cistack 1.0.0 → 3.0.0

package/src/index.js

@@ -6,23 +6,32 @@ const chalk = require('chalk');
 const ora = require('ora');
 const inquirer = require('inquirer');
 
-const CodebaseAnalyzer = require('./analyzers/codebase');
-const HostingDetector = require('./detectors/hosting');
+const CodebaseAnalyzer  = require('./analyzers/codebase');
+const MonorepoAnalyzer  = require('./analyzers/monorepo');
+const HostingDetector   = require('./detectors/hosting');
 const FrameworkDetector = require('./detectors/framework');
-const LanguageDetector = require('./detectors/language');
-const TestingDetector = require('./detectors/testing');
+const LanguageDetector  = require('./detectors/language');
+const TestingDetector   = require('./detectors/testing');
+const ReleaseDetector   = require('./detectors/release');
+const EnvDetector       = require('./detectors/env');
 const WorkflowGenerator = require('./generators/workflow');
-const { ensureDir, writeFile, banner } = require('./utils/helpers');
+const DependabotGenerator = require('./generators/dependabot');
+const ReleaseGenerator  = require('./generators/release');
+const ConfigLoader      = require('./config/loader');
+const { ensureDir, writeFile, banner, smartMergeWorkflow } = require('./utils/helpers');
+
+const WorkflowAnalyzer = require('./analyzers/workflow');
 
 class CIFlow {
   constructor(options) {
     this.options = options;
     this.projectPath = options.projectPath;
-    this.outputDir = path.join(options.projectPath, options.outputDir);
-    this.dryRun = options.dryRun || false;
-    this.force = options.force || false;
-    this.prompt = options.prompt !== false;
-    this.verbose = options.verbose || false;
+    this.outputDir = path.join(options.projectPath, options.outputDir || '.github/workflows');
+    this.dryRun    = options.dryRun  || false;
+    this.force     = options.force   || false;
+    this.prompt    = options.prompt  !== false;
+    this.verbose   = options.verbose || false;
+    this.explain   = options.explain || false;
   }
 
   async run() {
@@ -31,7 +40,19 @@ class CIFlow {
     const spinner = ora({ text: 'Scanning project...', color: 'cyan' }).start();
 
     try {
-      // ── 1. Analyse the codebase ──────────────────────────────────────────
+      // ── 1. Load cistack.config.js ─────────────────────────────────────
+      const configLoader = new ConfigLoader(this.projectPath);
+      const userConfig = configLoader.load();
+      if (Object.keys(userConfig).length > 0) {
+        spinner.info(chalk.cyan('cistack.config.js loaded'));
+        spinner.start('Scanning project...');
+        // Allow config to override outputDir
+        if (userConfig.outputDir) {
+          this.outputDir = path.join(this.projectPath, userConfig.outputDir);
+        }
+      }
+
+      // ── 2. Analyse the codebase ───────────────────────────────────────
       const analyzer = new CodebaseAnalyzer(this.projectPath, { verbose: this.verbose });
       const codebaseInfo = await analyzer.analyse();
       spinner.succeed(chalk.green('Project scanned'));
@@ -40,46 +61,69 @@ class CIFlow {
         console.log('\n' + chalk.dim(JSON.stringify(codebaseInfo, null, 2)));
       }
 
-      // ── 2. Detect everything ─────────────────────────────────────────────
+      // ── 3. Detect stack + extras in parallel ──────────────────────────
       spinner.start('Detecting stack...');
-      const [hosting, frameworks, languages, testing] = await Promise.all([
-        new HostingDetector(this.projectPath, codebaseInfo).detect(),
-        new FrameworkDetector(this.projectPath, codebaseInfo).detect(),
-        new LanguageDetector(this.projectPath, codebaseInfo).detect(),
-        new TestingDetector(this.projectPath, codebaseInfo).detect(),
-      ]);
+      const [hosting, frameworks, languages, testing, releaseInfo, envVars, monorepoPackages] =
+        await Promise.all([
+          new HostingDetector(this.projectPath, codebaseInfo).detect(),
+          new FrameworkDetector(this.projectPath, codebaseInfo).detect(),
+          new LanguageDetector(this.projectPath, codebaseInfo).detect(),
+          new TestingDetector(this.projectPath, codebaseInfo).detect(),
+          new ReleaseDetector(this.projectPath, codebaseInfo).detect(),
+          new EnvDetector(this.projectPath, codebaseInfo).detect(),
+          new MonorepoAnalyzer(this.projectPath, codebaseInfo).analyze(),
+        ]);
       spinner.succeed(chalk.green('Stack detected'));
 
