Pre Merge Checklist

#!/usr/bin/env bash
# accessibility-check.sh — Run axe-core accessibility scan against the application.
#
# Usage:
#   ./accessibility-check.sh [--output-dir <dir>] [--url <url>] [--pages <file>]
#
# Options:
#   --output-dir <dir>   Directory to write results (default: ./check-results)
#   --url <url>          Base URL to scan (default: http://localhost:3000)
#   --pages <file>       File with list of page paths to scan (one per line)
#
# Prerequisites:
#   npm install -g @axe-core/cli
#   # or use npx: npx @axe-core/cli

set -uo pipefail

# ─── Defaults ───────────────────────────────────────────────────────────────────
OUTPUT_DIR="./check-results"
BASE_URL="http://localhost:3000"
PAGES_FILE=""

# Default pages to scan if no pages file is provided
DEFAULT_PAGES=(
    "/"
    "/login"
    "/users"
    "/settings"
)

# ─── Parse arguments ────────────────────────────────────────────────────────────
while [[ $# -gt 0 ]]; do
    case "$1" in
        --output-dir)
            OUTPUT_DIR="$2"
            shift 2
            ;;
        --url)
            BASE_URL="$2"
            shift 2
            ;;
        --pages)
            PAGES_FILE="$2"
            shift 2
            ;;
        -h|--help)
            echo "Usage: $0 [--output-dir <dir>] [--url <url>] [--pages <file>]"
            echo ""
            echo "Options:"
            echo "  --output-dir <dir>   Directory for results (default: ./check-results)"
            echo "  --url <url>          Base URL to scan (default: http://localhost:3000)"
            echo "  --pages <file>       File listing page paths to scan (one per line)"
            exit 0
            ;;
        *)
            echo "Unknown option: $1" >&2
            exit 1
            ;;
    esac
done

# ─── Setup ───────────────────────────────────────────────────────────────────────
mkdir -p "$OUTPUT_DIR"
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
RESULTS_FILE="$OUTPUT_DIR/accessibility-report-${TIMESTAMP}.txt"
JSON_FILE="$OUTPUT_DIR/accessibility-report-${TIMESTAMP}.json"
OVERALL_EXIT=0
TOTAL_VIOLATIONS=0

echo "=== Accessibility Check (axe-core) ==="
echo "Base URL:         ${BASE_URL}"
echo "Output directory: ${OUTPUT_DIR}"
echo ""

# ─── Determine pages to scan ─────────────────────────────────────────────────────
PAGES=()
if [[ -n "$PAGES_FILE" && -f "$PAGES_FILE" ]]; then
    while IFS= read -r line; do
        [[ -z "$line" || "$line" == \#* ]] && continue
        PAGES+=("$line")
    done < "$PAGES_FILE"
else
    PAGES=("${DEFAULT_PAGES[@]}")
fi

echo "Pages to scan: ${#PAGES[@]}"
echo "Timestamp: $(date -Iseconds)" > "$RESULTS_FILE"
echo "Base URL: ${BASE_URL}" >> "$RESULTS_FILE"
echo "" >> "$RESULTS_FILE"

# ─── Check if axe CLI is available ───────────────────────────────────────────────
if ! command -v axe &> /dev/null && ! npx @axe-core/cli --version &> /dev/null 2>&1; then
    echo "WARNING: axe-core CLI not found. Install with: npm install -g @axe-core/cli"
    echo "Falling back to Playwright-based accessibility check..."

    # Fallback: use Playwright with @axe-core/playwright
    echo "Running Playwright accessibility tests..."
    npx playwright test --grep accessibility 2>&1 | tee -a "$RESULTS_FILE"
    OVERALL_EXIT=$?

    if [[ $OVERALL_EXIT -eq 0 ]]; then
        echo "PASS: Accessibility checks passed (Playwright fallback)."
    else
        echo "FAIL: Accessibility violations found. See ${RESULTS_FILE}"
    fi
    exit $OVERALL_EXIT
fi

