create-qa-architect 5.0.0

package/lib/validation/workflow-validation.js

@@ -0,0 +1,172 @@
+'use strict'
+
+const fs = require('fs')
+const path = require('path')
+const { execSync } = require('child_process')
+const { showProgress } = require('../ui-helpers')
+
+/**
+ * GitHub Actions Workflow Validator
+ * Basic validation for GitHub Actions workflow files
+ */
+class WorkflowValidator {
+  constructor(options = {}) {
+    this.issues = []
+    this.options = options
+  }
+
+  /**
+   * Validate GitHub Actions workflows
+   */
+  async validateAll() {
+    if (!this.options.quiet) {
+      console.log('🔄 Validating GitHub Actions workflows...')
+    }
+
+    this.issues = []
+
+    await this.validateWorkflowFiles()
+
+    if (!this.options.disableActionlint) {
+      await this.runActionlint()
+    }
+
+    await this.validateWorkflowSyntax()
+
+    if (this.issues.length > 0) {
+      if (!this.options.quiet) {
+        console.error(`❌ Found ${this.issues.length} workflow issue(s):`)
+        this.issues.forEach(issue => console.error(`   ${issue}`))
+      }
+      throw new Error('Workflow validation failed')
+    }
+
+    if (!this.options.quiet) {
+      console.log('✅ Workflow validation passed')
+    }
+    return { issues: this.issues, passed: this.issues.length === 0 }
+  }
+
+  /**
+   * Check for workflow files and basic structure
+   */
+  async validateWorkflowFiles() {
+    const workflowDir = '.github/workflows'
+
+    if (!fs.existsSync(workflowDir)) {
+      this.issues.push('No .github/workflows directory found')
+      return
+    }
+
+    const workflowFiles = fs
+      .readdirSync(workflowDir)
+      .filter(file => file.endsWith('.yml') || file.endsWith('.yaml'))
+
+    if (workflowFiles.length === 0) {
+      this.issues.push('No workflow files found in .github/workflows')
+      return
+    }
+
+    if (!this.options.quiet) {
+      console.log(
+        `📄 Found ${workflowFiles.length} workflow file(s): ${workflowFiles.join(', ')}`
+      )
+    }
+  }
+
+  /**
+   * Run actionlint for advanced workflow validation
+   */
+  async runActionlint() {
+    const workflowDir = '.github/workflows'
+
+    if (!fs.existsSync(workflowDir)) return
+
+    const spinner = showProgress('Running actionlint on workflow files...')
+
+    try {
+      // Run actionlint via npx (works with local and global installs, cross-platform)
+      execSync('npx actionlint', { stdio: 'pipe', cwd: process.cwd() })
+      spinner.succeed('actionlint validation passed')
+    } catch (error) {
+      if (error.stdout || error.stderr) {
+        const output = error.stdout
+          ? error.stdout.toString()
+          : error.stderr.toString()
+        const lines = output
+          .trim()
+          .split('\n')
+          .filter(line => line.trim())
+
+        if (lines.length > 0) {
+          spinner.fail(`actionlint found ${lines.length} issue(s)`)
+          lines.forEach(line => {
+            if (line.trim()) {
+              this.issues.push(`actionlint: ${line.trim()}`)
+            }
+          })
+        } else {
+          spinner.succeed('actionlint validation passed')
+        }
+      } else {
+        spinner.succeed('actionlint validation passed')
+      }
+    }
+  }
+
+  /**
+   * Basic YAML syntax validation for workflow files
+   */
+  async validateWorkflowSyntax() {
+    const workflowDir = '.github/workflows'
+
+    if (!fs.existsSync(workflowDir)) return
+
+    const workflowFiles = fs
+      .readdirSync(workflowDir)
+      .filter(file => file.endsWith('.yml') || file.endsWith('.yaml'))
+
+    for (const file of workflowFiles) {
+      const filePath = path.join(workflowDir, file)
+      try {
+        const content = fs.readFileSync(filePath, 'utf8')
+
+        // Basic checks for required workflow structure
+        if (!content.includes('on:') && !content.includes('on ')) {
+          this.issues.push(`${file}: Missing 'on:' trigger specification`)
+        }
+
+        if (!content.includes('jobs:') && !content.includes('jobs ')) {
+          this.issues.push(`${file}: Missing 'jobs:' specification`)
+        }
+
+        // Check for common issues
+        if (
+          content.includes('ubuntu-latest') &&
+          content.includes('node-version:')
+        ) {
+          // This is likely a Node.js workflow, check for proper setup
+          if (!content.includes('actions/setup-node@')) {
+            this.issues.push(
+              `${file}: Node.js workflow should use actions/setup-node`
+            )
+          }
+        }
+
+        // Check for security best practices
+        if (
+          content.includes('${{') &&
+          content.includes('github.event.pull_request.head.repo.full_name')
+        ) {
+          this.issues.push(
+            `${file}: Potential security risk using untrusted PR data`
+          )
+        }
+      } catch (error) {
+        this.issues.push(`${file}: Error reading file - ${error.message}`)
+      }
+    }
+  }
+}
+
+module.exports = { WorkflowValidator }

package/lib/yaml-utils.js

@@ -0,0 +1,120 @@
+/**
+ * YAML Utilities
+ *
+ * Shared utilities for converting JavaScript objects to YAML format.
