cistack 6.0.0 → 6.2.0

package/.github/dependabot.yml

@@ -0,0 +1,42 @@
+# Generated by cistack — https://github.com/cistack
+# Dependabot configuration — auto-update dependencies weekly
+
+version: 2
+
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 10
+    groups:
+      root-dev-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: npm
+    directory: /product-site
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 10
+    groups:
+      product-site-dev-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 10
+    groups:
+      github-actions-updates:
+        patterns:
+          - '*'

package/.github/workflows/ci.yml

@@ -13,7 +13,7 @@ concurrency:
 
 jobs:
   test:
-    name: Node ${{ matrix.node-version }}
+    name: CLI · Node ${{ matrix.node-version }}
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -32,6 +32,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
           cache: npm
+          cache-dependency-path: package-lock.json
 
       - name: Install dependencies
         run: npm ci

package/.github/workflows/pipeline.yml

@@ -0,0 +1,250 @@
+# Generated by cistack v6.0.0 — https://github.com/cistack
+# Unified Pipeline: ci, deploy
+# Required secrets: VERCEL_TOKEN, VERCEL_ORG_ID, VERCEL_PROJECT_ID
+# Add these at: Settings → Secrets and Variables → Actions
+# Dependabot remains in .github/dependabot.yml
+
+name: Pipeline
+
+'on':
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch: {}
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  ci_lint:
+    name: 🔍 Lint & Format
+    runs-on: ubuntu-latest
+    if: >-
+      (github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main'))
+    env:
+      CI: 'true'
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+          cache-dependency-path: product-site/package-lock.json
+
+      - name: Install dependencies
+        working-directory: product-site
+        run: npm ci
+
+      - name: Lint
+        working-directory: product-site
+        run: npm run lint -- .
+
+      - name: Typecheck
+        working-directory: product-site
+        run: npm run typecheck
+
+  ci_build:
+    name: 🏗️ Build
+    runs-on: ubuntu-latest
+    needs:
+      - ci_lint
+    if: >-
+      (github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main'))
+    env:
+      NODE_ENV: production
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+          cache-dependency-path: product-site/package-lock.json
+
+      - name: Install dependencies
+        working-directory: product-site
+        run: npm ci
+
+      - name: Build
+        working-directory: product-site
+        run: npm run build:ci
+        env:
+          NODE_ENV: production
+
+      - name: Upload build artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: product-site-build-output
+          path: product-site/.next
+          retention-days: 1
+
+  deploy_deploy:
+    name: 🚀 Deploy → Vercel (Production)
+    runs-on: ubuntu-latest
+    environment: production
+    needs: [ci_build]
+    if: >-
+      ((github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main')) || github.event_name == 'workflow_dispatch') && (github.event_name == 'push' ||
+      github.event_name == 'workflow_dispatch')
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+          cache-dependency-path: product-site/package-lock.json
+
+      - name: Install dependencies
+        working-directory: product-site
+        run: npm ci
+
+      - name: Install Vercel CLI
+        run: npm install -g vercel
+
+      - name: Validate Vercel credentials
+        run: >-
+          test -n "$VERCEL_TOKEN" || (echo "Missing VERCEL_TOKEN secret. Add it in GitHub Actions secrets, or Dependabot
+          secrets for Dependabot PRs." && exit 1)
+
+          test -n "$VERCEL_ORG_ID" || (echo "Missing VERCEL_ORG_ID secret. Add it in GitHub Actions secrets, or
+          Dependabot secrets for Dependabot PRs." && exit 1)
+
+          test -n "$VERCEL_PROJECT_ID" || (echo "Missing VERCEL_PROJECT_ID secret. Add it in GitHub Actions secrets, or
+          Dependabot secrets for Dependabot PRs." && exit 1)
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+
+      - name: Pull Vercel environment
+        working-directory: product-site
+        run: vercel pull --yes --environment=production --token="$VERCEL_TOKEN"
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+
+      - name: Build project
+        working-directory: product-site
+        run: vercel build --prod --token="$VERCEL_TOKEN"
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+
+      - name: Deploy to Vercel
+        id: deploy
+        working-directory: product-site
+        run: >-
+          vercel deploy --prebuilt --prod --token="$VERCEL_TOKEN" > deployment_url.txt && echo "DEPLOYMENT_URL=$(cat
+          deployment_url.txt)" >> $GITHUB_ENV
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+
+  deploy_preview:
+    name: ✨ Deploy → Vercel (Preview)
+    runs-on: ubuntu-latest
+    environment: preview
+    needs: [ci_build]
+    if: >-
+      ((github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main')) || github.event_name == 'workflow_dispatch') && (github.event_name == 'pull_request'
+      && github.event.pull_request.head.repo.full_name == github.repository)
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+          cache-dependency-path: product-site/package-lock.json
+
+      - name: Install dependencies
+        working-directory: product-site
+        run: npm ci
+
+      - name: Install Vercel CLI
+        run: npm install -g vercel
+
+      - name: Validate Vercel credentials
+        run: >-
+          test -n "$VERCEL_TOKEN" || (echo "Missing VERCEL_TOKEN secret. Add it in GitHub Actions secrets, or Dependabot
+          secrets for Dependabot PRs." && exit 1)
+
+          test -n "$VERCEL_ORG_ID" || (echo "Missing VERCEL_ORG_ID secret. Add it in GitHub Actions secrets, or
+          Dependabot secrets for Dependabot PRs." && exit 1)
+
+          test -n "$VERCEL_PROJECT_ID" || (echo "Missing VERCEL_PROJECT_ID secret. Add it in GitHub Actions secrets, or
+          Dependabot secrets for Dependabot PRs." && exit 1)
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+
+      - name: Pull Vercel environment
+        working-directory: product-site
+        run: vercel pull --yes --environment=preview --token="$VERCEL_TOKEN"
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+
+      - name: Build project
+        working-directory: product-site
+        run: vercel build --token="$VERCEL_TOKEN"
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+
+      - name: Deploy to Vercel
+        id: deploy
+        working-directory: product-site
+        run: >-
+          vercel deploy --prebuilt --token="$VERCEL_TOKEN" > deployment_url.txt && echo "DEPLOYMENT_URL=$(cat
+          deployment_url.txt)" >> $GITHUB_ENV
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+
+      - name: Comment PR
+        if: always() && github.actor != 'dependabot[bot]'
+        uses: actions/github-script@v7
+        with:
+          script: |-
+            const deploymentUrl = process.env.DEPLOYMENT_URL;
+            if (!deploymentUrl) return;
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: '🚀 **Deployment Preview Ready!**\n\n[View Preview](' + deploymentUrl + ')'
+            });

