botversion-sdk 1.0.3 → 1.0.5

package/cli/detector.js

@@ -356,7 +356,7 @@ function detectMonorepo(cwd) {
 
 // ─── FRAMEWORK DETECTION ─────────────────────────────────────────────────────
 
-const SUPPORTED_FRAMEWORKS = ["express", "next"];
+const SUPPORTED_FRAMEWORKS = ["next", "express"];
 const UNSUPPORTED_FRAMEWORKS = [
   "fastify",
   "koa",
@@ -377,6 +377,10 @@ function detectFramework(pkg) {
     if (deps[fw]) return { name: fw, supported: false };
   }
 
+  // If BOTH next and express exist, always pick next
+  // because express is just being used as a custom server wrapper
+  if (deps["next"]) return { name: "next", supported: true };
+
   for (const fw of SUPPORTED_FRAMEWORKS) {
     if (deps[fw]) return { name: fw, supported: true };
   }
@@ -462,61 +466,311 @@ function detectNextVersion(pkg) {
   return { raw: version, major };
 }
 
-// ─── EXPRESS ENTRY POINT DETECTION ───────────────────────────────────────────
+// ─── SCORING FUNCTIONS ────────────────────────────────────────────────────────
+
+function scoreExpressFile(content, filePath) {
+  let score = 0;
+  const filename = path.basename(filePath);
+  const normalizedPath = filePath.replace(/\\/g, "/");
+
+  // ── EXISTING POSITIVE SIGNALS ──────────────────────────────────
+  if (/express\s*\(\s*\)/.test(content)) score += 10;
+  if (/class\s+\w+\s+extends\s+express/.test(content)) score += 10;
+  if (/(?:function|const|let|var)\s+(create|make|build|setup)App/.test(content))
+    score += 8;
+  if (/\.listen\s*\(/.test(content)) score += 8;
+  if (/\.use\s*\(\s*['"`\/]/.test(content)) score += 5;
+  if (/app\.use\s*\(/.test(content)) score += 4;
+  if (
+    /require\s*\(\s*['"]express['"]\s*\)|from\s+['"]express['"]/.test(content)
+  )
+    score += 1;
+
+  // ── NEW POSITIVE SIGNALS — real API server ─────────────────────
+  const hasApiRoutes = /\.(get|post|put|delete|patch)\s*\(\s*['"`]\//.test(
+    content,
+  );
+  const returnsJson = /res\.json\s*\(/.test(content);
+  const hasRouterFiles = /require\s*\(['"`]\.\/routes/.test(content);
+  const hasControllers = /require\s*\(['"`]\.\/controllers/.test(content);
+
+  if (hasApiRoutes) score += 6;
+  if (returnsJson) score += 5;
+  if (hasRouterFiles) score += 4;
+  if (hasControllers) score += 3;
+
+  // ── EXISTING PENALTIES ─────────────────────────────────────────
+  if (/^(?:const|let|var)\s+router\s*=\s*express\.Router\s*\(/m.test(content))
+    score -= 8;
+  if (/(test_|_test|\.test\.|\.spec\.|conftest)/.test(filename)) score -= 10;
+  if (/dist\/|build\//.test(filePath)) score -= 10;
+
+  // ── NEW PENALTIES ──────────────────────────────────────────────
+
+  // Category 1: PHP servers
+  if (content.includes("php-express")) score -= 20;
+  if (content.includes("phpExpress")) score -= 20;
+  if (/app\.engine\s*\(\s*['"]php['"]/.test(content)) score -= 20;
+
+  // Category 2: View-only servers (any template engine, no API)
+  const hasViewEngine = /app\.set\s*\(\s*['"]view engine['"]/.test(content);
+  if (hasViewEngine && !hasApiRoutes && !returnsJson) score -= 15;
+
+  // Category 3: Static-only servers
+  const hasStatic = /express\.static\s*\(/.test(content);
+  const hasOnlyStatic = hasStatic && !hasApiRoutes && !returnsJson;
+  if (hasOnlyStatic) score -= 15;
+
+  // Category 4: Proxy servers
+  if (
+    content.includes("http-proxy-middleware") ||
+    content.includes("createProxyMiddleware")
+  )
+    score -= 15;
+
+  // Category 5: WebSocket-only servers
+  const hasSocketIO =
