baldart 3.14.1 → 3.16.0

package/framework/docs/PROJECT-CONFIGURATION.md

@@ -131,9 +131,49 @@ stack:
     forbidden: []
   testing:
     e2e: "playwright"                         # or "cypress", or ""
+
+  # Stack-cardinal scalars (since v3.15.0). Used by /prd, coder,
+  # api-perf-cost-auditor, /new, code-reviewer, security-reviewer to branch
+  # vocabulary, gate sections, anti-pattern checklists, deploy commands.
+  database: "firestore"        # firestore|supabase|postgres|mysql|mongodb|dynamodb|sqlite|none|""
+  auth_provider: "firebase-auth" # firebase-auth|supabase-auth|clerk|auth0|cognito|nextauth|lucia|custom|none|""
+  framework: "nextjs"          # nextjs|remix|sveltekit|astro|nuxt|rails|django|fastapi|express|none|""
+  deployment: "vercel"         # vercel|firebase|aws|gcp|cloudflare|render|fly|self-hosted|none|""
 ```
 
-Skills propose only `canonical` libraries and refuse `forbidden` ones. Empty `canonical` = ask the user before proposing a library.
+Skills propose only `canonical` libraries and refuse `forbidden` ones. Empty
+`canonical` = ask the user before proposing a library.
+
+**Stack-cardinal scalars (v3.15.0+).** The four scalar keys (`database`,
+`auth_provider`, `framework`, `deployment`) drive stack-aware branching across
+the skill/agent set:
+
+- `/prd` Schema Verification Gate picks the registry path matching
+  `stack.database` (Firestore field-registry, Prisma schema, SQL migrations,
+  Mongo validator).
+- `/prd` Section 5 of the PRD template renders the index variant matching
+  `stack.database` (Firestore composite, SQL B-tree, Mongo compound,
+  DynamoDB GSI/LSI).
+- `api-perf-gate` keyword scan adds DB-specific anti-patterns only when the
+  matching `stack.database` is set; universal patterns always run.
+- `coder.md` Database Index Invariant ships the right migration kind for
+  the resolved `stack.database`.
+- `api-perf-cost-auditor` reads the four scalars at session start and cites
+  them in every audit header, so the user knows which variant applied.
+- `/new` Production Readiness Checklist picks deploy commands matching
+  `stack.deployment` + `stack.database` (firebase deploy, vercel deploy,
+  supabase db push, CDK/Terraform apply).
+- `security-reviewer` evaluates access rules per `stack.database`
+  (Firestore rules, Supabase RLS, Mongo validators, DynamoDB IAM,
+  Postgres RLS+GRANT).
+- `bug/logging-patterns.md` picks the framework-native debug switches
+  matching `stack.framework`.
+
+**Always-ask contract on empty.** When a scalar is `""` and a skill needs it,
+the skill asks the user once and suggests running `npx baldart configure` to
+persist the answer. Skills NEVER assume a default — empty means "ask".
+`baldart update` flags newly-introduced scalar keys via the schema-drift
+detector and auto-offers `baldart configure`.
 
 ### 4.5 `features` — explicit booleans gating BLOCKING reads
 

package/framework/templates/baldart.config.template.yml

@@ -85,6 +85,31 @@ stack:
     # E2E framework — drives playwright-skill behaviour.
     e2e: ""                   # e.g. "playwright" | "cypress" | ""
 
+  # Persistence layer. Drives /prd Schema Verification Gate, index strategies
+  # in prd-template, coder Database Index Invariant, api-perf-cost-auditor
+  # pricing model, audit-phase security-rules detection.
+  # Recognized values: "firestore" | "supabase" | "postgres" | "mysql" |
+  # "mongodb" | "dynamodb" | "sqlite" | "none" | "" (unset → skill asks).
+  database: ""
+
+  # Authentication provider. Drives security-reviewer rule sets and discovery
+  # E2E credential gathering defaults.
+  # Recognized values: "firebase-auth" | "supabase-auth" | "clerk" | "auth0" |
+  # "cognito" | "nextauth" | "lucia" | "custom" | "none" | "".
+  auth_provider: ""
+
+  # Application framework. Drives api-perf-gate caching defaults, bug
+  # logging-patterns, code-reviewer convention checks, coder file layout.
+  # Recognized values: "nextjs" | "remix" | "sveltekit" | "astro" | "nuxt" |
+  # "rails" | "django" | "fastapi" | "express" | "none" | "".
+  framework: ""
+
+  # Deployment target. Drives /new deploy commands, api-perf-cost-auditor
+  # cost model, framework-edit-gate path checks.