package/README.md

@@ -28,6 +28,10 @@ npm install -g cistack
 
 `cistack` supports Node.js 16+, and the project itself is continuously verified on Node.js 18, 20, and 22 in GitHub Actions.
 
+## Product site
+
+A standalone Next.js marketing app for the product lives in [product-site](/Users/edwinvs/Desktop/NPM/ciflow/product-site/README.md).
+
 ## CLI Usage
 
 ### Generate workflows

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cistack",
-  "version": "6.0.0",
+  "version": "6.2.0",
   "description": "Automatically generate GitHub Actions CI/CD pipelines by analysing your codebase",
   "main": "src/index.js",
   "types": "index.d.ts",
@@ -10,7 +10,12 @@
   "scripts": {
     "start": "node bin/ciflow.js",
     "test": "node tests/run.js",
-    "test:smoke": "node bin/ciflow.js generate --path . --dry-run --no-prompt"
+    "test:smoke": "node bin/ciflow.js generate --path . --dry-run --no-prompt",
+    "site:dev": "npm --prefix product-site run dev",
+    "site:build": "npm --prefix product-site run build:ci",
+    "site:start": "npm --prefix product-site run start",
+    "site:lint": "npm --prefix product-site run lint -- .",
+    "site:typecheck": "npm --prefix product-site run typecheck"
   },
   "keywords": [
     "github-actions",

package/product-site/.github/dependabot.yml

@@ -0,0 +1,27 @@
+# Generated by cistack — https://github.com/cistack
+# Dependabot configuration — auto-update dependencies weekly
+
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 10
+    groups:
+      dev-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 10
+    groups:
+      github-actions-updates:
+        patterns:
+          - '*'

