javi-forge 1.6.0 → 1.6.1

package/dist/commands/supply-chain.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Supply chain protection — configures Socket Firewall and enforces
+ * minimum package release age to protect against typosquatting,
+ * dependency confusion, and malicious package takeovers.
+ */
+import type { Stack } from "../types/index.js";
+export type PackageManager = "npm" | "pnpm" | "yarn" | "pip" | "cargo" | "go";
+export interface SupplyChainConfig {
+    packageManager: PackageManager;
+    minReleaseAgeHours: number;
+    socketEnabled: boolean;
+    enforceLockfile: boolean;
+}
+export interface SupplyChainResult {
+    configWritten: string[];
+    warnings: string[];
+}
+export declare function detectPackageManager(projectDir: string): PackageManager;
+export declare function stackForPM(pm: PackageManager): Stack;
+export declare function buildSocketConfig(pm: PackageManager): Record<string, unknown>;
+export declare function buildNpmrcLines(minAgeHours: number): string[];
+export declare function configureSupplyChain(projectDir: string, options?: Partial<SupplyChainConfig>): Promise<SupplyChainResult>;
+//# sourceMappingURL=supply-chain.d.ts.map

package/dist/commands/supply-chain.js

@@ -0,0 +1,126 @@
+/**
+ * Supply chain protection — configures Socket Firewall and enforces
+ * minimum package release age to protect against typosquatting,
+ * dependency confusion, and malicious package takeovers.
+ */
+import fs from "fs-extra";
+import path from "path";
+// ── Detection ──
+export function detectPackageManager(projectDir) {
+    if (fs.existsSync(path.join(projectDir, "pnpm-lock.yaml")))
+        return "pnpm";
+    if (fs.existsSync(path.join(projectDir, "yarn.lock")))
+        return "yarn";
+    if (fs.existsSync(path.join(projectDir, "package-lock.json")))
+        return "npm";
+    if (fs.existsSync(path.join(projectDir, "Pipfile.lock")))
+        return "pip";
+    if (fs.existsSync(path.join(projectDir, "Cargo.lock")))
+        return "cargo";
+    if (fs.existsSync(path.join(projectDir, "go.sum")))
+        return "go";
+    if (fs.existsSync(path.join(projectDir, "package.json")))
+        return "npm";
+    return "npm";
+}
+export function stackForPM(pm) {
+    switch (pm) {
+        case "npm":
+        case "pnpm":
+        case "yarn":
+            return "node";
+        case "pip":
+            return "python";
+        case "cargo":
+            return "rust";
+        case "go":
+            return "go";
+    }
+}
+// ── Socket Firewall config ──
+export function buildSocketConfig(pm) {
+    return {
+        version: 2,
+        projectType: stackForPM(pm),
+        issueRules: {
+            "pkg:npm/*": {
+                installScripts: "error",
+                telemetry: "warn",
+                troll: "error",
+                unpublished: "error",
+                deprecated: "warn",
+                unmaintained: "warn",
+                "new-author": "warn",
+                shellAccess: "error",
+                filesystemAccess: "warn",
+                networkAccess: "warn",
+                envAccess: "warn",
+            },
+        },
+    };
+}
+// ── npmrc / lockfile enforcement ──
+export function buildNpmrcLines(minAgeHours) {
+    const lines = [
+        "# Supply chain protection — generated by javi-forge",
+        "engine-strict=true",
+        "save-exact=true",
+    ];
+    if (minAgeHours > 0) {
+        lines.push(`# Minimum package age: ${minAgeHours}h (enforced via CI/pre-install hook)`);
+    }
+    return lines;
+}
+// ── Orchestrator ──
+export async function configureSupplyChain(projectDir, options = {}) {
+    const pm = options.packageManager ?? detectPackageManager(projectDir);
+    const minAge = options.minReleaseAgeHours ?? 48;
+    const socketEnabled = options.socketEnabled ?? true;
+    const enforceLockfile = options.enforceLockfile ?? true;
+    const configWritten = [];
+    const warnings = [];
+    // 1. Socket Firewall config
+    if (socketEnabled) {
+        const socketPath = path.join(projectDir, ".socketrc");
+        await fs.writeJson(socketPath, buildSocketConfig(pm), { spaces: 2 });
+        configWritten.push(".socketrc");
+    }
+    // 2. npmrc for node projects
+    if (stackForPM(pm) === "node") {
+        const npmrcPath = path.join(projectDir, ".npmrc");
+        const lines = buildNpmrcLines(minAge);
+        if (enforceLockfile) {
+            if (pm === "pnpm") {
+                lines.push("frozen-lockfile=true");
+            }
+            else {
+                lines.push("package-lock=true");
+            }
+        }
+        // Append to existing .npmrc if present
+        const existing = (await fs.pathExists(npmrcPath))
+            ? await fs.readFile(npmrcPath, "utf-8")
+            : "";
+        const newContent = existing
+            ? `${existing.trimEnd()}\n\n${lines.join("\n")}\n`
+            : `${lines.join("\n")}\n`;
+        await fs.writeFile(npmrcPath, newContent);
+        configWritten.push(".npmrc");
+    }
+    // 3. Supply chain metadata in baseline dir
+    const metaPath = path.join(projectDir, ".javi-forge", "supply-chain.json");
+    await fs.ensureDir(path.dirname(metaPath));
+    await fs.writeJson(metaPath, {
+        packageManager: pm,
+        minReleaseAgeHours: minAge,
+        socketEnabled,
+        enforceLockfile,
+        configuredAt: new Date().toISOString(),
+    }, { spaces: 2 });
+    configWritten.push(".javi-forge/supply-chain.json");
+    if (!socketEnabled) {
+        warnings.push("Socket Firewall disabled. Consider enabling it for supply chain protection.");
+    }
+    return { configWritten, warnings };
+}
+//# sourceMappingURL=supply-chain.js.map

