@metasession.co/devaudit-cli 0.3.9 → 0.3.11

package/dist/index.js

@@ -3,7 +3,7 @@ import { Command, Option } from 'commander';
 import { createConsola } from 'consola';
 import { execa } from 'execa';
 import { join, resolve, basename, dirname, relative } from 'path';
-import { promises } from 'fs';
+import { promises, openAsBlob } from 'fs';
 import envPaths from 'env-paths';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { validateManifest } from '@metasession.co/devaudit-plugin-sdk';
@@ -56,7 +56,7 @@ function emitJsonResult(payload) {
 
 // package.json
 var package_default = {
-  version: "0.3.9"};
+  version: "0.3.11"};
 
 // src/lib/version.ts
 var CLI_VERSION = package_default.version;
@@ -602,6 +602,7 @@ var INITIAL_BACKOFF_MS = 1e3;
 var DEFAULT_PRESIGNED_THRESHOLD_BYTES = 26214400;
 var DEFAULT_PRESIGNED_MAX_ATTEMPTS = 3;
 var DEFAULT_PRESIGNED_UPLOAD_MAX_TIME_SECONDS = 300;
+var STUB_PREFIX_BYTES = 4096;
 function maxAttempts() {
   const raw = Number.parseInt(process.env["UPLOAD_MAX_ATTEMPTS"] ?? "", 10);
   return Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_MAX_ATTEMPTS;
@@ -629,16 +630,63 @@ async function collectFiles(filePath) {
   throw new Error(`${filePath} is neither a file nor a directory.`);
 }
 var STUB_BANNER = /STARTER TEMPLATE.+REPLACE BEFORE/;
-function isUneditedStub(buf) {
-  return STUB_BANNER.test(buf.toString("utf-8"));
-}
+var TEXT_STUB_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".md",
+  ".markdown",
+  ".txt",
+  ".json",
+  ".yml",
+  ".yaml",
+  ".csv",
+  ".html",
+  ".xml",
+  ".log"
+]);
 function delay(ms) {
   return new Promise((res) => setTimeout(res, ms));
 }
-function buildUploadForm(file, buf, opts) {
+function extensionOf(file) {
+  const dot = file.lastIndexOf(".");
+  return dot === -1 ? "" : file.slice(dot).toLowerCase();
+}
+function isTextLikeEvidenceFile(file) {
+  return TEXT_STUB_EXTENSIONS.has(extensionOf(file));
+}
+async function readFilePrefix(file, bytes) {
+  const handle = await promises.open(file, "r");
+  try {
+    const buf = Buffer.alloc(bytes);
+    const { bytesRead } = await handle.read(buf, 0, bytes, 0);
+    return buf.subarray(0, bytesRead).toString("utf-8");
+  } finally {
+    await handle.close();
+  }
+}
+async function isUneditedStub(file) {
+  if (!isTextLikeEvidenceFile(file)) return false;
+  const prefix = await readFilePrefix(file, STUB_PREFIX_BYTES);
+  return STUB_BANNER.test(prefix);
+}
+async function createUploadSource(file) {
+  const mimeType = deriveMimeType(file);
+  const { size } = await promises.stat(file);
+  try {
+    return {
+      blob: await openAsBlob(file, { type: mimeType }),
+      size,
+      mimeType
+    };
+  } catch {
+    return {
+      blob: new Blob([await promises.readFile(file)], { type: mimeType }),
+      size,
+      mimeType
+    };
+  }
+}
+function buildUploadForm(file, source, opts) {
   const form = new FormData();
-  const blob = new Blob([new Uint8Array(buf)]);
-  form.set("file", blob, basename(file));
+  form.set("file", source.blob, basename(file));
   form.set("projectSlug", opts.projectSlug);
   form.set("requirementId", opts.requirementId);
   form.set("evidenceType", opts.evidenceType);
@@ -684,7 +732,7 @@ async function probeBaseUrlDrift(baseUrl) {
     return null;
   }
 }
-async function uploadOne(file, buf, opts) {
+async function uploadOne(file, source, opts) {
   const attempts = maxAttempts();
