sonar-autofix 0.1.1 → 0.3.2

package/packages/git-client/index.js

@@ -1,371 +0,0 @@
-'use strict';
-
-var childProcess = require('node:child_process');
-var util = require('node:util');
-
-var execFile = util.promisify(childProcess.execFile);
-
-var DEFAULT_COMMIT_MESSAGE =
-    'fix(sonar): automatically resolve Sonar issues\n\nGenerated by sonar-autofix';
-
-class GitClient {
-  /**
-   * @param {object} [config]
-   * @param {object} [config.git]
-   * @param {string} [config.git.branch]
-   * @param {string} [config.git.token]
-   * @param {string} [config.git.username]
-   * @param {string} [config.git.remote='origin']
-   * @param {string} [cwd]
-   */
-  constructor(config, cwd) {
-    this.config = config || {};
-    this.config.git = this.config.git || {};
-
-    this.config.git.branch =
-        this.config.git.branch || 'sonar-autofix';
-
-    this.config.git.remote =
-        this.config.git.remote || 'origin';
-
-    this.cwd = cwd || process.cwd();
-  }
-
-  /**
-   * Get Git authentication token.
-   *
-   * Priority:
-   * 1. config.git.token
-   * 2. GITHUB_TOKEN
-   * 3. GH_TOKEN
-   * 4. GIT_TOKEN
-   *
-   * @returns {string|undefined}
-   */
-  _getToken() {
-    return (
-        this.config.git.token ||
-        process.env.GITHUB_TOKEN ||
-        process.env.GH_TOKEN ||
-        process.env.GIT_TOKEN
-    );
-  }
-
-  /**
-   * Get Git username.
-   *
-   * @returns {string}
-   */
-  _getUsername() {
-    return (
-        this.config.git.username ||
-        process.env.GIT_USERNAME ||
-        'x-access-token'
-    );
-  }
-
-  /**
-   * Execute git command.
-   *
-   * Authentication is supplied through environment variables,
-   * never as command-line arguments.
-   *
-   * @param {string[]} args
-   * @returns {Promise<string>}
-   */
-  async _execGit(args) {
-    try {
-      var env = Object.assign({}, process.env);
-
-      var token = this._getToken();
-
-      if (token) {
-        env.GIT_TERMINAL_PROMPT = '0';
-
-        /*
-         * GIT_ASKPASS prevents Git from prompting for credentials.
-         * The actual token is supplied through environment variables.
-         */
-        env.GIT_USERNAME = this._getUsername();
-        env.GIT_PASSWORD = token;
-
-        env.GIT_ASKPASS = 'git-askpass-helper';
-
-        /*
-         * This is handled by the shell-independent askpass mechanism
-         * below when the executable is available.
-         */
-      }
-
-      var result = await execFile('git', args, {
-        cwd: this.cwd,
-        env: env
-      });
-
-      return (result.stdout || '').trim();
-    } catch (err) {
-      var command = 'git ' + args.join(' ');
-      var stderr = (err.stderr || '').trim();
-
-      throw new Error(
-          'Git command failed: ' +
-          command +
-          (stderr ? '\n' + stderr : '')
-      );
-    }
-  }
-
-  /**
-   * Execute GitHub CLI command.
-   *
-   * Uses GH_TOKEN/GITHUB_TOKEN so gh never prompts interactively.
-   *
-   * @param {string[]} args
-   * @returns {Promise<string>}
-   */
-  async _execGh(args) {
-    try {
-      var env = Object.assign({}, process.env);
-      var token = this._getToken();
-
-      if (token) {
-        env.GH_TOKEN = token;
-        env.GITHUB_TOKEN = token;
-      }
-
-      /*
-       * Prevent gh from falling back to an interactive login.
-       */
-      env.GH_PROMPT_DISABLED = '1';
-
-      var result = await execFile('gh', args, {
-        cwd: this.cwd,
-        env: env
-      });
-
-      return (result.stdout || '').trim();
-    } catch (err) {
-      var stderr = (err.stderr || '').trim();
-
-      throw new Error(
-          'GitHub CLI command failed: ' +
-          ['gh'].concat(args).join(' ') +
-          (stderr ? '\n' + stderr : '')
-      );
-    }
-  }
-
-  /**
-   * Create and checkout a new branch.
-   *
-   * @param {string} [branchName]
-   * @returns {Promise<string>}
-   */
-  async createBranch(branchName) {
-    var branch = branchName || this.config.git.branch;