package/dist/commands/tdd-pipeline.d.ts

@@ -0,0 +1,17 @@
+import type { Stack, TddPipelineMode, TddPipelineResult } from "../types/index.js";
+/**
+ * Generate a TDD pipeline enforcement pre-push hook script.
+ *
+ * - strict: tests MUST pass or push is blocked (exit 1).
+ * - warn:   tests are run and results shown, but push is never blocked.
+ *
+ * If testCmd is null, generates a skip-only hook regardless of mode.
+ */
+export declare function generateTddPipelineHook(mode: TddPipelineMode, testCmd: string | null, stack: Stack): string;
+/**
+ * Install TDD pipeline pre-push hook into .git/hooks/.
+ * Detects the project stack automatically and generates the appropriate hook.
+ * Backs up any existing pre-push hook to pre-push.bak.
+ */
+export declare function installTddPipelineHook(projectDir: string, mode: TddPipelineMode): Promise<TddPipelineResult>;
+//# sourceMappingURL=tdd-pipeline.d.ts.map

package/dist/commands/tdd-pipeline.js

@@ -0,0 +1,144 @@
+import fs from "fs-extra";
+import path from "path";
+import { detectCIStack } from "./ci.js";
+import { getTddTestCommand } from "./tdd.js";
+// =============================================================================
+// Hook generation
+// =============================================================================
+/**
+ * Generate a TDD pipeline enforcement pre-push hook script.
+ *
+ * - strict: tests MUST pass or push is blocked (exit 1).
+ * - warn:   tests are run and results shown, but push is never blocked.
+ *
+ * If testCmd is null, generates a skip-only hook regardless of mode.
+ */
+export function generateTddPipelineHook(mode, testCmd, stack) {
+    if (!testCmd) {
+        return `#!/bin/bash
+# =============================================================================
+# TDD PIPELINE (pre-push): No test command detected for stack "${stack}"
+# =============================================================================
+# Install a test runner and re-run: javi-forge tdd pipeline --mode ${mode}
+# =============================================================================
+
+echo "TDD PIPELINE: No test command configured for stack '${stack}' — skipping."
+exit 0
+`;
+    }
+    if (mode === "warn") {
+        return `#!/bin/bash
+# =============================================================================
+# TDD PIPELINE (pre-push): WARN mode
+# =============================================================================
+# Flow: Spec → Tests → Fail → Implement → Pass
+# Stack: ${stack} | Command: ${testCmd}
+# Mode: warn — tests run but push is NEVER blocked
+# To skip: git push --no-verify
+# =============================================================================
+
+echo "TDD PIPELINE [WARN]: Running tests before push..."
+echo "  Stack: ${stack}"
+echo "  Command: ${testCmd}"
+echo "  Mode: warn (push will proceed regardless)"
+echo ""
+
+${testCmd} && {
+    echo ""
+    echo "TDD PIPELINE [WARN]: All tests passed."
+} || {
+    echo ""
+    echo "TDD PIPELINE [WARN]: Tests FAILED — but push will proceed (warn mode)."
+    echo "  Consider fixing tests before merging."
+}
+
+exit 0
+`;
+    }
+    // strict mode (default)
+    return `#!/bin/bash
+# =============================================================================
+# TDD PIPELINE (pre-push): STRICT mode
+# =============================================================================
+# Flow: Spec → Tests → Fail → Implement → Pass
+# Stack: ${stack} | Command: ${testCmd}
+# Mode: strict — push is BLOCKED if tests fail
+# To skip: git push --no-verify
+# =============================================================================
+
+set -e
+
+echo "TDD PIPELINE [STRICT]: Running tests before push..."
+echo "  Stack: ${stack}"
+echo "  Command: ${testCmd}"
+echo "  Mode: strict (push blocked on failure)"
+echo ""
+
+${testCmd} || {
+    echo ""
+    echo "TDD PIPELINE [STRICT]: FAILED — Tests did not pass."
+    echo "  Fix failing tests before pushing."
+    echo "  To skip: git push --no-verify"
+    exit 1
+}
+
+echo ""
+echo "TDD PIPELINE [STRICT]: All tests passed. Push allowed."
+`;
+}
+// =============================================================================
+// Hook installation
+// =============================================================================
+/**
+ * Install TDD pipeline pre-push hook into .git/hooks/.
+ * Detects the project stack automatically and generates the appropriate hook.
+ * Backs up any existing pre-push hook to pre-push.bak.
+ */
+export async function installTddPipelineHook(projectDir, mode) {
+    const result = {
+        installed: [],
+        skipped: [],
+        errors: [],
+        mode,
+    };
+    const gitDir = path.join(projectDir, ".git");
+    if (!(await fs.pathExists(gitDir))) {
+        result.errors.push("Not a git repository. Run git init first.");
+        return result;
+    }
+    const hooksDir = path.join(gitDir, "hooks");
+    await fs.ensureDir(hooksDir);
+    // Detect stack
+    let stackInfo;
+    try {
+        stackInfo = await detectCIStack(projectDir);
+    }
+    catch {
+        result.errors.push("Failed to detect project stack.");
+        return result;
+    }
+    const testCmd = await getTddTestCommand(stackInfo.stackType, stackInfo.buildTool, projectDir);
+    const hookContent = generateTddPipelineHook(mode, testCmd, stackInfo.stackType);
+    const hookPath = path.join(hooksDir, "pre-push");
+    // Backup existing hook
+    if (await fs.pathExists(hookPath)) {
+        const backupPath = path.join(hooksDir, "pre-push.bak");
+        try {
+            await fs.copy(hookPath, backupPath, { overwrite: true });
+            result.skipped.push("pre-push (backed up to pre-push.bak)");
+        }
+        catch (e) {
+            result.errors.push(`backup: ${e instanceof Error ? e.message : String(e)}`);
+            return result;
+        }
+    }
+    try {
+        await fs.writeFile(hookPath, hookContent, { mode: 0o755 });
+        result.installed.push("pre-push");
+    }
+    catch (e) {
+        result.errors.push(`pre-push: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    return result;
+}
+//# sourceMappingURL=tdd-pipeline.js.map