-      // ── 3. Print summary ─────────────────────────────────────────────────
-      this._printSummary({ hosting, frameworks, languages, testing });
+      // ── 4. Apply cistack.config.js overrides ──────────────────────────
+      let finalConfig = ConfigLoader.applyToStack(userConfig, {
+        hosting,
+        frameworks,
+        languages,
+        testing,
+        envVars,
+        monorepoPackages,
+        _config: userConfig,
+      });
+
+      // ── 5. Print summary ───────────────────────────────────────────────
+      this._printSummary(finalConfig, releaseInfo, envVars, monorepoPackages);
 
-      // ── 4. Optional interactive confirmation ─────────────────────────────
-      let finalConfig = { hosting, frameworks, languages, testing };
+      // ── 6. Optional interactive confirmation ──────────────────────────
       if (this.prompt) {
         finalConfig = await this._interactiveConfirm(finalConfig);
       }
 
-      // ── 5. Generate workflow(s) ──────────────────────────────────────────
+      // ── 7. Generate CI/CD workflow(s) ─────────────────────────────────
       spinner.start('Generating workflow(s)...');
       const generator = new WorkflowGenerator(finalConfig, this.projectPath);
       const workflows = generator.generate();
-      spinner.succeed(chalk.green(`Generated ${workflows.length} workflow(s)`));
+      spinner.succeed(chalk.green(`Generated ${workflows.length} CI workflow(s)`));
+
+      // ── 8. Generate dependabot.yml ────────────────────────────────────
+      const dependabotGen = new DependabotGenerator(codebaseInfo);
+      const dependabotFile = dependabotGen.generate();
+
+      // ── 9. Generate release.yml (if release tooling detected) ─────────
+      let releaseWorkflow = null;
+      if (releaseInfo) {
+        const releaseGen = new ReleaseGenerator(releaseInfo, finalConfig, this.projectPath);
+        releaseWorkflow = releaseGen.generate();
+        if (releaseWorkflow) workflows.push(releaseWorkflow);
+      }
 
-      // ── 6. Write files ───────────────────────────────────────────────────
+      // ── 10. Write files ────────────────────────────────────────────────
       if (this.dryRun) {
-        console.log('\n' + chalk.yellow('── DRY RUN – files not written ──\n'));
-        for (const wf of workflows) {
-          console.log(chalk.bold.cyan(`\n📄 ${wf.filename}`));
-          console.log(chalk.dim('─'.repeat(60)));
-          console.log(wf.content);
-        }
+        this._dryRunPrint(workflows, dependabotFile);
       } else {
         await this._writeWorkflows(workflows);
+        await this._writeDependabot(dependabotFile);
       }
 
       console.log('\n' + chalk.bold.green('✅  Done! Your GitHub Actions pipeline is ready.'));
       if (!this.dryRun) {
-        console.log(chalk.dim(`   → ${this.outputDir}\n`));
+        console.log(chalk.dim(`   Workflows → ${this.outputDir}`));
+        console.log(chalk.dim(`   Dependabot → ${path.join(this.projectPath, '.github', 'dependabot.yml')}\n`));
       }
     } catch (err) {
       spinner.fail(chalk.red('Failed: ' + err.message));
@@ -88,18 +132,115 @@ class CIFlow {
     }
   }
 