+ * Used across dependency monitoring modules.
+ */
+
+/**
+ * Converts a JavaScript object to YAML format with proper quoting and escaping
+ *
+ * Recursively converts nested objects and arrays to properly indented YAML.
+ * Handles:
+ * - Arrays (converted to YAML list format with `-` prefix)
+ * - Objects (converted to key-value pairs with proper indentation)
+ * - Primitive values (strings, numbers, booleans) with proper quoting/escaping
+ * - Special YAML characters requiring quotes: : # - | > [ ] { } @ `
+ * - Multiline strings and empty values
+ *
+ * @param {*} obj - The object to convert to YAML
+ * @param {number} [indent=0] - Current indentation level (number of spaces)
+ * @returns {string} YAML-formatted string representation of the object
+ *
+ * @example
+ * ```javascript
+ * const config = {
+ *   updates: [
+ *     { 'package-ecosystem': 'npm', directory: '/' }
+ *   ]
+ * }
+ * console.log(convertToYaml(config))
+ * // Output:
+ * // updates:
+ * //   - package-ecosystem: npm
+ * //     directory: /
+ * ```
+ */
+/**
+ * Safely formats a YAML value with proper quoting and escaping
+ * @param {*} value - The value to format
+ * @returns {string} Safely formatted YAML value
+ */
+function formatYamlValue(value) {
+  // Handle null and undefined
+  if (value == null) {
+    return 'null'
+  }
+
+  // Handle booleans and numbers - output as-is
+  if (typeof value === 'boolean' || typeof value === 'number') {
+    return String(value)
+  }
+
+  // Convert to string
+  const str = String(value)
+
+  // Handle empty strings
+  if (str === '') {
+    return '""'
+  }
+
+  // Check if string contains special YAML characters that require quoting
+  const needsQuotes =
+    /[:#\-|>[\]{}@`\n\r]/.test(str) ||
+    str.startsWith(' ') ||
+    str.endsWith(' ') ||
+    /^(true|false|yes|no|on|off|null|~)$/i.test(str) ||
+    /^\d/.test(str)
+
+  if (needsQuotes) {
+    // Escape double quotes and backslashes within the string
+    const escaped = str.replace(/\\/g, '\\\\').replace(/"/g, '\\"')
+    return `"${escaped}"`
+  }
+
+  return str
+}
+
+function convertToYaml(obj, indent = 0) {
+  const spaces = ' '.repeat(indent)
+  let yaml = ''
+
+  if (Array.isArray(obj)) {
+    obj.forEach(item => {
+      if (typeof item === 'object' && item !== null) {
+        // For objects in arrays, handle first property inline with dash, rest indented
+        const itemYaml = convertToYaml(item, indent + 2)
+        const lines = itemYaml.split('\n').filter(line => line.trim())
+        if (lines.length > 0) {
+          // First property goes inline with the dash
+          yaml += `${spaces}- ${lines[0].trim()}\n`
+          // Additional properties are properly indented
+          for (let i = 1; i < lines.length; i++) {
+            yaml += `${spaces}  ${lines[i].trim()}\n`
+          }
+        }
+      } else {
+        yaml += `${spaces}- ${formatYamlValue(item)}\n`
+      }
+    })
+  } else if (typeof obj === 'object' && obj !== null) {
+    Object.entries(obj).forEach(([key, value]) => {
+      const safeKey = formatYamlValue(key)
+      if (Array.isArray(value)) {
+        yaml += `${spaces}${safeKey}:\n`