package/dist/commands/tdd.d.ts

@@ -1,4 +1,4 @@
-import type { Stack } from '../types/index.js';
+import type { Stack } from "../types/index.js";
 export interface TddHookResult {
     installed: string[];
     errors: string[];

package/dist/commands/tdd.js

@@ -1,6 +1,6 @@
-import fs from 'fs-extra';
-import path from 'path';
-import { detectCIStack } from './ci.js';
+import fs from "fs-extra";
+import path from "path";
+import { detectCIStack } from "./ci.js";
 // =============================================================================
 // Test command resolution
 // =============================================================================
@@ -10,22 +10,22 @@ import { detectCIStack } from './ci.js';
  */
 export async function getTddTestCommand(stack, buildTool, projectDir) {
     switch (stack) {
-        case 'node': {
-            const pkgPath = path.join(projectDir, 'package.json');
+        case "node": {
+            const pkgPath = path.join(projectDir, "package.json");
             try {
-                const pkgContent = await fs.readFile(pkgPath, 'utf-8');
+                const pkgContent = await fs.readFile(pkgPath, "utf-8");
                 if (!pkgContent.includes('"test"'))
                     return null;
-                return buildTool === 'npm' ? 'npm test' : `${buildTool} run test`;
+                return buildTool === "npm" ? "npm test" : `${buildTool} run test`;
             }
             catch {
                 return null;
             }
         }
-        case 'python':
-            return 'pytest';
-        case 'go':
-            return 'go test ./...';
+        case "python":
+            return "pytest";
+        case "go":
+            return "go test ./...";
         default:
             return null;
     }
@@ -86,11 +86,14 @@ echo "TDD PASSED — All tests green. Commit allowed."
  * Detects the project stack automatically and generates the appropriate hook.
  */
 export async function installTddHooks(projectDir) {
-    const gitDir = path.join(projectDir, '.git');
-    if (!await fs.pathExists(gitDir)) {
-        return { installed: [], errors: ['Not a git repository. Run git init first.'] };
+    const gitDir = path.join(projectDir, ".git");
+    if (!(await fs.pathExists(gitDir))) {
+        return {
+            installed: [],
+            errors: ["Not a git repository. Run git init first."],
+        };
     }
-    const hooksDir = path.join(gitDir, 'hooks');
+    const hooksDir = path.join(gitDir, "hooks");
     await fs.ensureDir(hooksDir);
     // Detect stack
     let stackInfo;
@@ -98,16 +101,16 @@ export async function installTddHooks(projectDir) {
         stackInfo = await detectCIStack(projectDir);
     }
     catch {
-        return { installed: [], errors: ['Failed to detect project stack.'] };
+        return { installed: [], errors: ["Failed to detect project stack."] };
     }
     const testCmd = await getTddTestCommand(stackInfo.stackType, stackInfo.buildTool, projectDir);
     const hookContent = generateTddHook(testCmd, stackInfo.stackType);
     const installed = [];
     const errors = [];
-    const hookPath = path.join(hooksDir, 'pre-commit');
+    const hookPath = path.join(hooksDir, "pre-commit");
     try {
         await fs.writeFile(hookPath, hookContent, { mode: 0o755 });
-        installed.push('pre-commit');
+        installed.push("pre-commit");
     }
     catch (e) {
         errors.push(`pre-commit: ${e instanceof Error ? e.message : String(e)}`);

