pumuki-ast-hooks 5.5.30 → 5.5.32

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki-ast-hooks",
-  "version": "5.5.30",
+  "version": "5.5.32",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {
@@ -10,6 +10,7 @@
     "ast-install": "./bin/install.js",
     "ast-violations": "./bin/violations-api.js",
     "ast-check-version": "./bin/check-version.js",
+    "ast-gitflow": "./scripts/hooks-system/bin/gitflow-cycle.js",
     "ai-commit": "./bin/ai-commit.sh",
     "hook-run-orchestrator": "./bin/run-orchestrator.js",
     "hook-watch": "./bin/watch-hooks.js",

package/scripts/hooks-system/application/services/installation/ConfigurationGeneratorService.js

@@ -116,6 +116,7 @@ class ConfigurationGeneratorService {
             packageJson.scripts['ast:guard:status'] = 'bash scripts/hooks-system/bin/evidence-guard status';
             packageJson.scripts['ast:guard:logs'] = 'bash scripts/hooks-system/bin/evidence-guard logs';
             packageJson.scripts['ast:check-version'] = 'node scripts/hooks-system/bin/check-version.js';
+            packageJson.scripts['ast:gitflow'] = 'node scripts/hooks-system/bin/gitflow-cycle.js';
 
             fs.writeFileSync(projectPackageJsonPath, JSON.stringify(packageJson, null, 2));
             this.logSuccess('npm scripts added');

package/scripts/hooks-system/application/services/installation/GitEnvironmentService.js

@@ -79,12 +79,19 @@ class GitEnvironmentService {
       return;
     }
 
+    // Install pre-commit hook
     const preCommitHook = this.getPreCommitHookContent();
     const preCommitPath = path.join(gitHooksDir, 'pre-commit');
-
     fs.writeFileSync(preCommitPath, preCommitHook);
     fs.chmodSync(preCommitPath, '755');
     this.logSuccess('  ✅ Installed pre-commit hook');
+
+    // Install pre-push hook (Git Flow enforcement)
+    const prePushHook = this.getPrePushHookContent();
+    const prePushPath = path.join(gitHooksDir, 'pre-push');
+    fs.writeFileSync(prePushPath, prePushHook);
+    fs.chmodSync(prePushPath, '755');
+    this.logSuccess('  ✅ Installed pre-push hook (Git Flow enforcement)');
   }
 
   getPreCommitHookContent() {
@@ -101,6 +108,26 @@ fi
 # Change to project root (where package.json is)
 cd "$(git rev-parse --show-toplevel)" || exit 1
 
+# ═══════════════════════════════════════════════════════════════
+# GIT FLOW ENFORCEMENT: Block commits on protected branches
+# ═══════════════════════════════════════════════════════════════
+CURRENT_BRANCH=$(git branch --show-current 2>/dev/null || echo "")
+
+if [[ "$CURRENT_BRANCH" == "main" ]] || [[ "$CURRENT_BRANCH" == "master" ]] || [[ "$CURRENT_BRANCH" == "develop" ]]; then
+  echo ""
+  echo "❌ COMMIT BLOCKED: Cannot commit directly to protected branch: $CURRENT_BRANCH"
+  echo ""
+  echo "🐈 Pumuki says: Create a feature branch first!"
+  echo ""
+  echo "   git checkout -b feature/my-feature"
+  echo "   git checkout -b fix/my-fix"
+  echo "   git checkout -b hotfix/urgent-fix"
+  echo ""
+  echo "Then run: npm run ast:gitflow"
+  echo ""
+  exit 1
+fi
+
 # Check if there are staged files
 STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null | grep -E '\\.(ts|tsx|js|jsx|swift|kt)$' || true)
 if [ -z "$STAGED_FILES" ]; then
@@ -146,6 +173,107 @@ fi
 
