cistack 1.0.0 → 3.0.0

package/src/detectors/release.js

@@ -0,0 +1,124 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+/**
+ * Detects the release tooling used in a project.
+ *
+ * Checks (in order of priority):
+ *   1. semantic-release
+ *   2. @changesets/cli
+ *   3. release-it
+ *   4. standard-version
+ *
+ * Returns: { tool: string, config: object, publishToNpm: bool } or null
+ */
+class ReleaseDetector {
+  constructor(projectPath, codebaseInfo) {
+    this.root = projectPath;
+    this.info = codebaseInfo;
+    this.pkg = codebaseInfo.packageJson || {};
+    this.deps = {
+      ...(this.pkg.dependencies || {}),
+      ...(this.pkg.devDependencies || {}),
+    };
+    this.scripts = this.pkg.scripts || {};
+  }
+
+  async detect() {
+    // --- semantic-release ---
+    if (this.deps['semantic-release']) {
+      const config = this._loadSemanticReleaseConfig();
+      const plugins = config.plugins || ['@semantic-release/commit-analyzer', '@semantic-release/release-notes-generator', '@semantic-release/github'];
+      return {
+        tool: 'semantic-release',
+        command: 'npx semantic-release',
+        config,
+        plugins,
+        publishToNpm: plugins.some((p) => (typeof p === 'string' ? p : p[0]) === '@semantic-release/npm'),
+        requiresNpmToken: plugins.some((p) => (typeof p === 'string' ? p : p[0]) === '@semantic-release/npm'),
+      };
+    }
+
+    // --- changesets ---
+    if (this.deps['@changesets/cli']) {
+      const publishScript = this.scripts['release'] || this.scripts['publish'];
+      return {
+        tool: 'changesets',
+        command: 'npx changeset publish',
+        publishToNpm: !!(publishScript && publishScript.includes('publish')),
+        requiresNpmToken: true,
+      };
+    }
+
+    // --- release-it ---
+    if (this.deps['release-it']) {
+      const config = this._loadReleaseItConfig();
+      return {
+        tool: 'release-it',
+        command: 'npx release-it --ci',
+        config,
+        publishToNpm: !!(config && config.npm && config.npm.publish !== false),
+        requiresNpmToken: true,
+      };
+    }
+
+    // --- standard-version ---
+    if (this.deps['standard-version']) {
+      return {
+        tool: 'standard-version',
+        command: 'npx standard-version',
+        publishToNpm: false,
+        requiresNpmToken: false,
+      };
+    }
+
+    // --- fallback: check scripts ---
+    const releaseScript = this.scripts['release'] || this.scripts['version'];
+    if (releaseScript) {
+      return {
+        tool: 'custom',
+        command: 'npm run release',
+        publishToNpm: releaseScript.includes('publish'),
+        requiresNpmToken: releaseScript.includes('publish'),
+      };
+    }
+
+    return null;
+  }
+
+  _loadSemanticReleaseConfig() {
+    // Try .releaserc, .releaserc.json, .releaserc.js, package.json#release
+    const candidates = ['.releaserc', '.releaserc.json', '.releaserc.js', '.releaserc.yaml'];
+    for (const c of candidates) {
+      const p = path.join(this.root, c);
+      if (fs.existsSync(p)) {
+        try {
+          const raw = fs.readFileSync(p, 'utf8');
+          if (c.endsWith('.js')) return require(p);
+          return JSON.parse(raw);
+        } catch (_) {}
+      }
+    }
+    if (this.pkg.release) return this.pkg.release;
+    return {};
+  }
+
+  _loadReleaseItConfig() {
+    const candidates = ['.release-it.json', '.release-it.js', '.release-it.yaml'];
+    for (const c of candidates) {
+      const p = path.join(this.root, c);
+      if (fs.existsSync(p)) {
+        try {
+          const raw = fs.readFileSync(p, 'utf8');
+          return JSON.parse(raw);
+        } catch (_) {}
+      }
+    }
+    if (this.pkg['release-it']) return this.pkg['release-it'];
+    return {};
+  }
+}
+
+module.exports = ReleaseDetector;

