guardian-framework 0.1.0

package/templates/pi/scripts/languages/typescript/validate-canonical.sh

@@ -0,0 +1,135 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-canonical.sh — TypeScript
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0; ERRORS=(); WARNINGS=()
+RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m'
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Canonical Validation (TypeScript)"
+echo "============================================"
+echo ""
+
+SRC_DIR="${1:-src}"
+
+# ---------------------------------------------------------------------------
+# Architecture Reference Tracing
+# ---------------------------------------------------------------------------
+echo "--- Architecture Reference Tracing ---"
+CANONICAL_REFS=0
+TOTAL_TS_FILES=0
+if [ -d "$SRC_DIR" ]; then
+    TOTAL_TS_FILES=$(find "$SRC_DIR" -name "*.ts" -o -name "*.tsx" 2>/dev/null | wc -l | tr -d ' ')
+    CANONICAL_REFS=$(find "$SRC_DIR" -type f \( -name "*.ts" -o -name "*.tsx" \) -exec grep -lE '(// Canonical:|@canonical).*\.pi/architecture/' {} + 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$TOTAL_TS_FILES" -gt 0 ] && [ "$CANONICAL_REFS" -gt 0 ]; then
+        PCT=$((CANONICAL_REFS * 100 / TOTAL_TS_FILES))
+        pass "Canonical references found: $CANONICAL_REFS / $TOTAL_TS_FILES files ($PCT%)"
+    elif [ "$TOTAL_TS_FILES" -gt 0 ]; then
+        fail "No canonical references found in $TOTAL_TS_FILES TypeScript files"
+    else
+        warn "No TypeScript source files found"
+    fi
+else
+    warn "No source directory found, skipping canonical reference check"
+fi
+
+# ---------------------------------------------------------------------------
+# Module-to-Implementation Mapping
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Module-to-Implementation Mapping ---"
+if [ -d ".pi/architecture/modules" ]; then
+    MAPPED=0
+    UNMAPPED=0
+    for module_doc in .pi/architecture/modules/*.md; do
+        [ -f "$module_doc" ] || continue
+        MODULE_NAME=$(basename "$module_doc" .md)
+        # Look for matching TS files (by convention: module name maps to src/<module>/ or similar)
+        if find "$SRC_DIR" -type f \( -name "*.ts" -o -name "*.tsx" \) 2>/dev/null | grep -qi "$MODULE_NAME" 2>/dev/null; then
+            MAPPED=$((MAPPED + 1))
+        else
+            UNMAPPED=$((UNMAPPED + 1))
+        fi
+    done
+    TOTAL_MODULES=$((MAPPED + UNMAPPED))
+    if [ "$UNMAPPED" -eq 0 ] && [ "$MAPPED" -gt 0 ]; then
+        pass "All $TOTAL_MODULES architecture modules have implementation files"
+    elif [ "$MAPPED" -gt 0 ]; then
+        pass "Mapped: $MAPPED/$TOTAL_MODULES modules (check $UNMAPPED unmapped)"
+    else
+        fail "No architecture modules mapped to implementation"
+    fi
+else
+    warn "No .pi/architecture/modules directory found"
+fi
+
+# ---------------------------------------------------------------------------
+# Module Documentation
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Module Documentation ---"
+if [ -d "$SRC_DIR" ]; then
+    EXPORT_WITH_DOCS=0
+    EXPORTS_TOTAL=0
+    # Check for documented exports: JSDoc comment (/** ... */) immediately before export
+    EXPORTS_TOTAL=$(grep -rE "^\s*(export\s+(const|function|class|interface|type|default))" "$SRC_DIR" --include="*.ts" --include="*.tsx" 2>/dev/null | wc -l | tr -d ' ')
+    EXPORT_WITH_DOCS=$(grep -B1 -rE "^\s*(export\s+(const|function|class|interface|type|default))" "$SRC_DIR" --include="*.ts" --include="*.tsx" 2>/dev/null | grep -c '\*/' 2>/dev/null || echo "0")
+    if [ "$EXPORTS_TOTAL" -gt 0 ]; then
+        if [ "$EXPORT_WITH_DOCS" -gt 0 ]; then
+            PCT=$((EXPORT_WITH_DOCS * 100 / EXPORTS_TOTAL))