+  # Recognized values: "vercel" | "firebase" | "aws" | "gcp" | "cloudflare" |
+  # "render" | "fly" | "self-hosted" | "none" | "".
+  deployment: ""
+
 # ─── FEATURES ────────────────────────────────────────────────────────────
 # Explicit booleans. ALL keys must be present (true | false) once `baldart
 # configure` has run. An absent flag means the user hasn't been asked yet —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baldart",
-  "version": "3.14.1",
+  "version": "3.16.0",
   "description": "Claude Agent Framework - Reusable framework for coordinating AI agents and humans in software projects",
   "bin": {
     "baldart": "./bin/baldart.js"

package/src/commands/configure.js

@@ -284,6 +284,50 @@ function detect(cwd = process.cwd()) {
 
   const mergeStrategyProbe = detectMergeStrategy(cwd);
 
+  // ---- Persistence layer (stack.database) --------------------------------
+  let detectedDatabase = '';
+  if (hasAnyDep('firebase', 'firebase-admin', '@google-cloud/firestore', '@firebase/firestore')) detectedDatabase = 'firestore';
+  else if (hasAnyDep('@supabase/supabase-js', '@supabase/ssr', '@supabase/auth-helpers-nextjs')) detectedDatabase = 'supabase';
+  else if (hasAnyDep('mongoose', 'mongodb')) detectedDatabase = 'mongodb';
+  else if (hasAnyDep('pg', 'postgres', '@neondatabase/serverless', '@vercel/postgres')) detectedDatabase = 'postgres';
+  else if (hasAnyDep('mysql', 'mysql2', '@planetscale/database')) detectedDatabase = 'mysql';
+  else if (hasAnyDep('@aws-sdk/client-dynamodb', 'dynamodb-toolbox')) detectedDatabase = 'dynamodb';
+  else if (hasAnyDep('better-sqlite3', 'sqlite3', '@libsql/client')) detectedDatabase = 'sqlite';
+
+  // ---- Auth provider (stack.auth_provider) -------------------------------
+  // Order matters: more specific deps win over the catch-all firebase/supabase.
+  let detectedAuthProvider = '';
+  if (hasAnyDep('@clerk/nextjs', '@clerk/clerk-sdk-node', '@clerk/clerk-js', '@clerk/backend')) detectedAuthProvider = 'clerk';
+  else if (hasAnyDep('@auth0/nextjs-auth0', '@auth0/auth0-react', 'auth0')) detectedAuthProvider = 'auth0';
+  else if (hasAnyDep('next-auth', '@auth/core')) detectedAuthProvider = 'nextauth';
+  else if (hasAnyDep('lucia', '@lucia-auth/core', '@lucia-auth/adapter-prisma')) detectedAuthProvider = 'lucia';
+  else if (hasAnyDep('amazon-cognito-identity-js', '@aws-sdk/client-cognito-identity-provider')) detectedAuthProvider = 'cognito';
+  else if (hasAnyDep('@supabase/auth-helpers-nextjs', '@supabase/ssr')) detectedAuthProvider = 'supabase-auth';
+  else if (hasAnyDep('firebase', '@firebase/auth', 'firebase-admin')) detectedAuthProvider = 'firebase-auth';
+
+  // ---- Application framework (stack.framework) ---------------------------
+  let detectedFramework = '';
+  if (hasDep('next')) detectedFramework = 'nextjs';
+  else if (hasAnyDep('@remix-run/react', '@remix-run/node', '@remix-run/server-runtime')) detectedFramework = 'remix';
+  else if (hasAnyDep('@sveltejs/kit', 'svelte')) detectedFramework = 'sveltekit';
+  else if (hasDep('astro')) detectedFramework = 'astro';
+  else if (hasDep('nuxt')) detectedFramework = 'nuxt';
+  else if (hasDep('express')) detectedFramework = 'express';
+  else if (exists('Gemfile') && /\bgem\s+['"]rails['"]/.test((readSafe('Gemfile') || ''))) detectedFramework = 'rails';
+  else if (exists('manage.py') || (exists('requirements.txt') && /\bdjango\b/i.test(readSafe('requirements.txt') || ''))) detectedFramework = 'django';
+  else if (exists('requirements.txt') && /\bfastapi\b/i.test(readSafe('requirements.txt') || '')) detectedFramework = 'fastapi';
+
+  // ---- Deployment target (stack.deployment) ------------------------------
+  let detectedDeployment = '';
+  if (exists('vercel.json') || hasDep('@vercel/node')) detectedDeployment = 'vercel';
+  else if (exists('firebase.json')) detectedDeployment = 'firebase';
+  else if (exists('wrangler.toml') || exists('wrangler.jsonc') || exists('wrangler.json')) detectedDeployment = 'cloudflare';
+  else if (exists('fly.toml')) detectedDeployment = 'fly';
+  else if (exists('render.yaml')) detectedDeployment = 'render';
+  else if (exists('amplify.yml') || exists('serverless.yml')) detectedDeployment = 'aws';
+  else if (exists('app.yaml') || exists('cloudbuild.yaml')) detectedDeployment = 'gcp';
+  // Note: bare Dockerfile → leave empty; user picks "self-hosted" or actual target.