+  async audit() {
+    banner();
+    const spinner = ora({ text: 'Auditing existing workflows...', color: 'cyan' }).start();
+    
+    try {
+      const analyzer = new WorkflowAnalyzer(this.projectPath);
+      const results = await analyzer.audit();
+      spinner.succeed(chalk.green('Audit complete'));
+
+      if (results.files.length === 0) {
+        console.log(chalk.yellow('\nNo workflow files found to audit.'));
+        return;
+      }
+
+      console.log('\n' + chalk.bold('🔍 Workflow Audit Results'));
+      console.log(chalk.dim('─'.repeat(48)));
+
+      for (const file of results.files) {
+        if (file.error) {
+          console.log(`\n📄 ${chalk.red(file.filename)} – ${chalk.red(file.error)}`);
+          continue;
+        }
+
+        console.log(`\n📄 ${chalk.cyan(file.filename)} – ${file.issues.length > 0 ? chalk.yellow(file.issues.length + ' issues found') : chalk.green('Excellent')}`);
+        
+        for (const issue of file.issues) {
+          const color = issue.severity === 'high' ? chalk.red : issue.severity === 'medium' ? chalk.yellow : chalk.dim;
+          console.log(`  ${color('•')} ${issue.message}`);
+          console.log(`    ${chalk.dim('Fix:')} ${chalk.italic(issue.fix)}`);
+        }
+      }
+
+      if (results.totalIssues > 0) {
+        console.log('\n' + chalk.yellow(`💡 Run ${chalk.bold('cistack upgrade')} to automatically fix outdated actions.`));
+      } else {
+        console.log('\n' + chalk.green('✅  Your workflows are up to date and follow best practices.'));
+      }
+      console.log('');
+    } catch (err) {
+      spinner.fail(chalk.red('Audit failed: ' + err.message));
+      process.exit(1);
+    }
+  }
+
+  async upgrade() {
+    banner();
+    const spinner = ora({ text: 'Upgrading actions...', color: 'cyan' }).start();
+    
+    try {
+      const analyzer = new WorkflowAnalyzer(this.projectPath);
+      const results = await analyzer.upgrade(this.dryRun);
+      
+      if (results.changes === 0) {
+        spinner.succeed(chalk.green('All actions are already up to date.'));
+        return;
+      }
+
+      spinner.succeed(chalk.green(`Upgraded ${results.changes} action(s) across ${results.upgradedFiles.length} file(s)`));
+      
+      if (this.dryRun) {
+        console.log(chalk.yellow('\n── DRY RUN – files not modified ──'));
+      }
+
+      for (const file of results.upgradedFiles) {
+        console.log(`  ${chalk.green('✔')} ${file.filename} (${file.changes} changes)`);
+      }
+      console.log('');
+    } catch (err) {
+      spinner.fail(chalk.red('Upgrade failed: ' + err.message));
+      process.exit(1);
+    }
+  }
+
   // ── helpers ──────────────────────────────────────────────────────────────
 
-  _printSummary({ hosting, frameworks, languages, testing }) {
-    const line = (label, value) =>
-      console.log(`  ${chalk.dim(label.padEnd(18))} ${chalk.cyan(value || chalk.italic('none detected'))}`);
+  _printSummary(config, releaseInfo, envVars, monorepoPackages) {
+    const { hosting, frameworks, languages, testing } = config;
+    const line = (label, value, reasons = []) => {
+      console.log(`  ${chalk.dim(label.padEnd(20))} ${chalk.cyan(value || chalk.italic('none detected'))}`);
+      if (this.explain && reasons && reasons.length > 0) {
+        for (const reason of reasons) {
+          console.log(`    ${chalk.dim('↳')} ${chalk.italic.gray(reason)}`);
+        }
+      }
+    };
 
