novatec-cli 1.0.2 → 3.0.0

package/lib/generators/docker.js

@@ -0,0 +1,97 @@
+import path from 'path';
+import fse from 'fs-extra';
+
+export async function generateDocker(config, root) {
+  const isPython = ['fastapi','django','flask'].includes(config.backend);
+  const isJava   = config.backend === 'spring';
+  const isGo     = config.backend === 'gin';
+  await writeFrontendDockerfile(root);
+  await writeBackendDockerfile(root, config.backend, isPython, isJava, isGo);
+  await writeDockerCompose(root, config);
+  const ignore = `node_modules\ndist\n.env\n*.log\nlogs/\n.git\nREADME.md\n`;
+  await fse.writeFile(path.join(root, 'frontend', '.dockerignore'), ignore);
+  await fse.writeFile(path.join(root, 'backend', '.dockerignore'), ignore);
+}
+
+async function writeFrontendDockerfile(root) {
+  await fse.writeFile(path.join(root, 'frontend', 'Dockerfile'),
+`FROM node:20-alpine AS builder
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci
+COPY . .
+RUN npm run build
+
+FROM nginx:alpine AS production
+COPY --from=builder /app/dist /usr/share/nginx/html
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+EXPOSE 80
+CMD ["nginx", "-g", "daemon off;"]
+`);
+  await fse.writeFile(path.join(root, 'frontend', 'nginx.conf'),
+`server {
+  listen 80;
+  root /usr/share/nginx/html;
+  index index.html;
+  location / { try_files $uri $uri/ /index.html; }
+  location /api { proxy_pass http://backend:3001; proxy_set_header Host $host; }
+  gzip on;
+  gzip_types text/plain text/css application/json application/javascript;
+}
+`);
+}
+
+async function writeBackendDockerfile(root, backend, isPython, isJava, isGo) {
+  let content;
+  if (isPython) {
+    const cmd = backend === 'fastapi' ? 'CMD ["uvicorn","main:app","--host","0.0.0.0","--port","8000"]'
+              : backend === 'django'  ? 'CMD ["python","manage.py","runserver","0.0.0.0:8000"]'
+              : 'CMD ["python","run.py"]';
+    content = `FROM python:3.11-slim\nWORKDIR /app\nCOPY requirements.txt .\nRUN pip install --no-cache-dir -r requirements.txt\nCOPY . .\nEXPOSE 8000\n${cmd}\n`;
+  } else if (isJava) {
+    content = `FROM maven:3.9-eclipse-temurin-21 AS builder\nWORKDIR /app\nCOPY pom.xml .\nRUN mvn dependency:go-offline\nCOPY src ./src\nRUN mvn package -DskipTests\n\nFROM eclipse-temurin:21-jre-alpine\nWORKDIR /app\nCOPY --from=builder /app/target/*.jar app.jar\nEXPOSE 8080\nCMD ["java","-jar","app.jar"]\n`;
+  } else if (isGo) {
+    content = `FROM golang:1.22-alpine AS builder\nWORKDIR /app\nCOPY go.mod go.sum ./\nRUN go mod download\nCOPY . .\nRUN go build -o main .\n\nFROM alpine:latest\nWORKDIR /app\nCOPY --from=builder /app/main .\nEXPOSE 8080\nCMD ["./main"]\n`;
+  } else {
+    content = `FROM node:20-alpine AS builder\nWORKDIR /app\nCOPY package*.json ./\nRUN npm ci --only=production\nCOPY . .\n\nFROM node:20-alpine AS production\nWORKDIR /app\nRUN addgroup -S app && adduser -S app -G app\nCOPY --from=builder /app .\nUSER app\nEXPOSE 3001\nCMD ["node","src/index.js"]\n`;
+  }
+  await fse.writeFile(path.join(root, 'backend', 'Dockerfile'), content);
+}
+
+async function writeDockerCompose(root, config) {
+  const isPython = ['fastapi','django','flask'].includes(config.backend);
+  const bePort   = isPython || config.backend === 'gin' ? '8000' : '3001';
+  const dbServices = {
+    postgres: `\n  db:\n    image: postgres:16-alpine\n    restart: unless-stopped\n    environment:\n      POSTGRES_DB: mydb\n      POSTGRES_USER: user\n      POSTGRES_PASSWORD: password\n    ports:\n      - "5432:5432"\n    volumes:\n      - pgdata:/var/lib/postgresql/data`,
+    mysql:    `\n  db:\n    image: mysql:8\n    restart: unless-stopped\n    environment:\n      MYSQL_DATABASE: mydb\n      MYSQL_ROOT_PASSWORD: password\n    ports:\n      - "3306:3306"\n    volumes:\n      - mysqldata:/var/lib/mysql`,
+    mongo:    `\n  db:\n    image: mongo:7\n    restart: unless-stopped\n    ports:\n      - "27017:27017"\n    volumes:\n      - mongodata:/data/db`,
+  };
+  const volDefs = { postgres: '\nvolumes:\n  pgdata:', mysql: '\nvolumes:\n  mysqldata:', mongo: '\nvolumes:\n  mongodata:' };
+  const db = dbServices[config.db] || '';
+  const vol = volDefs[config.db] || '';
+
+  await fse.writeFile(path.join(root, 'docker-compose.yml'),
+`version: '3.9'
+services:
+  frontend:
+    build:
+      context: ./frontend
+      target: production
+    ports:
+      - "80:80"
+    depends_on:
+      - backend
+    restart: unless-stopped
+
+  backend:
+    build: ./backend
+    ports:
+      - "${bePort}:${bePort}"
+    env_file: ./backend/.env
+    restart: unless-stopped
+    volumes:
+      - ./backend/logs:/app/logs
+${db}
+${vol}
+`);
+}

