@metasession.co/devaudit-cli 0.1.63 → 0.1.64

package/dist/index.js

@@ -56,7 +56,7 @@ function emitJsonResult(payload) {
 
 // package.json
 var package_default = {
-  version: "0.1.63"};
+  version: "0.1.64"};
 
 // src/lib/version.ts
 var CLI_VERSION = package_default.version;
@@ -599,6 +599,9 @@ var RETRYABLE_STATUSES = /* @__PURE__ */ new Set([429, 500, 502, 503, 504]);
 var DEFAULT_MAX_ATTEMPTS = 5;
 var DEFAULT_UPLOAD_MAX_TIME_SECONDS = 120;
 var INITIAL_BACKOFF_MS = 1e3;
+var DEFAULT_PRESIGNED_THRESHOLD_BYTES = 26214400;
+var DEFAULT_PRESIGNED_MAX_ATTEMPTS = 3;
+var DEFAULT_PRESIGNED_UPLOAD_MAX_TIME_SECONDS = 300;
 function maxAttempts() {
   const raw = Number.parseInt(process.env["UPLOAD_MAX_ATTEMPTS"] ?? "", 10);
   return Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_MAX_ATTEMPTS;
@@ -648,6 +651,7 @@ function buildUploadForm(file, buf, opts) {
   if (opts.releaseTitle) form.set("releaseTitle", opts.releaseTitle);
   if (opts.changeType) form.set("changeType", opts.changeType);
   if (opts.gateStatus) form.set("gateStatus", opts.gateStatus);
+  if (opts.sdlcStage) form.set("sdlcStage", opts.sdlcStage);
   return form;
 }
 function uploadFailureMessage(err, timeoutSeconds) {
@@ -724,6 +728,164 @@ async function uploadOne(file, buf, opts) {
   }
   return { file, ok: false, status: 0, error: "max retries exhausted" };
 }
+var PRESIGNED_FALLBACK = /* @__PURE__ */ Symbol("presigned-fallback");
+async function uploadPresigned(file, buf, opts) {
+  const baseUrl = opts.baseUrl.replace(/\/$/, "");
+  const presignUrl = `${baseUrl}/api/evidence/upload-url`;
+  const completeUrl = `${baseUrl}/api/evidence/upload-complete`;
+  const maxAttemptsPresigned = DEFAULT_PRESIGNED_MAX_ATTEMPTS;
+  const timeoutSeconds = uploadMaxTimeSeconds();
+  const presignedTimeoutSeconds = DEFAULT_PRESIGNED_UPLOAD_MAX_TIME_SECONDS;
+  const mimeType = deriveMimeType(file);
+  const metadata = opts.metadata ?? {};
+  let uploadUrl = "";
+  let evidenceId = "";
+  let attempt = 1;
+  let backoff = INITIAL_BACKOFF_MS;
+  while (attempt <= maxAttemptsPresigned) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutSeconds * 1e3);
+    let res;
+    try {
+      res = await fetch(presignUrl, {
+        method: "POST",
+        headers: {
+          authorization: `Bearer ${opts.apiKey}`,
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({
+          projectSlug: opts.projectSlug,
+          requirementId: opts.requirementId,
+          evidenceType: opts.evidenceType,
+          fileName: basename(file),
+          fileSizeBytes: buf.byteLength,
+          mimeType,
+          metadata,
+          ...opts.releaseVersion ? { releaseVersion: opts.releaseVersion } : {},
+          ...opts.createReleaseIfMissing ? { createReleaseIfMissing: true } : {},
+          ...opts.releaseBranch ? { releaseBranch: opts.releaseBranch } : {},
+          ...opts.environment ? { environment: opts.environment } : {},
+          ...opts.evidenceCategory ? { evidenceCategory: opts.evidenceCategory } : {},
+          ...opts.sdlcStage ? { sdlcStage: opts.sdlcStage } : {}
+        }),
+        signal: controller.signal
+      });
+    } catch (err) {
+      if (attempt < maxAttemptsPresigned) {
+        await delay(backoff);
+        backoff *= 2;
+        attempt += 1;
+        continue;
+      }
+      return { file, ok: false, status: 0, error: uploadFailureMessage(err, timeoutSeconds) };
+    } finally {
+      clearTimeout(timer);
+    }
+    if (res.ok) {
+      const body = await res.json().catch(() => null);
+      if (body?.uploadUrl && body?.evidenceId) {
+        uploadUrl = body.uploadUrl;