 # Fallback: direct execution logic here...
 echo "⚠️  ast-intelligence-hooks not found"
+exit 0
+`;
+  }
+
+  getPrePushHookContent() {
+    return `#!/bin/bash
+# AST Intelligence Hooks - Pre-push (Git Flow Enforcement)
+# Auto-generated by pumuki-ast-hooks v${this.version}
+
+# Check for bypass
+if [[ -n "\${GIT_BYPASS_HOOK}" ]]; then
+  echo "⚠️  Bypassing Git Flow enforcement (GIT_BYPASS_HOOK=1)"
+  exit 0
+fi
+
+# Change to project root
+cd "$(git rev-parse --show-toplevel)" || exit 1
+
+# Check if we're pushing only tags (read from stdin)
+while read local_ref local_sha remote_ref remote_sha; do
+  # If pushing a tag (refs/tags/*), allow it
+  if [[ "$local_ref" =~ ^refs/tags/ ]]; then
+    echo ""
+    echo "✅ Tag push detected - allowing release workflow"
+    echo ""
+    exit 0
+  fi
+done
+
+echo ""
+echo "🔍 Validating Git Flow compliance before push..."
+echo ""
+
+# Get current branch
+CURRENT_BRANCH=$(git branch --show-current 2>/dev/null || echo "")
+
+if [[ -z "$CURRENT_BRANCH" ]]; then
+  echo "❌ Detached HEAD - cannot validate Git Flow"
+  exit 1
+fi
+
+# Protected branches - cannot push directly
+PROTECTED_BRANCHES=("main" "master" "develop")
+for protected in "\${PROTECTED_BRANCHES[@]}"; do
+  if [[ "$CURRENT_BRANCH" == "$protected" ]]; then
+    echo "❌ Cannot push directly to protected branch: $CURRENT_BRANCH"
+    echo ""
+    echo "Create a feature branch instead:"
+    echo "  git checkout -b feature/my-feature"
+    echo ""
+    exit 1
+  fi
+done
+
+# Validate branch naming convention
+if [[ ! "$CURRENT_BRANCH" =~ ^(feature|fix|hotfix|chore|docs|refactor|test|ci)/ ]]; then
+  echo "⚠️  Branch name '$CURRENT_BRANCH' doesn't follow Git Flow convention"
+  echo ""
+  echo "Expected patterns:"
+  echo "  feature/description"
+  echo "  fix/description"
+  echo "  hotfix/description"
+  echo "  chore/description"
+  echo ""
+  echo "This is a WARNING - push will continue"
+  echo ""
+fi
+
+# Check evidence freshness (optional - warn only)
+EVIDENCE_FILE=".AI_EVIDENCE.json"
+if [[ -f "$EVIDENCE_FILE" ]]; then
+  EVIDENCE_TS=$(jq -r '.timestamp // .severity_metrics.last_updated // empty' "$EVIDENCE_FILE" 2>/dev/null || echo "")
+  if [[ -n "$EVIDENCE_TS" ]]; then
+    # Parse timestamp and check age
+    CLEAN_TS=$(echo "$EVIDENCE_TS" | sed 's/\\.[0-9]*Z$/Z/')
+    EVIDENCE_EPOCH=$(date -j -f "%Y-%m-%dT%H:%M:%SZ" "$CLEAN_TS" +%s 2>/dev/null || echo "0")
+    NOW_EPOCH=$(date +%s)
+    AGE=$((NOW_EPOCH - EVIDENCE_EPOCH))
+    
+    if [[ $AGE -gt 300 ]]; then
+      echo "⚠️  Evidence is stale (\${AGE}s old, recommended <5min)"
+      echo "   Consider running: npm run ast:refresh"
+      echo ""
+    fi
+  fi
+fi
+
+# Run gitflow-enforcer if available (optional validation)
+ENFORCER_SCRIPT="scripts/hooks-system/infrastructure/shell/gitflow/gitflow-enforcer.sh"
+if [[ -f "$ENFORCER_SCRIPT" ]]; then
+  if ! bash "$ENFORCER_SCRIPT" check 2>/dev/null; then
+    echo ""
+    echo "⚠️  Git Flow check completed with warnings (non-blocking)"
+    echo ""
+  fi
+fi
+
+echo ""
+echo "✅ Git Flow validation passed. Proceeding with push..."
+echo ""
+
 exit 0
 `;
   }