+        yaml += convertToYaml(value, indent + 2)
+      } else if (typeof value === 'object' && value !== null) {
+        yaml += `${spaces}${safeKey}:\n`
+        yaml += convertToYaml(value, indent + 2)
+      } else {
+        yaml += `${spaces}${safeKey}: ${formatYamlValue(value)}\n`
+      }
+    })
+  }
+
+  return yaml
+}
+
+module.exports = {
+  convertToYaml,
+}

package/marketing/beta-user-email-campaign.md

@@ -0,0 +1,372 @@
+# Beta User Email Campaign - Founder Pricing
+
+Email sequence for existing beta users announcing the end of free beta and inviting them to the new pricing (founder pricing retired as of Jan 15, 2026). Offer 14-day Pro trial and standard pricing: Pro $59/mo or $590/yr, Team $15/user/mo (5-seat min), Enterprise $249/mo annual.
+
+## Email 1: Thank You + Founder Pricing Announcement (Send Immediately)
+
+**Subject:** 🎉 Thanks for beta testing - Enjoy a 14-day Pro trial!
+
+**From:** Brett Stark <hello@aibuilderlab.com>
+
+**Body:**
+
+```
+Hi [Name],
+
+Thanks for being an early adopter of Create Quality Automation! Your feedback during our beta period helped us ship framework-aware dependency monitoring that's now reducing React PRs by 60%+.
+
+## 🚨 What's Changing
+
+Our beta period has officially ended with v4.1.1. Premium features like framework-aware dependency grouping and multi-language support now require a Pro subscription.
+
+But because you were part of our journey from the beginning...
+
+## 🎁 Your Exclusive Founder Pricing
+
+**50% off for life** as a thank you for your early support:
+
+✅ **Pro Tier**: $19.50/month (normally $39)
+✅ **Enterprise Tier**: $98.50/month (normally $197)
+✅ **Lock-in forever**: Price never increases for you
+✅ **30-day guarantee**: Full refund if not satisfied
+
+## 🚀 What You Get with Pro
+
+• **Framework-aware dependency grouping** for React, Vue, Angular
+• **60%+ reduction** in dependency PRs
+• **Multi-language support** (Python, Rust, Ruby)
+• **Priority email support** (48h response)
+• **All quality automation features** (ESLint, Prettier, Husky, etc.)
+
+## ⏰ Limited Time: 30 Days to Claim
+
+Your 14-day Pro trial starts today. After the trial, standard pricing applies ($59/mo or $590/yr).
+
+[**🎯 Claim Founder Pricing ($19.50/month)**](https://www.aibuilderlab.com/cqa-upgrade?utm_source=beta_email&utm_campaign=founder_pricing&code=FOUNDER50)
+
+## 🔑 Already Purchased? Activate Your License
+
+If you've already upgraded, activate with:
+```
+
+npx create-qa-architect@latest --activate-license
+
+```
+
+## ❓ Questions?
+
+Reply to this email. I read every message and typically respond within 24 hours.
+
+Thanks again for being part of the Create Quality Automation story!
+
+Best,
+Brett Stark
+Creator, Create Quality Automation
+
+P.S. Free tier users still get all the quality automation features (ESLint, Prettier, Husky, etc.) - just not the premium dependency monitoring.
+```
+
+---
+
+## Email 2: Success Stories + Social Proof (Send 3 days after Email 1)
+
+**Subject:** How Sarah reduced React PRs from 23 to 5 per week 📈
+
+**Body:**
+
+```
+Hi [Name],
+
+Quick follow-up on your Pro trial...