-
-    try {
-      await this._execGit(['checkout', '-b', branch]);
-    } catch (err) {
-      if (
-          err.message &&
-          err.message.indexOf('already exists') !== -1
-      ) {
-        await this._execGit(['checkout', branch]);
-      } else {
-        throw err;
-      }
-    }
-
-    return branch;
-  }
-
-  /**
-   * Checkout an existing branch.
-   *
-   * @param {string} branchName
-   * @returns {Promise<string>}
-   */
-  async checkout(branchName) {
-    if (!branchName) {
-      throw new Error('Branch name is required for checkout');
-    }
-
-    return this._execGit(['checkout', branchName]);
-  }
-
-  /**
-   * Stage all changes and commit.
-   *
-   * @param {string} [message]
-   * @returns {Promise<string>}
-   */
-  async commit(message) {
-    var commitMessage = message || DEFAULT_COMMIT_MESSAGE;
-
-    await this.stageAll();
-
-    return this._execGit([
-      'commit',
-      '-m',
-      commitMessage
-    ]);
-  }
-
-  /**
-   * Push branch to remote.
-   *
-   * @param {string} [branchName]
-   * @param {boolean} [force=false]
-   * @returns {Promise<string>}
-   */
-  async push(branchName, force) {
-    var branch = branchName || this.config.git.branch;
-    var remote = this.config.git.remote;
-
-    var args = ['push', remote, branch];
-
-    if (force) {
-      args.splice(1, 0, '--force');
-    }
-
-    return this._execGit(args);
-  }
-
-  /**
-   * Restore a file from HEAD.
-   *
-   * @param {string} filePath
-   * @returns {Promise<string>}
-   */
-  async restoreFile(filePath) {
-    if (!filePath) {
-      throw new Error(
-          'File path is required for restoreFile'
-      );
-    }
-
-    return this._execGit([
-      'checkout',
-      '--',
-      filePath
-    ]);
-  }
-
-  /**
-   * Git reset.
-   *
-   * @param {string} [mode='hard']
-   * @returns {Promise<string>}
-   */
-  async reset(mode) {
-    var resetMode = mode || 'hard';
-
-    return this._execGit([
-      'reset',
-      '--' + resetMode
-    ]);
-  }
-
-  /**
-   * Create a pull request using GitHub CLI.
-   *
-   * Authentication is provided through:
-   *   config.git.token
-   *   GITHUB_TOKEN
-   *   GH_TOKEN
-   *   GIT_TOKEN
-   *
-   * The token is passed through the environment and never
-   * appears in the command line.
-   *
-   * @param {string} title
-   * @param {string} body
-   * @param {string} [baseBranch='main']
-   * @returns {Promise<string>}
-   */
-  async createPullRequest(title, body, baseBranch) {
-    if (!title) {
-      throw new Error(
-          'Title is required for createPullRequest'
-      );
-    }
-
-    var token = this._getToken();
-
-    if (!token) {
-      throw new Error(
-          'GitHub authentication token is required. ' +
-          'Set GITHUB_TOKEN, GH_TOKEN, GIT_TOKEN, ' +
-          'or provide config.git.token.'
-      );
-    }
-
-    var base = baseBranch || 'main';
-
-    return this._execGh([
-      'pr',
-      'create',
-      '--title',
-      title,
-      '--body',
-      body || '',
-      '--base',
-      base
-    ]);
-  }
-
-  /**
-   * Get the current branch name.
-   *
-   * @returns {Promise<string>}
-   */
-  async getCurrentBranch() {
-    return this._execGit([
-      'rev-parse',
-      '--abbrev-ref',
-      'HEAD'
-    ]);
-  }
-
-  /**
-   * Check if working tree has changes.
-   *
-   * @returns {Promise<boolean>}
-   */
-  async hasChanges() {
-    var output = await this._execGit([
-      'status',
-      '--porcelain'
-    ]);
-
-    return output.length > 0;
-  }
-
-  /**
-   * Stage all changes.
-   *
-   * @returns {Promise<string>}
-   */
-  async stageAll() {
-    return this._execGit(['add', '-A']);
-  }
-
-  /**
-   * Get diff for a file or all files.
-   *
-   * @param {string} [filePath]
-   * @returns {Promise<string>}
-   */
-  async diff(filePath) {
-    var args = ['diff'];
-
-    if (filePath) {
-      args.push('--', filePath);
-    }
-
-    return this._execGit(args);
-  }
-}
-
-module.exports = GitClient;