package/scripts/hooks-system/bin/gitflow-cycle.js

@@ -0,0 +1,424 @@
+#!/usr/bin/env node
+/**
+ * Git Flow Cycle - Complete automation
+ * 
+ * Executes the full Git Flow cycle:
+ * 1. Validates current branch (must be feature/fix/hotfix/chore)
+ * 2. Commits uncommitted changes (optional)
+ * 3. Pushes to origin
+ * 4. Creates PR (requires gh CLI)
+ * 5. Optionally merges PR
+ * 6. Cleans up merged branches
+ * 7. Syncs local branches with remote
+ */
+
+const { execSync } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+
+const COLORS = {
+    reset: '\x1b[0m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    blue: '\x1b[34m',
+    cyan: '\x1b[36m',
+    magenta: '\x1b[35m'
+};
+
+function log(color, message) {
+    console.log(`${color}${message}${COLORS.reset}`);
+}
+
+function exec(cmd, options = {}) {
+    try {
+        return execSync(cmd, {
+            encoding: 'utf-8',
+            stdio: options.silent ? 'pipe' : 'inherit',
+            ...options
+        });
+    } catch (error) {
+        if (options.ignoreError) {
+            return null;
+        }
+        throw error;
+    }
+}
+
+function execSilent(cmd) {
+    try {
+        return execSync(cmd, { encoding: 'utf-8', stdio: 'pipe' }).trim();
+    } catch (error) {
+        return null;
+    }
+}
+
+function getCurrentBranch() {
+    return execSilent('git branch --show-current') || 'unknown';
+}
+
+function isProtectedBranch(branch) {
+    const protected = ['main', 'master', 'develop'];
+    return protected.includes(branch);
+}
+
+function isValidFeatureBranch(branch) {
+    return /^(feature|fix|hotfix|chore|docs|refactor|test|ci)\//.test(branch);
+}
+
+function hasUncommittedChanges() {
+    const status = execSilent('git status --porcelain');
+    return status && status.length > 0;
+}
+
+function hasStagedChanges() {
+    const staged = execSilent('git diff --cached --name-only');
+    return staged && staged.length > 0;
+}
+
+function getBaseBranch() {
+    // Check if develop exists
+    const hasDevelop = execSilent('git show-ref --verify --quiet refs/heads/develop');
+    return hasDevelop !== null ? 'develop' : 'main';
+}
+
+function getMergedBranches(baseBranch) {
+    const output = execSilent(`git branch --merged ${baseBranch}`);
+    if (!output) return [];
+    return output.split('\n')
+        .map(b => b.replace(/^\*?\s*/, '').trim())
+        .filter(b => b && !isProtectedBranch(b));
+}
+
+function isGitHubCliAvailable() {
+    return execSilent('gh auth status') !== null;
+}
+
+function prExists(branch) {
+    return execSilent(`gh pr view ${branch}`) !== null;
+}
+
+// ════════════════════════════════════════════════════════════════
+// MAIN CYCLE STEPS
+// ════════════════════════════════════════════════════════════════
+
+function step1_validateBranch() {
+    log(COLORS.cyan, '\n═══════════════════════════════════════════════════════════════');
+    log(COLORS.cyan, '📍 Step 1: Validate Branch');
+    log(COLORS.cyan, '═══════════════════════════════════════════════════════════════\n');
+
+    const branch = getCurrentBranch();
+    log(COLORS.blue, `Current branch: ${branch}`);
+
+    if (isProtectedBranch(branch)) {
+        log(COLORS.red, `\n❌ Cannot run Git Flow cycle on protected branch: ${branch}`);
+        log(COLORS.yellow, '\nCreate a feature branch first:');
+        log(COLORS.yellow, '  git checkout -b feature/my-feature');
+        process.exit(1);
+    }
+
+    if (!isValidFeatureBranch(branch)) {
+        log(COLORS.yellow, `\n⚠️  Branch '${branch}' doesn't follow naming convention`);