# ─── Scan each page ──────────────────────────────────────────────────────────────
ALL_RESULTS="["

for page_path in "${PAGES[@]}"; do
    full_url="${BASE_URL}${page_path}"
    echo "Scanning: ${full_url}"
    echo "─── ${full_url} ───" >> "$RESULTS_FILE"

    PAGE_JSON="$OUTPUT_DIR/axe-page-${TIMESTAMP}.json"
    PAGE_EXIT=0

    # Run axe-core scan
    npx @axe-core/cli "${full_url}" \
        --save "${PAGE_JSON}" \
        --stdout \
        2>&1 | tee -a "$RESULTS_FILE" || PAGE_EXIT=$?

    if [[ $PAGE_EXIT -ne 0 ]]; then
        OVERALL_EXIT=1
        echo "  VIOLATIONS FOUND on ${page_path}" >> "$RESULTS_FILE"
    else
        echo "  PASS: ${page_path}" >> "$RESULTS_FILE"
    fi

    # Collect results
    if [[ -f "$PAGE_JSON" ]]; then
        # Count violations
        violations=$(python3 -c "
import json, sys
try:
    data = json.load(open('${PAGE_JSON}'))
    violations = data.get('violations', []) if isinstance(data, dict) else []
    print(len(violations))
except Exception:
    print(0)
" 2>/dev/null || echo "0")
        TOTAL_VIOLATIONS=$((TOTAL_VIOLATIONS + violations))
    fi

    echo "" >> "$RESULTS_FILE"
done

# ─── Summary ─────────────────────────────────────────────────────────────────────
echo ""
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "ACCESSIBILITY SUMMARY"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "Pages scanned:     ${#PAGES[@]}"
echo "Total violations:  ${TOTAL_VIOLATIONS}"

echo "" >> "$RESULTS_FILE"
echo "SUMMARY:" >> "$RESULTS_FILE"
echo "Pages scanned: ${#PAGES[@]}" >> "$RESULTS_FILE"
echo "Total violations: ${TOTAL_VIOLATIONS}" >> "$RESULTS_FILE"

if [[ $OVERALL_EXIT -eq 0 && $TOTAL_VIOLATIONS -eq 0 ]]; then
    echo "OVERALL: PASS"
    echo "Status: PASS" >> "$RESULTS_FILE"
else
    echo "OVERALL: FAIL — ${TOTAL_VIOLATIONS} violation(s) found."
    echo "Status: FAIL" >> "$RESULTS_FILE"
    echo "Review details in: ${RESULTS_FILE}"
    OVERALL_EXIT=1
fi

echo "Full report: ${RESULTS_FILE}"
exit $OVERALL_EXIT

#!/usr/bin/env bash
# run-all-checks.sh — Orchestrate all pre-merge checks with pass/fail reporting.
#
# Usage:
#   ./run-all-checks.sh [--output-dir <dir>]
#
# Options:
#   --output-dir <dir>   Directory to write results (default: ./check-results)
#
# Runs in order: linting, type checking, tests, coverage, security scan.
# Continues through all checks even if one fails, then reports overall status.

set -uo pipefail

# ─── Defaults ───────────────────────────────────────────────────────────────────
OUTPUT_DIR="./check-results"

# ─── Parse arguments ────────────────────────────────────────────────────────────
while [[ $# -gt 0 ]]; do
    case "$1" in
        --output-dir)
            OUTPUT_DIR="$2"
            shift 2
            ;;
        -h|--help)
            echo "Usage: $0 [--output-dir <dir>]"
            exit 0
            ;;
        *)
            echo "Unknown option: $1" >&2
            exit 1
            ;;
    esac
done

# ─── Setup ───────────────────────────────────────────────────────────────────────
mkdir -p "$OUTPUT_DIR"
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
REPORT_FILE="$OUTPUT_DIR/all-checks-${TIMESTAMP}.txt"
FAILED_CHECKS=()
PASSED_CHECKS=()