+    content.includes("socket.io") || content.includes("new Server(");
+  if (hasSocketIO && !hasApiRoutes) score -= 15;
+
+  // Category 6: Job/Queue servers
+  if (
+    (content.includes("require('bull')") ||
+      content.includes('require("bull")') ||
+      content.includes("bullmq") ||
+      content.includes("agenda")) &&
+    !hasApiRoutes
+  )
+    score -= 15;
+
+  // Category 7: Webhook-only servers
+  const hasWebhook = /['"`]\/webhook['"`]/.test(content);
+  const onlyWebhook = hasWebhook && !hasApiRoutes;
+  if (onlyWebhook) score -= 10;
+
+  // Category 8: Dev tooling servers
+  if (
+    content.includes("webpack-dev-middleware") ||
+    content.includes("webpackDevMiddleware") ||
+    content.includes("storybook")
+  )
+    score -= 15;
+
+  // Category 9: Test/mock servers (path-based)
+  if (/__mocks__|fixtures\/|test\/|__tests__\//.test(normalizedPath))
+    score -= 15;
+
+  // ── FILENAME BONUSES ───────────────────────────────────────────
+  if (["server.js", "server.ts", "app.js", "app.ts"].includes(filename))
+    score += 3;
+  if (["index.js", "index.ts", "main.js", "main.ts"].includes(filename))
+    score += 2;
+
+  return score;
+}
+
+// ─── PARSE ENTRY FROM CONFIG FILES ───────────────────────────────────────────
+
+function parseEntryFromConfigFiles(cwd) {
+  /**
+   * Extracts likely entry point from Procfile or Dockerfile.
+   * Covers patterns like:
+   *   Procfile:   web: node server.js
+   *   Procfile:   web: nodemon src/index.js
+   *   Dockerfile: CMD ["node", "server.js"]
+   *   Dockerfile: CMD ["nodemon", "src/index.js"]
+   */
+
+  function resolveFile(cwd, filePath) {
+    const full = path.join(cwd, filePath);
+    if (fs.existsSync(full)) return full;
+    return null;
+  }
+
+  // ── 1. Check Procfile ─────────────────────────────────────────────────────
+  const procfilePath = path.join(cwd, "Procfile");
+  if (fs.existsSync(procfilePath)) {
+    try {
+      const lines = fs.readFileSync(procfilePath, "utf8").split("\n");
+      for (const line of lines) {
+        if (!line.trim() || line.startsWith("#")) continue;
+
+        // node/nodemon/ts-node/tsx server.js or src/index.ts
+        const match = line.match(
+          /(?:node|nodemon|ts-node|ts-node-dev|tsx)\s+([\w./\\-]+\.[jt]s)/,
+        );
+        if (match) {
+          const result = resolveFile(cwd, match[1]);
+          if (result) return result;
+        }
+      }
+    } catch {}
+  }
+
+  // ── 2. Check Dockerfile ───────────────────────────────────────────────────
+  const dockerfilePath = path.join(cwd, "Dockerfile");
+  if (fs.existsSync(dockerfilePath)) {
+    try {
+      const lines = fs.readFileSync(dockerfilePath, "utf8").split("\n");
+      for (const line of lines) {
+        if (!line.trim() || line.startsWith("#")) continue;
+
+        // CMD ["node", "server.js"]
+        // CMD ["nodemon", "src/index.js"]
+        const cmdMatch = line.match(
+          /(?:CMD|ENTRYPOINT)\s*\[.*?"(?:node|nodemon|ts-node|tsx)",\s*"([\w./\\-]+\.[jt]s)"/,
+        );
+        if (cmdMatch) {
+          const result = resolveFile(cwd, cmdMatch[1]);
+          if (result) return result;
+        }
+
+        // CMD node server.js (shell form)
+        const shellMatch = line.match(
+          /(?:CMD|ENTRYPOINT)\s+(?:node|nodemon|ts-node|tsx)\s+([\w./\\-]+\.[jt]s)/,
+        );
+        if (shellMatch) {
+          const result = resolveFile(cwd, shellMatch[1]);
+          if (result) return result;
+        }
+      }
+    } catch {}
+  }
+
+  return null;
+}
 