package/product-site/.github/workflows/pipeline.yml

@@ -0,0 +1,215 @@
+# Generated by cistack v6.0.0 — https://github.com/cistack
+# Unified Pipeline: ci, deploy
+# CI: locale JSON files are checked for key parity vs en.json (scripts/validate-i18n.mjs, no install).
+# Required secrets: VERCEL_TOKEN, VERCEL_ORG_ID, VERCEL_PROJECT_ID
+# Add these at: Settings → Secrets and Variables → Actions
+# Dependabot remains in .github/dependabot.yml
+
+name: CISTACK PIPELINE
+'on':
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch: {}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  ci_i18n:
+    name: 🌐 Locale strings
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Validate dictionary key parity
+        run: node scripts/validate-i18n.mjs
+    if: >-
+      (github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main'))
+  ci_lint:
+    name: 🔍 Lint & Format
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+      - name: Install dependencies
+        run: npm ci
+      - name: Lint
+        run: npm run lint
+    env:
+      CI: 'true'
+    if: >-
+      (github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main'))
+  ci_build:
+    name: 🏗️ Build
+    runs-on: ubuntu-latest
+    needs:
+      - ci_lint
+      - ci_i18n
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+      - name: Install dependencies
+        run: npm ci
+      - name: Build
+        run: npm run build
+        env:
+          NODE_ENV: production
+      - name: Upload build artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-output
+          path: .next
+          retention-days: 1
+    env:
+      NODE_ENV: production
+    if: >-
+      (github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main'))
+  deploy_deploy:
+    name: 🚀 Deploy → Vercel (Production)
+    if: >-
+      ((github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main')) || github.event_name == 'workflow_dispatch') && (github.event_name == 'push' ||
+      github.event_name == 'workflow_dispatch')
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+      - name: Install dependencies
+        run: npm ci
+      - name: Install Vercel CLI
+        run: npm install -g vercel
+      - name: Validate Vercel credentials
+        run: >-
+          test -n "$VERCEL_TOKEN" || (echo "Missing VERCEL_TOKEN secret. Add it in GitHub Actions secrets, or Dependabot
+          secrets for Dependabot PRs." && exit 1)
+
+          test -n "$VERCEL_ORG_ID" || (echo "Missing VERCEL_ORG_ID secret. Add it in GitHub Actions secrets, or
+          Dependabot secrets for Dependabot PRs." && exit 1)
+
+          test -n "$VERCEL_PROJECT_ID" || (echo "Missing VERCEL_PROJECT_ID secret. Add it in GitHub Actions secrets, or
+          Dependabot secrets for Dependabot PRs." && exit 1)
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+      - name: Pull Vercel environment
+        run: vercel pull --yes --environment=production --token="$VERCEL_TOKEN"
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+      - name: Build project
+        run: vercel build --prod --token="$VERCEL_TOKEN"
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+      - name: Deploy to Vercel
+        id: deploy
+        run: >-
+          vercel deploy --prebuilt --prod --token="$VERCEL_TOKEN" > deployment_url.txt && echo "DEPLOYMENT_URL=$(cat
+          deployment_url.txt)" >> $GITHUB_ENV
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+  deploy_preview:
+    name: ✨ Deploy → Vercel (Preview)
+    if: >-
+      ((github.event_name == 'push' && (github.ref_name == 'main')) || (github.event_name == 'pull_request' &&
+      (github.base_ref == 'main')) || github.event_name == 'workflow_dispatch') && (github.event_name == 'pull_request'
+      && github.event.pull_request.head.repo.full_name == github.repository)
+    runs-on: ubuntu-latest
+    environment: preview
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+      - name: Install dependencies
+        run: npm ci
+      - name: Install Vercel CLI
+        run: npm install -g vercel
+      - name: Validate Vercel credentials
+        run: >-
+          test -n "$VERCEL_TOKEN" || (echo "Missing VERCEL_TOKEN secret. Add it in GitHub Actions secrets, or Dependabot
+          secrets for Dependabot PRs." && exit 1)
+
+          test -n "$VERCEL_ORG_ID" || (echo "Missing VERCEL_ORG_ID secret. Add it in GitHub Actions secrets, or
+          Dependabot secrets for Dependabot PRs." && exit 1)
+
+          test -n "$VERCEL_PROJECT_ID" || (echo "Missing VERCEL_PROJECT_ID secret. Add it in GitHub Actions secrets, or
+          Dependabot secrets for Dependabot PRs." && exit 1)
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+      - name: Pull Vercel environment
+        run: vercel pull --yes --environment=preview --token="$VERCEL_TOKEN"
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+      - name: Build project
+        run: vercel build --token="$VERCEL_TOKEN"
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+      - name: Deploy to Vercel
+        id: deploy
+        run: >-
+          vercel deploy --prebuilt --token="$VERCEL_TOKEN" > deployment_url.txt && echo "DEPLOYMENT_URL=$(cat
+          deployment_url.txt)" >> $GITHUB_ENV
+        env:
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
+          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
+      - name: Comment PR
+        if: always() && github.actor != 'dependabot[bot]'
+        uses: actions/github-script@v7
+        with:
+          script: |2-
+
+                            const deploymentUrl = process.env.DEPLOYMENT_URL;
+                            if (!deploymentUrl) return;
+                            github.rest.issues.createComment({
+                              issue_number: context.issue.number,
+                              owner: context.repo.owner,
+                              repo: context.repo.repo,
+                              body: '🚀 **Deployment Preview Ready!**\n\n[View Preview](' + deploymentUrl + ')'
+                            });
+                          

package/product-site/.lighthouserc.json

@@ -0,0 +1,22 @@
+{
+  "ci": {
+    "collect": {
+      "numberOfRuns": 1,
+      "startServerCommand": "npm run start",
+      "startServerReadyPattern": "Ready",
+      "startServerReadyTimeout": 120000,
+      "url": [
+        "http://localhost:3000/en"
+      ]
+    },
+    "assert": {
+      "preset": "lighthouse:recommended",
+      "assertions": {
+        "forced-reflow-insight": "warn",
+        "legacy-javascript-insight": "warn",
+        "network-dependency-tree-insight": "warn",
+        "unused-javascript": "warn"
+      }
+    }
+  }
+}

package/product-site/README.md

@@ -0,0 +1 @@
+For codebase of cistack project navigate to https://github.com/edwinvakayil/cistack