+        log(COLORS.yellow, 'Expected: feature/, fix/, hotfix/, chore/, docs/, refactor/, test/, ci/');
+        log(COLORS.yellow, '\nContinuing anyway...');
+    }
+
+    log(COLORS.green, '✅ Branch validation passed');
+    return branch;
+}
+
+function step2_commitChanges(commitMessage) {
+    log(COLORS.cyan, '\n═══════════════════════════════════════════════════════════════');
+    log(COLORS.cyan, '📝 Step 2: Commit Changes');
+    log(COLORS.cyan, '═══════════════════════════════════════════════════════════════\n');
+
+    if (!hasUncommittedChanges()) {
+        log(COLORS.green, '✅ No uncommitted changes');
+        return;
+    }
+
+    log(COLORS.yellow, '⚠️  Uncommitted changes detected');
+
+    if (!hasStagedChanges()) {
+        log(COLORS.blue, 'Staging all changes...');
+        exec('git add -A');
+    }
+
+    const message = commitMessage || `chore: auto-commit changes on ${getCurrentBranch()}`;
+    log(COLORS.blue, `Committing: ${message}`);
+    exec(`git commit -m "${message}"`);
+    log(COLORS.green, '✅ Changes committed');
+}
+
+function step3_pushToOrigin(branch) {
+    log(COLORS.cyan, '\n═══════════════════════════════════════════════════════════════');
+    log(COLORS.cyan, '🚀 Step 3: Push to Origin');
+    log(COLORS.cyan, '═══════════════════════════════════════════════════════════════\n');
+
+    log(COLORS.blue, `Pushing ${branch} to origin...`);
+    exec(`git push -u origin ${branch}`);
+    log(COLORS.green, '✅ Pushed to origin');
+}
+
+function step4_createPR(branch, baseBranch, prTitle, prBody) {
+    log(COLORS.cyan, '\n═══════════════════════════════════════════════════════════════');
+    log(COLORS.cyan, '📋 Step 4: Create Pull Request');
+    log(COLORS.cyan, '═══════════════════════════════════════════════════════════════\n');
+
+    if (!isGitHubCliAvailable()) {
+        log(COLORS.yellow, '⚠️  GitHub CLI (gh) not available or not authenticated');
+        log(COLORS.yellow, '   Install: https://cli.github.com/');
+        log(COLORS.yellow, '   Auth: gh auth login');
+        log(COLORS.yellow, '\n   Create PR manually at GitHub.');
+        return null;
+    }
+
+    if (prExists(branch)) {
+        log(COLORS.green, '✅ PR already exists for this branch');
+        const prUrl = execSilent(`gh pr view ${branch} --json url --jq .url`);
+        return prUrl;
+    }
+
+    const title = prTitle || execSilent('git log -1 --pretty=%s') || `Merge ${branch}`;
+    const body = prBody || `## Summary\nAutomated PR for ${branch}\n\n## Changes\n${execSilent(`git log --oneline origin/${baseBranch}..${branch}`) || '- Updates'}`;
+
+    log(COLORS.blue, `Creating PR: ${title}`);
+    log(COLORS.blue, `Base: ${baseBranch} ← Head: ${branch}`);
+
+    try {
+        const output = execSilent(`gh pr create --base ${baseBranch} --head ${branch} --title "${title}" --body "${body.replace(/"/g, '\\"')}"`);
+        if (output) {
+            const urlMatch = output.match(/https:\/\/github\.com\/.*\/pull\/\d+/);
+            const prUrl = urlMatch ? urlMatch[0] : output;
+            log(COLORS.green, `✅ PR created: ${prUrl}`);
+            return prUrl;
+        }
+    } catch (error) {
+        log(COLORS.red, `❌ Failed to create PR: ${error.message}`);
+    }
+
+    return null;
+}
+
+function step5_mergePR(prUrl, autoMerge) {
+    log(COLORS.cyan, '\n═══════════════════════════════════════════════════════════════');
+    log(COLORS.cyan, '🔀 Step 5: Merge Pull Request');
+    log(COLORS.cyan, '═══════════════════════════════════════════════════════════════\n');
+
+    if (!prUrl) {
