@metasession.co/devaudit-cli 0.3.10 → 0.3.12

package/dist/index.js

@@ -3,7 +3,7 @@ import { Command, Option } from 'commander';
 import { createConsola } from 'consola';
 import { execa } from 'execa';
 import { join, resolve, basename, dirname, relative } from 'path';
-import { promises } from 'fs';
+import { promises, openAsBlob } from 'fs';
 import envPaths from 'env-paths';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { validateManifest } from '@metasession.co/devaudit-plugin-sdk';
@@ -56,7 +56,7 @@ function emitJsonResult(payload) {
 
 // package.json
 var package_default = {
-  version: "0.3.10"};
+  version: "0.3.12"};
 
 // src/lib/version.ts
 var CLI_VERSION = package_default.version;
@@ -602,6 +602,7 @@ var INITIAL_BACKOFF_MS = 1e3;
 var DEFAULT_PRESIGNED_THRESHOLD_BYTES = 26214400;
 var DEFAULT_PRESIGNED_MAX_ATTEMPTS = 3;
 var DEFAULT_PRESIGNED_UPLOAD_MAX_TIME_SECONDS = 300;
+var STUB_PREFIX_BYTES = 4096;
 function maxAttempts() {
   const raw = Number.parseInt(process.env["UPLOAD_MAX_ATTEMPTS"] ?? "", 10);
   return Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_MAX_ATTEMPTS;
@@ -629,20 +630,71 @@ async function collectFiles(filePath) {
   throw new Error(`${filePath} is neither a file nor a directory.`);
 }
 var STUB_BANNER = /STARTER TEMPLATE.+REPLACE BEFORE/;
-function isUneditedStub(buf) {
-  return STUB_BANNER.test(buf.toString("utf-8"));
-}
+var TEXT_STUB_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".md",
+  ".markdown",
+  ".txt",
+  ".json",
+  ".yml",
+  ".yaml",
+  ".csv",
+  ".html",
+  ".xml",
+  ".log"
+]);
 function delay(ms) {
   return new Promise((res) => setTimeout(res, ms));
 }
-function buildUploadForm(file, buf, opts) {
+function extensionOf(file) {
+  const dot = file.lastIndexOf(".");
+  return dot === -1 ? "" : file.slice(dot).toLowerCase();
+}
+function isTextLikeEvidenceFile(file) {
+  return TEXT_STUB_EXTENSIONS.has(extensionOf(file));
+}
+async function readFilePrefix(file, bytes) {
+  const handle = await promises.open(file, "r");
+  try {
+    const buf = Buffer.alloc(bytes);
+    const { bytesRead } = await handle.read(buf, 0, bytes, 0);
+    return buf.subarray(0, bytesRead).toString("utf-8");
+  } finally {
+    await handle.close();
+  }
+}
+async function isUneditedStub(file) {
+  if (!isTextLikeEvidenceFile(file)) return false;
+  const prefix = await readFilePrefix(file, STUB_PREFIX_BYTES);
+  return STUB_BANNER.test(prefix);
+}
+async function createUploadSource(file) {
+  const mimeType = deriveMimeType(file);
+  const { size } = await promises.stat(file);
+  try {
+    return {
+      blob: await openAsBlob(file, { type: mimeType }),
+      size,
+      mimeType
+    };
+  } catch {
+    return {
+      blob: new Blob([await promises.readFile(file)], { type: mimeType }),
+      size,
+      mimeType
+    };
+  }
+}
+function buildUploadForm(file, source, opts) {
+  const metadata = {
+    ...opts.metadata ?? {},
+    ...opts.commitTimestamp ? { commitTimestamp: opts.commitTimestamp } : {}
+  };
   const form = new FormData();
-  const blob = new Blob([new Uint8Array(buf)]);
-  form.set("file", blob, basename(file));
+  form.set("file", source.blob, basename(file));
   form.set("projectSlug", opts.projectSlug);
   form.set("requirementId", opts.requirementId);
   form.set("evidenceType", opts.evidenceType);
-  form.set("metadata", JSON.stringify(opts.metadata ?? {}));
+  form.set("metadata", JSON.stringify(metadata));
   if (opts.releaseVersion) form.set("releaseVersion", opts.releaseVersion);
   if (opts.createReleaseIfMissing) form.set("createReleaseIfMissing", "true");
   if (opts.environment) form.set("environment", opts.environment);
@@ -654,6 +706,8 @@ function buildUploadForm(file, buf, opts) {
   if (opts.gateStatus) form.set("gateStatus", opts.gateStatus);
   if (opts.sdlcStage) form.set("sdlcStage", opts.sdlcStage);
   if (opts.testCycleId) form.set("testCycleId", opts.testCycleId);
+  if (opts.sentinelContent) form.set("sentinelContent", opts.sentinelContent);
+  if (opts.commitTimestamp) form.set("commitTimestamp", opts.commitTimestamp);
   return form;
 }
 function uploadFailureMessage(err, timeoutSeconds) {
@@ -684,7 +738,7 @@ async function probeBaseUrlDrift(baseUrl) {