 function detectExpressEntry(cwd, pkg) {
-  // Strategy 1: "main" field in package.json
+  const SKIP_ENTRY_DIRS = ["dist", "build", "out", ".next", "coverage"];
+
+  function isCompiledPath(filePath) {
+    const normalized = filePath.replace(/\\/g, "/");
+    return SKIP_ENTRY_DIRS.some(
+      (dir) =>
+        normalized.includes(`/${dir}/`) ||
+        normalized.endsWith(`/${dir}`) ||
+        normalized.startsWith(`${dir}/`),
+    );
+  }
+
+  // ── Strategy 1: package.json "main" field ─────────────────────────────────
   if (pkg && pkg.main) {
     const mainPath = path.join(cwd, pkg.main);
-    if (fs.existsSync(mainPath)) return mainPath;
+    if (fs.existsSync(mainPath) && !isCompiledPath(pkg.main)) {
+      return mainPath;
+    }
   }
 
-  // Strategy 2: scripts.start / scripts.dev
+  // ── Strategy 2: scripts.start / scripts.dev ───────────────────────────────
   if (pkg && pkg.scripts) {
-    const scripts = [pkg.scripts.start, pkg.scripts.dev, pkg.scripts.serve];
+    const scripts = [
+      pkg.scripts.dev,
+      pkg.scripts.serve,
+      pkg.scripts["dev-server"],
+      pkg.scripts.start,
+    ];
+    for (const script of scripts) {
+      if (!script) continue;
+      const match = script.match(
+        /(?:node|nodemon|ts-node|ts-node-dev|tsx)\s+([^\s]+\.(js|ts))/,
+      );
+      if (match) {
+        const scriptPath = match[1];
+        if (isCompiledPath(scriptPath)) continue;
+        const filePath = path.join(cwd, scriptPath);
+        if (fs.existsSync(filePath)) return filePath;
+      }
+    }
+
+    // Strategy 2b: compiled path fallback — find TS source equivalent
     for (const script of scripts) {
       if (!script) continue;
       const match = script.match(
-        /(?:node|nodemon|ts-node|tsx)\s+([^\s]+\.(js|ts))/,
+        /(?:node|nodemon|ts-node|ts-node-dev|tsx)\s+([^\s]+\.(js|ts))/,
       );
       if (match) {
-        const filePath = path.join(cwd, match[1]);
+        const tsEquivalent = match[1]
+          .replace(/^backend\/dist\//, "backend/")
+          .replace(/^dist\//, "")
+          .replace(/\.js$/, ".ts");
+        const filePath = path.join(cwd, tsEquivalent);
         if (fs.existsSync(filePath)) return filePath;
       }
     }
   }
 
-  // Strategy 3: common file names
-  const candidates = [
-    "server.js",
-    "server.ts",
-    "index.js",
-    "index.ts",
-    "app.js",
-    "app.ts",
-    "main.js",
-    "main.ts",
-    "src/server.js",
-    "src/server.ts",
-    "src/index.js",
-    "src/index.ts",
-    "src/app.js",
-    "src/app.ts",
-    "src/main.js",
-    "src/main.ts",
-  ];
+  // ── Strategy 3: Scoring — scan all JS/TS files ────────────────────────────
+  const skipDirs = new Set([
+    ...SKIP_DIRS,
+    "dist",
+    "build",
+    "out",
+    "coverage",
+    "tests",
+    "test",
+    "__tests__",
+    "scripts",
+    "docs",
+  ]);
+
+  const scoredCandidates = [];
+
+  function walk(directory, depth) {
+    if (depth > 3) return;
+    let entries;
+    try {
+      entries = fs.readdirSync(directory);
+    } catch {
+      return;
+    }
+
+    for (const entry of entries) {
+      if (skipDirs.has(entry) || entry.startsWith(".")) continue;
+
+      const fullPath = path.join(directory, entry);
+      let stat;
+      try {
+        stat = fs.statSync(fullPath);
+      } catch {
+        continue;
+      }
 