+            pass "Documented exports: $EXPORT_WITH_DOCS / $EXPORTS_TOTAL ($PCT%)"
+        else
+            warn "No exports have JSDoc documentation"
+        fi
+    else
+        pass "No public exports found, nothing to document"
+    fi
+else
+    warn "No source directory found, skipping documentation check"
+fi
+
+# ---------------------------------------------------------------------------
+# ADR Linkage
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- ADR Linkage ---"
+if [ -d ".pi/architecture/decisions" ]; then
+    ADR_FILES=$(find .pi/architecture/decisions -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    ADR_REFS=$(find "$SRC_DIR" -type f \( -name "*.ts" -o -name "*.tsx" \) -exec grep -rlE '(@adr|ADR-)' {} + 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$ADR_FILES" -gt 0 ] && [ "$ADR_REFS" -gt 0 ]; then
+        pass "ADR references found: $ADR_REFS files link to $ADR_FILES decisions"
+    elif [ "$ADR_FILES" -gt 0 ]; then
+        warn "No ADR references in code ($ADR_FILES decisions exist)"
+    else
+        warn "No ADR directory found"
+    fi
+else
+    warn "No .pi/architecture/decisions directory found"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}Canonical validation passed.${NC}"
+exit 0

package/templates/pi/scripts/languages/typescript/validate-ci.sh

@@ -0,0 +1,244 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-ci.sh — TypeScript
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0; ERRORS=(); WARNINGS=()
+RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m'
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  CI/MR Validation (TypeScript)"
+echo "============================================"
+echo ""
+
+# Detect package manager
+PKG_MGR=""
+if [ -f "bun.lock" ] || [ -f "bun.lockb" ]; then
+    PKG_MGR="bun"
+elif [ -f "yarn.lock" ]; then
+    PKG_MGR="yarn"
+elif [ -f "package-lock.json" ]; then
+    PKG_MGR="npm"
+fi
+
+# ---------------------------------------------------------------------------
+# Build
+# ---------------------------------------------------------------------------
+echo "--- Build ---"
+if [ ! -f "package.json" ]; then
+    warn "No package.json found, skipping build"
+else
+    if [ -f "tsconfig.json" ]; then
+        if command -v npx &>/dev/null; then
+            if npx tsc --noEmit 2>/dev/null; then
+                pass "TypeScript compilation succeeded (tsc --noEmit)"
+            else
+                fail "TypeScript compilation failed"
+            fi
+        else
+            warn "tsc not available, skipping type check"
+        fi
+    elif [ -f "bun.lock" ] || [ -f "bun.lockb" ] && command -v bun &>/dev/null; then
+        if bun build 2>/dev/null; then
+            pass "Build succeeded (bun build)"
+        else
+            fail "Build failed (bun build)"
+        fi
+    else
+        if [ "$PKG_MGR" = "bun" ] && command -v bun &>/dev/null; then
+            if bun run build 2>/dev/null; then
+                pass "Build succeeded (bun run build)"
+            else
+                fail "Build failed (bun run build)"
+            fi
+        elif command -v npm &>/dev/null && grep -q '"build"' package.json 2>/dev/null; then
+            if npm run build 2>/dev/null; then
+                pass "Build succeeded (npm run build)"
+            else
+                fail "Build failed (npm run build)"
+            fi
+        else
+            pass "No build script defined, skipping build"
+        fi
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Tests
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Tests ---"
+if [ ! -f "package.json" ]; then
+    pass "No package.json, skipping tests"
+elif [ "$PKG_MGR" = "bun" ] && command -v bun &>/dev/null; then
