javi-forge 1.1.0 → 1.3.0

package/ci-local/ci-local.sh

@@ -35,20 +35,41 @@ setup_ci_commands() {
         java-gradle)
             DOCKERFILE="java.Dockerfile"
             LINT_CMD="./gradlew spotlessCheck --no-daemon"
-            COMPILE_CMD="./gradlew classes testClasses --no-daemon"
+            # Pre-clean to avoid permission conflicts with host-created build dirs
+            # chown so tests (as runner) can access the output
+            COMPILE_CMD="./gradlew clean classes testClasses --no-daemon && chown -R runner:runner build .gradle 2>/dev/null || true"
             TEST_CMD="./gradlew test --no-daemon"
             ;;
         java-maven)
             DOCKERFILE="java.Dockerfile"
             LINT_CMD="./mvnw spotless:check"
-            COMPILE_CMD="./mvnw compile test-compile"
+            # Pre-clean to avoid permission conflicts with host-created target dirs
+            COMPILE_CMD="./mvnw clean compile test-compile && chown -R runner:runner target .mvn 2>/dev/null || true"
             TEST_CMD="./mvnw test"
             ;;
         node)
             DOCKERFILE="node.Dockerfile"
-            LINT_CMD="$BUILD_TOOL run lint"
-            COMPILE_CMD="$BUILD_TOOL run build"
-            TEST_CMD="$BUILD_TOOL test"
+            # Only set lint if the script exists in package.json
+            if grep -q '"lint"' "$PROJECT_DIR/package.json" 2>/dev/null; then
+                LINT_CMD="$BUILD_TOOL run lint"
+            else
+                LINT_CMD=""
+            fi
+            # Only set compile if build script exists
+            # Pre-clean dist/ and build/ to avoid EACCES errors when the host
+            # created those dirs as a different user (e.g. root from a previous run).
+            # chown back to runner so subsequent steps can read the output.
+            if grep -q '"build"' "$PROJECT_DIR/package.json" 2>/dev/null; then
+                COMPILE_CMD="rm -rf dist build && $BUILD_TOOL run build && chown -R runner:runner dist build 2>/dev/null || true"
+            else
+                COMPILE_CMD=""
+            fi
+            # Only set test if test script exists
+            if grep -q '"test"' "$PROJECT_DIR/package.json" 2>/dev/null; then
+                TEST_CMD="$BUILD_TOOL test"
+            else
+                TEST_CMD=""
+            fi
             ;;
         python)
             DOCKERFILE="python.Dockerfile"
@@ -59,13 +80,15 @@ setup_ci_commands() {
         go)
             DOCKERFILE="go.Dockerfile"
             LINT_CMD="golangci-lint run"
-            COMPILE_CMD="go build ./..."
+            # Pre-clean to avoid permission conflicts with host-created build cache
+            COMPILE_CMD="go clean -cache && go build ./... && chown -R runner:runner . 2>/dev/null || true"
             TEST_CMD="go test ./..."
             ;;
         rust)
             DOCKERFILE="rust.Dockerfile"
             LINT_CMD="cargo clippy -- -D warnings"
-            COMPILE_CMD="cargo build"
+            # Pre-clean to avoid permission conflicts with host-created target dir
+            COMPILE_CMD="cargo clean && cargo build && chown -R runner:runner target 2>/dev/null || true"
             TEST_CMD="cargo test"
             ;;
         *)
@@ -194,6 +217,9 @@ ensure_docker_image() {
 run_in_ci() {
     local image_name
     image_name=$(get_image_name)
+    # $1 = command, $2 = user override (default: runner)
+    local cmd="$1"
+    local run_user="${2:-runner}"
     local -a docker_flags=(--rm)
     if [ -t 0 ]; then
         docker_flags+=(-it)
@@ -206,9 +232,11 @@ run_in_ci() {
     fi
     docker run "${docker_flags[@]}" \
         --stop-timeout 30 \
+        --entrypoint "" \
+        --user "$run_user" \
         -v "$PROJECT_DIR:/home/runner/work" \
         -e CI=true \
-        "$image_name" timeout "$timeout" bash -c "$1"
+        "$image_name" timeout "$timeout" bash -c "$cmd"
 }
 