-  for (const candidate of candidates) {
-    const filePath = path.join(cwd, candidate);
-    if (fs.existsSync(filePath)) {
-      const content = fs.readFileSync(filePath, "utf8");
-      if (content.includes("express") || content.includes("app.listen")) {
-        return filePath;
+      if (stat.isDirectory()) {
+        walk(fullPath, depth + 1);
+      } else if (/\.(js|ts)$/.test(entry) && !/\.d\.ts$/.test(entry)) {
+        try {
+          const content = fs.readFileSync(fullPath, "utf8");
+          const score = scoreExpressFile(content, fullPath);
+          if (score > 0) {
+            scoredCandidates.push({ score, filePath: fullPath });
+          }
+        } catch {
+          continue;
+        }
       }
     }
   }
 
-  // Strategy 4: any .js/.ts file containing app.listen()
+  walk(cwd, 0);
+
+  if (scoredCandidates.length > 0) {
+    scoredCandidates.sort((a, b) => b.score - a.score);
+    const best = scoredCandidates[0];
+
+    // If best score is weak, cross-check with Procfile/Dockerfile
+    if (best.score <= 3) {
+      const configEntry = parseEntryFromConfigFiles(cwd);
+      if (configEntry) return configEntry;
+    }
+
+    return best.filePath;
+  }
+
+  // ── Strategy 4: Procfile/Dockerfile fallback ──────────────────────────────
+  const configEntry = parseEntryFromConfigFiles(cwd);
+  if (configEntry) return configEntry;
+
+  // ── Strategy 5: Last resort deep scan ────────────────────────────────────
   return findFileWithContent(cwd, ".listen(", [".js", ".ts"], 2);
 }
 