package/lib/generators/security.js

@@ -0,0 +1,132 @@
+import path from 'path';
+import fse from 'fs-extra';
+
+export async function generateSecurity(config, root) {
+  const isPython = ['fastapi','django','flask'].includes(config.backend);
+  if (isPython) return;
+  const beDir = path.join(root, 'backend', 'src');
+  await fse.ensureDir(beDir);
+  await writeSecurityMiddleware(beDir);
+  await writeSwagger(beDir, config);
+  await writeMainWithSecurity(root, config);
+}
+
+async function writeSecurityMiddleware(beDir) {
+  await fse.ensureDir(path.join(beDir, 'middlewares'));
+  await fse.writeFile(path.join(beDir, 'middlewares', 'security.js'),
+`import helmet from 'helmet';
+import cors from 'cors';
+import rateLimit from 'express-rate-limit';
+import mongoSanitize from 'express-mongo-sanitize';
+
+export const helmetMiddleware = helmet({
+  contentSecurityPolicy: {
+    directives: {
+      defaultSrc: ["'self'"],
+      styleSrc: ["'self'", "'unsafe-inline'"],
+      scriptSrc: ["'self'"],
+      imgSrc: ["'self'", 'data:', 'https:'],
+    },
+  },
+});
+
+export const corsMiddleware = cors({
+  origin: process.env.FRONTEND_URL || 'http://localhost:5173',
+  credentials: true,
+  methods: ['GET','POST','PUT','DELETE','PATCH','OPTIONS'],
+  allowedHeaders: ['Content-Type','Authorization'],
+});
+
+export const rateLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000, // 15 min
+  max: 100,
+  standardHeaders: true,
+  legacyHeaders: false,
+  message: { error: 'Demasiadas peticiones, intenta más tarde.' },
+});
+
+export const authRateLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000,
+  max: 10,
+  message: { error: 'Demasiados intentos de login.' },
+});
+
+export const sanitize = mongoSanitize();
+`);
+}
+
+async function writeSwagger(beDir, config) {
+  await fse.writeFile(path.join(beDir, 'swagger.js'),
+`import swaggerJsdoc from 'swagger-jsdoc';
+import swaggerUi from 'swagger-ui-express';
+
+const options = {
+  definition: {
+    openapi: '3.0.0',
+    info: {
+      title: '${config.name || "API"} — NovaTec',
+      version: '1.0.0',
+      description: 'Documentación automática generada por NovaTec CLI',
+    },
+    servers: [{ url: 'http://localhost:3001', description: 'Desarrollo' }],
+    components: {
+      securitySchemes: {
+        bearerAuth: { type: 'http', scheme: 'bearer', bearerFormat: 'JWT' },
+      },
+    },
+    security: [{ bearerAuth: [] }],
+  },
+  apis: ['./src/**/*.routes.js'],
+};
+
+export const swaggerSpec = swaggerJsdoc(options);
+export const swaggerMiddleware = swaggerUi.serve;
+export const swaggerHandler = swaggerUi.setup(swaggerSpec, {
+  customCss: '.swagger-ui .topbar { background: #111; } .swagger-ui .topbar-wrapper img { display: none; }',
+  customSiteTitle: 'API Docs — NovaTec',
+});
+`);
+}
+
+async function writeMainWithSecurity(root, config) {
+  const indexPath = path.join(root, 'backend', 'src', 'index.js');
+  const content =
+`import express from 'express';
+import 'dotenv/config';
+import { helmetMiddleware, corsMiddleware, rateLimiter, sanitize } from './middlewares/security.js';
+import { swaggerMiddleware, swaggerHandler } from './swagger.js';
+
+const app = express();
+const PORT = process.env.PORT || 3001;
+
+// ── Seguridad ─────────────────────────────────────────────
+app.use(helmetMiddleware);
+app.use(corsMiddleware);
+app.use(rateLimiter);
+app.use(express.json({ limit: '10kb' }));
+app.use(express.urlencoded({ extended: true, limit: '10kb' }));
+app.use(sanitize);
+
+// ── Swagger ───────────────────────────────────────────────
+app.use('/api-docs', swaggerMiddleware, swaggerHandler);
+
+// ── Rutas ─────────────────────────────────────────────────
+app.get('/api/health', (req, res) => res.json({ status: 'ok', timestamp: new Date().toISOString() }));
+
+// TODO: importar tus rutas aquí
+// import authRoutes from './auth/auth.routes.js';
+// app.use('/api/auth', authRoutes);
+
+// ── Error handler ─────────────────────────────────────────
+app.use((err, req, res, next) => {
+  console.error(err.stack);
+  res.status(err.status || 500).json({ error: err.message || 'Error interno del servidor' });
+});
+
+app.listen(PORT, () => {
+  console.log(\`🚀 Servidor en http://localhost:\${PORT}\`);
+  console.log(\`📚 API Docs en http://localhost:\${PORT}/api-docs\`);
+});
+`;
+  await fse.writeFile(indexPath, content);
+}