   const timeoutSeconds = uploadMaxTimeSeconds();
   const url = `${opts.baseUrl.replace(/\/$/, "")}/api/evidence/upload`;
@@ -698,7 +746,7 @@ async function uploadOne(file, buf, opts) {
       res = await fetch(url, {
         method: "POST",
         headers: { authorization: `Bearer ${opts.apiKey}` },
-        body: buildUploadForm(file, buf, opts),
+        body: buildUploadForm(file, source, opts),
         signal: controller.signal
       });
     } catch (err) {
@@ -731,14 +779,13 @@ async function uploadOne(file, buf, opts) {
   return { file, ok: false, status: 0, error: "max retries exhausted" };
 }
 var PRESIGNED_FALLBACK = /* @__PURE__ */ Symbol("presigned-fallback");
-async function uploadPresigned(file, buf, opts) {
+async function uploadPresigned(file, source, opts) {
   const baseUrl = opts.baseUrl.replace(/\/$/, "");
   const presignUrl = `${baseUrl}/api/evidence/upload-url`;
   const completeUrl = `${baseUrl}/api/evidence/upload-complete`;
   const maxAttemptsPresigned = DEFAULT_PRESIGNED_MAX_ATTEMPTS;
   const timeoutSeconds = uploadMaxTimeSeconds();
   const presignedTimeoutSeconds = DEFAULT_PRESIGNED_UPLOAD_MAX_TIME_SECONDS;
-  const mimeType = deriveMimeType(file);
   const metadata = opts.metadata ?? {};
   let uploadUrl = "";
   let evidenceId = "";
@@ -760,8 +807,8 @@ async function uploadPresigned(file, buf, opts) {
           requirementId: opts.requirementId,
           evidenceType: opts.evidenceType,
           fileName: basename(file),
-          fileSizeBytes: buf.byteLength,
-          mimeType,
+          fileSizeBytes: source.size,
+          mimeType: source.mimeType,
           metadata,
           ...opts.releaseVersion ? { releaseVersion: opts.releaseVersion } : {},
           ...opts.createReleaseIfMissing ? { createReleaseIfMissing: true } : {},
@@ -816,8 +863,8 @@ async function uploadPresigned(file, buf, opts) {
     try {
       res = await fetch(uploadUrl, {
         method: "PUT",
-        headers: { "content-type": mimeType },
-        body: new Uint8Array(buf),
+        headers: { "content-type": source.mimeType },
+        body: source.blob,
         signal: controller.signal
       });
     } catch (err) {
@@ -898,19 +945,19 @@ async function uploadEvidence(opts) {
   }
   const results = [];
   for (const file of files) {
-    const buf = await promises.readFile(file);
-    if (isUneditedStub(buf)) {
+    if (await isUneditedStub(file)) {
       results.push({ file, ok: true, status: 0, skipped: true });
       continue;
     }
-    if (buf.byteLength >= DEFAULT_PRESIGNED_THRESHOLD_BYTES) {
-      const presignedResult = await uploadPresigned(file, buf, opts);
+    const source = await createUploadSource(file);
+    if (source.size >= DEFAULT_PRESIGNED_THRESHOLD_BYTES) {
+      const presignedResult = await uploadPresigned(file, source, opts);
       if (presignedResult !== PRESIGNED_FALLBACK) {
         results.push(presignedResult);
         continue;
       }
     }
-    results.push(await uploadOne(file, buf, opts));
+    results.push(await uploadOne(file, source, opts));
   }
   return results;
 }
@@ -2455,7 +2502,8 @@ async function syncCiTemplates(ctx) {
 var SENTINEL_ENTRIES = [
   ".e2e-gate-passed",
   ".e2e-evidence-wired",
-  ".sdlc-implementer-invoked"
+  ".sdlc-implementer-invoked",
+  ".sdlc-pr-watch.json"
 ];
 var MARKER = "# DevAudit sentinel files (devaudit-installer#226)";
 async function syncGitignore(ctx) {