package/dist/commands/team-presets.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Agent Teams parallel dispatch presets — predefined team configurations
+ * for common workflows like review, debug, and security scanning.
+ *
+ * Each preset defines which sub-agents to spawn in parallel, their roles,
+ * and how to aggregate results.
+ */
+export interface AgentRole {
+    id: string;
+    name: string;
+    skill: string;
+    perspective: string;
+    priority: "critical" | "high" | "medium" | "low";
+}
+export interface TeamPreset {
+    name: string;
+    description: string;
+    roles: AgentRole[];
+    aggregation: "all-must-pass" | "majority" | "any-pass";
+    maxParallel: number;
+}
+export interface TeamDispatch {
+    preset: string;
+    roles: AgentRole[];
+    targetFiles: string[];
+    context: Record<string, string>;
+}
+export interface AgentResult {
+    roleId: string;
+    roleName: string;
+    passed: boolean;
+    findings: string[];
+    severity: "critical" | "high" | "medium" | "low" | "info";
+    durationMs: number;
+}
+export interface TeamResult {
+    preset: string;
+    passed: boolean;
+    agents: AgentResult[];
+    totalDurationMs: number;
+    summary: string;
+}
+export declare const TEAM_PRESETS: Record<string, TeamPreset>;
+export declare function getPreset(name: string): TeamPreset | null;
+export declare function listPresets(): Array<{
+    name: string;
+    description: string;
+    roleCount: number;
+}>;
+export declare function createDispatch(presetName: string, targetFiles: string[], context?: Record<string, string>): TeamDispatch | null;
+export declare function aggregateResults(preset: TeamPreset, results: AgentResult[]): TeamResult;
+export declare function formatTeamResult(result: TeamResult): string;
+//# sourceMappingURL=team-presets.d.ts.map

