@metasession.co/devaudit-cli 0.1.13 → 0.1.15

package/dist/index.js

@@ -54,7 +54,7 @@ function emitJsonResult(payload) {
 
 // package.json
 var package_default = {
-  version: "0.1.13"};
+  version: "0.1.15"};
 
 // src/lib/version.ts
 var CLI_VERSION = package_default.version;
@@ -235,6 +235,57 @@ async function checkNodeVersion() {
   const ok2 = major >= 22;
   return { name: "node", ok: ok2, detail: `v${version} (require >=22)` };
 }
+async function checkReleaseCloseoutDrift() {
+  const name = "releases";
+  let cfg;
+  try {
+    cfg = JSON.parse(await promises.readFile("sdlc-config.json", "utf-8"));
+  } catch {
+    return { name, ok: true, detail: "skipped (not a consumer project)" };
+  }
+  let entries;
+  try {
+    entries = await promises.readdir("compliance/pending-releases");
+  } catch {
+    return { name, ok: true, detail: "no pending-releases/" };
+  }
+  const reqs = entries.filter((f) => /^RELEASE-TICKET-REQ-\d+\.md$/.test(f)).map((f) => f.replace(/^RELEASE-TICKET-/, "").replace(/\.md$/, ""));
+  if (reqs.length === 0) return { name, ok: true, detail: "no pending release tickets" };
+  const slug = cfg.devaudit?.project_slug ?? cfg.project_slug;
+  const base = (cfg.devaudit?.base_url ?? "").replace(/\/$/, "");
+  const apiKey = process.env["DEVAUDIT_API_KEY"];
+  if (!slug || !base || !apiKey) {
+    return {
+      name,
+      ok: true,
+      detail: `${reqs.length} pending ticket(s); portal drift check skipped (set DEVAUDIT_API_KEY + devaudit.base_url)`
+    };
+  }
+  const drifted = [];
+  for (const req of reqs) {
+    try {
+      const ctrl = new AbortController();
+      const timer = setTimeout(() => ctrl.abort(), 1e4);
+      const res = await fetch(
+        `${base}/api/ci/releases/resolve?projectSlug=${encodeURIComponent(slug)}&versionPrefix=${encodeURIComponent(req)}`,
+        { headers: { Authorization: `Bearer ${apiKey}` }, signal: ctrl.signal }
+      );
+      clearTimeout(timer);
+      if (!res.ok) continue;
+      const body = await res.json();
+      if (body.latest?.status === "released") drifted.push(req);
+    } catch {
+    }
+  }
+  if (drifted.length > 0) {
+    return {
+      name,
+      ok: false,
+      detail: `released on the portal but still in pending-releases/: ${drifted.join(", ")} \u2014 run ./scripts/close-out-release.sh <REQ>`
+    };
+  }
+  return { name, ok: true, detail: `${reqs.length} pending ticket(s); none released on the portal` };
+}
 async function runDoctor(options = {}) {
   const log = logger();
   log.info("Running devaudit doctor \u2014 checking required tools...\n");
@@ -251,7 +302,13 @@ async function runDoctor(options = {}) {
     if (!check.ok) allOk = false;
     log.log(`  ${marker} ${check.name.padEnd(8)} ${check.detail}`);
   }
+  const closeout = await checkReleaseCloseoutDrift();
+  const closeoutMarker = closeout.ok ? "\u2713" : "\u26A0";
+  log.log(`  ${closeoutMarker} ${closeout.name.padEnd(8)} ${closeout.detail}`);
   log.log("");
+  if (!closeout.ok) {
+    log.warn("Release close-out drift detected \u2014 see above. (Does not affect the tool check.)");
+  }
   const plugins = options.plugins ?? (await discoverPlugins()).loaded;
   if (plugins.length > 0) {
     const ctx = await buildPluginContext({ projectPath: resolve(process.cwd()) });
@@ -1741,7 +1798,8 @@ var CI_TEMPLATES = [
   "compliance-validation.yml.template",
   "check-release-approval.yml.template",
   "post-deploy-prod.yml.template",
-  "compliance-evidence.yml.template"
+  "compliance-evidence.yml.template",
+  "close-out-release.yml.template"
 ];
 var OLD_WORKFLOWS_TO_REMOVE = ["test-on-pr.yml", "check-uat-approval.yml"];
 function indentEnvBlock(env, indent) {