# ─── Helper: run a check and record result ───────────────────────────────────────
run_check() {
    local name="$1"
    shift
    local cmd="$*"

    echo ""
    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
    echo "CHECK: ${name}"
    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"

    local check_file="$OUTPUT_DIR/${name// /-}-${TIMESTAMP}.txt"
    local exit_code=0

    eval "$cmd" 2>&1 | tee "$check_file" || exit_code=$?

    if [[ $exit_code -eq 0 ]]; then
        echo "RESULT: PASS"
        PASSED_CHECKS+=("$name")
        echo "PASS: ${name}" >> "$REPORT_FILE"
    else
        echo "RESULT: FAIL (exit code: ${exit_code})"
        FAILED_CHECKS+=("$name")
        echo "FAIL: ${name}" >> "$REPORT_FILE"
    fi

    return 0  # Always continue to next check
}

# ─── Header ──────────────────────────────────────────────────────────────────────
echo "=== Pre-Merge Check Suite ==="
echo "Output directory: ${OUTPUT_DIR}"
echo "Timestamp: $(date -Iseconds)"
echo ""
echo "Timestamp: $(date -Iseconds)" > "$REPORT_FILE"
echo "Output directory: ${OUTPUT_DIR}" >> "$REPORT_FILE"
echo "" >> "$REPORT_FILE"

# ─── 1. Python Linting (ruff) ────────────────────────────────────────────────────
run_check "python-lint" "ruff check app/ tests/ 2>&1; ruff format --check app/ tests/ 2>&1"

# ─── 2. TypeScript/React Linting (eslint + prettier) ─────────────────────────────
run_check "ts-lint" "npx eslint 'src/**/*.{ts,tsx}' --max-warnings 0 2>&1; npx prettier --check 'src/**/*.{ts,tsx}' 2>&1"

# ─── 3. Python Type Checking (mypy) ──────────────────────────────────────────────
run_check "python-types" "mypy app/ --strict --no-error-summary 2>&1"

# ─── 4. TypeScript Type Checking (tsc) ───────────────────────────────────────────
run_check "ts-types" "npx tsc --noEmit 2>&1"

# ─── 5. Python Tests ─────────────────────────────────────────────────────────────
run_check "python-tests" "pytest tests/ -q --tb=short 2>&1"

# ─── 6. React Tests ──────────────────────────────────────────────────────────────
run_check "react-tests" "npm test -- --run --reporter=verbose 2>&1"

# ─── 7. Python Coverage ──────────────────────────────────────────────────────────
run_check "python-coverage" "pytest --cov=app --cov-report=term-missing --cov-fail-under=80 -q 2>&1"

# ─── 8. Dependency Security (pip-audit + npm audit) ───────────────────────────────
run_check "dep-security" "pip-audit --requirement requirements.txt 2>&1; npm audit --audit-level=high 2>&1"

# ─── Summary ─────────────────────────────────────────────────────────────────────
echo ""
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "SUMMARY"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"

echo "" >> "$REPORT_FILE"
echo "SUMMARY:" >> "$REPORT_FILE"

TOTAL=$((${#PASSED_CHECKS[@]} + ${#FAILED_CHECKS[@]}))
echo "Total checks: ${TOTAL}"
echo "Passed:       ${#PASSED_CHECKS[@]}"
echo "Failed:       ${#FAILED_CHECKS[@]}"

echo "Total: ${TOTAL}" >> "$REPORT_FILE"
echo "Passed: ${#PASSED_CHECKS[@]}" >> "$REPORT_FILE"
echo "Failed: ${#FAILED_CHECKS[@]}" >> "$REPORT_FILE"

if [[ ${#PASSED_CHECKS[@]} -gt 0 ]]; then
    echo ""
    echo "Passed checks:"
    for check in "${PASSED_CHECKS[@]}"; do
        echo "  [PASS] ${check}"
    done
fi

if [[ ${#FAILED_CHECKS[@]} -gt 0 ]]; then
    echo ""
    echo "Failed checks:"
    for check in "${FAILED_CHECKS[@]}"; do
        echo "  [FAIL] ${check}"
    done
    echo ""
    echo "OVERALL: FAIL"
    echo "Overall: FAIL" >> "$REPORT_FILE"
    echo "Full report: ${REPORT_FILE}"
    exit 1
else
    echo ""
    echo "OVERALL: PASS"
    echo "Overall: PASS" >> "$REPORT_FILE"
    echo "Full report: ${REPORT_FILE}"
    exit 0
fi

