javi-forge 1.5.0 → 1.6.1

package/dist/commands/supply-chain.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Supply chain protection — configures Socket Firewall and enforces
+ * minimum package release age to protect against typosquatting,
+ * dependency confusion, and malicious package takeovers.
+ */
+import type { Stack } from "../types/index.js";
+export type PackageManager = "npm" | "pnpm" | "yarn" | "pip" | "cargo" | "go";
+export interface SupplyChainConfig {
+    packageManager: PackageManager;
+    minReleaseAgeHours: number;
+    socketEnabled: boolean;
+    enforceLockfile: boolean;
+}
+export interface SupplyChainResult {
+    configWritten: string[];
+    warnings: string[];
+}
+export declare function detectPackageManager(projectDir: string): PackageManager;
+export declare function stackForPM(pm: PackageManager): Stack;
+export declare function buildSocketConfig(pm: PackageManager): Record<string, unknown>;
+export declare function buildNpmrcLines(minAgeHours: number): string[];
+export declare function configureSupplyChain(projectDir: string, options?: Partial<SupplyChainConfig>): Promise<SupplyChainResult>;
+//# sourceMappingURL=supply-chain.d.ts.map

package/dist/commands/supply-chain.js

@@ -0,0 +1,126 @@
+/**
+ * Supply chain protection — configures Socket Firewall and enforces
+ * minimum package release age to protect against typosquatting,
+ * dependency confusion, and malicious package takeovers.
+ */
+import fs from "fs-extra";
+import path from "path";
+// ── Detection ──
+export function detectPackageManager(projectDir) {
+    if (fs.existsSync(path.join(projectDir, "pnpm-lock.yaml")))
+        return "pnpm";
+    if (fs.existsSync(path.join(projectDir, "yarn.lock")))
+        return "yarn";
+    if (fs.existsSync(path.join(projectDir, "package-lock.json")))
+        return "npm";
+    if (fs.existsSync(path.join(projectDir, "Pipfile.lock")))
+        return "pip";
+    if (fs.existsSync(path.join(projectDir, "Cargo.lock")))
+        return "cargo";
+    if (fs.existsSync(path.join(projectDir, "go.sum")))
+        return "go";
+    if (fs.existsSync(path.join(projectDir, "package.json")))
+        return "npm";
+    return "npm";
+}
+export function stackForPM(pm) {
+    switch (pm) {
+        case "npm":
+        case "pnpm":
+        case "yarn":
+            return "node";
+        case "pip":
+            return "python";
+        case "cargo":
+            return "rust";
+        case "go":
+            return "go";
+    }
+}
+// ── Socket Firewall config ──
+export function buildSocketConfig(pm) {
+    return {
+        version: 2,
+        projectType: stackForPM(pm),
+        issueRules: {
+            "pkg:npm/*": {
+                installScripts: "error",
+                telemetry: "warn",
+                troll: "error",
+                unpublished: "error",
+                deprecated: "warn",
+                unmaintained: "warn",
+                "new-author": "warn",
+                shellAccess: "error",
+                filesystemAccess: "warn",
+                networkAccess: "warn",
+                envAccess: "warn",
+            },
+        },
+    };
+}
+// ── npmrc / lockfile enforcement ──
+export function buildNpmrcLines(minAgeHours) {
+    const lines = [
+        "# Supply chain protection — generated by javi-forge",
+        "engine-strict=true",
+        "save-exact=true",
+    ];
+    if (minAgeHours > 0) {
+        lines.push(`# Minimum package age: ${minAgeHours}h (enforced via CI/pre-install hook)`);
+    }
+    return lines;
+}
+// ── Orchestrator ──
+export async function configureSupplyChain(projectDir, options = {}) {
+    const pm = options.packageManager ?? detectPackageManager(projectDir);
+    const minAge = options.minReleaseAgeHours ?? 48;
+    const socketEnabled = options.socketEnabled ?? true;
+    const enforceLockfile = options.enforceLockfile ?? true;
+    const configWritten = [];
+    const warnings = [];
+    // 1. Socket Firewall config
+    if (socketEnabled) {
+        const socketPath = path.join(projectDir, ".socketrc");
+        await fs.writeJson(socketPath, buildSocketConfig(pm), { spaces: 2 });
+        configWritten.push(".socketrc");
+    }
+    // 2. npmrc for node projects
+    if (stackForPM(pm) === "node") {
+        const npmrcPath = path.join(projectDir, ".npmrc");
+        const lines = buildNpmrcLines(minAge);
+        if (enforceLockfile) {
+            if (pm === "pnpm") {
+                lines.push("frozen-lockfile=true");
+            }
+            else {
+                lines.push("package-lock=true");
+            }
+        }
+        // Append to existing .npmrc if present
+        const existing = (await fs.pathExists(npmrcPath))
+            ? await fs.readFile(npmrcPath, "utf-8")
+            : "";
+        const newContent = existing
+            ? `${existing.trimEnd()}\n\n${lines.join("\n")}\n`
+            : `${lines.join("\n")}\n`;
+        await fs.writeFile(npmrcPath, newContent);
+        configWritten.push(".npmrc");
+    }
+    // 3. Supply chain metadata in baseline dir
+    const metaPath = path.join(projectDir, ".javi-forge", "supply-chain.json");
+    await fs.ensureDir(path.dirname(metaPath));
+    await fs.writeJson(metaPath, {
+        packageManager: pm,
+        minReleaseAgeHours: minAge,
+        socketEnabled,
+        enforceLockfile,
+        configuredAt: new Date().toISOString(),
+    }, { spaces: 2 });
+    configWritten.push(".javi-forge/supply-chain.json");
+    if (!socketEnabled) {
+        warnings.push("Socket Firewall disabled. Consider enabling it for supply chain protection.");
+    }
+    return { configWritten, warnings };
+}
+//# sourceMappingURL=supply-chain.js.map