+
   const detected = {
     paths: {
       design_system: designSystemPath,
@@ -323,6 +367,10 @@ function detect(cwd = process.cwd()) {
         forbidden: [],
       },
       testing: { e2e: e2eFramework },
+      database: detectedDatabase,
+      auth_provider: detectedAuthProvider,
+      framework: detectedFramework,
+      deployment: detectedDeployment,
       // New: surface the detected monorepo + DS signals so skills can read them.
       monorepo: isMonorepo ? {
         detected: true,
@@ -692,6 +740,26 @@ async function interactivePrompts(merged, detected) {
     merged.stack.testing.e2e || detected.stack.testing.e2e || ''
   );
 
+  merged.stack.database = await promptForKey(
+    'Persistence layer ("firestore" / "supabase" / "postgres" / "mysql" / "mongodb" / "dynamodb" / "sqlite" / "none" — empty to leave unset)',
+    merged.stack.database || detected.stack.database || ''
+  );
+
+  merged.stack.auth_provider = await promptForKey(
+    'Auth provider ("firebase-auth" / "supabase-auth" / "clerk" / "auth0" / "cognito" / "nextauth" / "lucia" / "custom" / "none" — empty to leave unset)',
+    merged.stack.auth_provider || detected.stack.auth_provider || ''
+  );
+
+  merged.stack.framework = await promptForKey(
+    'Application framework ("nextjs" / "remix" / "sveltekit" / "astro" / "nuxt" / "rails" / "django" / "fastapi" / "express" / "none" — empty to leave unset)',
+    merged.stack.framework || detected.stack.framework || ''
+  );
+
+  merged.stack.deployment = await promptForKey(
+    'Deployment target ("vercel" / "firebase" / "aws" / "gcp" / "cloudflare" / "render" / "fly" / "self-hosted" / "none" — empty to leave unset)',
+    merged.stack.deployment || detected.stack.deployment || ''
+  );
+
   return merged;
 }
 
@@ -771,6 +839,10 @@ async function configure(opts = {}) {
     `Charting libs:   ${detected.stack.charting.canonical.join(', ') || '—'}`,
     `Animation libs:  ${detected.stack.animation.canonical.join(', ') || '—'}`,
     `E2E framework:   ${detected.stack.testing.e2e || '—'}`,
+    `Database:        ${detected.stack.database || '—'}`,
+    `Auth provider:   ${detected.stack.auth_provider || '—'}`,
+    `Framework:       ${detected.stack.framework || '—'}`,
+    `Deployment:      ${detected.stack.deployment || '—'}`,
   ]);
 
   if (opts.nonInteractive) {

package/src/commands/update.js

@@ -452,7 +452,19 @@ async function update(options = {}) {
               .filter((k) => !(k in (cur2.paths || {})));
             const missingGit = Object.keys(tpl.git || {})
               .filter((k) => !(k in (cur2.git || {})));
-            const allMissing = [...missingPaths, ...missingFeatures, ...missingGit.map((k) => `git.${k}`)];
+            // Scalar (string) top-level stack.* keys — e.g. stack.database,
+            // stack.auth_provider, stack.framework, stack.deployment. Sub-object
+            // keys (charting, animation, testing) are intentionally skipped:
+            // their drift is handled by individual sub-prompts in configure.
+            const missingStack = Object.keys(tpl.stack || {})
+              .filter((k) => typeof tpl.stack[k] === 'string')
+              .filter((k) => !(k in (cur2.stack || {})));
+            const allMissing = [
+              ...missingPaths,
+              ...missingFeatures,
+              ...missingGit.map((k) => `git.${k}`),
+              ...missingStack.map((k) => `stack.${k}`),
+            ];
             if (allMissing.length) {
               UI.newline();
               UI.warning(`New config keys in this version: ${allMissing.join(', ')}.`);