#!/usr/bin/env bash
# type-check.sh — Run Python (mypy --strict) and TypeScript (tsc --noEmit) type checks.
#
# Usage:
#   ./type-check.sh [--output-dir <dir>] [--python-only] [--ts-only]
#
# Options:
#   --output-dir <dir>   Directory to write results (default: ./check-results)
#   --python-only        Run only Python type checking (mypy)
#   --ts-only            Run only TypeScript type checking (tsc)

set -uo pipefail

# ─── Defaults ───────────────────────────────────────────────────────────────────
OUTPUT_DIR="./check-results"
RUN_PYTHON=true
RUN_TS=true

# ─── Parse arguments ────────────────────────────────────────────────────────────
while [[ $# -gt 0 ]]; do
    case "$1" in
        --output-dir)
            OUTPUT_DIR="$2"
            shift 2
            ;;
        --python-only)
            RUN_TS=false
            shift
            ;;
        --ts-only)
            RUN_PYTHON=false
            shift
            ;;
        -h|--help)
            echo "Usage: $0 [--output-dir <dir>] [--python-only] [--ts-only]"
            exit 0
            ;;
        *)
            echo "Unknown option: $1" >&2
            exit 1
            ;;
    esac
done

# ─── Setup ───────────────────────────────────────────────────────────────────────
mkdir -p "$OUTPUT_DIR"
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
OVERALL_EXIT=0

echo "=== Type Check Suite ==="
echo "Output directory: ${OUTPUT_DIR}"
echo ""

# ─── Python Type Checking (mypy) ─────────────────────────────────────────────────
if [[ "$RUN_PYTHON" == true ]]; then
    echo "─── Python (mypy --strict) ───"
    MYPY_FILE="$OUTPUT_DIR/mypy-report-${TIMESTAMP}.txt"

    mypy app/ --strict \
        --no-error-summary \
        --show-column-numbers \
        --show-error-codes \
        --pretty \
        2>&1 | tee "$MYPY_FILE"
    MYPY_EXIT=${PIPESTATUS[0]}

    echo "" >> "$MYPY_FILE"
    echo "Timestamp: $(date -Iseconds)" >> "$MYPY_FILE"

    if [[ $MYPY_EXIT -eq 0 ]]; then
        echo "Python type check: PASS"
        echo "Status: PASS" >> "$MYPY_FILE"
    else
        echo "Python type check: FAIL"
        echo "Status: FAIL" >> "$MYPY_FILE"
        OVERALL_EXIT=1
    fi
    echo ""
fi

# ─── TypeScript Type Checking (tsc) ──────────────────────────────────────────────
if [[ "$RUN_TS" == true ]]; then
    echo "─── TypeScript (tsc --noEmit) ───"
    TSC_FILE="$OUTPUT_DIR/tsc-report-${TIMESTAMP}.txt"

    npx tsc --noEmit --pretty 2>&1 | tee "$TSC_FILE"
    TSC_EXIT=${PIPESTATUS[0]}

    echo "" >> "$TSC_FILE"
    echo "Timestamp: $(date -Iseconds)" >> "$TSC_FILE"

    if [[ $TSC_EXIT -eq 0 ]]; then
        echo "TypeScript type check: PASS"
        echo "Status: PASS" >> "$TSC_FILE"
    else
        echo "TypeScript type check: FAIL"
        echo "Status: FAIL" >> "$TSC_FILE"
        OVERALL_EXIT=1
    fi
    echo ""
fi

# ─── Summary ─────────────────────────────────────────────────────────────────────
if [[ $OVERALL_EXIT -eq 0 ]]; then
    echo "OVERALL: PASS — All type checks passed."
else
    echo "OVERALL: FAIL — One or more type checks failed. See reports in ${OUTPUT_DIR}/"
fi

exit $OVERALL_EXIT