pipeline {
    agent any
    stages {
        stage('Checkout') { steps { checkout scm } }
        stage('Install') { steps { sh 'npm ci' } }
        stage('Start Server') { steps { sh 'node server.js &' } }
        stage('Wait') {
            steps {
                timeout(60) {
                    waitUntil {
                        sh script: 'curl -s -f http://localhost:3000/health', returnStatus: true == 0
                    }
                }
            }
        }
        stage('Scan') { steps { sh 'curl -s http://localhost:3000/data > report.json'; archiveArtifacts 'report.json' } }
        stage('Check') {
            steps {
                script {
                    def r = readJSON file: 'report.json'
                    if (r.stats.vulnerable > 0 || r.stats.healthScore < 80) error "Issues found"
                }
            }
        }
    }
    post { always { sh 'pkill -f "node server.js" || true' } }
}

version: 2.1

jobs:
  dependguard-scan:
    docker:
      - image: cimg/node:20.9
    steps:
      - checkout
      - run: npm ci
      - run:
          name: Start DependGuard server
          command: node server.js
          background: true
      - run:
          name: Wait for server
          command: |
            for i in {1..30}; do
              curl -s http://localhost:3000/health && break
              sleep 2
            done
      - run:
          name: Run scan
          command: curl -s http://localhost:3000/data > dependguard-report.json
      - store_artifacts:
          path: dependguard-report.json
      - run:
          name: Fail on issues
          command: |
            node -e "
            const r = require('./dependguard-report.json');
            const s = r.stats || {};
            if (s.vulnerable > 0 || s.healthScore < 80) {
              console.log('Vulnerabilities or low health score');
              process.exit(1);
            }
            "

workflows:
  scan:
    jobs:
      - dependguard-scan