thuban 0.3.2 → 0.3.4

package/packages/scanner/pre-commit-gate.js

@@ -1,216 +0,0 @@
-/**
- * Thuban Pre-Commit Gate
- *
- * @purpose 3-second critical scan on staged files — blocks commits with hallucinations
- * @module thuban
- * @layer scanner
- * @exports-to cli
- * @critical-for Revenue retention — stickiest feature, devs never remove it
- */
-
-const fs = require('fs');
-const path = require('path');
-const { execSync } = require('child_process');
-
-class PreCommitGate {
-  constructor(opts = {}) {
-    this.rootPath = opts.rootPath || process.cwd();
-    this.strict = opts.strict !== false; // Block commit on critical issues
-    this.timeout = opts.timeout || 5000; // 5 second max
-  }
-
-  /**
-   * Get staged files from git
-   */
-  getStagedFiles() {
-    try {
-      const output = execSync('git diff --cached --name-only --diff-filter=ACM', {
-        cwd: this.rootPath,
-        encoding: 'utf-8',
-        timeout: 3000,
-      });
-      const extensions = ['.js', '.ts', '.jsx', '.tsx', '.py', '.mjs', '.cjs'];
-      return output
-        .split('\n')
-        .filter(f => f.trim() && extensions.some(ext => f.endsWith(ext)))
-        .map(f => path.resolve(this.rootPath, f.trim()));
-    } catch (e) {
-      return [];
-    }
-  }
-
-  /**
-   * Quick hallucination check on a single file
-   */
-  checkFile(filePath) {
-    const issues = [];
-    let content;
-    try {
-      const stat = fs.statSync(filePath);
-      if (stat.size > 512 * 1024) return issues; // Skip files > 512KB
-      content = fs.readFileSync(filePath, 'utf-8');
-    } catch (e) {
-      return issues;
-    }
-
-    const lines = content.split('\n');
-    const relPath = path.relative(this.rootPath, filePath);
-
-    // Phantom API patterns — APIs that don't exist but AI commonly generates
-    const phantomAPIs = [
-      { pattern: /\bJSON\.tryParse\s*\(/g, name: 'JSON.tryParse()', fix: 'Use JSON.parse() with try/catch' },
-      { pattern: /\bArray\.flatten\s*\(/g, name: 'Array.flatten()', fix: 'Use Array.flat()' },
-      { pattern: /\bconsole\.success\s*\(/g, name: 'console.success()', fix: 'Use console.log()' },
-      { pattern: /\bconsole\.fail\s*\(/g, name: 'console.fail()', fix: 'Use console.error()' },
-      { pattern: /\bfs\.readFileAsync\s*\(/g, name: 'fs.readFileAsync()', fix: 'Use fs.promises.readFile()' },
-      { pattern: /\bfs\.writeFileAsync\s*\(/g, name: 'fs.writeFileAsync()', fix: 'Use fs.promises.writeFile()' },
-      { pattern: /\bfs\.existsAsync\s*\(/g, name: 'fs.existsAsync()', fix: 'Use fs.promises.access()' },
-      { pattern: /\bObject\.deepClone\s*\(/g, name: 'Object.deepClone()', fix: 'Use structuredClone() or JSON.parse(JSON.stringify())' },
-      { pattern: /\bString\.prototype\.contains\s*\(/g, name: 'String.contains()', fix: 'Use String.includes()' },
-      { pattern: /\bPromise\.delay\s*\(/g, name: 'Promise.delay()', fix: 'Use new Promise(r => setTimeout(r, ms))' },
-      { pattern: /\bprocess\.exit\s*\(\s*["'].*["']\s*\)/g, name: 'process.exit(string)', fix: 'process.exit() takes a number, not a string' },
-      { pattern: /\brequire\s*\(\s*['"]node:(?:fetch|axios)['"]s*\)/g, name: 'require("node:fetch")', fix: 'fetch is global in Node 18+, or use node-fetch package' },
-      { pattern: /\.validateSync\s*\(/g, name: '.validateSync()', fix: 'Check if this method exists on the object — AI commonly invents Sync variants' },
-      { pattern: /\bBuffer\.from\s*\(.*,\s*['"]base64url['"]\)/g, name: 'Buffer.from(x, "base64url")', fix: 'Use "base64" encoding, not "base64url"' },
-      { pattern: /\bresponse\.json\s*\(\s*{/g, name: 'response.json({...})', fix: 'res.json() takes data, but check you\'re not confusing fetch Response.json() (no args) with Express res.json()' },
-    ];
-
-    // Skip if this looks like a pattern definition file
-    const patternDefLines = lines.filter(l => /pattern:\s*\//.test(l)).length;
-    if (patternDefLines > 5) return issues;
-