 # =============================================================================
@@ -253,7 +281,7 @@ case "$MODE" in
         fi
         if [[ -n "$COMPILE_CMD" ]]; then
             echo -e "${CYAN}Compile: $COMPILE_CMD${NC}"
-            run_in_ci "cd /home/runner/work && $COMPILE_CMD"
+            run_in_ci "cd /home/runner/work && $COMPILE_CMD" root
         fi
         ;;
 
@@ -288,7 +316,7 @@ case "$MODE" in
         if [[ -n "$COMPILE_CMD" ]]; then
             echo -e "\n${YELLOW}Step $step/$total: Compile${NC}"
             echo -e "  ${CYAN}$COMPILE_CMD${NC}"
-            run_in_ci "cd /home/runner/work && $COMPILE_CMD"
+            run_in_ci "cd /home/runner/work && $COMPILE_CMD" root
             step=$((step + 1))
         fi
 

package/ci-local/hooks/pre-commit

@@ -1,162 +1,17 @@
 #!/bin/bash
 # =============================================================================
-# PRE-COMMIT: Universal quick checks before commit
+# PRE-COMMIT: Quick CI check via javi-forge
 # =============================================================================
-# Detecta el stack y ejecuta lint + compile rapido
-# Tiempo: ~30-60 segundos
+# Requires: npm install -g javi-forge
+# To skip:  git commit --no-verify
 # =============================================================================
 