     console.log('\n' + chalk.bold('  📊 Detected Stack'));
-    console.log(chalk.dim('  ' + '─'.repeat(40)));
-    line('Languages:', languages.map((l) => l.name).join(', '));
-    line('Frameworks:', frameworks.map((f) => f.name).join(', '));
-    line('Hosting:', hosting.map((h) => h.name).join(', ') || 'none');
-    line('Testing:', testing.map((t) => t.name).join(', ') || 'none');
+    console.log(chalk.dim('  ' + '─'.repeat(48)));
+    
+    line('Languages:',   languages.map((l) => l.name).join(', '), languages[0] && languages[0].reasons);
+    line('Frameworks:',  frameworks.map((f) => f.name).join(', '), frameworks[0] && frameworks[0].reasons);
+    line('Hosting:',     hosting.map((h) => h.name).join(', ') || 'none', hosting[0] && hosting[0].reasons);
+    line('Testing:',     testing.map((t) => t.name).join(', ')  || 'none', testing[0] && testing[0].reasons);
+    line('Release tool:', releaseInfo ? releaseInfo.tool : 'none', releaseInfo && releaseInfo.reasons);
+
+    if (monorepoPackages.length > 0) {
+      line('Monorepo pkgs:', monorepoPackages.map((p) => p.name).join(', '));
+    }
+
+    if (envVars.sourceFile) {
+      line('Env file:', envVars.sourceFile);
+      if (envVars.secrets.length > 0) {
+        line('  Secrets:', envVars.secrets.join(', '));
+      }
+      if (envVars.public.length > 0) {
+        line('  Public vars:', envVars.public.join(', '));
+      }
+    }
+
     console.log('');
   }
 
@@ -129,36 +270,88 @@ class CIFlow {
 
       config.hosting = customHosting
         .filter((h) => h !== 'none')
-        .map((h) => ({ name: h, confidence: 1.0, manual: true }));
+        .map((h) => ({ name: h, confidence: 1.0, manual: true, secrets: [] }));
     }
 
     return config;
   }
 
+  // ── Dry run ───────────────────────────────────────────────────────────────
+
+  _dryRunPrint(workflows, dependabotFile) {
+    console.log('\n' + chalk.yellow('── DRY RUN – files not written ──\n'));
+
+    for (const wf of workflows) {
+      console.log(chalk.bold.cyan(`\n📄 .github/workflows/${wf.filename}`));
+      console.log(chalk.dim('─'.repeat(60)));
+      console.log(wf.content);
+    }
+
+    console.log(chalk.bold.cyan(`\n📄 .github/dependabot.yml`));
+    console.log(chalk.dim('─'.repeat(60)));
+    console.log(dependabotFile.content);
+  }
+
+  // ── Write workflows ────────────────────────────────────────────────────────
+
   async _writeWorkflows(workflows) {
     ensureDir(this.outputDir);
 
     for (const wf of workflows) {
       const filePath = path.join(this.outputDir, wf.filename);
-      const exists = fs.existsSync(filePath);
+      const exists   = fs.existsSync(filePath);
 
       if (exists && !this.force) {
-        const { overwrite } = await inquirer.prompt([
-          {
-            type: 'confirm',
-            name: 'overwrite',
-            message: `${wf.filename} already exists. Overwrite?`,
-            default: false,
-          },
-        ]);
-        if (!overwrite) {
-          console.log(chalk.dim(`  Skipped ${wf.filename}`));
+        const existing = fs.readFileSync(filePath, 'utf8');
+        const { content: merged, changes } = smartMergeWorkflow(existing, wf.content);
+
+        if (changes.length === 0) {
+          console.log(chalk.dim(`  ○ No changes: ${wf.filename}`));
           continue;
         }
+
+        console.log(chalk.yellow(`  ↻ Smart-merged: ${wf.filename}`));
+        for (const c of changes) {
+          console.log(chalk.dim(`    • ${c}`));
+        }
+
+        writeFile(filePath, merged);
+      } else if (exists && this.force) {
+        writeFile(filePath, wf.content);
+        console.log(chalk.green(`  ✔ Overwritten:  ${wf.filename}`));
+      } else {
+        writeFile(filePath, wf.content);
+        console.log(chalk.green(`  ✔ Written:      ${wf.filename}`));
       }
+    }
+  }
+
+  // ── Write dependabot.yml ───────────────────────────────────────────────────
+
+  async _writeDependabot(dependabotFile) {
+    const githubDir = path.join(this.projectPath, '.github');
+    const filePath  = path.join(githubDir, 'dependabot.yml');
+    const exists    = fs.existsSync(filePath);
+
+    ensureDir(githubDir);
 