+
+I wanted to share what other beta users are saying about the framework-aware dependency monitoring:
+
+## 💬 Beta User Success Stories
+
+**"Went from 23 dependency PRs per week to 5 grouped PRs. My code reviews are so much more manageable now."**
+— Sarah Chen, Senior React Developer
+
+**"Finally! Someone who understands that @tanstack/query and @tanstack/router should be updated together."**
+— Marcus Rodriguez, Frontend Architect
+
+**"Setup took 2 minutes. Immediately started grouping our Vue 3 ecosystem updates. The ROI was instant."**
+— David Kim, Tech Lead
+
+## 📊 The Numbers Don't Lie
+
+In beta testing across 200+ React projects:
+• **Average PR reduction**: 60%
+• **Setup time**: 2 minutes
+• **Zero configuration** needed
+• **100% framework detection** accuracy
+
+## 🎁 Your Founder Pricing Expires Soon
+
+Only 27 days left to lock in $19.50/month forever.
+
+[**🚀 Start Pro Subscription**](https://www.aibuilderlab.com/cqa-upgrade?utm_source=beta_email&utm_campaign=social_proof&code=FOUNDER50)
+
+Already convinced but need Enterprise features? [**🏢 Start Enterprise**](https://www.aibuilderlab.com/cqa-enterprise?utm_source=beta_email&utm_campaign=social_proof&code=FOUNDER50) for $98.50/month.
+
+Thanks for your continued support!
+
+Best,
+Brett
+```
+
+---
+
+## Email 3: Technical Deep Dive + Framework Support (Send 7 days after Email 1)
+
+**Subject:** Technical deep dive: How framework grouping actually works 🔧
+
+**Body:**
+
+````
+Hi [Name],
+
+As a developer, you probably want to know HOW the framework-aware dependency grouping actually works under the hood.
+
+## 🔬 Technical Deep Dive
+
+**Smart Pattern Recognition:**
+```yaml
+react-core:
+  patterns: ["react", "react-dom", "react-router*"]
+
+react-testing:
+  patterns: ["@testing-library/*", "jest", "vitest"]
+
+react-build:
+  patterns: ["vite", "webpack", "@vitejs/*", "esbuild"]
+````
+
+**Ecosystem Intelligence:**
+• Detects scoped packages (`@tanstack/*`, `@radix-ui/*`)
+• Understands framework relationships
+• Groups by update compatibility
+• Handles major vs minor vs patch separately
+
+## 🎯 Supported Frameworks (Pro Tier)
+
+**JavaScript/TypeScript:**
+• React + Next.js ecosystem
+• Vue + Nuxt ecosystem
+• Angular + Angular Material
+• Svelte + SvelteKit
+
+**Python (Coming Q1 2026):**
+• Django + DRF + Channels
+• Flask + SQLAlchemy + Marshmallow
+• FastAPI + Pydantic + Starlette
+
+**Rust (Coming Q1 2026):**
+• Actix + Tokio + Serde
+• Rocket + async-std + Diesel
+
+## 🚀 See It In Action
+
+Try it on your React project:
+
+```bash
+npx create-qa-architect@latest --deps
+```
+
+Then check your generated `.github/dependabot.yml` - you'll see the intelligent grouping in action.
+
+## 🎁 23 Days Left: Founder Pricing
+
+[**🎯 Claim $19.50/month Forever**](https://www.aibuilderlab.com/cqa-upgrade?utm_source=beta_email&utm_campaign=technical_details&code=FOUNDER50)
+
+Questions about the technical implementation? Reply to this email!
+
+Best,
+Brett
+
+```
+
+---
+
+## Email 4: Urgency + Final Call (Send 3 days before expiration)
+
+**Subject:** ⏰ Final call: Founder pricing expires in 3 days
+
+**Body:**
+
+```
+
+Hi [Name],
+
+This is your final reminder - your 14-day Pro trial ends soon.
+
+After that, Pro tier goes to full price ($39/month).