+        evidenceId = body.evidenceId;
+        break;
+      }
+      return PRESIGNED_FALLBACK;
+    }
+    if (RETRYABLE_STATUSES.has(res.status) && attempt < maxAttemptsPresigned) {
+      await delay(backoff);
+      backoff *= 2;
+      attempt += 1;
+      continue;
+    }
+    const errText = await res.text().catch(() => "(no body)");
+    return { file, ok: false, status: res.status, error: `presigned step 1: ${errText}` };
+  }
+  if (!uploadUrl || !evidenceId) {
+    return { file, ok: false, status: 0, error: "presigned step 1: no URL after retries" };
+  }
+  attempt = 1;
+  backoff = INITIAL_BACKOFF_MS;
+  while (attempt <= maxAttemptsPresigned) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), presignedTimeoutSeconds * 1e3);
+    let res;
+    try {
+      res = await fetch(uploadUrl, {
+        method: "PUT",
+        headers: { "content-type": mimeType },
+        body: new Uint8Array(buf),
+        signal: controller.signal
+      });
+    } catch (err) {
+      if (attempt < maxAttemptsPresigned) {
+        await delay(backoff);
+        backoff *= 2;
+        attempt += 1;
+        continue;
+      }
+      return { file, ok: false, status: 0, error: `presigned step 2: ${uploadFailureMessage(err, presignedTimeoutSeconds)}` };
+    } finally {
+      clearTimeout(timer);
+    }
+    if (res.ok) break;
+    if (RETRYABLE_STATUSES.has(res.status) && attempt < maxAttemptsPresigned) {
+      await delay(backoff);
+      backoff *= 2;
+      attempt += 1;
+      continue;
+    }
+    return { file, ok: false, status: res.status, error: `presigned step 2: HTTP ${res.status}` };
+  }
+  attempt = 1;
+  backoff = INITIAL_BACKOFF_MS;
+  while (attempt <= maxAttemptsPresigned) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutSeconds * 1e3);
+    let res;
+    try {
+      res = await fetch(completeUrl, {
+        method: "POST",
+        headers: {
+          authorization: `Bearer ${opts.apiKey}`,
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({ evidenceId }),
+        signal: controller.signal
+      });
+    } catch (err) {
+      if (attempt < maxAttemptsPresigned) {
+        await delay(backoff);
+        backoff *= 2;
+        attempt += 1;
+        continue;
+      }
+      return { file, ok: false, status: 0, error: `presigned step 3: ${uploadFailureMessage(err, timeoutSeconds)}` };
+    } finally {
+      clearTimeout(timer);
+    }
+    if (res.ok) {
+      const body = await res.json().catch(() => null);
+      return { file, ok: true, status: res.status, body };
+    }
+    if (RETRYABLE_STATUSES.has(res.status) && attempt < maxAttemptsPresigned) {
+      await delay(backoff);
+      backoff *= 2;
+      attempt += 1;
+      continue;
+    }
+    return { file, ok: false, status: res.status, error: `presigned step 3: HTTP ${res.status}` };
+  }
+  return { file, ok: false, status: 0, error: "presigned step 3: max retries exhausted" };
+}
+function deriveMimeType(file) {
+  const lower = file.toLowerCase();
+  if (lower.endsWith(".zip")) return "application/zip";
+  if (lower.endsWith(".json")) return "application/json";
+  if (lower.endsWith(".png")) return "image/png";
+  if (lower.endsWith(".pdf")) return "application/pdf";
+  if (lower.endsWith(".md")) return "text/markdown";
+  if (lower.endsWith(".html")) return "text/html";
+  return "application/octet-stream";
+}
 async function uploadEvidence(opts) {
   const files = await collectFiles(opts.filePath);
   if (files.length === 0) {
@@ -736,6 +898,13 @@ async function uploadEvidence(opts) {
       results.push({ file, ok: true, status: 0, skipped: true });
       continue;