+        log(COLORS.yellow, '⚠️  No PR URL available, skipping merge');
+        return false;
+    }
+
+    if (!autoMerge) {
+        log(COLORS.yellow, '⚠️  Auto-merge disabled. Merge PR manually.');
+        log(COLORS.blue, `   PR: ${prUrl}`);
+        return false;
+    }
+
+    log(COLORS.blue, 'Enabling auto-merge (squash)...');
+    try {
+        exec(`gh pr merge --auto --squash "${prUrl}"`, { ignoreError: true });
+        log(COLORS.green, '✅ Auto-merge enabled');
+        return true;
+    } catch (error) {
+        log(COLORS.yellow, '⚠️  Could not enable auto-merge (may require admin approval)');
+        return false;
+    }
+}
+
+function step6_cleanupBranches(baseBranch) {
+    log(COLORS.cyan, '\n═══════════════════════════════════════════════════════════════');
+    log(COLORS.cyan, '🧹 Step 6: Cleanup Merged Branches');
+    log(COLORS.cyan, '═══════════════════════════════════════════════════════════════\n');
+
+    // Fetch latest
+    exec('git fetch --prune', { silent: true, ignoreError: true });
+
+    const mergedBranches = getMergedBranches(baseBranch);
+
+    if (mergedBranches.length === 0) {
+        log(COLORS.green, '✅ No merged branches to clean');
+        return;
+    }
+
+    log(COLORS.blue, `Found ${mergedBranches.length} merged branches:`);
+    mergedBranches.forEach(b => log(COLORS.yellow, `   - ${b}`));
+
+    // Delete local merged branches
+    for (const branch of mergedBranches) {
+        log(COLORS.blue, `Deleting local: ${branch}`);
+        exec(`git branch -d "${branch}"`, { ignoreError: true, silent: true });
+    }
+
+    // Delete remote merged branches (if gh available)
+    if (isGitHubCliAvailable()) {
+        for (const branch of mergedBranches) {
+            log(COLORS.blue, `Deleting remote: origin/${branch}`);
+            exec(`git push origin --delete "${branch}"`, { ignoreError: true, silent: true });
+        }
+    }
+
+    log(COLORS.green, `✅ Cleaned ${mergedBranches.length} merged branches`);
+}
+
+function step7_syncBranches(baseBranch) {
+    log(COLORS.cyan, '\n═══════════════════════════════════════════════════════════════');
+    log(COLORS.cyan, '🔄 Step 7: Sync Branches');
+    log(COLORS.cyan, '═══════════════════════════════════════════════════════════════\n');
+
+    const currentBranch = getCurrentBranch();
+
+    log(COLORS.blue, 'Fetching from origin...');
+    exec('git fetch origin', { ignoreError: true, silent: true });
+
+    // Sync develop
+    if (execSilent('git show-ref --verify --quiet refs/heads/develop') !== null) {
+        log(COLORS.blue, 'Syncing develop...');
+        exec('git checkout develop && git pull origin develop', { ignoreError: true, silent: true });
+    }
+
+    // Sync main
+    log(COLORS.blue, 'Syncing main...');
+    exec('git checkout main && git pull origin main', { ignoreError: true, silent: true });
+
+    // Return to original branch
+    log(COLORS.blue, `Returning to ${currentBranch}...`);
+    exec(`git checkout ${currentBranch}`, { ignoreError: true, silent: true });
+
+    log(COLORS.green, '✅ Branches synchronized');
+}
+
+// ════════════════════════════════════════════════════════════════
+// MAIN
+// ════════════════════════════════════════════════════════════════
+
+function printUsage() {
+    console.log(`
+${COLORS.cyan}═══════════════════════════════════════════════════════════════
+🐈 Pumuki Git Flow Cycle
+═══════════════════════════════════════════════════════════════${COLORS.reset}
+
+${COLORS.blue}Usage:${COLORS.reset} npm run ast:gitflow [options]
+