package/dist/commands/team-presets.js

@@ -0,0 +1,201 @@
+/**
+ * Agent Teams parallel dispatch presets — predefined team configurations
+ * for common workflows like review, debug, and security scanning.
+ *
+ * Each preset defines which sub-agents to spawn in parallel, their roles,
+ * and how to aggregate results.
+ */
+// ── Built-in presets ──
+export const TEAM_PRESETS = {
+    review: {
+        name: "review",
+        description: "Multi-perspective code review team",
+        roles: [
+            {
+                id: "quality",
+                name: "Quality Reviewer",
+                skill: "adversarial-review",
+                perspective: "code quality, readability, maintainability",
+                priority: "high",
+            },
+            {
+                id: "security",
+                name: "Security Auditor",
+                skill: "adversarial-review",
+                perspective: "security vulnerabilities, injection, auth",
+                priority: "critical",
+            },
+            {
+                id: "testing",
+                name: "Test Reviewer",
+                skill: "testing:test-coverage",
+                perspective: "test coverage, edge cases, test quality",
+                priority: "medium",
+            },
+        ],
+        aggregation: "all-must-pass",
+        maxParallel: 3,
+    },
+    debug: {
+        name: "debug",
+        description: "Parallel debugging team",
+        roles: [
+            {
+                id: "hypothesis",
+                name: "Hypothesis Generator",
+                skill: "debug-mode",
+                perspective: "generate and rank failure hypotheses",
+                priority: "high",
+            },
+            {
+                id: "logs",
+                name: "Log Analyzer",
+                skill: "debug-mode",
+                perspective: "parse logs, stack traces, error patterns",
+                priority: "high",
+            },
+            {
+                id: "repro",
+                name: "Reproducer",
+                skill: "testing:e2e",
+                perspective: "create minimal reproduction steps",
+                priority: "medium",
+            },
+        ],
+        aggregation: "any-pass",
+        maxParallel: 3,
+    },
+    security: {
+        name: "security",
+        description: "Security scanning team",
+        roles: [
+            {
+                id: "sast",
+                name: "SAST Scanner",
+                skill: "adversarial-review",
+                perspective: "static analysis, code patterns, OWASP",
+                priority: "critical",
+            },
+            {
+                id: "deps",
+                name: "Dependency Auditor",
+                skill: "adversarial-review",
+                perspective: "supply chain, outdated deps, known CVEs",
+                priority: "critical",
+            },
+            {
+                id: "secrets",
+                name: "Secret Scanner",
+                skill: "adversarial-review",
+                perspective: "hardcoded secrets, API keys, credentials",
+                priority: "critical",
+            },
+        ],
+        aggregation: "all-must-pass",
+        maxParallel: 3,
+    },
+    "tdd-cycle": {
+        name: "tdd-cycle",
+        description: "TDD pipeline team",
+        roles: [
+            {
+                id: "test-writer",
+                name: "Test Writer",
+                skill: "testing:tdd",
+                perspective: "write failing tests first",
+                priority: "high",
+            },
+            {
+                id: "implementer",
+                name: "Implementer",
+                skill: "sdd-apply",
+                perspective: "make tests pass with minimal code",