-      writeFile(filePath, wf.content);
-      console.log(chalk.green(`  ✔ Written: ${wf.filename}`));
+    if (exists && !this.force) {
+      const existing = fs.readFileSync(filePath, 'utf8');
+      const { content: merged, changes } = smartMergeWorkflow(existing, dependabotFile.content);
+
+      if (changes.length === 0) {
+        console.log(chalk.dim(`  ○ No changes: dependabot.yml`));
+        return;
+      }
+
+      writeFile(filePath, merged);
+      console.log(chalk.yellow(`  ↻ Smart-merged: dependabot.yml`));
+      for (const c of changes) {
+        console.log(chalk.dim(`    • ${c}`));
+      }
+    } else {
+      writeFile(filePath, dependabotFile.content);
+      console.log(chalk.green(`  ✔ Written:      .github/dependabot.yml`));
     }
   }
 }

package/src/utils/helpers.js

@@ -3,6 +3,7 @@
 const fs = require('fs');
 const path = require('path');
 const chalk = require('chalk');
+const yaml = require('js-yaml');
 
 function ensureDir(dirPath) {
   if (!fs.existsSync(dirPath)) {
@@ -16,16 +17,152 @@ function writeFile(filePath, content) {
 }
 
 function banner() {
-  console.log('\n' + chalk.bold.cyan('  ██████╗██╗███████╗██╗      ██████╗ ██╗    ██╗'));
-  console.log(chalk.bold.cyan('  ██╔════╝██║██╔════╝██║     ██╔═══██╗██║    ██║'));
-  console.log(chalk.bold.cyan('  ██║     ██║█████╗  ██║     ██║   ██║██║ █╗ ██║'));
-  console.log(chalk.bold.cyan('  ██║     ██║██╔══╝  ██║     ██║   ██║██║███╗██║'));
-  console.log(chalk.bold.cyan('  ╚██████╗██║██║     ███████╗╚██████╔╝╚███╔███╔╝'));
-  console.log(chalk.bold.cyan('   ╚═════╝╚═╝╚═╝     ╚══════╝ ╚═════╝  ╚══╝╚══╝ '));
+  console.log('\n' + chalk.bold.cyan('  ██████╗██╗███████╗████████╗ █████╗  ██████╗██╗  ██╗'));
+  console.log(chalk.bold.cyan('  ██╔════╝██║██╔════╝╚══██╔══╝██╔══██╗██╔════╝██║ ██╔╝'));
+  console.log(chalk.bold.cyan('  ██║     ██║███████╗   ██║   ███████║██║     █████╔╝ '));
+  console.log(chalk.bold.cyan('  ██║     ██║╚════██║   ██║   ██╔══██║██║     ██╔═██╗ '));
+  console.log(chalk.bold.cyan('  ╚██████╗██║███████║   ██║   ██║  ██║╚██████╗██║  ██╗'));
+  console.log(chalk.bold.cyan('   ╚═════╝╚═╝╚══════╝   ╚═╝   ╚═╝  ╚═╝ ╚═════╝╚═╝  ╚═╝'));
   console.log('');
-  console.log('  ' + chalk.dim('GitHub Actions pipeline generator'));
-  console.log('  ' + chalk.dim('─'.repeat(44)));
+  console.log('  ' + chalk.dim('GitHub Actions pipeline generator  ') + chalk.bold.cyan('v2.0.0'));
+  console.log('  ' + chalk.dim('─'.repeat(52)));
   console.log('');
 }
 