@@ -575,136 +829,6 @@ function findCreateServer(filePath) {
   return null;
 }
 
-// ─── AUTH DETECTION ──────────────────────────────────────────────────────────
-
-const AUTH_LIBS = [
-  {
-    name: "next-auth",
-    packages: ["next-auth"],
-    detect: (deps) => !!deps["next-auth"],
-    getVersion: (deps) => {
-      const v = deps["next-auth"] || "";
-      const major = parseInt(v.replace(/[^0-9]/, ""), 10);
-      return major >= 5 ? "v5" : "v4";
-    },
-  },
-  {
-    name: "clerk",
-    packages: ["@clerk/nextjs", "@clerk/clerk-sdk-node", "@clerk/express"],
-    detect: (deps) =>
-      !!deps["@clerk/nextjs"] ||
-      !!deps["@clerk/clerk-sdk-node"] ||
-      !!deps["@clerk/express"],
-    getPackage: (deps) =>
-      deps["@clerk/nextjs"]
-        ? "@clerk/nextjs"
-        : deps["@clerk/express"]
-          ? "@clerk/express"
-          : "@clerk/clerk-sdk-node",
-  },
-  {
-    name: "supabase",
-    packages: ["@supabase/supabase-js", "@supabase/ssr"],
-    detect: (deps) =>
-      !!deps["@supabase/supabase-js"] || !!deps["@supabase/ssr"],
-  },
-  {
-    name: "passport",
-    packages: ["passport"],
-    detect: (deps) => !!deps["passport"],
-  },
-  {
-    name: "lucia",
-    packages: ["lucia"],
-    detect: (deps) => !!deps["lucia"],
-  },
-  {
-    name: "auth0",
-    packages: ["@auth0/nextjs-auth0", "express-openid-connect"],
-    detect: (deps) =>
-      !!deps["@auth0/nextjs-auth0"] || !!deps["express-openid-connect"],
-  },
-  {
-    name: "firebase",
-    packages: ["firebase-admin", "firebase"],
-    detect: (deps) => !!deps["firebase-admin"] || !!deps["firebase"],
-  },
-  {
-    name: "jwt",
-    packages: ["jsonwebtoken"],
-    detect: (deps) => !!deps["jsonwebtoken"],
-  },
-  {
-    name: "express-session",
-    packages: ["express-session"],
-    detect: (deps) => !!deps["express-session"],
-  },
-];
-
-function detectAuth(pkg) {
-  if (!pkg) return { name: null, supported: false };
-
-  const deps = {
-    ...(pkg.dependencies || {}),
-    ...(pkg.devDependencies || {}),
-  };
-
-  for (const lib of AUTH_LIBS) {
-    if (lib.detect(deps)) {
-      const version = lib.getVersion ? lib.getVersion(deps) : null;
-      const pkg2 = lib.getPackage ? lib.getPackage(deps) : lib.packages[0];
-      const supported = [
-        "next-auth",
-        "clerk",
-        "supabase",
-        "passport",
-        "jwt",
-        "express-session",
-      ].includes(lib.name);
-      return { name: lib.name, version, package: pkg2, supported };
-    }
-  }
-
-  return { name: null, supported: false };
-}
-
-// ─── NEXT-AUTH CONFIG LOCATION ───────────────────────────────────────────────
-
-function findNextAuthConfig(cwd) {
-  const candidates = [
-    "pages/api/auth/[...nextauth].js",
-    "pages/api/auth/[...nextauth].ts",
-    "app/api/auth/[...nextauth]/route.js",
-    "app/api/auth/[...nextauth]/route.ts",
-    "src/pages/api/auth/[...nextauth].js",
-    "src/pages/api/auth/[...nextauth].ts",
-    "src/app/api/auth/[...nextauth]/route.js",
-    "src/app/api/auth/[...nextauth]/route.ts",
-    "lib/auth.js",
-    "lib/auth.ts",
-    "lib/authOptions.js",
-    "lib/authOptions.ts",
-    "utils/auth.js",
-    "utils/auth.ts",
-    "auth.js",
-    "auth.ts",
-  ];
-
-  for (const candidate of candidates) {
-    const fullPath = path.join(cwd, candidate);
-    if (fs.existsSync(fullPath)) {
-      return { path: fullPath, relativePath: candidate };
-    }
-  }
-
-  const found = findFileWithContent(cwd, "authOptions", [".js", ".ts"], 3);
-  if (found) {
-    return { path: found, relativePath: path.relative(cwd, found) };
-  }
-
-  return null;
-}
-
 // ─── PACKAGE MANAGER DETECTION ───────────────────────────────────────────────
 
