@oxy.so/doctor 1.1.0 → 1.1.1

package/package.json

@@ -1,7 +1,12 @@
 {
   "name": "@oxy.so/doctor",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Read-only health checks for Oxy ecosystem repositories",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/OxyHQ/oxy.git",
+    "directory": "packages/doctor"
+  },
   "type": "module",
   "bin": {
     "oxy-doctor": "./src/cli.mjs"
@@ -9,7 +14,10 @@
   "exports": {
     ".": "./src/checks.mjs"
   },
-  "files": ["src", "README.md"],
+  "files": [
+    "src",
+    "README.md"
+  ],
   "scripts": {
     "test": "bun test tests",
     "prepublishOnly": "bun run test"

package/src/checks.mjs

@@ -12,10 +12,16 @@ export const FIRST_PARTY_SCOPES = ['@oxy.so/'];
  */
 export const DEFAULT_GRACE_DAYS = 14;
 const DAY_MS = 24 * 60 * 60 * 1000;
-export const isFirstPartyPackage = (name) => FIRST_PARTY_SCOPES.some((scope) => name.startsWith(scope));
+export const isFirstPartyPackage = (name) =>
+  FIRST_PARTY_SCOPES.some((scope) => name.startsWith(scope));
 
 export function compareVersions(left, right) {
-  const parse = (value) => value.replace(/^v/, '').split(/[.-]/).slice(0, 3).map((part) => Number(part) || 0);
+  const parse = (value) =>
+    value
+      .replace(/^v/, '')
+      .split(/[.-]/)
+      .slice(0, 3)
+      .map((part) => Number(part) || 0);
   const a = parse(left);
   const b = parse(right);
   for (let index = 0; index < 3; index += 1) {
@@ -38,7 +44,9 @@ export function rangeIncludesVersion(range, version) {
       if (term.startsWith('^')) {
         const [major, minor] = target.split('.').map(Number);
         const [candidateMajor, candidateMinor] = version.split('.').map(Number);
-        return comparison >= 0 && candidateMajor === major && (major > 0 || candidateMinor === minor);
+        return (
+          comparison >= 0 && candidateMajor === major && (major > 0 || candidateMinor === minor)
+        );
       }
       if (term.startsWith('~')) {
         const [major, minor] = target.split('.').map(Number);
@@ -72,8 +80,10 @@ async function collectManifests(directory, depth = 0) {
   const entries = await readdir(directory, { withFileTypes: true });
   const manifests = [];
   for (const entry of entries) {
-    if (entry.isFile() && entry.name === 'package.json') manifests.push(join(directory, entry.name));
-    if (entry.isDirectory() && !ignored.has(entry.name)) manifests.push(...await collectManifests(join(directory, entry.name), depth + 1));
+    if (entry.isFile() && entry.name === 'package.json')
+      manifests.push(join(directory, entry.name));
+    if (entry.isDirectory() && !ignored.has(entry.name))
+      manifests.push(...(await collectManifests(join(directory, entry.name), depth + 1)));
   }
   return manifests;
 }
@@ -83,12 +93,21 @@ async function collectManifests(directory, depth = 0) {
  * @param {(name: string) => Promise<{ version: string, publishedAt: string }>} fetchLatest
  * @param {{ graceDays?: number, now?: Date }} [options]
  */
-export async function inspectRepository(root, fetchLatest, { graceDays = DEFAULT_GRACE_DAYS, now = new Date() } = {}) {
+export async function inspectRepository(
+  root,
+  fetchLatest,
+  { graceDays = DEFAULT_GRACE_DAYS, now = new Date() } = {},
+) {
   const manifestPaths = await collectManifests(root);
   const usages = new Map();
   for (const path of manifestPaths) {
     const manifest = JSON.parse(await readFile(path, 'utf8'));
-    for (const section of ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies']) {
+    for (const section of [
+      'dependencies',
+      'devDependencies',
+      'peerDependencies',
+      'optionalDependencies',
+    ]) {
       for (const [name, range] of Object.entries(manifest[section] ?? {})) {
         if (!isFirstPartyPackage(name) || range === 'workspace:*' || range === 'catalog:') continue;
         const rows = usages.get(name) ?? [];
@@ -100,34 +119,67 @@ export async function inspectRepository(root, fetchLatest, { graceDays = DEFAULT
