemaVersion: SCHEMA_VERSION,
+    status,
+    framework,
+    packageManager,
+    workspaceType,
+    apps,
+    commands,
+    devServer,
+    deploy,
+    riskBoundaries,
+    proofDefaults,
+    agentConfigSurfaces,
+    sourceSignals,
+    caveats,
+    redacted: true,
+  };
+}
+
+function buildProjectProfile(cwd, options = {}) {
+  return detectProjectProfile(cwd, options);
+}
+
+function writeProjectProfile(cwd, profile) {
+  ensureCcoDirs(cwd);
+  const dir = path.join(cwd, ".claude", "cco", "orchestration", "project-profile");
+  fs.mkdirSync(dir, { recursive: true });
+  const absPath = path.join(cwd, LATEST_PROFILE_REL);
+  fs.writeFileSync(absPath, JSON.stringify(profile, null, 2), "utf8");
+
+  try {
+    appendProductLearningEvent(cwd, {
+      eventName: "project_profile_detected",
+      category: "project_profile",
+      surface: "local",
+      status: "observed",
+      payload: {
+        profileStatus: profile.status,
+        framework: profile.framework,
+        packageManager: profile.packageManager,
+        workspaceType: profile.workspaceType,
+        deployProvider: profile.deploy?.provider || "unknown",
+        deployRequiresApproval: profile.deploy?.requiresApproval || false,
+        proofStepCount: (profile.proofDefaults?.steps || []).filter((s) => s.available).length,
+        sourceSignalCount: (profile.sourceSignals || []).length,
+        agentConfigSurfaceCount: (profile.agentConfigSurfaces || []).length,
+      },
+    });
+  } catch {
+    // non-blocking
+  }
+
+  return { profilePath: LATEST_PROFILE_REL };
+}
+
+function buildProjectProfileSurface(cwd, options = {}) {
+  const absPath = path.join(cwd, LATEST_PROFILE_REL);
+  const profile = safeReadJson(absPath);
+  if (!profile) {
+    return {
+      status: "not_run",
+      latestProfilePath: null,
+      framework: null,
+      packageManager: null,
+      buildAvailable: false,
+      testAvailable: false,
+      nextAction: "Run `avorelo project-profile` to detect project profile.",
+    };
+  }
+  return {
+    status: profile.status,
+    latestProfilePath: LATEST_PROFILE_REL,
+    framework: profile.framework,
+    packageManager: profile.packageManager,
+    buildAvailable: Boolean(profile.commands?.build),
+    testAvailable: Boolean(profile.commands?.test),
+    deployProvider: profile.deploy?.provider || "unknown",
+    deployRequiresApproval: profile.deploy?.requiresApproval || false,
+    nextAction: null,
+  };
+}
+
+function formatProjectProfileText(profile, options = {}) {
+  const lines = [
+    "Avorelo Project Profile",
+    "",
+    `Status:         ${profile.status}`,
+    `Framework:      ${profile.framework}`,
+    `Package Mgr:    ${profile.packageManager}`,
+    `Workspace:      ${profile.workspaceType}`,
+    profile.apps?.length > 0 ? `Apps:           ${profile.apps.map((a) => a.name).join(", ")}` : null,
+    "",
+    "Commands:",
+    profile.commands?.build ? `  build:   ${profile.commands.build}` : "  build:   not detected",
+    profile.commands?.test ? `  test:    ${profile.commands.test}` : "  test:    not detected",
+    profile.commands?.lint ? `  lint:    ${profile.commands.lint}` : "  lint:    not detected",
+    profile.commands?.dev ? `  dev:     ${profile.commands.dev}` : "  dev:     not detected",
+    "",
+    "Deploy:",
+    `  Provider:  ${profile.deploy?.provider || "none"}`,
+    `  Requires approval: ${profile.deploy?.requiresApproval ? "yes" : "no"}`,
+    profile.deploy?.configFiles?.length > 0 ? `  Config:    ${profile.deploy.configFiles.join(", ")}` : null,
+    "",
+    "Risk Boundaries:",
+    `  Blocked files: ${(profile.riskBoundaries?.blockedFiles || []).length} patterns`,
+    `  Sensitive dirs: ${(profile.riskBoundaries?.sensitiveDirs || []).length} dirs`,
+    `  Blocked actions: ${(profile.riskBoundaries?.blockedActions || []).length}`,
+    "",
+    "Proof defaults:",
+    (profile.proofDefaults?.requiredSteps || []).length > 0
+      ? `  Steps: ${profile.proofDefaults.requiredSteps.join(", ")}`
+      : "  Steps: none detected",
+    "",
+    `Profile: ${LATEST_PROFILE_REL}`,
+  ].filter((l) => l !== null);
+
+  return lines.join("\n") + "\n";
+}
+
+module.exports = {
+  CONTRACT,
+  SCHEMA_VERSION,
+  LATEST_PROFILE_REL,
+  detectProjectProfile,
+  buildProjectProfile,
+  writeProjectProfile,
+  buildProjectProfileSurface,
+  formatProjectProfileText,
+};