+                priority: "high",
+            },
+            {
+                id: "refactorer",
+                name: "Refactorer",
+                skill: "refactoring:cleanup",
+                perspective: "clean up without breaking tests",
+                priority: "medium",
+            },
+        ],
+        aggregation: "all-must-pass",
+        maxParallel: 1, // sequential for TDD
+    },
+};
+// ── Preset management ──
+export function getPreset(name) {
+    return TEAM_PRESETS[name] ?? null;
+}
+export function listPresets() {
+    return Object.values(TEAM_PRESETS).map((p) => ({
+        name: p.name,
+        description: p.description,
+        roleCount: p.roles.length,
+    }));
+}
+// ── Dispatch creation ──
+export function createDispatch(presetName, targetFiles, context = {}) {
+    const preset = getPreset(presetName);
+    if (!preset)
+        return null;
+    return {
+        preset: presetName,
+        roles: preset.roles,
+        targetFiles,
+        context,
+    };
+}
+// ── Result aggregation ──
+export function aggregateResults(preset, results) {
+    const totalDurationMs = Math.max(...results.map((r) => r.durationMs), 0);
+    let passed;
+    switch (preset.aggregation) {
+        case "all-must-pass":
+            passed = results.every((r) => r.passed);
+            break;
+        case "majority":
+            passed = results.filter((r) => r.passed).length > results.length / 2;
+            break;
+        case "any-pass":
+            passed = results.some((r) => r.passed);
+            break;
+    }
+    const criticalFindings = results
+        .filter((r) => r.severity === "critical" && !r.passed)
+        .flatMap((r) => r.findings);
+    const summary = passed
+        ? `All ${results.length} agents passed.`
+        : `${results.filter((r) => !r.passed).length}/${results.length} agents reported issues.${criticalFindings.length > 0 ? ` ${criticalFindings.length} critical findings.` : ""}`;
+    return {
+        preset: preset.name,
+        passed,
+        agents: results,
+        totalDurationMs,
+        summary,
+    };
+}
+// ── Formatting ──
+export function formatTeamResult(result) {
+    const icon = result.passed ? "✅" : "❌";
+    const lines = [
+        `${icon} Team: ${result.preset} — ${result.summary}`,
+        "",
+    ];
+    for (const agent of result.agents) {
+        const aIcon = agent.passed ? "✓" : "✗";
+        const dur = `${(agent.durationMs / 1000).toFixed(1)}s`;
+        lines.push(`  ${aIcon} ${agent.roleName} [${agent.severity}] ${dur}`);
+        if (agent.findings.length > 0) {
+            for (const f of agent.findings.slice(0, 3)) {
+                lines.push(`    - ${f}`);
+            }
+            if (agent.findings.length > 3) {
+                lines.push(`    ... +${agent.findings.length - 3} more`);
+            }
+        }
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=team-presets.js.map

package/dist/commands/workflow.d.ts

@@ -0,0 +1,23 @@
+import type { InitStep } from "../types/index.js";
+export type WorkflowAction = "show" | "validate" | "list";
+type StepCallback = (step: InitStep) => void;
+/**
+ * Show a workflow graph as ASCII art.
+ */
+export declare function runWorkflowShow(projectDir: string, onStep: StepCallback, options?: {
+    target?: string;
+    template?: string;
+}): Promise<string | null>;
+/**
+ * Validate a project against a workflow graph.
+ */
+export declare function runWorkflowValidate(projectDir: string, onStep: StepCallback, options?: {
+    target?: string;
+    template?: string;
+}): Promise<string | null>;
+/**
+ * List available workflows (project + built-in templates).
+ */
+export declare function runWorkflowList(projectDir: string, onStep: StepCallback): Promise<string>;
+export {};
+//# sourceMappingURL=workflow.d.ts.map