 set -e
 
-# Encontrar directorio .ci-local
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-if [[ -d "$HOOK_DIR/../.ci-local" ]]; then
-    CI_LOCAL_DIR="$HOOK_DIR/../.ci-local"
-elif [[ -d "$(git rev-parse --show-toplevel)/.ci-local" ]]; then
-    CI_LOCAL_DIR="$(git rev-parse --show-toplevel)/.ci-local"
-else
-    echo "Warning: .ci-local not found, skipping pre-commit checks"
-    exit 0
-fi
-
-PROJECT_DIR="$(dirname "$CI_LOCAL_DIR")"
-
-# Source shared library for colors and detect_stack
-source "$CI_LOCAL_DIR/../lib/common.sh"
-
-echo -e "${YELLOW}[pre-commit] Running quick checks...${NC}"
-
-# =============================================================================
-# CHECK: No AI attribution in staged files
-# =============================================================================
-echo -e "${YELLOW}[1/3] Checking for AI attribution...${NC}"
-
-# Patrones prohibidos (case insensitive)
-AI_PATTERNS=(
-    "co-authored-by:.*claude"
-    "co-authored-by:.*anthropic"
-    "co-authored-by:.*gpt"
-    "co-authored-by:.*openai"
-    "co-authored-by:.*copilot"
-    "co-authored-by:.*gemini"
-    "co-authored-by:.*\bai\b"
-    "made by claude"
-    "made by gpt"
-    "made by ai"
-    "generated by claude"
-    "generated by gpt"
-    "generated by ai"
-    "generated with claude"
-    "generated with ai"
-    "written by claude"
-    "written by ai"
-    "created by claude"
-    "created by ai"
-    "assisted by claude"
-    "assisted by ai"
-    "with help from claude"
-    "claude code"
-    "made by anthropic"
-    "powered by anthropic"
-    "created by anthropic"
-    "made by openai"
-    "powered by openai"
-    "created by openai"
-    "@anthropic.com"
-    "@openai.com"
-)
-
-# Check actual staged content using git show :0:file
-STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep -vE '\.(png|jpg|jpeg|gif|ico|woff|ttf|eot|svg|lock)$' || true)
-
-if [[ -n "$STAGED_FILES" ]]; then
-    for pattern in "${AI_PATTERNS[@]}"; do
-        while IFS= read -r file; do
-            [[ -z "$file" ]] && continue
-            if git show ":0:$file" 2>/dev/null | grep -iqE "$pattern"; then
-                echo -e "${RED}[BLOCKED] AI attribution found in staged content: $file${NC}"
-                echo -e "${RED}  Pattern matched: $pattern${NC}"
-                git show ":0:$file" | grep -inE "$pattern" | head -3 | while IFS= read -r line; do
-                    echo -e "${RED}    $line${NC}"
-                done
-                echo ""
-                echo -e "${YELLOW}Remove AI attribution before committing.${NC}"
-                exit 1
-            fi
-        done <<< "$STAGED_FILES"
-    done
-    echo -e "${GREEN}  No AI attribution found${NC}"
-fi
-
-# Semgrep security scan - native or Docker fallback
-SEMGREP_CMD=""
-SEMGREP_MODE=""
-if command -v semgrep &> /dev/null; then
-    SEMGREP_CMD="native"
-    SEMGREP_MODE="native"
-elif command -v docker &> /dev/null && docker info &> /dev/null 2>&1; then
-    SEMGREP_CMD="docker"
-    SEMGREP_MODE="Docker"
-fi
-
-if [[ -n "$SEMGREP_CMD" ]]; then
-    echo -e "${YELLOW}[2/3] Security scan (Semgrep via $SEMGREP_MODE)...${NC}"
-    STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep -E '\.(java|kt|js|ts|py|go|rs)$' || true)
-    if [[ -n "$STAGED_FILES" ]]; then
-        if [[ "$SEMGREP_CMD" == "native" ]]; then
-            echo "$STAGED_FILES" | tr '\n' '\0' | xargs -0 semgrep --config=.ci-local/semgrep.yml --severity=ERROR --quiet 2>/dev/null || {
-                echo -e "${RED}Semgrep found issues${NC}"
-                exit 1
-            }
-        else
-            # Pipe file list via stdin into the container where xargs feeds it to semgrep
-            echo "$STAGED_FILES" | docker run --rm -i -v "${PROJECT_DIR}:/src" -w /src returntocorp/semgrep \
-                sh -c 'xargs semgrep --config=/src/.ci-local/semgrep.yml --severity=ERROR --quiet' 2>/dev/null || {
-                echo -e "${RED}Semgrep found issues${NC}"
-                exit 1
-            }
-        fi
-        echo -e "${GREEN}Security OK${NC}"
-    else
-        echo -e "${GREEN}No files to scan${NC}"
-    fi
-else
-    echo -e "${YELLOW}[2/3] Semgrep not available, skipping (install semgrep or use Docker)${NC}"
-fi
-
-# Quick compile/lint basado en el stack
-echo -e "${YELLOW}[3/3] Quick compile check...${NC}"
-cd "$PROJECT_DIR"
-
-# Use shared stack detection from lib/common.sh
-detect_stack
-
-case "$STACK_TYPE" in
-    java-gradle)
-        ./gradlew spotlessCheck classes --no-daemon -q 2>/dev/null || {
-            echo -e "${RED}Gradle check failed. Run: ./gradlew spotlessApply${NC}"
-            exit 1
-        }
-        ;;
-    java-maven)
-        ./mvnw compile -q 2>/dev/null || exit 1
-        ;;
-    node)
-        if [[ "$BUILD_TOOL" == "pnpm" ]]; then
-            pnpm lint --silent 2>/dev/null || exit 1
-        elif [[ "$BUILD_TOOL" == "yarn" ]]; then
-            yarn lint --silent 2>/dev/null || exit 1
-        else
-            npm run lint --silent 2>/dev/null || exit 1
-        fi
-        ;;
-    rust)
-        cargo check --quiet 2>/dev/null || exit 1
-        ;;
-    go)
-        go build ./... 2>/dev/null || exit 1
-        ;;
-esac
-
-echo -e "${GREEN}Compile OK${NC}"
-echo -e "${GREEN}[pre-commit] All checks passed!${NC}"
+echo "PRE-COMMIT: Running quick check..."
+javi-forge ci --quick --no-security --no-ghagga || {
+    echo ""
+    echo "Quick check FAILED — Fix the issues above before committing."
+    echo "To skip: git commit --no-verify"
+    exit 1
+}