+    if bun test 2>/dev/null; then
+        pass "All tests passed (bun test)"
+    else
+        fail "Tests failed (bun test)"
+    fi
+elif grep -q '"test"' package.json 2>/dev/null; then
+    if [ "$PKG_MGR" = "yarn" ] && command -v yarn &>/dev/null; then
+        if yarn test 2>/dev/null; then
+            pass "All tests passed (yarn test)"
+        else
+            fail "Tests failed (yarn test)"
+        fi
+    elif command -v npm &>/dev/null; then
+        if npm test 2>/dev/null; then
+            pass "All tests passed (npm test)"
+        else
+            fail "Tests failed (npm test)"
+        fi
+    else
+        warn "No package manager available to run tests"
+    fi
+elif command -v npx &>/dev/null; then
+    if npx vitest run 2>/dev/null; then
+        pass "All tests passed (npx vitest run)"
+    elif npx jest --passWithNoTests 2>/dev/null; then
+        pass "All tests passed (npx jest)"
+    else
+        pass "No test runner detected, skipping tests"
+    fi
+else
+    pass "No test runner available, skipping tests"
+fi
+
+# ---------------------------------------------------------------------------
+# Lint
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Lint ---"
+if [ -f "biome.json" ] && (command -v biome &>/dev/null || command -v npx &>/dev/null); then
+    if command -v biome &>/dev/null; then
+        if biome check . 2>/dev/null; then
+            pass "Lint passed (biome check)"
+        else
+            fail "Lint failed (biome check)"
+        fi
+    elif npx biome check . 2>/dev/null; then
+        pass "Lint passed (npx biome check)"
+    else
+        fail "Lint failed (npx biome check)"
+    fi
+elif [ -f ".eslintrc" ] || [ -f ".eslintrc.json" ] || [ -f ".eslintrc.js" ] || [ -f ".eslintrc.yaml" ] || [ -f ".eslintrc.yml" ] || [ -f "eslint.config.js" ] || [ -f "eslint.config.mjs" ] || [ -f "eslint.config.ts" ] || grep -q '"eslintConfig"' package.json 2>/dev/null; then
+    if command -v eslint &>/dev/null; then
+        if eslint . 2>/dev/null; then
+            pass "Lint passed (eslint)"
+        else
+            fail "Lint failed (eslint)"
+        fi
+    elif command -v npx &>/dev/null; then
+        if npx eslint . 2>/dev/null; then
+            pass "Lint passed (npx eslint)"
+        else
+            fail "Lint failed (npx eslint)"
+        fi
+    else
+        warn "eslint not available, skipping lint"
+    fi
+else
+    warn "No linter configuration detected, skipping lint"
+fi
+
+# ---------------------------------------------------------------------------
+# Format
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Format ---"
+if [ -f "biome.json" ]; then
+    if command -v biome &>/dev/null; then
+        if biome format . --check 2>/dev/null; then
+            pass "Format check passed (biome format)"
+        else
+            fail "Format check failed (biome format)"
+        fi
+    elif command -v npx &>/dev/null; then
+        if npx biome format . --check 2>/dev/null; then
+            pass "Format check passed (npx biome format)"
+        else
+            fail "Format check failed (npx biome format)"
+        fi
+    else
+        warn "biome not available, skipping format check"
+    fi
+elif [ -f ".prettierrc" ] || [ -f ".prettierrc.json" ] || [ -f ".prettierrc.yaml" ] || [ -f ".prettierrc.yml" ] || [ -f ".prettierrc.js" ] || [ -f ".prettierrc.cjs" ] || [ -f ".prettierrc.mjs" ] || grep -q '"prettier"' package.json 2>/dev/null; then
+    if command -v prettier &>/dev/null; then
+        if prettier --check . 2>/dev/null; then
+            pass "Format check passed (prettier)"
+        else
+            fail "Format check failed (prettier)"