-    for (const api of phantomAPIs) {
-      for (let i = 0; i < lines.length; i++) {
-        const line = lines[i];
-        // Skip comments and pattern definitions
-        if (/^\s*(\/\/|\/\*|\*|#|pattern:|name:|suggestion:|message:)/.test(line)) continue;
-        if (/thuban-ignore/.test(line)) continue;
-
-        if (api.pattern.test(line)) {
-          issues.push({
-            file: relPath,
-            line: i + 1,
-            severity: 'critical',
-            code: line.trim(),
-            message: `${api.name} — this API does not exist`,
-            fix: api.fix,
-          });
-        }
-        // Reset regex lastIndex
-        api.pattern.lastIndex = 0;
-      }
-    }
-
-    return issues;
-  }
-
-  /**
-   * Run the gate check on all staged files
-   */
-  run() {
-    const startTime = Date.now();
-    const stagedFiles = this.getStagedFiles();
-
-    if (stagedFiles.length === 0) {
-      return {
-        passed: true,
-        files: 0,
-        issues: [],
-        elapsed: Date.now() - startTime,
-        message: 'No staged files to check',
-      };
-    }
-
-    const allIssues = [];
-    for (const file of stagedFiles) {
-      if (Date.now() - startTime > this.timeout) break; // Respect timeout
-      const fileIssues = this.checkFile(file);
-      allIssues.push(...fileIssues);
-    }
-
-    const criticals = allIssues.filter(i => i.severity === 'critical');
-    const passed = this.strict ? criticals.length === 0 : true;
-
-    return {
-      passed,
-      files: stagedFiles.length,
-      issues: allIssues,
-      criticals: criticals.length,
-      elapsed: Date.now() - startTime,
-      message: passed
-        ? `${stagedFiles.length} files checked. All clear.`
-        : `BLOCKED: ${criticals.length} critical issue${criticals.length > 1 ? 's' : ''} found in staged files.`,
-    };
-  }
-
-  /**
-   * Install the git pre-commit hook
-   */
-  static install(rootPath = process.cwd()) {
-    const gitDir = path.join(rootPath, '.git');
-    if (!fs.existsSync(gitDir)) {
-      return { success: false, error: 'Not a git repository' };
-    }
-
-    const hooksDir = path.join(gitDir, 'hooks');
-    if (!fs.existsSync(hooksDir)) {
-      fs.mkdirSync(hooksDir, { recursive: true });
-    }
-
-    const hookPath = path.join(hooksDir, 'pre-commit');
-    const hookContent = `#!/bin/sh
-# Thuban Pre-Commit Gate — blocks commits with hallucinated APIs
-# Remove this file to disable, or run: thuban gate --uninstall
-
-npx --yes thuban gate --ci 2>&1
-exit $?
-`;
-
-    // Check if hook already exists
-    if (fs.existsSync(hookPath)) {
-      const existing = fs.readFileSync(hookPath, 'utf-8');
-      if (existing.includes('thuban gate')) {
-        return { success: true, message: 'Thuban gate already installed' };
-      }
-      // Append to existing hook
-      fs.appendFileSync(hookPath, '\n' + hookContent);
-    } else {
-      fs.writeFileSync(hookPath, hookContent);
-    }
-
-    // Make executable on Unix
-    try { fs.chmodSync(hookPath, '755'); } catch (e) { /* Windows */ }
-
-    return { success: true, message: 'Pre-commit hook installed' };
-  }
-
-  /**
-   * Uninstall the git pre-commit hook
-   */
-  static uninstall(rootPath = process.cwd()) {
-    const hookPath = path.join(rootPath, '.git', 'hooks', 'pre-commit');
-    if (!fs.existsSync(hookPath)) {
-      return { success: true, message: 'No pre-commit hook found' };
-    }
-
-    const content = fs.readFileSync(hookPath, 'utf-8');
-    if (content.includes('thuban gate')) {
-      // Remove thuban lines
-      const cleaned = content
-        .split('\n')
-        .filter(l => !l.includes('thuban') && !l.includes('Thuban'))
-        .join('\n')
-        .trim();
-
-      if (cleaned.length < 10) {
-        fs.unlinkSync(hookPath);
-      } else {
-        fs.writeFileSync(hookPath, cleaned + '\n');
-      }
-    }
-
-    return { success: true, message: 'Thuban gate uninstalled' };
-  }
-}
-
-module.exports = PreCommitGate;