package/ci-local/hooks/pre-push

@@ -1,41 +1,24 @@
 #!/bin/bash
 # =============================================================================
-# PRE-PUSH: Full CI simulation before push
+# PRE-PUSH: Full CI simulation via javi-forge
 # =============================================================================
-# Corre tests en Docker identico al CI
-# Si pasa aca -> pasa en GitHub Actions / GitLab CI
+# Requires: npm install -g javi-forge
+# To skip:  git push --no-verify
 # =============================================================================
 
 set -e
 
-# Encontrar directorio .ci-local
-if [[ -d "$(git rev-parse --show-toplevel)/.ci-local" ]]; then
-    CI_LOCAL_DIR="$(git rev-parse --show-toplevel)/.ci-local"
-else
-    echo "Warning: .ci-local not found, skipping pre-push CI simulation"
-    exit 0
-fi
-
-# Source shared library for colors
-source "$CI_LOCAL_DIR/../lib/common.sh"
-
-echo -e "${BLUE}PRE-PUSH: CI Simulation${NC}"
-
-# Verificar Docker
-if ! docker info &> /dev/null; then
-    echo -e "${RED}Docker is not running.${NC}"
-    echo -e "${YELLOW}  Start Docker or use: git push --no-verify${NC}"
+# Verify Docker is running
+if ! docker info &>/dev/null; then
+    echo "PRE-PUSH: Docker is not running."
+    echo "  Start Docker or use: git push --no-verify"
     exit 1
 fi
 
-# Ejecutar CI local
-"$CI_LOCAL_DIR/ci-local.sh" full || {
-    echo -e ""
-    echo -e "${RED}CI SIMULATION FAILED - Push aborted${NC}"
-    echo -e "${RED}Fix the issues above before pushing.${NC}"
-    echo -e "${RED}To skip: git push --no-verify${NC}"
+echo "PRE-PUSH: Running CI simulation..."
+javi-forge ci || {
+    echo ""
+    echo "CI FAILED — Push aborted. Fix the issues above before pushing."
+    echo "To skip: git push --no-verify"
     exit 1
 }
-
-echo -e ""
-echo -e "${GREEN}CI Simulation PASSED - Safe to push!${NC}"

package/dist/commands/ci.d.ts

@@ -0,0 +1,33 @@
+import type { Stack } from '../types/index.js';
+export type CIMode = 'full' | 'quick' | 'shell' | 'detect';
+export interface CIOptions {
+    projectDir?: string;
+    mode?: CIMode;
+    /** Skip Docker entirely — run commands natively */
+    noDocker?: boolean;
+    /** Skip GHAGGA review step */
+    noGhagga?: boolean;
+    /** Skip Semgrep security scan */
+    noSecurity?: boolean;
+    /** Timeout in seconds for each Docker step (default: 600) */
+    timeout?: number;
+}
+export type CIStepStatus = 'pending' | 'running' | 'done' | 'error' | 'skipped';
+export interface CIStep {
+    id: string;
+    label: string;
+    status: CIStepStatus;
+    detail?: string;
+}
+export type CIStepCallback = (step: CIStep) => void;
+export interface CIStackInfo {
+    stackType: Stack;
+    buildTool: string;
+    javaVersion: string;
+    lintCmd: string | null;
+    compileCmd: string | null;
+    testCmd: string | null;
+}
+export declare function detectCIStack(projectDir: string): Promise<CIStackInfo>;
+export declare function runCI(options: CIOptions, onStep: CIStepCallback): Promise<void>;
+//# sourceMappingURL=ci.d.ts.map