pushci 1.3.0 → 1.3.1

package/README.md

@@ -61,8 +61,9 @@ PushCI includes an MCP server for AI coding agents like **Claude Code**, **Curso
 
 ## Supported
 
-**19 Languages**: Go, Node/TS, Python, Rust, Java, C#,
-Ruby, PHP, Swift, Dart, Elixir, Zig, Docker +more
+**33 Languages**: Go, Node/TS, Python, Rust, Java, C#,
+Ruby, PHP, Swift, Dart, Elixir, Zig, Scala, Haskell,
+Kotlin, Lua, Perl, R, Julia, OCaml, Nim, Crystal +more
 
 **40+ Frameworks**: Next.js, Nuxt, SvelteKit, Django, FastAPI,
 Flask, Spring Boot, Rails, Laravel, Phoenix, Flutter +more
@@ -103,44 +104,235 @@ Supported platforms:
 ## Commands
 
 ```
-pushci init        Scan repo, generate config, install hooks
-pushci run         Run full CI pipeline locally
-pushci deploy      Deploy to configured target
-pushci diagnose    AI-diagnose failed runs
-pushci status      Show last run results
-pushci secret      Manage encrypted secrets
-pushci heal        AI-powered pipeline auto-fix
-pushci ask         Natural language CI commands
-pushci generate    AI-generate pushci.yml
-pushci migrate     Convert GitHub Actions workflow
-pushci mcp         Start MCP server for AI agents
-pushci agent       Start webhook server (GitHub/GitLab/BB)
-pushci login       Authenticate with PushCI (Pro)
-pushci logout      Remove saved credentials
-pushci doctor      Check environment health
+pushci init         Detect stack and generate pushci.yml
+pushci run          Execute pipeline checks
+pushci deploy       Deploy to target environment
+pushci diagnose     AI-diagnose failed runs
+pushci status       Show last run results
+pushci secret       Manage encrypted secrets
+pushci heal         AI self-heal broken pipeline
+pushci ask          Natural language CI commands
+pushci generate     AI-generate pushci.yml
+pushci migrate      Convert GitHub Actions workflow
+pushci mcp          Start MCP server for AI agents
+pushci agent        Start webhook agent server
+pushci index        Build dependency graph for blast radius
+pushci skill        Install/list/remove marketplace skills
+pushci login        Authenticate with PushCI (Pro)
+pushci logout       Remove saved credentials
+pushci doctor       Check environment health
 pushci troubleshoot Diagnose issues with actionable fixes
-pushci version     Print version
+pushci trace        View Perfetto performance traces
+pushci release      Build & publish release locally ($0)
+pushci promote      Register with AI registries
+pushci uninstall    Remove hooks, config, and .pushci
+pushci version      Print version
 ```
 
 See [docs/CLI.md](docs/CLI.md) for the full CLI reference with flags, examples, and plan requirements.
 