package/src/generators/dependabot.js

@@ -0,0 +1,155 @@
+'use strict';
+
+const yaml = require('js-yaml');
+
+/**
+ * Generates a .github/dependabot.yml based on detected ecosystems.
+ *
+ * Supported ecosystems:
+ *   npm, pip, cargo, bundler, go, maven, gradle, github-actions, composer, docker
+ */
+class DependabotGenerator {
+  constructor(codebaseInfo) {
+    this.info = codebaseInfo;
+    this.pkg = codebaseInfo.packageJson || {};
+    this.lockFiles = new Set(codebaseInfo.lockFiles || []);
+    this.configFiles = new Set(codebaseInfo.configFiles || []);
+  }
+
+  generate() {
+    const updates = [];
+
+    // ── npm ────────────────────────────────────────────────────────────────
+    if (this.pkg.dependencies || this.pkg.devDependencies ||
+        this.lockFiles.has('package-lock.json') ||
+        this.lockFiles.has('yarn.lock') ||
+        this.lockFiles.has('pnpm-lock.yaml')) {
+      updates.push({
+        'package-ecosystem': 'npm',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 10,
+        groups: {
+          'dev-dependencies': {
+            'dependency-type': 'development',
+            'update-types': ['minor', 'patch'],
+          },
+        },
+      });
+    }
+
+    // ── pip ────────────────────────────────────────────────────────────────
+    if (this.lockFiles.has('Pipfile.lock') ||
+        this.configFiles.has('requirements.txt') ||
+        this.configFiles.has('pyproject.toml')) {
+      updates.push({
+        'package-ecosystem': 'pip',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 10,
+      });
+    }
+
+    // ── cargo ──────────────────────────────────────────────────────────────
+    if (this.lockFiles.has('Cargo.lock') || this.configFiles.has('Cargo.toml')) {
+      updates.push({
+        'package-ecosystem': 'cargo',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 10,
+      });
+    }
+
+    // ── bundler (Ruby) ─────────────────────────────────────────────────────
+    if (this.lockFiles.has('Gemfile.lock') || this.configFiles.has('Gemfile')) {
+      updates.push({
+        'package-ecosystem': 'bundler',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 10,
+      });
+    }
+
+    // ── Go modules ─────────────────────────────────────────────────────────
+    if (this.lockFiles.has('go.sum') || this.configFiles.has('go.mod')) {
+      updates.push({
+        'package-ecosystem': 'gomod',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 10,
+      });
+    }
+
+    // ── Maven ──────────────────────────────────────────────────────────────
+    if (this.configFiles.has('pom.xml')) {
+      updates.push({
+        'package-ecosystem': 'maven',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 10,
+      });
+    }
+
+    // ── Gradle ─────────────────────────────────────────────────────────────
+    if (this.configFiles.has('build.gradle') || this.configFiles.has('build.gradle.kts')) {
+      updates.push({
+        'package-ecosystem': 'gradle',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 10,
+      });
+    }
+
+    // ── Composer (PHP) ─────────────────────────────────────────────────────
+    if (this.lockFiles.has('composer.lock') || this.configFiles.has('composer.json')) {
+      updates.push({
+        'package-ecosystem': 'composer',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 10,
+      });
+    }
+
+    // ── Docker ─────────────────────────────────────────────────────────────
+    if (this.configFiles.has('Dockerfile') ||
+        this.configFiles.has('docker-compose.yml') ||
+        this.configFiles.has('docker-compose.yaml')) {
+      updates.push({
+        'package-ecosystem': 'docker',
+        directory: '/',
+        schedule: { interval: 'weekly', day: 'monday' },
+        'open-pull-requests-limit': 5,
+      });
+    }
+
+    // ── GitHub Actions ─────────────────────────────────────────────────────
+    // Always include — keeps action versions up to date
+    updates.push({
+      'package-ecosystem': 'github-actions',
+      directory: '/',
+      schedule: { interval: 'weekly', day: 'monday' },
+      'open-pull-requests-limit': 10,
+    });
+
+    const doc = { version: 2, updates };
+
+    const raw = yaml.dump(doc, {
+      indent: 2,
+      lineWidth: 120,
+      quotingType: "'",
+      forceQuotes: false,
+      noRefs: true,
+    });
+
+    return {
+      filename: 'dependabot.yml',
+      outputPath: '.github', // written to .github/, not .github/workflows/
+      content:
+        '# Generated by cistack — https://github.com/cistack\n' +
+        '# Dependabot configuration — auto-update dependencies weekly\n\n' +
+        raw,
+    };
+  }
+}
+
+module.exports = DependabotGenerator;

