baldart 3.14.0 → 3.15.0

package/framework/templates/baldart.config.template.yml

@@ -85,6 +85,31 @@ stack:
     # E2E framework — drives playwright-skill behaviour.
     e2e: ""                   # e.g. "playwright" | "cypress" | ""
 
+  # Persistence layer. Drives /prd Schema Verification Gate, index strategies
+  # in prd-template, coder Database Index Invariant, api-perf-cost-auditor
+  # pricing model, audit-phase security-rules detection.
+  # Recognized values: "firestore" | "supabase" | "postgres" | "mysql" |
+  # "mongodb" | "dynamodb" | "sqlite" | "none" | "" (unset → skill asks).
+  database: ""
+
+  # Authentication provider. Drives security-reviewer rule sets and discovery
+  # E2E credential gathering defaults.
+  # Recognized values: "firebase-auth" | "supabase-auth" | "clerk" | "auth0" |
+  # "cognito" | "nextauth" | "lucia" | "custom" | "none" | "".
+  auth_provider: ""
+
+  # Application framework. Drives api-perf-gate caching defaults, bug
+  # logging-patterns, code-reviewer convention checks, coder file layout.
+  # Recognized values: "nextjs" | "remix" | "sveltekit" | "astro" | "nuxt" |
+  # "rails" | "django" | "fastapi" | "express" | "none" | "".
+  framework: ""
+
+  # Deployment target. Drives /new deploy commands, api-perf-cost-auditor
+  # cost model, framework-edit-gate path checks.
+  # Recognized values: "vercel" | "firebase" | "aws" | "gcp" | "cloudflare" |
+  # "render" | "fly" | "self-hosted" | "none" | "".
+  deployment: ""
+
 # ─── FEATURES ────────────────────────────────────────────────────────────
 # Explicit booleans. ALL keys must be present (true | false) once `baldart
 # configure` has run. An absent flag means the user hasn't been asked yet —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baldart",
-  "version": "3.14.0",
+  "version": "3.15.0",
   "description": "Claude Agent Framework - Reusable framework for coordinating AI agents and humans in software projects",
   "bin": {
     "baldart": "./bin/baldart.js"

package/src/commands/configure.js

@@ -284,6 +284,50 @@ function detect(cwd = process.cwd()) {
 
   const mergeStrategyProbe = detectMergeStrategy(cwd);
 
+  // ---- Persistence layer (stack.database) --------------------------------
+  let detectedDatabase = '';
+  if (hasAnyDep('firebase', 'firebase-admin', '@google-cloud/firestore', '@firebase/firestore')) detectedDatabase = 'firestore';
+  else if (hasAnyDep('@supabase/supabase-js', '@supabase/ssr', '@supabase/auth-helpers-nextjs')) detectedDatabase = 'supabase';
+  else if (hasAnyDep('mongoose', 'mongodb')) detectedDatabase = 'mongodb';
+  else if (hasAnyDep('pg', 'postgres', '@neondatabase/serverless', '@vercel/postgres')) detectedDatabase = 'postgres';
+  else if (hasAnyDep('mysql', 'mysql2', '@planetscale/database')) detectedDatabase = 'mysql';
+  else if (hasAnyDep('@aws-sdk/client-dynamodb', 'dynamodb-toolbox')) detectedDatabase = 'dynamodb';
+  else if (hasAnyDep('better-sqlite3', 'sqlite3', '@libsql/client')) detectedDatabase = 'sqlite';
+
+  // ---- Auth provider (stack.auth_provider) -------------------------------
+  // Order matters: more specific deps win over the catch-all firebase/supabase.
+  let detectedAuthProvider = '';
+  if (hasAnyDep('@clerk/nextjs', '@clerk/clerk-sdk-node', '@clerk/clerk-js', '@clerk/backend')) detectedAuthProvider = 'clerk';
+  else if (hasAnyDep('@auth0/nextjs-auth0', '@auth0/auth0-react', 'auth0')) detectedAuthProvider = 'auth0';
+  else if (hasAnyDep('next-auth', '@auth/core')) detectedAuthProvider = 'nextauth';
+  else if (hasAnyDep('lucia', '@lucia-auth/core', '@lucia-auth/adapter-prisma')) detectedAuthProvider = 'lucia';
+  else if (hasAnyDep('amazon-cognito-identity-js', '@aws-sdk/client-cognito-identity-provider')) detectedAuthProvider = 'cognito';
+  else if (hasAnyDep('@supabase/auth-helpers-nextjs', '@supabase/ssr')) detectedAuthProvider = 'supabase-auth';
+  else if (hasAnyDep('firebase', '@firebase/auth', 'firebase-admin')) detectedAuthProvider = 'firebase-auth';
+
+  // ---- Application framework (stack.framework) ---------------------------
+  let detectedFramework = '';
+  if (hasDep('next')) detectedFramework = 'nextjs';
+  else if (hasAnyDep('@remix-run/react', '@remix-run/node', '@remix-run/server-runtime')) detectedFramework = 'remix';
+  else if (hasAnyDep('@sveltejs/kit', 'svelte')) detectedFramework = 'sveltekit';
+  else if (hasDep('astro')) detectedFramework = 'astro';
+  else if (hasDep('nuxt')) detectedFramework = 'nuxt';
+  else if (hasDep('express')) detectedFramework = 'express';
+  else if (exists('Gemfile') && /\bgem\s+['"]rails['"]/.test((readSafe('Gemfile') || ''))) detectedFramework = 'rails';
+  else if (exists('manage.py') || (exists('requirements.txt') && /\bdjango\b/i.test(readSafe('requirements.txt') || ''))) detectedFramework = 'django';
+  else if (exists('requirements.txt') && /\bfastapi\b/i.test(readSafe('requirements.txt') || '')) detectedFramework = 'fastapi';
+
+  // ---- Deployment target (stack.deployment) ------------------------------
+  let detectedDeployment = '';
+  if (exists('vercel.json') || hasDep('@vercel/node')) detectedDeployment = 'vercel';
+  else if (exists('firebase.json')) detectedDeployment = 'firebase';
+  else if (exists('wrangler.toml') || exists('wrangler.jsonc') || exists('wrangler.json')) detectedDeployment = 'cloudflare';
+  else if (exists('fly.toml')) detectedDeployment = 'fly';
+  else if (exists('render.yaml')) detectedDeployment = 'render';
+  else if (exists('amplify.yml') || exists('serverless.yml')) detectedDeployment = 'aws';
+  else if (exists('app.yaml') || exists('cloudbuild.yaml')) detectedDeployment = 'gcp';
+  // Note: bare Dockerfile → leave empty; user picks "self-hosted" or actual target.
+
   const detected = {
     paths: {
       design_system: designSystemPath,
@@ -323,6 +367,10 @@ function detect(cwd = process.cwd()) {
         forbidden: [],
       },
       testing: { e2e: e2eFramework },
+      database: detectedDatabase,
+      auth_provider: detectedAuthProvider,
+      framework: detectedFramework,
+      deployment: detectedDeployment,
       // New: surface the detected monorepo + DS signals so skills can read them.
       monorepo: isMonorepo ? {
         detected: true,
@@ -692,6 +740,26 @@ async function interactivePrompts(merged, detected) {
     merged.stack.testing.e2e || detected.stack.testing.e2e || ''
   );
 