 ## Configuration
 
-Optional `pushci.yml`:
+`pushci.yml` is optional — `pushci init` generates one that works, and
+zero-config mode auto-detects your stack. When you want more control,
+PushCI supports three authoring styles. Full reference is at
+[pushci.dev/docs/pushci-yaml](https://pushci.dev/docs/pushci-yaml).
+
+### Simple example
+
+Zero-config Node.js app with linear stages, single-target deploy on
+`main`, and Slack notifications. Drop this into your repo as
+`pushci.yml` and run `pushci run`.
 
 ```yaml
 on: [push, pull_request]
-checks:
-  - build
-  - test
-  - lint
-  - line-limit: 100
+
+stages:
+  - name: install
+    checks:
+      - name: deps
+        run: pnpm install --frozen-lockfile
+
+  - name: lint
+    depends_on: [install]
+    checks:
+      - name: eslint
+        run: pnpm lint
+
+  - name: test
+    depends_on: [install]
+    checks:
+      - name: vitest
+        run: pnpm test
+
+  - name: build
+    depends_on: [install, lint, test]
+    checks:
+      - name: next-build
+        run: pnpm build
+
+deploy:
+  trigger: push
+  only_on: [main]
+  run: npx wrangler pages deploy dist --project-name=my-app
+
+notify:
+  slack: "${{ secrets.SLACK_WEBHOOK }}"
+```
+
+### Complex example — every feature
+
+Parallel stages, cross-stage DAG, conditional checks, retries,
+timeouts, Docker-isolated steps, multi-environment staged deploy with
+an approval gate on production, and stage-scoped secrets.
+
+```yaml
+on: [push, pull_request, workflow_dispatch]
+
+stages:
+  - name: install
+    checks:
+      - name: pnpm-install
+        run: pnpm install --frozen-lockfile
+        retry: 2
+        timeout: 3m
+
+  - name: quality
+    depends_on: [install]
+    parallel: true            # every check runs concurrently
+    env:
+      NODE_ENV: test
+    checks:
+      - name: typecheck
+        run: pnpm tsc --noEmit
+      - name: lint
+        run: pnpm lint
+      - name: format
+        run: pnpm prettier --check .
+      - name: audit
+        run: pnpm audit --audit-level=high
+        on_fail: warn         # log but don't fail the stage
+
+  - name: test
+    depends_on: [install]
+    parallel: true
+    env:
+      DATABASE_URL: postgres://test:test@localhost:5432/test
+    checks:
+      - name: unit
+        run: pnpm test:unit --coverage
+      - name: integration
+        run: pnpm test:integration
+        retry: 1
+        timeout: 5m
+      - name: e2e
+        if: branch == 'main' || branch =~ '^release/'
+        run: pnpm test:e2e
+        docker: mcr.microsoft.com/playwright:v1.49.0-focal
+        timeout: 10m
+
+  - name: security
+    depends_on: [install]
+    checks:
+      - name: secret-scan
+        run: npx gitleaks detect --no-git
+      - name: sast
+        run: pushci scan --engine claude --fail-on high
+
+  - name: build
+    depends_on: [quality, test, security]
+    checks:
+      - name: next-build
+        run: pnpm build
+      - name: bundle-size
+        run: npx size-limit
+        line-limit: 10
+
 deploy:
-  target: cloudflare-pages
-  trigger: merge to main
+  trigger: push
+  environments:
+    - name: staging
+      only_on: [develop]
+      run: npx wrangler pages deploy dist --project-name=app-staging
+      env:
+        CF_API_TOKEN: "${{ secrets.CF_API_TOKEN_STAGING }}"
+    - name: production
+      only_on: [main]
+      approve: true           # requires interactive approval
+      run: npx wrangler pages deploy dist --project-name=app-prod
+      env:
+        CF_API_TOKEN: "${{ secrets.CF_API_TOKEN_PROD }}"
+
+notify:
+  slack: "${{ secrets.SLACK_WEBHOOK }}"
+  discord: "${{ secrets.DISCORD_WEBHOOK }}"
+  email: oncall@example.com
+```
+
+### GitHub Actions parity — no rewrite needed
+
+PushCI v1.3.1+ runs your existing `.github/workflows/*.yml` files
+end-to-end via the embedded [nektos/act](https://github.com/nektos/act)
+runtime. `actions/checkout@v4`, matrix builds, service containers,
+composite actions, secret masking, `needs.*.outputs.*` — all work.
+Just drop in a workflow and run:
+
+```bash
+pushci actions run                 # runs all .github/workflows/*.yml
+pushci actions run --job test      # run one job
+pushci actions run --dry-run       # validate without containers
+pushci actions doctor              # check act + docker + workflow status
+```
+
+A real complex workflow that runs unchanged:
+
+```yaml
+name: CI
+on: [push, pull_request]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node: [20, 22]
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_PASSWORD: test
+        ports: ['5432:5432']
+        options: >-
+          --health-cmd pg_isready --health-interval 10s
+          --health-timeout 5s --health-retries 5
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node }}
+      - run: npm ci
+      - run: npm test
+        env:
+          DATABASE_URL: postgres://postgres:test@localhost:5432/postgres
+      - id: coverage
+        run: echo "pct=$(npm test --silent)" >> $GITHUB_OUTPUT
+    outputs:
+      coverage: ${{ steps.coverage.outputs.pct }}
+
+  deploy:
+    needs: test
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v4
+      - name: Deploy
+        run: echo "coverage was ${{ needs.test.outputs.coverage }}"
+        env:
+          CF_API_TOKEN: ${{ secrets.CF_API_TOKEN }}
 ```
 
-Or just run `pushci init` — AI figures everything out.
+Or just run `pushci init` — PushCI figures everything out automatically.
 
 ## Git Hook
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pushci",
-  "version": "1.3.0",
-  "description": "AI-native CI/CD that runs on your machine. Zero config, zero cost. 19 languages, 69 skills, Tailscale mesh, blast radius analysis.",
+  "version": "1.3.1",
+  "description": "AI-native CI/CD that runs on your machine. Zero config, zero cost. 33 languages, 69 skills, Tailscale mesh, blast radius analysis.",
   "bin": {
     "pushci": "bin/pushci.js"
   },