     return null;
   }
 }
-async function uploadOne(file, buf, opts) {
+async function uploadOne(file, source, opts) {
   const attempts = maxAttempts();
   const timeoutSeconds = uploadMaxTimeSeconds();
   const url = `${opts.baseUrl.replace(/\/$/, "")}/api/evidence/upload`;
@@ -698,7 +752,7 @@ async function uploadOne(file, buf, opts) {
       res = await fetch(url, {
         method: "POST",
         headers: { authorization: `Bearer ${opts.apiKey}` },
-        body: buildUploadForm(file, buf, opts),
+        body: buildUploadForm(file, source, opts),
         signal: controller.signal
       });
     } catch (err) {
@@ -731,15 +785,17 @@ async function uploadOne(file, buf, opts) {
   return { file, ok: false, status: 0, error: "max retries exhausted" };
 }
 var PRESIGNED_FALLBACK = /* @__PURE__ */ Symbol("presigned-fallback");
-async function uploadPresigned(file, buf, opts) {
+async function uploadPresigned(file, source, opts) {
   const baseUrl = opts.baseUrl.replace(/\/$/, "");
   const presignUrl = `${baseUrl}/api/evidence/upload-url`;
   const completeUrl = `${baseUrl}/api/evidence/upload-complete`;
   const maxAttemptsPresigned = DEFAULT_PRESIGNED_MAX_ATTEMPTS;
   const timeoutSeconds = uploadMaxTimeSeconds();
   const presignedTimeoutSeconds = DEFAULT_PRESIGNED_UPLOAD_MAX_TIME_SECONDS;
-  const mimeType = deriveMimeType(file);
-  const metadata = opts.metadata ?? {};
+  const metadata = {
+    ...opts.metadata ?? {},
+    ...opts.commitTimestamp ? { commitTimestamp: opts.commitTimestamp } : {}
+  };
   let uploadUrl = "";
   let evidenceId = "";
   let attempt = 1;
@@ -760,8 +816,8 @@ async function uploadPresigned(file, buf, opts) {
           requirementId: opts.requirementId,
           evidenceType: opts.evidenceType,
           fileName: basename(file),
-          fileSizeBytes: buf.byteLength,
-          mimeType,
+          fileSizeBytes: source.size,
+          mimeType: source.mimeType,
           metadata,
           ...opts.releaseVersion ? { releaseVersion: opts.releaseVersion } : {},
           ...opts.createReleaseIfMissing ? { createReleaseIfMissing: true } : {},
@@ -770,8 +826,11 @@ async function uploadPresigned(file, buf, opts) {
           ...opts.evidenceCategory ? { evidenceCategory: opts.evidenceCategory } : {},
           ...opts.releaseTitle ? { releaseTitle: opts.releaseTitle } : {},
           ...opts.releaseSummary ? { releaseSummary: opts.releaseSummary } : {},
+          ...opts.changeType ? { changeType: opts.changeType } : {},
           ...opts.sdlcStage ? { sdlcStage: opts.sdlcStage } : {},
-          ...opts.testCycleId ? { testCycleId: opts.testCycleId } : {}
+          ...opts.testCycleId ? { testCycleId: opts.testCycleId } : {},
+          ...opts.sentinelContent ? { sentinelContent: opts.sentinelContent } : {},
+          ...opts.commitTimestamp ? { commitTimestamp: opts.commitTimestamp } : {}
         }),
         signal: controller.signal
       });
@@ -816,8 +875,8 @@ async function uploadPresigned(file, buf, opts) {
     try {
       res = await fetch(uploadUrl, {
         method: "PUT",
-        headers: { "content-type": mimeType },
-        body: new Uint8Array(buf),
+        headers: { "content-type": source.mimeType },
+        body: source.blob,
         signal: controller.signal
       });
     } catch (err) {
@@ -898,25 +957,26 @@ async function uploadEvidence(opts) {
   }
   const results = [];
   for (const file of files) {
-    const buf = await promises.readFile(file);
-    if (isUneditedStub(buf)) {
+    if (await isUneditedStub(file)) {
       results.push({ file, ok: true, status: 0, skipped: true });
       continue;
     }
-    if (buf.byteLength >= DEFAULT_PRESIGNED_THRESHOLD_BYTES) {
-      const presignedResult = await uploadPresigned(file, buf, opts);
+    const source = await createUploadSource(file);
+    if (source.size >= DEFAULT_PRESIGNED_THRESHOLD_BYTES) {
+      const presignedResult = await uploadPresigned(file, source, opts);
       if (presignedResult !== PRESIGNED_FALLBACK) {
         results.push(presignedResult);
         continue;
       }
     }
-    results.push(await uploadOne(file, buf, opts));
+    results.push(await uploadOne(file, source, opts));
   }
   return results;
 }
 
