@metasession.co/devaudit-cli 0.3.6 → 0.3.8

package/dist/index.js

@@ -56,7 +56,7 @@ function emitJsonResult(payload) {
 
 // package.json
 var package_default = {
-  version: "0.3.6"};
+  version: "0.3.8"};
 
 // src/lib/version.ts
 var CLI_VERSION = package_default.version;
@@ -649,6 +649,7 @@ function buildUploadForm(file, buf, opts) {
   if (opts.evidenceCategory) form.set("evidenceCategory", opts.evidenceCategory);
   if (opts.releaseBranch) form.set("releaseBranch", opts.releaseBranch);
   if (opts.releaseTitle) form.set("releaseTitle", opts.releaseTitle);
+  if (opts.releaseSummary) form.set("releaseSummary", opts.releaseSummary);
   if (opts.changeType) form.set("changeType", opts.changeType);
   if (opts.gateStatus) form.set("gateStatus", opts.gateStatus);
   if (opts.sdlcStage) form.set("sdlcStage", opts.sdlcStage);
@@ -767,6 +768,8 @@ async function uploadPresigned(file, buf, opts) {
           ...opts.releaseBranch ? { releaseBranch: opts.releaseBranch } : {},
           ...opts.environment ? { environment: opts.environment } : {},
           ...opts.evidenceCategory ? { evidenceCategory: opts.evidenceCategory } : {},
+          ...opts.releaseTitle ? { releaseTitle: opts.releaseTitle } : {},
+          ...opts.releaseSummary ? { releaseSummary: opts.releaseSummary } : {},
           ...opts.sdlcStage ? { sdlcStage: opts.sdlcStage } : {},
           ...opts.testCycleId ? { testCycleId: opts.testCycleId } : {}
         }),
@@ -1008,6 +1011,7 @@ async function runPush(options) {
     ...options.category !== void 0 ? { evidenceCategory: options.category } : {},
     ...options.branch !== void 0 ? { releaseBranch: options.branch } : {},
     ...options.releaseTitle !== void 0 ? { releaseTitle: options.releaseTitle } : {},
+    ...options.releaseSummary !== void 0 ? { releaseSummary: options.releaseSummary } : {},
     ...options.changeType !== void 0 ? { changeType: options.changeType } : {},
     ...options.gateStatus !== void 0 ? { gateStatus: options.gateStatus } : {},
     ...options.sdlcStage !== void 0 ? { sdlcStage: options.sdlcStage } : {},
@@ -1732,10 +1736,13 @@ async function bootstrapNode(ctx) {
   await execa("npx", ["husky", "init"], { cwd: ctx.projectPath, stdio: "inherit" });
   return { step: "8/11 Bootstrap hook framework", status: "ok", message: ".husky/ bootstrapped" };
 }
-var REQUIRED_CHECKS = [
+var MAIN_REQUIRED_CHECKS = [
   "Quality Gates",
   "CI Status Fallback"
 ];
+var DEVELOP_REQUIRED_CHECKS = [
+  "Quality Gates"
+];
 var MAIN_REVIEW_COUNT = 1;
 var DEVELOP_REVIEW_COUNT = 0;
 async function resolveIntegrationBranch(projectPath) {
@@ -1771,18 +1778,18 @@ async function configureBranchProtection(ctx, provider) {
     return {
       step: "9/11 Configure branch protection",
       status: "planned",
-      message: `would apply branch protection on ${repo}:${meta.defaultBranch} (1 review) + ${integrationBranch} (0 reviews) with checks=${JSON.stringify(REQUIRED_CHECKS)}`
+      message: `would apply branch protection on ${repo}:${meta.defaultBranch} (1 review, checks=${JSON.stringify(MAIN_REQUIRED_CHECKS)}) + ${integrationBranch} (0 reviews, checks=${JSON.stringify(DEVELOP_REQUIRED_CHECKS)})`
     };
   }
   const results = [];
-  const mainResult = await provider.applyBranchProtection(ctx.projectPath, meta.defaultBranch, REQUIRED_CHECKS, { requiredReviewCount: MAIN_REVIEW_COUNT });
+  const mainResult = await provider.applyBranchProtection(ctx.projectPath, meta.defaultBranch, MAIN_REQUIRED_CHECKS, { requiredReviewCount: MAIN_REVIEW_COUNT });
   if (mainResult.applied) {
     results.push(`${meta.defaultBranch}: ok (${MAIN_REVIEW_COUNT} review)`);
   } else {
     results.push(`${meta.defaultBranch}: FAILED \u2014 ${mainResult.message ?? "unknown"}`);
   }
   if (integrationBranch !== meta.defaultBranch) {
-    const devResult = await provider.applyBranchProtection(ctx.projectPath, integrationBranch, REQUIRED_CHECKS, { requiredReviewCount: DEVELOP_REVIEW_COUNT });
+    const devResult = await provider.applyBranchProtection(ctx.projectPath, integrationBranch, DEVELOP_REQUIRED_CHECKS, { requiredReviewCount: DEVELOP_REVIEW_COUNT });
     if (devResult.applied) {
       results.push(`${integrationBranch}: ok (${DEVELOP_REVIEW_COUNT} reviews)`);
     } else {
@@ -2253,6 +2260,9 @@ function stripServicesBlock(content) {
 var CI_TEMPLATES = [
   "ci.yml.template",
   "ci-status-fallback.yml.template",
+  // DevAudit-Installer#280: same-SHA provenance check on PRs to main.
+  // Verifies prior Quality Gates success without rerunning heavy CI.
+  "quality-gates-provenance.yml.template",
   "compliance-validation.yml.template",
   "check-release-approval.yml.template",
   "post-deploy-prod.yml.template",