+        fi
+    elif command -v npx &>/dev/null; then
+        if npx prettier --check . 2>/dev/null; then
+            pass "Format check passed (npx prettier)"
+        else
+            fail "Format check failed (npx prettier)"
+        fi
+    else
+        warn "prettier not available, skipping format check"
+    fi
+else
+    warn "No formatter configuration detected, skipping format check"
+fi
+
+# ---------------------------------------------------------------------------
+# Security Audit
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Security Audit ---"
+if [ "$PKG_MGR" = "bun" ] && command -v bun &>/dev/null; then
+    AUDIT_OUT=$(bun audit 2>&1 || true)
+    CRITICAL_COUNT=$(echo "$AUDIT_OUT" | grep -ci "critical" 2>/dev/null || echo "0")
+    HIGH_COUNT=$(echo "$AUDIT_OUT" | grep -ci "high" 2>/dev/null || echo "0")
+    if [ "$CRITICAL_COUNT" -gt 0 ] || [ "$HIGH_COUNT" -gt 0 ]; then
+        fail "Security audit found critical/high vulnerabilities"
+    else
+        MODERATE_COUNT=$(echo "$AUDIT_OUT" | grep -ci "moderate" 2>/dev/null || echo "0")
+        if [ "$MODERATE_COUNT" -gt 0 ]; then
+            warn "Security audit found moderate vulnerabilities (review recommended)"
+        else
+            pass "No critical or high vulnerabilities found"
+        fi
+    fi
+elif command -v npm &>/dev/null; then
+    AUDIT_OUT=$(npm audit 2>&1 || true)
+    if echo "$AUDIT_OUT" | grep -q "found 0 vulnerabilities" 2>/dev/null; then
+        pass "No vulnerabilities found"
+    else
+        CRITICAL_HIGH=$(echo "$AUDIT_OUT" | grep -E "(critical|high).*vulnerab" 2>/dev/null | head -1 || true)
+        if [ -n "$CRITICAL_HIGH" ]; then
+            fail "Security audit found critical/high vulnerabilities"
+        else
+            warn "Security audit reported findings (review manually)"
+        fi
+    fi
+else
+    warn "No package manager available for security audit"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}All CI checks passed.${NC}"
+exit 0

package/templates/pi/scripts/languages/typescript/validate-integration.sh

@@ -0,0 +1,166 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-integration.sh — TypeScript
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0; ERRORS=(); WARNINGS=()
+RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m'
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Integration Validation (TypeScript)"
+echo "============================================"
+echo ""
+
+# Detect package manager
+PKG_MGR=""
+if [ -f "bun.lock" ] || [ -f "bun.lockb" ]; then
+    PKG_MGR="bun"
+elif [ -f "yarn.lock" ]; then
+    PKG_MGR="yarn"
+elif [ -f "package-lock.json" ]; then
+    PKG_MGR="npm"
+fi
+
+# ---------------------------------------------------------------------------
+# Integration Test Runner
+# ---------------------------------------------------------------------------
+echo "--- Integration Test Runner ---"
+if [ -d "tests/integration" ] || [ -d "test/integration" ]; then
+    INT_DIR=""
+    if [ -d "tests/integration" ]; then
+        INT_DIR="tests/integration"
+    elif [ -d "test/integration" ]; then
+        INT_DIR="test/integration"
+    fi
+
+    if [ "$PKG_MGR" = "bun" ] && command -v bun &>/dev/null; then
+        if bun test "$INT_DIR" 2>/dev/null; then
+            pass "Integration tests passed (bun test)"
+        else
+            fail "Integration tests failed (bun test)"
+        fi
+    elif command -v npx &>/dev/null; then
+        if npx vitest run "$INT_DIR" 2>/dev/null; then
+            pass "Integration tests passed (npx vitest)"
+        elif npx jest "$INT_DIR" 2>/dev/null; then
+            pass "Integration tests passed (npx jest)"