 // src/commands/push.ts
 var DEFAULT_BASE_URL3 = "https://devaudit.metasession.co";
+var TRACKED_CHANGE_TYPES = /* @__PURE__ */ new Set(["feat", "fix", "refactor", "perf", "compliance", "revert"]);
 function buildMetadata(options) {
   const metadata = {};
   if (options.gitSha) metadata["gitSha"] = options.gitSha;
@@ -928,6 +988,28 @@ function buildMetadata(options) {
   }
   return metadata;
 }
+async function resolveSentinelContext(options) {
+  if (!options.changeType || !TRACKED_CHANGE_TYPES.has(options.changeType)) {
+    return {};
+  }
+  const sentinelPath = join(process.cwd(), ".sdlc-implementer-invoked");
+  let sentinelContent;
+  try {
+    const raw = await promises.readFile(sentinelPath, "utf8");
+    if (raw.trim()) sentinelContent = raw;
+  } catch {
+    sentinelContent = void 0;
+  }
+  let commitTimestamp;
+  try {
+    const target = options.gitSha?.trim() ? options.gitSha.trim() : "HEAD";
+    const { stdout } = await execa("git", ["show", "-s", "--format=%cI", target], { reject: false });
+    if (stdout.trim()) commitTimestamp = stdout.trim();
+  } catch {
+    commitTimestamp = void 0;
+  }
+  return { sentinelContent, commitTimestamp };
+}
 function validateOptions(options) {
   if (options.environment && !options.release) {
     return "--environment requires --release (evidence without a release is orphaned)";
@@ -998,6 +1080,8 @@ async function runPush(options) {
     await runHook(plugins, "beforePush", ctx);
   }
   const metadata = buildMetadata(options);
+  const { sentinelContent, commitTimestamp } = await resolveSentinelContext(options);
+  if (commitTimestamp) metadata["commitTimestamp"] = commitTimestamp;
   const results = await uploadEvidence({
     projectSlug: options.projectSlug,
     requirementId: options.requirementId,
@@ -1016,6 +1100,8 @@ async function runPush(options) {
     ...options.gateStatus !== void 0 ? { gateStatus: options.gateStatus } : {},
     ...options.sdlcStage !== void 0 ? { sdlcStage: options.sdlcStage } : {},
     ...options.testCycleId !== void 0 ? { testCycleId: options.testCycleId } : {},
+    ...sentinelContent !== void 0 ? { sentinelContent } : {},
+    ...commitTimestamp !== void 0 ? { commitTimestamp } : {},
     metadata
   });
   let okCount = 0;