package/packages/git-client/package.json

@@ -1,17 +0,0 @@
-{
-  "name": "@sonar-autofix/git-client",
-  "version": "0.0.1",
-  "description": "Git client for the Sonar Autofix tool",
-  "main": "index.js",
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
-  },
-  "keywords": [
-    "sonar",
-    "autofix",
-    "github",
-    "git"
-  ],
-  "author": "Sonar Autofix Team",
-  "license": "MIT"
-}

package/packages/github-action/action.yml

@@ -1,71 +0,0 @@
-name: 'Sonar Autofix'
-description: 'Automatically fix SonarQube/SonarCloud issues using LLMs'
-author: 'Sonar Autofix Team'
-
-inputs:
-  sonar-host:
-    description: 'SonarQube/SonarCloud host URL'
-    required: false
-    default: 'https://sonarcloud.io'
-  sonar-project:
-    description: 'Sonar project key'
-    required: true
-  sonar-token:
-    description: 'Sonar authentication token'
-    required: true
-  llm-provider:
-    description: 'LLM provider (lmstudio, openai, azure, anthropic, ollama, openrouter)'
-    required: false
-    default: 'lmstudio'
-  llm-endpoint:
-    description: 'LLM API endpoint URL'
-    required: true
-  llm-model:
-    description: 'LLM model name'
-    required: true
-  llm-api-key:
-    description: 'LLM API key'
-    required: false
-    default: ''
-  git-branch:
-    description: 'Branch name for autofix commits'
-    required: false
-    default: 'sonar-autofix'
-  max-iterations:
-    description: 'Maximum number of fix iterations'
-    required: false
-    default: '5'
-  max-retries:
-    description: 'Maximum retries per file fix'
-    required: false
-    default: '3'
-  dry-run:
-    description: 'Run without making changes'
-    required: false
-    default: 'false'
-  build-commands:
-    description: 'Build commands (JSON array)'
-    required: false
-    default: '["npm run build"]'
-  lint-commands:
-    description: 'Lint commands (JSON array)'
-    required: false
-    default: '["npm run lint"]'
-  test-commands:
-    description: 'Test commands (JSON array)'
-    required: false
-    default: '["npm test"]'
-
-outputs:
-  files-fixed:
-    description: 'Number of files fixed'
-  iterations:
-    description: 'Number of iterations performed'
-
-runs:
-  using: 'node20'
-  main: 'index.js'
-
-branding:
-  icon: 'check-circle'
-  color: 'green'

package/packages/github-action/index.js

@@ -1,86 +0,0 @@
-// GitHub Action entry point for Sonar Autofix
-const CoreOrchestrator = require('@sonar-autofix/core');
-
-/**
- * Read a GitHub Action input value.
- * In a real GitHub Actions environment, inputs are exposed as INPUT_<NAME> environment variables.
- */
-function getInput(name, required = false) {
-  const envKey = `INPUT_${name.replace(/-/g, '_').toUpperCase()}`;
-  const value = process.env[envKey] || '';
-  if (required && !value) {
-    throw new Error(`Missing required input: ${name}`);
-  }
-  return value;
-}
-
-/**
- * Set a GitHub Action output value.
- */
-function setOutput(name, value) {
-  if (process.env.GITHUB_OUTPUT) {
-    const fs = require('fs');
-    fs.appendFileSync(process.env.GITHUB_OUTPUT, `${name}=${value}\n`);
-  } else {
-    console.log(`::set-output name=${name}::${value}`);
-  }
-}
-
-/**
- * GitHub Action entry point
- */
-async function run() {
-  console.log('Sonar Autofix GitHub Action');
-  console.log('===================================');
-
-  try {
-    // Read action inputs (from action.yml)
-    const config = {
-      sonar: {
-        host: getInput('sonar-host') || 'https://sonarcloud.io',
-        project: getInput('sonar-project', true),
-        token: getInput('sonar-token', true),
-      },
-      llm: {
-        provider: getInput('llm-provider') || 'lmstudio',
-        endpoint: getInput('llm-endpoint', true),
-        model: getInput('llm-model', true),
-        apiKey: getInput('llm-api-key') || undefined,
-      },
-      git: {
-        branch: getInput('git-branch') || 'sonar-autofix',
-      },
-      retry: {
-        maxIterations: parseInt(getInput('max-iterations') || '5', 10),
-        maxRetries: parseInt(getInput('max-retries') || '3', 10),
-      },
-      validation: {
-        build: JSON.parse(getInput('build-commands') || '["npm run build"]'),
-        lint: JSON.parse(getInput('lint-commands') || '["npm run lint"]'),
-        tests: JSON.parse(getInput('test-commands') || '["npm test"]'),
-      },
-      dryRun: getInput('dry-run') === 'true',
-    };
-
-    const orchestrator = new CoreOrchestrator(config);
-
-    console.log('🚀 Starting Sonar Autofix GitHub Action...');
-    const summary = await orchestrator.run();
-
-    // Set outputs
-    setOutput('files-fixed', summary.totalFixed);
-    setOutput('iterations', summary.iterations);
-
-    console.log('✅ Done!');
-  } catch (error) {
-    console.error(`::error::${error.message}`);
-    process.exit(1);
-  }
-}
-
-// Run the GitHub Action if this file is executed directly
-if (require.main === module) {
-  run();
-}
-
-module.exports = { run };

package/packages/github-action/package.json

@@ -1,17 +0,0 @@
-{
-  "name": "@sonar-autofix/github-action",
-  "version": "0.0.1",
-  "description": "GitHub Action wrapper for the Sonar Autofix tool",
-  "main": "index.js",
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
-  },
-  "keywords": [
-    "sonar",
-    "autofix",
-    "github",
-    "action"
-  ],
-  "author": "Sonar Autofix Team",
-  "license": "MIT"
-}