+        else
+            fail "Integration tests failed"
+        fi
+    else
+        warn "No test runner available for integration tests"
+    fi
+else
+    pass "No integration test directory (skipped)"
+fi
+
+# ---------------------------------------------------------------------------
+# Docker/Compose
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Docker/Compose ---"
+if [ -f "docker-compose.yml" ] || [ -f "docker-compose.yaml" ]; then
+    SERVICES=$(grep -E "^\s{2}\w+:" docker-compose.yml 2>/dev/null | grep -vE "^\s{2}version:|^\s{2}services:" | wc -l | tr -d ' ')
+    if [ -f "docker-compose.yaml" ] && [ "$SERVICES" -eq 0 ]; then
+        SERVICES=$(grep -E "^\s{2}\w+:" docker-compose.yaml 2>/dev/null | grep -vE "^\s{2}version:|^\s{2}services:" | wc -l | tr -d ' ')
+    fi
+    pass "Docker Compose found ($SERVICES services — integration tests may require running services)"
+else
+    pass "No Docker Compose configuration"
+fi
+
+# ---------------------------------------------------------------------------
+# Contract Tests
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Contract Tests ---"
+CONTRACT_FILES=0
+for dir in tests test; do
+    if [ -d "$dir" ]; then
+        COUNT=$(find "$dir" -name "*.contract.test.ts" -o -name "*.contract.test.tsx" 2>/dev/null | wc -l | tr -d ' ')
+        CONTRACT_FILES=$((CONTRACT_FILES + COUNT))
+    fi
+done
+if [ "$CONTRACT_FILES" -gt 0 ]; then
+    pass "Contract test files found ($CONTRACT_FILES)"
+else
+    pass "No contract test files (*.contract.test.ts)"
+fi
+
+# ---------------------------------------------------------------------------
+# Mock/Stub Detection
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Mock/Stub Detection ---"
+MOCK_USAGE=0
+for ext in ts tsx; do
+    COUNT=$(find . -name "*.$ext" -not -path "./node_modules/*" -not -path "./dist/*" \
+        -exec grep -lE "(vitest\.mock|jest\.mock|from\s+['\"]msw['\"]|from\s+['\"]@testing-library)" {} + 2>/dev/null | wc -l | tr -d ' ')
+    MOCK_USAGE=$((MOCK_USAGE + COUNT))
+done
+if [ "$MOCK_USAGE" -gt 0 ]; then
+    pass "Mock/stub usage detected ($MOCK_USAGE files with vitest.mock, jest.mock, msw, or @testing-library)"
+else
+    warn "No mocking libraries detected (vitest.mock, jest.mock, msw)"
+fi
+
+# ---------------------------------------------------------------------------
+# Database Integration
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Database Integration ---"
+DB_INTEGRATION_FILES=0
+for dir in tests test; do
+    if [ -d "$dir" ]; then
+        COUNT=$(find "$dir" -name "*_integration.test.ts" -o -name "*_integration.test.tsx" -o -name "*.db.test.ts" -o -name "*.db.test.tsx" 2>/dev/null | wc -l | tr -d ' ')
+        DB_INTEGRATION_FILES=$((DB_INTEGRATION_FILES + COUNT))
+    fi
+done
+if [ "$DB_INTEGRATION_FILES" -gt 0 ]; then
+    pass "Database integration test files found ($DB_INTEGRATION_FILES)"
+else
+    pass "No database integration test files"
+fi
+
+# ---------------------------------------------------------------------------
+# HTTP Integration
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- HTTP Integration ---"
+HTTP_LIBS=0
+for ext in ts tsx; do
+    COUNT=$(find . -name "*.$ext" -not -path "./node_modules/*" -not -path "./dist/*" \
+        -exec grep -lE "(supertest|msw|@testing-library)" {} + 2>/dev/null | wc -l | tr -d ' ')
+    HTTP_LIBS=$((HTTP_LIBS + COUNT))
+done
+if [ "$HTTP_LIBS" -gt 0 ]; then
+    pass "HTTP integration libraries detected ($HTTP_LIBS files with supertest, msw, or @testing-library)"
+else
+    pass "No HTTP integration libraries detected"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}Integration validation passed.${NC}"
+exit 0