package/dist/commands/tdd-pipeline.d.ts

@@ -0,0 +1,17 @@
+import type { Stack, TddPipelineMode, TddPipelineResult } from "../types/index.js";
+/**
+ * Generate a TDD pipeline enforcement pre-push hook script.
+ *
+ * - strict: tests MUST pass or push is blocked (exit 1).
+ * - warn:   tests are run and results shown, but push is never blocked.
+ *
+ * If testCmd is null, generates a skip-only hook regardless of mode.
+ */
+export declare function generateTddPipelineHook(mode: TddPipelineMode, testCmd: string | null, stack: Stack): string;
+/**
+ * Install TDD pipeline pre-push hook into .git/hooks/.
+ * Detects the project stack automatically and generates the appropriate hook.
+ * Backs up any existing pre-push hook to pre-push.bak.
+ */
+export declare function installTddPipelineHook(projectDir: string, mode: TddPipelineMode): Promise<TddPipelineResult>;
+//# sourceMappingURL=tdd-pipeline.d.ts.map

package/dist/commands/tdd-pipeline.js

@@ -0,0 +1,144 @@
+import fs from "fs-extra";
+import path from "path";
+import { detectCIStack } from "./ci.js";
+import { getTddTestCommand } from "./tdd.js";
+// =============================================================================
+// Hook generation
+// =============================================================================
+/**
+ * Generate a TDD pipeline enforcement pre-push hook script.
+ *
+ * - strict: tests MUST pass or push is blocked (exit 1).
+ * - warn:   tests are run and results shown, but push is never blocked.
+ *
+ * If testCmd is null, generates a skip-only hook regardless of mode.
+ */
+export function generateTddPipelineHook(mode, testCmd, stack) {
+    if (!testCmd) {
+        return `#!/bin/bash
+# =============================================================================
+# TDD PIPELINE (pre-push): No test command detected for stack "${stack}"
+# =============================================================================
+# Install a test runner and re-run: javi-forge tdd pipeline --mode ${mode}
+# =============================================================================
+
+echo "TDD PIPELINE: No test command configured for stack '${stack}' — skipping."
+exit 0
+`;
+    }
+    if (mode === "warn") {
+        return `#!/bin/bash
+# =============================================================================
+# TDD PIPELINE (pre-push): WARN mode
+# =============================================================================
+# Flow: Spec → Tests → Fail → Implement → Pass
+# Stack: ${stack} | Command: ${testCmd}
+# Mode: warn — tests run but push is NEVER blocked
+# To skip: git push --no-verify
+# =============================================================================
+
+echo "TDD PIPELINE [WARN]: Running tests before push..."
+echo "  Stack: ${stack}"
+echo "  Command: ${testCmd}"
+echo "  Mode: warn (push will proceed regardless)"
+echo ""
+
+${testCmd} && {
+    echo ""
+    echo "TDD PIPELINE [WARN]: All tests passed."
+} || {
+    echo ""
+    echo "TDD PIPELINE [WARN]: Tests FAILED — but push will proceed (warn mode)."
+    echo "  Consider fixing tests before merging."
+}
+
+exit 0
+`;
+    }
+    // strict mode (default)
+    return `#!/bin/bash
+# =============================================================================
+# TDD PIPELINE (pre-push): STRICT mode
+# =============================================================================
+# Flow: Spec → Tests → Fail → Implement → Pass
+# Stack: ${stack} | Command: ${testCmd}
+# Mode: strict — push is BLOCKED if tests fail
+# To skip: git push --no-verify