     }
+    if (buf.byteLength >= DEFAULT_PRESIGNED_THRESHOLD_BYTES) {
+      const presignedResult = await uploadPresigned(file, buf, opts);
+      if (presignedResult !== PRESIGNED_FALLBACK) {
+        results.push(presignedResult);
+        continue;
+      }
+    }
     results.push(await uploadOne(file, buf, opts));
   }
   return results;
@@ -839,6 +1008,7 @@ async function runPush(options) {
     ...options.releaseTitle !== void 0 ? { releaseTitle: options.releaseTitle } : {},
     ...options.changeType !== void 0 ? { changeType: options.changeType } : {},
     ...options.gateStatus !== void 0 ? { gateStatus: options.gateStatus } : {},
+    ...options.sdlcStage !== void 0 ? { sdlcStage: options.sdlcStage } : {},
     metadata
   });
   let okCount = 0;
@@ -2977,7 +3147,7 @@ async function main(argv) {
       ...globals.dryRun !== void 0 ? { dryRun: Boolean(globals.dryRun) } : {}
     });
   });
-  program.command("push <project-slug> <requirement-id> <evidence-type> <file>").description("Upload evidence file(s) to DevAudit (port of scripts/upload-evidence.sh)").option("--release <version>", "release version (e.g. v1.0.0)").option("--create-release-if-missing", "auto-create the release as 'draft' if absent").option("--environment <env>", "uat | production").option("--category <cat>", "ci_pipeline | local_dev | planning | test_report | security_scan | release_artifact").option("--git-sha <sha>", "attached to metadata.gitSha").option("--ci-run-id <id>", "attached to metadata.ciRunId").option("--branch <name>", "git branch \u2014 sent as releaseBranch + metadata.branch").option("--release-title <text>", "human title for the release row (releaseTitle; portal no-clobbers)").option("--change-type <type>", "conventional-commit prefix for the release row (changeType)").option("--gate-status <status>", "passed | failed | skipped (gateStatus)").option(
+  program.command("push <project-slug> <requirement-id> <evidence-type> <file>").description("Upload evidence file(s) to DevAudit (port of scripts/upload-evidence.sh)").option("--release <version>", "release version (e.g. v1.0.0)").option("--create-release-if-missing", "auto-create the release as 'draft' if absent").option("--environment <env>", "uat | production").option("--category <cat>", "ci_pipeline | local_dev | planning | test_report | security_scan | release_artifact").option("--git-sha <sha>", "attached to metadata.gitSha").option("--ci-run-id <id>", "attached to metadata.ciRunId").option("--branch <name>", "git branch \u2014 sent as releaseBranch + metadata.branch").option("--release-title <text>", "human title for the release row (releaseTitle; portal no-clobbers)").option("--change-type <type>", "conventional-commit prefix for the release row (changeType)").option("--gate-status <status>", "passed | failed | skipped (gateStatus)").option("--sdlc-stage <stage>", "SDLC stage 1-5 (sdlcStage)").option(
     "--meta-key <pair>",
     "repeatable key=value merged into the metadata JSON",
     (val, acc) => [...acc, val],
@@ -3000,6 +3170,7 @@ async function main(argv) {
         ...opts.releaseTitle !== void 0 ? { releaseTitle: opts.releaseTitle } : {},
         ...opts.changeType !== void 0 ? { changeType: opts.changeType } : {},
         ...opts.gateStatus !== void 0 ? { gateStatus: opts.gateStatus } : {},
+        ...opts.sdlcStage !== void 0 ? { sdlcStage: opts.sdlcStage } : {},
         ...opts.metaKey !== void 0 && opts.metaKey.length > 0 ? { metaKeys: opts.metaKey } : {},
         ...opts.baseUrl !== void 0 ? { baseUrl: opts.baseUrl } : {},
         ...opts.apiKey !== void 0 ? { apiKey: opts.apiKey } : {},