javi-forge 1.23.0 → 1.23.1

package/ci-local/README.md

@@ -174,7 +174,7 @@ Developer workflow:
 │   ├── commit-msg    # Valida mensaje sin AI attribution
 │   └── pre-push      # CI simulation en Docker
 └── docker/
-    └── *.Dockerfile  # Se generan automáticamente
+    └── *.Dockerfile  # Incluidos para cada stack (fallback: se regeneran si faltan)
 
 lib/                  # Dependencia requerida (copiar junto con .ci-local/)
 ├── common.sh         # Funciones compartidas (Bash)
@@ -193,7 +193,7 @@ Editar `lib/common.sh` (detección de stack) o `setup_ci_commands()` en `ci-loca
 
 ### Docker image custom
 
-Editar los Dockerfiles en `.ci-local/docker/` después de la primera ejecución.
+Editar los Dockerfiles en `.ci-local/docker/` (incluidos por stack).
 
 ## FAQ
 

package/ci-local/ci-local.ps1

@@ -177,7 +177,6 @@ RUN apt-get update && apt-get install -y git curl unzip && rm -rf /var/lib/apt/l
 RUN useradd -m -s /bin/bash runner
 USER runner
 WORKDIR /home/runner/work
-ENV GRADLE_USER_HOME=/home/runner/.gradle
 ENTRYPOINT ["/bin/bash", "-c"]
 '@
         }
@@ -207,8 +206,7 @@ ENTRYPOINT ["/bin/bash", "-c"]
 @'
 FROM golang:1.23-bookworm@sha256:167053a2bb901972bf2c1611f8f52c44d5fe7e762e5cab213708d82c421614db
 RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
-RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.62.0 && \
-    mv /root/go/bin/golangci-lint /usr/local/bin/
+RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.62.0 && mv /root/go/bin/golangci-lint /usr/local/bin/
 RUN useradd -m -s /bin/bash runner
 USER runner
 WORKDIR /home/runner/work

package/ci-local/ci-local.sh

@@ -174,7 +174,6 @@ RUN apt-get update && apt-get install -y git curl unzip && rm -rf /var/lib/apt/l
 RUN useradd -m -s /bin/bash runner
 USER runner
 WORKDIR /home/runner/work
-ENV GRADLE_USER_HOME=/home/runner/.gradle
 ENTRYPOINT ["/bin/bash", "-c"]
 DOCKERFILE
             ;;
@@ -204,8 +203,7 @@ DOCKERFILE
             cat > "$docker_dir/$DOCKERFILE" << 'DOCKERFILE'
 FROM golang:1.23-bookworm@sha256:167053a2bb901972bf2c1611f8f52c44d5fe7e762e5cab213708d82c421614db
 RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
-RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.62.0 && \
-    mv /root/go/bin/golangci-lint /usr/local/bin/
+RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.62.0 && mv /root/go/bin/golangci-lint /usr/local/bin/
 RUN useradd -m -s /bin/bash runner
 USER runner
 WORKDIR /home/runner/work

package/ci-local/docker/elixir.Dockerfile

@@ -0,0 +1,6 @@
+FROM ubuntu:24.04@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b
+RUN apt-get update && apt-get install -y git curl && rm -rf /var/lib/apt/lists/*
+RUN useradd -m -s /bin/bash runner
+USER runner
+WORKDIR /home/runner/work
+ENTRYPOINT ["/bin/bash", "-c"]

package/ci-local/docker/go.Dockerfile

@@ -0,0 +1,7 @@
+FROM golang:1.23-bookworm@sha256:167053a2bb901972bf2c1611f8f52c44d5fe7e762e5cab213708d82c421614db
+RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
+RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.62.0 && mv /root/go/bin/golangci-lint /usr/local/bin/
+RUN useradd -m -s /bin/bash runner
+USER runner
+WORKDIR /home/runner/work
+ENTRYPOINT ["/bin/bash", "-c"]

package/ci-local/docker/java-gradle.Dockerfile

@@ -0,0 +1,7 @@
+ARG JAVA_VERSION=21
+FROM eclipse-temurin:${JAVA_VERSION}-jdk-noble
+RUN apt-get update && apt-get install -y git curl unzip && rm -rf /var/lib/apt/lists/*
+RUN useradd -m -s /bin/bash runner
+USER runner
+WORKDIR /home/runner/work
+ENTRYPOINT ["/bin/bash", "-c"]