+# =============================================================================
+
+set -e
+
+echo "TDD PIPELINE [STRICT]: Running tests before push..."
+echo "  Stack: ${stack}"
+echo "  Command: ${testCmd}"
+echo "  Mode: strict (push blocked on failure)"
+echo ""
+
+${testCmd} || {
+    echo ""
+    echo "TDD PIPELINE [STRICT]: FAILED — Tests did not pass."
+    echo "  Fix failing tests before pushing."
+    echo "  To skip: git push --no-verify"
+    exit 1
+}
+
+echo ""
+echo "TDD PIPELINE [STRICT]: All tests passed. Push allowed."
+`;
+}
+// =============================================================================
+// Hook installation
+// =============================================================================
+/**
+ * Install TDD pipeline pre-push hook into .git/hooks/.
+ * Detects the project stack automatically and generates the appropriate hook.
+ * Backs up any existing pre-push hook to pre-push.bak.
+ */
+export async function installTddPipelineHook(projectDir, mode) {
+    const result = {
+        installed: [],
+        skipped: [],
+        errors: [],
+        mode,
+    };
+    const gitDir = path.join(projectDir, ".git");
+    if (!(await fs.pathExists(gitDir))) {
+        result.errors.push("Not a git repository. Run git init first.");
+        return result;
+    }
+    const hooksDir = path.join(gitDir, "hooks");
+    await fs.ensureDir(hooksDir);
+    // Detect stack
+    let stackInfo;
+    try {
+        stackInfo = await detectCIStack(projectDir);
+    }
+    catch {
+        result.errors.push("Failed to detect project stack.");
+        return result;
+    }
+    const testCmd = await getTddTestCommand(stackInfo.stackType, stackInfo.buildTool, projectDir);
+    const hookContent = generateTddPipelineHook(mode, testCmd, stackInfo.stackType);
+    const hookPath = path.join(hooksDir, "pre-push");
+    // Backup existing hook
+    if (await fs.pathExists(hookPath)) {
+        const backupPath = path.join(hooksDir, "pre-push.bak");
+        try {
+            await fs.copy(hookPath, backupPath, { overwrite: true });
+            result.skipped.push("pre-push (backed up to pre-push.bak)");
+        }
+        catch (e) {
+            result.errors.push(`backup: ${e instanceof Error ? e.message : String(e)}`);
+            return result;
+        }
+    }
+    try {
+        await fs.writeFile(hookPath, hookContent, { mode: 0o755 });
+        result.installed.push("pre-push");
+    }
+    catch (e) {
+        result.errors.push(`pre-push: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    return result;
+}
+//# sourceMappingURL=tdd-pipeline.js.map

package/dist/commands/tdd.d.ts

@@ -0,0 +1,21 @@
+import type { Stack } from "../types/index.js";
+export interface TddHookResult {
+    installed: string[];
+    errors: string[];
+}
+/**
+ * Resolve the correct test command for TDD hook based on stack and build tool.
+ * Returns null if no test command can be determined.
+ */
+export declare function getTddTestCommand(stack: Stack, buildTool: string, projectDir: string): Promise<string | null>;
+/**
+ * Generate a TDD-enforcing pre-commit hook script.
+ * If testCmd is null, generates a warning-only hook.
+ */
+export declare function generateTddHook(testCmd: string | null, stack: Stack): string;
+/**
+ * Install TDD pre-commit hook into .git/hooks/.
+ * Detects the project stack automatically and generates the appropriate hook.
+ */
+export declare function installTddHooks(projectDir: string): Promise<TddHookResult>;
+//# sourceMappingURL=tdd.d.ts.map