 function detectPackageManager(cwd) {
@@ -770,13 +894,79 @@ function findFileWithContent(dir, searchString, extensions, maxDepth) {
 function detectAppVarName(filePath) {
   try {
     const content = fs.readFileSync(filePath, "utf8");
-    const match = content.match(/(?:const|let|var)\s+(\w+)\s*=\s*express\s*\(/);
-    return match ? match[1] : "app";
+
+    // Pattern 1: const app = express()
+    const match1 = content.match(
+      /(?:const|let|var)\s+(\w+)\s*=\s*express\s*\(/,
+    );
+    if (match1) return match1[1];
+
+    // Pattern 2: const app = require('express')()
+    const match2 = content.match(
+      /(?:const|let|var)\s+(\w+)\s*=\s*require\s*\(\s*['"]express['"]\s*\)\s*\(/,
+    );
+    if (match2) return match2[1];
+
+    // Pattern 3: factory function — createApp(), makeApp() etc.
+    // const app = createApp()
+    const match3 = content.match(
+      /(?:const|let|var)\s+(\w+)\s*=\s*(?:create|make|build|setup)App\s*\(/,
+    );
+    if (match3) return match3[1];
+
+    // Pattern 4: subclass — class MyApp extends express
+    // const app = new MyApp()
+    const subclassNames = [
+      ...content.matchAll(/class\s+(\w+)\s+extends\s+express/g),
+    ].map((m) => m[1]);
+    for (const name of subclassNames) {
+      const subMatch = content.match(
+        new RegExp(`(?:const|let|var)\\s+(\\w+)\\s*=\\s*new\\s+${name}\\s*\\(`),
+      );
+      if (subMatch) return subMatch[1];
+    }
+
+    // Pattern 5: const server = app.listen( → return "app"
+    const match5 = content.match(
+      /(?:const|let|var)\s+(\w+)\s*=\s*(\w+)\.listen\s*\(/,
+    );
+    if (match5) return match5[2];
+
+    // Pattern 6: app.listen( or server.listen(
+    const match6 = content.match(
+      /\b(app|server|router|handler|httpServer)\s*\.listen\s*\(/,
+    );
+    if (match6) return match6[1];
+
+    return "app";
   } catch {
     return "app";
   }
 }
 
+function detectDotenv(cwd, pkg, entryPoint) {
+  // Check if dotenv is in dependencies
+  const deps = {
+    ...(pkg.dependencies || {}),
+    ...(pkg.devDependencies || {}),
+  };
+  const hasDotenvPackage = !!deps["dotenv"];
+
+  // Check if dotenv is actually being called in entry file
+  let hasDotenvCall = false;
+  if (entryPoint && fs.existsSync(entryPoint)) {
+    try {
+      const content = fs.readFileSync(entryPoint, "utf8");
+      hasDotenvCall =
+        content.includes("dotenv") ||
+        content.includes("require('dotenv')") ||
+        content.includes('require("dotenv")');
+    } catch {}
+  }
+
+  return hasDotenvPackage || hasDotenvCall;
+}
+
 // ─── MAIN DETECT FUNCTION ────────────────────────────────────────────────────
 
 function detect(cwd) {
@@ -843,7 +1033,6 @@ function detect(cwd) {
   const moduleSystem = detectModuleSystem(backendPkg);
   const isTypeScript = detectTypeScript(backendDir);
   const hasSrc = detectSrcDir(backendDir);
-  const auth = detectAuth(backendPkg);
   const generateTs = shouldGenerateTs(backendDir, isTypeScript);
 
   // ── Find frontend main file ───────────────────────────────────────────────
@@ -872,7 +1061,6 @@ function detect(cwd) {
     isTypeScript,
     generateTs,
     hasSrc,
-    auth,
     packageManager,
     ext: generateTs ? ".ts" : ".js",
     // Frontend info
@@ -885,13 +1073,11 @@ function detect(cwd) {
   if (framework.name === "next") {
     result.next = detectNextRouter(backendDir);
     result.nextVersion = detectNextVersion(backendPkg);
-    if (auth.name === "next-auth") {
-      result.nextAuthConfig = findNextAuthConfig(backendDir);
-    }
   }
 
   if (framework.name === "express") {
     result.entryPoint = detectExpressEntry(backendDir, backendPkg);
+    result.hasDotenv = detectDotenv(backendDir, backendPkg, result.entryPoint);
     if (result.entryPoint) {
       result.appVarName = detectAppVarName(result.entryPoint); // detect FIRST
       result.listenCall = findListenCall(result.entryPoint, result.appVarName);
@@ -949,8 +1135,6 @@ module.exports = {
   shouldGenerateTs,
   detectSrcDir,
   detectNextRouter,
-  detectAuth,
-  findNextAuthConfig,
   detectPackageManager,
   detectExistingBotVersion,
   findFileWithContent,
@@ -959,4 +1143,7 @@ module.exports = {
   findListenInsideCallback,
   findCreateServer,
   detectAppVarName,
+  detectDotenv,
+  parseEntryFromConfigFiles,
+  scoreExpressFile,
 };