+  merged.stack.database = await promptForKey(
+    'Persistence layer ("firestore" / "supabase" / "postgres" / "mysql" / "mongodb" / "dynamodb" / "sqlite" / "none" — empty to leave unset)',
+    merged.stack.database || detected.stack.database || ''
+  );
+
+  merged.stack.auth_provider = await promptForKey(
+    'Auth provider ("firebase-auth" / "supabase-auth" / "clerk" / "auth0" / "cognito" / "nextauth" / "lucia" / "custom" / "none" — empty to leave unset)',
+    merged.stack.auth_provider || detected.stack.auth_provider || ''
+  );
+
+  merged.stack.framework = await promptForKey(
+    'Application framework ("nextjs" / "remix" / "sveltekit" / "astro" / "nuxt" / "rails" / "django" / "fastapi" / "express" / "none" — empty to leave unset)',
+    merged.stack.framework || detected.stack.framework || ''
+  );
+
+  merged.stack.deployment = await promptForKey(
+    'Deployment target ("vercel" / "firebase" / "aws" / "gcp" / "cloudflare" / "render" / "fly" / "self-hosted" / "none" — empty to leave unset)',
+    merged.stack.deployment || detected.stack.deployment || ''
+  );
+
   return merged;
 }
 
@@ -771,6 +839,10 @@ async function configure(opts = {}) {
     `Charting libs:   ${detected.stack.charting.canonical.join(', ') || '—'}`,
     `Animation libs:  ${detected.stack.animation.canonical.join(', ') || '—'}`,
     `E2E framework:   ${detected.stack.testing.e2e || '—'}`,
+    `Database:        ${detected.stack.database || '—'}`,
+    `Auth provider:   ${detected.stack.auth_provider || '—'}`,
+    `Framework:       ${detected.stack.framework || '—'}`,
+    `Deployment:      ${detected.stack.deployment || '—'}`,
   ]);
 
   if (opts.nonInteractive) {

package/src/commands/update.js

@@ -452,7 +452,19 @@ async function update(options = {}) {
               .filter((k) => !(k in (cur2.paths || {})));
             const missingGit = Object.keys(tpl.git || {})
               .filter((k) => !(k in (cur2.git || {})));
-            const allMissing = [...missingPaths, ...missingFeatures, ...missingGit.map((k) => `git.${k}`)];
+            // Scalar (string) top-level stack.* keys — e.g. stack.database,
+            // stack.auth_provider, stack.framework, stack.deployment. Sub-object
+            // keys (charting, animation, testing) are intentionally skipped:
+            // their drift is handled by individual sub-prompts in configure.
+            const missingStack = Object.keys(tpl.stack || {})
+              .filter((k) => typeof tpl.stack[k] === 'string')
+              .filter((k) => !(k in (cur2.stack || {})));
+            const allMissing = [
+              ...missingPaths,
+              ...missingFeatures,
+              ...missingGit.map((k) => `git.${k}`),
+              ...missingStack.map((k) => `stack.${k}`),
+            ];
             if (allMissing.length) {
               UI.newline();
               UI.warning(`New config keys in this version: ${allMissing.join(', ')}.`);

package/src/utils/git.js

@@ -198,11 +198,16 @@ class GitUtils {
       if (!line) return { ignored: false };
       // Format: "<source>:<line>:<pattern>\t<path>"
       const m = /^(.+?):(\d+):([^\t]+)\t/.exec(line);
+      const pattern = m ? m[3] : null;
+      // A leading `!` makes it a NEGATION pattern — the path is re-included,
+      // not ignored. `git check-ignore` still prints it (matching != ignored).
+      const isNegation = pattern ? pattern.startsWith('!') : false;
+      if (isNegation) return { ignored: false, negatedBy: pattern };
       return {
         ignored: true,
         source: m ? m[1] : 'unknown',
         line: m ? Number(m[2]) : null,
-        pattern: m ? m[3] : null,
+        pattern,
         raw: line
       };
     } catch (_) {