package/src/generators/release.js

@@ -0,0 +1,195 @@
+'use strict';
+
+const yaml = require('js-yaml');
+
+/**
+ * Generates a .github/workflows/release.yml tailored to the detected release tool.
+ *
+ * Supported tools: semantic-release, changesets, release-it, standard-version, custom
+ */
+class ReleaseGenerator {
+  constructor(releaseInfo, config, projectPath) {
+    this.release = releaseInfo;       // output from ReleaseDetector
+    this.config = config;             // full detected + merged stack config
+    this.projectPath = projectPath;
+    this.primaryLang = (config.languages && config.languages[0]) || { name: 'JavaScript', packageManager: 'npm', nodeVersion: '20' };
+    this.extraConfig = config._config || {}; // raw cistack.config.js
+  }
+
+  generate() {
+    if (!this.release) return null;
+
+    const tool = this.release.tool;
+    const lang = this.primaryLang;
+    const pm = lang.packageManager || 'npm';
+    const nodeVersion = lang.nodeVersion || '20';
+
+    const runCmd = (script) =>
+      pm === 'yarn' ? `yarn ${script}` : pm === 'pnpm' ? `pnpm ${script}` : `npm run ${script}`;
+
+    const installCmd =
+      pm === 'npm'   ? 'npm ci' :
+      pm === 'yarn'  ? 'yarn install --frozen-lockfile' :
+      pm === 'pnpm'  ? 'pnpm install --frozen-lockfile' :
+                       'bun install';
+
+    // ── common setup steps ────────────────────────────────────────────────
+    const setupSteps = [
+      { name: 'Checkout', uses: 'actions/checkout@v4', with: { 'fetch-depth': 0 } },
+    ];
+
+    if (pm === 'pnpm') {
+      setupSteps.push({ name: 'Install pnpm', uses: 'pnpm/action-setup@v3', with: { version: 'latest' } });
+    }
+
+    setupSteps.push({
+      name: 'Set up Node.js',
+      uses: 'actions/setup-node@v4',
+      with: {
+        'node-version': nodeVersion,
+        cache: pm === 'yarn' ? 'yarn' : pm === 'pnpm' ? 'pnpm' : 'npm',
+        ...(this.release.publishToNpm ? { 'registry-url': 'https://registry.npmjs.org' } : {}),
+      },
+    });
+
+    setupSteps.push({ name: 'Install dependencies', run: installCmd });
+
+    // ── tool-specific steps ────────────────────────────────────────────────
+    let releaseSteps = [];
+    let envVars = {
+      GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}',
+    };
+    let requiredSecrets = ['GITHUB_TOKEN'];
+
+    switch (tool) {
+      case 'semantic-release': {
+        if (this.release.requiresNpmToken) {
+          envVars['NPM_TOKEN'] = '${{ secrets.NPM_TOKEN }}';
+          requiredSecrets.push('NPM_TOKEN');
+        }
+        releaseSteps.push({
+          name: '🚀 Semantic Release',
+          run: 'npx semantic-release',
+          env: envVars,
+        });
+        break;
+      }
+
+      case 'changesets': {
+        envVars['NPM_TOKEN'] = '${{ secrets.NPM_TOKEN }}';
+        requiredSecrets.push('NPM_TOKEN');
+        releaseSteps.push(
+          {
+            name: 'Create Release PR or Publish',
+            uses: 'changesets/action@v1',
+            with: {
+              publish: runCmd('release'),
+              title: 'chore: version packages',
+              commit: 'chore: version packages',
+            },
+            env: envVars,
+          }
+        );
+        break;
+      }
+
+      case 'release-it': {
+        if (this.release.publishToNpm) {
+          envVars['NPM_TOKEN'] = '${{ secrets.NPM_TOKEN }}';
+          requiredSecrets.push('NPM_TOKEN');
+        }
+        releaseSteps.push({
+          name: '🚀 Release It',
+          run: 'npx release-it --ci',
+          env: envVars,
+        });
+        break;
+      }
+
+      case 'standard-version': {
+        releaseSteps.push(
+          {
+            name: 'Configure Git',
+            run: [
+              'git config user.email "github-actions[bot]@users.noreply.github.com"',
+              'git config user.name "github-actions[bot]"',
+            ].join('\n'),
+          },
+          {
+            name: 'Bump version & changelog',
+            run: 'npx standard-version',
+          },
+          {
+            name: 'Push release commit & tag',
+            run: 'git push --follow-tags origin ${{ github.ref_name }}',
+            env: { GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}' },
+          },
+          {
+            name: 'Create GitHub Release',
+            uses: 'softprops/action-gh-release@v2',
+            with: {
+              generate_release_notes: true,
+            },
+            env: { GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}' },
+          }
+        );
+        break;
+      }
+
+      default: {
+        releaseSteps.push({
+          name: '🚀 Release',
+          run: this.release.command || 'npm run release',
+          env: envVars,
+        });
+      }
+    }
+
+    const secretsDoc = requiredSecrets.filter((s) => s !== 'GITHUB_TOKEN').length > 0
+      ? `# Required secrets: ${requiredSecrets.filter((s) => s !== 'GITHUB_TOKEN').join(', ')}\n# Add these at: Settings → Secrets and Variables → Actions\n\n`
+      : '';
+
+    const branches = (this.extraConfig.branches) || ['main', 'master'];
+
+    const workflow = {
+      name: 'Release',
+      on: {
+        push: { branches },
+        workflow_dispatch: {},
+      },
+      permissions: {
+        contents: 'write',
+        'pull-requests': 'write',
+        ...(this.release.publishToNpm ? { packages: 'write' } : {}),
+      },
+      jobs: {
+        release: {
+          name: `🏷️ Release (${tool})`,
+          'runs-on': 'ubuntu-latest',
+          // Only run on the default branch, not every push in a monorepo etc.
+          if: "github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master'",
+          steps: [...setupSteps, ...releaseSteps],
+        },
+      },
+    };
+
+    const raw = yaml.dump(workflow, {
+      indent: 2,
+      lineWidth: 120,
+      quotingType: "'",
+      forceQuotes: false,
+      noRefs: true,
+    });
+
+    return {
+      filename: 'release.yml',
+      content:
+        `# Generated by cistack — https://github.com/cistack\n` +
+        `# Release Pipeline → ${tool}\n` +
+        secretsDoc +
+        raw,
+    };
+  }
+}
+
+module.exports = ReleaseGenerator;