package/ci-local/docker/java-maven.Dockerfile

@@ -0,0 +1,7 @@
+ARG JAVA_VERSION=21
+FROM eclipse-temurin:${JAVA_VERSION}-jdk-noble
+RUN apt-get update && apt-get install -y git curl unzip && rm -rf /var/lib/apt/lists/*
+RUN useradd -m -s /bin/bash runner
+USER runner
+WORKDIR /home/runner/work
+ENTRYPOINT ["/bin/bash", "-c"]

package/ci-local/docker/java.Dockerfile

@@ -0,0 +1,7 @@
+ARG JAVA_VERSION=21
+FROM eclipse-temurin:${JAVA_VERSION}-jdk-noble
+RUN apt-get update && apt-get install -y git curl unzip && rm -rf /var/lib/apt/lists/*
+RUN useradd -m -s /bin/bash runner
+USER runner
+WORKDIR /home/runner/work
+ENTRYPOINT ["/bin/bash", "-c"]

package/ci-local/docker/python.Dockerfile

@@ -0,0 +1,7 @@
+FROM python:3.12-slim@sha256:401f6e1a67dad31a1bd78e9ad22d0ee0a3b52154e6bd30e90be696bb6a3d7461
+RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
+RUN pip install --no-cache-dir pytest ruff pylint poetry
+RUN useradd -m -s /bin/bash runner
+USER runner
+WORKDIR /home/runner/work
+ENTRYPOINT ["/bin/bash", "-c"]

package/ci-local/docker/rust.Dockerfile

@@ -0,0 +1,7 @@
+FROM rust:1.83-slim@sha256:540c902e99c384163b688bbd8b5b8520e94e7731b27f7bd0eaa56ae1960627ab
+RUN apt-get update && apt-get install -y git pkg-config libssl-dev && rm -rf /var/lib/apt/lists/*
+RUN rustup component add clippy rustfmt
+RUN useradd -m -s /bin/bash runner
+USER runner
+WORKDIR /home/runner/work
+ENTRYPOINT ["/bin/bash", "-c"]

package/dist/lib/docker.js

@@ -38,6 +38,14 @@ export function getDockerfileContent(stack) {
                 "RUN apt-get update && apt-get install -y git curl unzip && rm -rf /var/lib/apt/lists/*",
                 "RUN useradd -m -s /bin/bash runner",
                 "USER runner",
+                // No GRADLE_USER_HOME override (audit R4-001): on noble the
+                // `ubuntu` user owns uid 1000, so `useradd -m runner` lands at
+                // uid 1001 and /home/runner is 0750 runner:runner. Pinning
+                // GRADLE_USER_HOME=/home/runner/.gradle hard-fails the TS
+                // runtime path, which runs as the HOST uid (ENV-1, typically
+                // 1000) and cannot create that dir. Without the env both paths
+                // work off $HOME: shell path (--user runner) → /home/runner;
+                // host-uid path → getpwuid(1000) → /home/ubuntu.
                 "WORKDIR /home/runner/work",
                 'ENTRYPOINT ["/bin/bash", "-c"]',
             ].join("\n");
@@ -143,10 +151,22 @@ export async function ensureImage(options) {
             path.join(path.dirname(fileURLToPath(import.meta.url)), "../../ci-local/docker");
         dockerfilePath = path.join(dockerDir, `${stack}.Dockerfile`);
         contextDir = dockerDir;
-        // Write Dockerfile if it doesn't exist yet (first run)
         if (!(await fs.pathExists(dockerfilePath))) {
-            await fs.ensureDir(dockerDir);
-            await fs.writeFile(dockerfilePath, getDockerfileContent(stack), "utf-8");
+            if (dockerfilesDir) {
+                // Caller-provided generation dir (dev / project-local flow):
+                // first-run generation is expected — write the canonical content.
+                await fs.ensureDir(dockerDir);
+                await fs.writeFile(dockerfilePath, getDockerfileContent(stack), "utf-8");
+            }
+            else {
+                // PKG-002: the package bundles a Dockerfile for EVERY stack, so a
+                // miss here means a corrupted/incomplete install. Writing into the
+                // install dir would EACCES on root-owned global installs and mask
+                // the real problem — fail closed with a clear message instead.
+                throw new Error(`bundled Dockerfile "${stack}.Dockerfile" is missing from ` +
+                    `"${dockerDir}" — the javi-forge installation looks corrupted; ` +
+                    "reinstall the package (or pass an explicit dockerfilesDir)");
+            }
         }
     }
     // Staleness check: compare Dockerfile hash with the one embedded in the image label

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "javi-forge",
-	"version": "1.23.0",
+	"version": "1.23.1",
 	"description": "Project scaffolding and AI-ready CI bootstrap",
 	"type": "module",
 	"bin": {