-module.exports = { ensureDir, writeFile, banner };
+/**
+ * Smart diff: compare existing workflow YAML with newly generated YAML.
+ *
+ * Strategy:
+ *   1. Parse both into JS objects via js-yaml.
+ *   2. Diff at the "jobs" level — for each job key, compare serialised forms.
+ *   3. Diff top-level keys (name, on, env, concurrency, permissions).
+ *   4. Build a merged object: keep existing jobs/keys that are UNCHANGED,
+ *      update jobs/keys that CHANGED, add new jobs/keys.
+ *   5. Re-serialise and return { content, changes } where changes is a list of
+ *      human-readable change descriptions.
+ *
+ * If either file fails to parse as YAML we fall back to a full overwrite.
+ */
+function smartMergeWorkflow(existingContent, newContent) {
+  let existing, generated;
+
+  try {
+    existing = yaml.load(existingContent);
+    generated = yaml.load(newContent);
+  } catch (_) {
+    // Can't parse — full overwrite
+    return { content: newContent, changes: ['full rewrite (YAML parse error)'] };
+  }
+
+  if (!existing || !generated) {
+    return { content: newContent, changes: ['full rewrite (empty document)'] };
+  }
+
+  const changes = [];
+  const merged = { ...existing };
+
+  // ── top-level scalar / small keys ────────────────────────────────────────
+  const topLevelKeys = ['name', 'on', 'env', 'concurrency', 'permissions', 'defaults'];
+  for (const key of topLevelKeys) {
+    if (key in generated) {
+      const existSer = JSON.stringify(existing[key] ?? null);
+      const genSer = JSON.stringify(generated[key] ?? null);
+      if (existSer !== genSer) {
+        merged[key] = generated[key];
+        changes.push(`updated top-level "${key}"`);
+      }
+    }
+  }
+
+  // ── jobs diff ─────────────────────────────────────────────────────────────
+  if (generated.jobs) {
+    merged.jobs = { ...(existing.jobs || {}) };
+
+    for (const [jobId, genJob] of Object.entries(generated.jobs)) {
+      const existJob = existing.jobs && existing.jobs[jobId];
+
+      if (!existJob) {
+        // Brand-new job
+        merged.jobs[jobId] = genJob;
+        changes.push(`added job "${jobId}"`);
+      } else {
+        const existSer = JSON.stringify(existJob);
+        const genSer = JSON.stringify(genJob);
+
+        if (existSer !== genSer) {
+          // Job changed — deep merge at step level
+          const { job: mergedJob, jobChanges } = _mergeJob(existJob, genJob, jobId);
+          merged.jobs[jobId] = mergedJob;
+          changes.push(...jobChanges);
+        }
+        // else — identical, keep existing
+      }
+    }
+  }
+
+  // ── re-serialise ──────────────────────────────────────────────────────────
+  // Preserve the cistack header comment from the new content
+  const headerMatch = newContent.match(/^(#[^\n]*\n)+\n?/);
+  const header = headerMatch ? headerMatch[0] : '';
+
+  const raw = yaml.dump(merged, {
+    indent: 2,
+    lineWidth: 120,
+    quotingType: "'",
+    forceQuotes: false,
+    noRefs: true,
+  });
+
+  return { content: header + raw, changes };
+}
+
+/**
+ * Merge two job objects at the "steps" level.
+ * Steps are matched by their "name" property.
+ */
+function _mergeJob(existJob, genJob, jobId) {
+  const jobChanges = [];
+  const merged = { ...existJob };
+
+  // Compare non-steps keys
+  for (const key of Object.keys(genJob)) {
+    if (key === 'steps') continue;
+    const existSer = JSON.stringify(existJob[key] ?? null);
+    const genSer = JSON.stringify(genJob[key] ?? null);
+    if (existSer !== genSer) {
+      merged[key] = genJob[key];
+      jobChanges.push(`  job "${jobId}" → updated "${key}"`);
+    }
+  }
+
+  // Merge steps by name
+  if (genJob.steps) {
+    const existStepsByName = {};
+    for (const s of (existJob.steps || [])) {
+      if (s.name) existStepsByName[s.name] = s;
+    }
+
+    const mergedSteps = [];
+    for (const genStep of genJob.steps) {
+      const existStep = existStepsByName[genStep.name];
+      if (!existStep) {
+        mergedSteps.push(genStep);
+        jobChanges.push(`  job "${jobId}" → added step "${genStep.name}"`);
+      } else {
+        const existSer = JSON.stringify(existStep);
+        const genSer = JSON.stringify(genStep);
+        if (existSer !== genSer) {
+          mergedSteps.push(genStep); // take generated version
+          jobChanges.push(`  job "${jobId}" → updated step "${genStep.name}"`);
+        } else {
+          mergedSteps.push(existStep); // unchanged
+        }
+      }
+    }
+    merged.steps = mergedSteps;
+  }
+
+  return { job: merged, jobChanges };
+}
+
+module.exports = { ensureDir, writeFile, banner, smartMergeWorkflow };