package/dist/commands/tdd.js

@@ -0,0 +1,120 @@
+import fs from "fs-extra";
+import path from "path";
+import { detectCIStack } from "./ci.js";
+// =============================================================================
+// Test command resolution
+// =============================================================================
+/**
+ * Resolve the correct test command for TDD hook based on stack and build tool.
+ * Returns null if no test command can be determined.
+ */
+export async function getTddTestCommand(stack, buildTool, projectDir) {
+    switch (stack) {
+        case "node": {
+            const pkgPath = path.join(projectDir, "package.json");
+            try {
+                const pkgContent = await fs.readFile(pkgPath, "utf-8");
+                if (!pkgContent.includes('"test"'))
+                    return null;
+                return buildTool === "npm" ? "npm test" : `${buildTool} run test`;
+            }
+            catch {
+                return null;
+            }
+        }
+        case "python":
+            return "pytest";
+        case "go":
+            return "go test ./...";
+        default:
+            return null;
+    }
+}
+// =============================================================================
+// Hook generation
+// =============================================================================
+/**
+ * Generate a TDD-enforcing pre-commit hook script.
+ * If testCmd is null, generates a warning-only hook.
+ */
+export function generateTddHook(testCmd, stack) {
+    if (!testCmd) {
+        return `#!/bin/bash
+# =============================================================================
+# TDD PRE-COMMIT: No test command detected for stack "${stack}"
+# =============================================================================
+# Install a test runner and re-run: javi-forge tdd init
+# =============================================================================
+
+echo "TDD HOOK: No test command configured for stack '${stack}' — skipping."
+exit 0
+`;
+    }
+    return `#!/bin/bash
+# =============================================================================
+# TDD PRE-COMMIT: Enforced test-driven development
+# =============================================================================
+# Flow: Tests MUST pass before commit is allowed.
+# Stack: ${stack} | Command: ${testCmd}
+# To skip: git commit --no-verify
+# =============================================================================
+
+set -e
+
+echo "TDD PRE-COMMIT: Running tests..."
+echo "  Stack: ${stack}"
+echo "  Command: ${testCmd}"
+echo ""
+
+${testCmd} || {
+    echo ""
+    echo "TDD FAILED — Tests did not pass."
+    echo "  Fix failing tests before committing."
+    echo "  To skip: git commit --no-verify"
+    exit 1
+}
+
+echo ""
+echo "TDD PASSED — All tests green. Commit allowed."
+`;
+}
+// =============================================================================
+// Hook installation
+// =============================================================================
+/**
+ * Install TDD pre-commit hook into .git/hooks/.
+ * Detects the project stack automatically and generates the appropriate hook.
+ */
+export async function installTddHooks(projectDir) {
+    const gitDir = path.join(projectDir, ".git");
+    if (!(await fs.pathExists(gitDir))) {
+        return {
+            installed: [],
+            errors: ["Not a git repository. Run git init first."],
+        };
+    }
+    const hooksDir = path.join(gitDir, "hooks");
+    await fs.ensureDir(hooksDir);
+    // Detect stack
+    let stackInfo;
+    try {
+        stackInfo = await detectCIStack(projectDir);
+    }
+    catch {
+        return { installed: [], errors: ["Failed to detect project stack."] };
+    }
+    const testCmd = await getTddTestCommand(stackInfo.stackType, stackInfo.buildTool, projectDir);
+    const hookContent = generateTddHook(testCmd, stackInfo.stackType);
+    const installed = [];
+    const errors = [];
+    const hookPath = path.join(hooksDir, "pre-commit");
+    try {
+        await fs.writeFile(hookPath, hookContent, { mode: 0o755 });
+        installed.push("pre-commit");
+    }
+    catch (e) {
+        errors.push(`pre-commit: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    return { installed, errors };
+}
+//# sourceMappingURL=tdd.js.map

package/dist/commands/team-presets.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Agent Teams parallel dispatch presets — predefined team configurations
+ * for common workflows like review, debug, and security scanning.
+ *
+ * Each preset defines which sub-agents to spawn in parallel, their roles,
+ * and how to aggregate results.
+ */
+export interface AgentRole {
+    id: string;
+    name: string;
+    skill: string;
+    perspective: string;
+    priority: "critical" | "high" | "medium" | "low";
+}
+export interface TeamPreset {
+    name: string;
+    description: string;
+    roles: AgentRole[];
+    aggregation: "all-must-pass" | "majority" | "any-pass";
+    maxParallel: number;
+}
+export interface TeamDispatch {
+    preset: string;
+    roles: AgentRole[];
+    targetFiles: string[];
+    context: Record<string, string>;
+}
+export interface AgentResult {
+    roleId: string;
+    roleName: string;
+    passed: boolean;
+    findings: string[];
+    severity: "critical" | "high" | "medium" | "low" | "info";
+    durationMs: number;
+}
+export interface TeamResult {
+    preset: string;
+    passed: boolean;
+    agents: AgentResult[];
+    totalDurationMs: number;
+    summary: string;
+}
+export declare const TEAM_PRESETS: Record<string, TeamPreset>;
+export declare function getPreset(name: string): TeamPreset | null;
+export declare function listPresets(): Array<{
+    name: string;
+    description: string;
+    roleCount: number;
+}>;
+export declare function createDispatch(presetName: string, targetFiles: string[], context?: Record<string, string>): TeamDispatch | null;
+export declare function aggregateResults(preset: TeamPreset, results: AgentResult[]): TeamResult;
+export declare function formatTeamResult(result: TeamResult): string;
+//# sourceMappingURL=team-presets.d.ts.map