+
+## 🎁 What You're Missing Out On
+
+Without upgrading after trial:
+❌ Pay $39/month instead of $19.50
+❌ No lifetime price lock
+❌ Join the waiting list for next discount (6+ months)
+
+With Pro/Team/Enterprise:
+✅ $19.50/month forever
+✅ All Pro features included
+✅ Priority support
+✅ 30-day money-back guarantee
+
+## 💸 Cost Comparison
+
+**Free tier dependency management:**
+• Basic npm-only Dependabot
+• 15+ individual PRs per week
+• Time spent reviewing: ~3 hours/week
+
+**Pro tier (standard pricing):**
+• Framework-aware grouping
+• 3-5 grouped PRs per week
+• Time spent reviewing: ~45 minutes/week
+• **Time saved: 2.25 hours/week = $135/week value** (at $60/hour)
+
+**ROI: 595% return on $19.50 investment**
+
+## ⚡ Don't Wait - 3 Days Left
+
+[**🚀 Secure Founder Pricing Now**](https://www.aibuilderlab.com/cqa-upgrade?utm_source=beta_email&utm_campaign=final_urgency&code=FOUNDER50)
+
+Thanks for being an amazing beta user!
+
+Best,
+Brett Stark
+
+P.S. This is the last email about the trial. After it ends, standard pricing applies.
+
+```
+
+---
+
+## Email 5: Welcome + Onboarding (For customers who upgrade)
+
+**Subject:** 🎉 Welcome to Pro! Here's how to activate your license
+
+**Body:**
+
+```
+
+Hi [Name],
+
+Welcome to Create Quality Automation Pro! 🎉
+
+Your Pro trial is live today. Here's how to get started:
+
+## 🔑 Step 1: Activate Your License
+
+You'll receive your license key in a separate email from Stripe. Then run:
+
+```bash
+npx create-qa-architect@latest --activate-license
+```
+
+Enter your license key and email when prompted.
+
+## 🚀 Step 2: Enable Framework Grouping
+
+For existing projects:
+
+```bash
+cd your-react-project
+npx create-qa-architect@latest --deps
+```
+
+For new projects:
+
+```bash
+npx create-qa-architect@latest
+```
+
+## 📊 Step 3: See the Magic
+
+Check your `.github/dependabot.yml` to see the intelligent grouping:
+
+```yaml
+groups:
+  react-core:
+    patterns: ['react', 'react-dom', 'react-router*']
+  react-testing:
+    patterns: ['@testing-library/*', 'jest', 'vitest']
+```
+
+## 💬 Step 4: Priority Support
+
+Have questions? Reply to this email for priority support (48h response time).
+
+## 🎁 Bonus: Share with Your Team
+
+Your trial is personal, but you can share the tool:
+
+```bash
+npx create-qa-architect@latest
+```
+
+Team members can upgrade separately or use the free tier.
+
+## 📈 Track Your Savings
+
+Want to see your PR reduction in action? Check your GitHub Insights after 1-2 weeks. Most React projects see 60%+ reduction in dependency PRs.
+
+Thanks for supporting Create Quality Automation!
+
+Best,
+Brett Stark
+
+P.S. Feature requests? Reply with what you'd like to see next!
+
+````
+
+---
+
+## Email Campaign Tracking
+
+**UTM Parameters:**
+- `utm_source=beta_email`
+- `utm_campaign=founder_pricing`
+- `utm_medium=email`
+
+**Conversion Goals:**
+- **Email 1**: 15% click rate, 5% conversion
+- **Email 2**: 10% click rate, 3% conversion
+- **Email 3**: 8% click rate, 2% conversion
+- **Email 4**: 20% click rate, 8% conversion (urgency)
+
+**Success Metrics:**
+- Overall campaign conversion: 18% of beta users
+- Average CLV: $234 (12 months × $19.50)
+- Campaign ROI: 2000%+ (email cost ~$50)
+
+## Technical Implementation
+
+**Email List Segmentation:**
+```javascript
+// Identify beta users
+const betaUsers = users.filter(u =>
+  u.firstUsed < '2025-11-22' && // Before beta end
+  u.usedPremiumFeatures === true
+)
+
+// Exclude existing customers
+const targetUsers = betaUsers.filter(u => !u.hasActiveSubscription)
+````
+
+**Drip Campaign Schedule:**
+
+- Email 1: Immediate
+- Email 2: +3 days
+- Email 3: +7 days
+- Email 4: +27 days (3 days before expiration)
+- Email 5: Triggered on purchase
+
+**A/B Testing Variables:**
+
+- Subject line urgency level
+- Discount prominence (50% vs $19.50)
+- CTA button text
+- Email length (short vs detailed)