+${COLORS.blue}Options:${COLORS.reset}
+  --commit-message, -m <msg>   Custom commit message
+  --pr-title <title>           Custom PR title
+  --auto-merge                 Enable auto-merge after PR creation
+  --skip-cleanup               Skip branch cleanup step
+  --skip-sync                  Skip branch sync step
+  --help, -h                   Show this help
+
+${COLORS.blue}Examples:${COLORS.reset}
+  npm run ast:gitflow
+  npm run ast:gitflow -- -m "feat: add new feature"
+  npm run ast:gitflow -- --auto-merge
+  npm run ast:gitflow -- --pr-title "My PR Title" --auto-merge
+
+${COLORS.blue}What it does:${COLORS.reset}
+  1. Validates branch (must be feature/, fix/, etc.)
+  2. Commits uncommitted changes
+  3. Pushes to origin
+  4. Creates PR (requires gh CLI)
+  5. Optionally auto-merges PR
+  6. Cleans up merged branches
+  7. Syncs local branches with remote
+
+${COLORS.yellow}⚠️  Requires:${COLORS.reset}
+  - Git repository
+  - GitHub CLI (gh) for PR operations: https://cli.github.com/
+`);
+}
+
+function parseArgs(args) {
+    const options = {
+        commitMessage: null,
+        prTitle: null,
+        prBody: null,
+        autoMerge: false,
+        skipCleanup: false,
+        skipSync: false,
+        help: false
+    };
+
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        switch (arg) {
+            case '--commit-message':
+            case '-m':
+                options.commitMessage = args[++i];
+                break;
+            case '--pr-title':
+                options.prTitle = args[++i];
+                break;
+            case '--pr-body':
+                options.prBody = args[++i];
+                break;
+            case '--auto-merge':
+                options.autoMerge = true;
+                break;
+            case '--skip-cleanup':
+                options.skipCleanup = true;
+                break;
+            case '--skip-sync':
+                options.skipSync = true;
+                break;
+            case '--help':
+            case '-h':
+                options.help = true;
+                break;
+        }
+    }
+
+    return options;
+}
+
+function main() {
+    const args = process.argv.slice(2);
+    const options = parseArgs(args);
+
+    if (options.help) {
+        printUsage();
+        process.exit(0);
+    }
+
+    log(COLORS.magenta, '\n🐈 Pumuki Git Flow Cycle - Starting...\n');
+
+    try {
+        // Step 1: Validate branch
+        const branch = step1_validateBranch();
+        const baseBranch = getBaseBranch();
+
+        // Step 2: Commit changes
+        step2_commitChanges(options.commitMessage);
+
+        // Step 3: Push to origin
+        step3_pushToOrigin(branch);
+
+        // Step 4: Create PR
+        const prUrl = step4_createPR(branch, baseBranch, options.prTitle, options.prBody);
+
+        // Step 5: Merge PR (optional)
+        step5_mergePR(prUrl, options.autoMerge);
+
+        // Step 6: Cleanup branches
+        if (!options.skipCleanup) {
+            step6_cleanupBranches(baseBranch);
+        }
+
+        // Step 7: Sync branches
+        if (!options.skipSync) {
+            step7_syncBranches(baseBranch);
+        }
+
+        log(COLORS.green, '\n═══════════════════════════════════════════════════════════════');
+        log(COLORS.green, '✅ Git Flow Cycle Complete!');
+        log(COLORS.green, '═══════════════════════════════════════════════════════════════\n');
+
+    } catch (error) {
+        log(COLORS.red, `\n❌ Git Flow Cycle failed: ${error.message}`);
+        process.exit(1);
+    }
+}
+
+main();