@@ -2514,10 +2524,13 @@ async function syncWorkflows(ctx) {
     message: files.length > 0 ? `synced to .devin/workflows/` : "no workflow files found"
   };
 }
-var REQUIRED_CHECKS2 = [
+var MAIN_REQUIRED_CHECKS2 = [
   "Quality Gates",
   "CI Status Fallback"
 ];
+var DEVELOP_REQUIRED_CHECKS2 = [
+  "Quality Gates"
+];
 var MAIN_REVIEW_COUNT2 = 1;
 var DEVELOP_REVIEW_COUNT2 = 0;
 async function verifyBranchProtection(ctx) {
@@ -2545,14 +2558,14 @@ async function verifyBranchProtection(ctx) {
     };
   }
   const results = [];
-  const mainResult = await provider.applyBranchProtection(ctx.projectPath, meta.defaultBranch, REQUIRED_CHECKS2, { requiredReviewCount: MAIN_REVIEW_COUNT2 });
+  const mainResult = await provider.applyBranchProtection(ctx.projectPath, meta.defaultBranch, MAIN_REQUIRED_CHECKS2, { requiredReviewCount: MAIN_REVIEW_COUNT2 });
   if (mainResult.applied) {
     results.push(`${meta.defaultBranch}: ok`);
   } else {
     results.push(`${meta.defaultBranch}: failed \u2014 ${mainResult.message ?? "unknown"}`);
   }
   if (integrationBranch !== meta.defaultBranch) {
-    const devResult = await provider.applyBranchProtection(ctx.projectPath, integrationBranch, REQUIRED_CHECKS2, { requiredReviewCount: DEVELOP_REVIEW_COUNT2 });
+    const devResult = await provider.applyBranchProtection(ctx.projectPath, integrationBranch, DEVELOP_REQUIRED_CHECKS2, { requiredReviewCount: DEVELOP_REVIEW_COUNT2 });
     if (devResult.applied) {
       results.push(`${integrationBranch}: ok`);
     } else {
@@ -3327,7 +3340,7 @@ async function main(argv) {
       ...globals.dryRun !== void 0 ? { dryRun: Boolean(globals.dryRun) } : {}
     });
   });
-  program.command("push <project-slug> <requirement-id> <evidence-type> <file>").description("Upload evidence file(s) to DevAudit (port of scripts/upload-evidence.sh)").option("--release <version>", "release version (e.g. v1.0.0)").option("--create-release-if-missing", "auto-create the release as 'draft' if absent").option("--environment <env>", "uat | production").option("--category <cat>", "ci_pipeline | local_dev | planning | test_report | security_scan | release_artifact").option("--git-sha <sha>", "attached to metadata.gitSha").option("--ci-run-id <id>", "attached to metadata.ciRunId").option("--branch <name>", "git branch \u2014 sent as releaseBranch + metadata.branch").option("--release-title <text>", "human title for the release row (releaseTitle; portal no-clobbers)").option("--change-type <type>", "conventional-commit prefix for the release row (changeType)").option("--gate-status <status>", "passed | failed | skipped (gateStatus)").option("--sdlc-stage <stage>", "SDLC stage 1-5 (sdlcStage)").option("--test-cycle <id>", "test cycle identifier (typically the CI run ID)").option(
+  program.command("push <project-slug> <requirement-id> <evidence-type> <file>").description("Upload evidence file(s) to DevAudit (port of scripts/upload-evidence.sh)").option("--release <version>", "release version (e.g. v1.0.0)").option("--create-release-if-missing", "auto-create the release as 'draft' if absent").option("--environment <env>", "uat | production").option("--category <cat>", "ci_pipeline | local_dev | planning | test_report | security_scan | release_artifact").option("--git-sha <sha>", "attached to metadata.gitSha").option("--ci-run-id <id>", "attached to metadata.ciRunId").option("--branch <name>", "git branch \u2014 sent as releaseBranch + metadata.branch").option("--release-title <text>", "human title for the release row (releaseTitle; portal no-clobbers)").option("--release-summary <text>", "reviewer-facing short description (releaseSummary; portal no-clobbers)").option("--change-type <type>", "conventional-commit prefix for the release row (changeType)").option("--gate-status <status>", "passed | failed | skipped (gateStatus)").option("--sdlc-stage <stage>", "SDLC stage 1-5 (sdlcStage)").option("--test-cycle <id>", "test cycle identifier (typically the CI run ID)").option(
     "--meta-key <pair>",
     "repeatable key=value merged into the metadata JSON",
     (val, acc) => [...acc, val],
@@ -3348,6 +3361,7 @@ async function main(argv) {
         ...opts.ciRunId !== void 0 ? { ciRunId: opts.ciRunId } : {},
         ...opts.branch !== void 0 ? { branch: opts.branch } : {},
         ...opts.releaseTitle !== void 0 ? { releaseTitle: opts.releaseTitle } : {},
+        ...opts.releaseSummary !== void 0 ? { releaseSummary: opts.releaseSummary } : {},
         ...opts.changeType !== void 0 ? { changeType: opts.changeType } : {},
         ...opts.gateStatus !== void 0 ? { gateStatus: opts.gateStatus } : {},
         ...opts.sdlcStage !== void 0 ? { sdlcStage: opts.sdlcStage } : {},