   const lockPath = join(root, 'bun.lock');
   const lockfile = existsSync(lockPath) ? await readFile(lockPath, 'utf8') : null;
   const findings = [];
-  if (!lockfile) findings.push({ severity: 'error', code: 'missing-lockfile', message: 'bun.lock is missing' });
-  await Promise.all([...usages].map(async ([name, rows]) => {
-    const { version: latest, publishedAt } = await fetchLatest(name);
-    const published = new Date(publishedAt);
-    if (Number.isNaN(published.getTime())) throw new Error(`Registry returned no publish time for ${name}@${latest}`);
-    const deadline = new Date(published.getTime() + graceDays * DAY_MS);
-    const overdue = now >= deadline;
-    const installed = lockfile ? [...new Set(lockfileVersions(lockfile, name))] : [];
-    if (installed.length > 1) findings.push({ severity: 'error', code: 'duplicate-version', package: name, installed, message: `${name} has multiple locked versions: ${installed.join(', ')}` });
-    for (const row of rows) {
-      if (rangeIncludesVersion(row.range, latest)) continue;
-      const due = deadline.toISOString().slice(0, 10);
-      findings.push(overdue
-        ? { severity: 'error', code: 'outdated', package: name, latest, publishedAt, ...row, message: `${name} ${row.range} does not include ${latest} in ${row.manifest} (published ${publishedAt.slice(0, 10)}; the ${graceDays}-day upgrade window closed ${due})` }
-        : { severity: 'warning', code: 'outdated', package: name, latest, publishedAt, ...row, message: `${name} ${row.range} does not include ${latest} in ${row.manifest} (upgrade by ${due})` });
-    }
-  }));
+  if (!lockfile)
+    findings.push({ severity: 'error', code: 'missing-lockfile', message: 'bun.lock is missing' });
+  await Promise.all(
+    [...usages].map(async ([name, rows]) => {
+      const { version: latest, publishedAt } = await fetchLatest(name);
+      const published = new Date(publishedAt);
+      if (Number.isNaN(published.getTime()))
+        throw new Error(`Registry returned no publish time for ${name}@${latest}`);
+      const deadline = new Date(published.getTime() + graceDays * DAY_MS);
+      const overdue = now >= deadline;
+      const installed = lockfile ? [...new Set(lockfileVersions(lockfile, name))] : [];
+      if (installed.length > 1)
+        findings.push({
+          severity: 'error',
+          code: 'duplicate-version',
+          package: name,
+          installed,
+          message: `${name} has multiple locked versions: ${installed.join(', ')}`,
+        });
+      for (const row of rows) {
+        if (rangeIncludesVersion(row.range, latest)) continue;
+        const due = deadline.toISOString().slice(0, 10);
+        findings.push(
+          overdue
+            ? {
+                severity: 'error',
+                code: 'outdated',
+                package: name,
+                latest,
+                publishedAt,
+                ...row,
+                message: `${name} ${row.range} does not include ${latest} in ${row.manifest} (published ${publishedAt.slice(0, 10)}; the ${graceDays}-day upgrade window closed ${due})`,
+              }
+            : {
+                severity: 'warning',
+                code: 'outdated',
+                package: name,
+                latest,
+                publishedAt,
+                ...row,
+                message: `${name} ${row.range} does not include ${latest} in ${row.manifest} (upgrade by ${due})`,
+              },
+        );
+      }
+    }),
+  );
   return { root, manifests: manifestPaths.length, packages: usages.size, findings };
 }
 
 /** The `latest` dist-tag of `name` and when that version was published. */
 export async function fetchLatestRelease(name) {
-  const response = await fetch(`https://registry.npmjs.org/${encodeURIComponent(name)}`, { headers: { accept: 'application/json' } });
+  const response = await fetch(`https://registry.npmjs.org/${encodeURIComponent(name)}`, {
+    headers: { accept: 'application/json' },
+  });
   if (!response.ok) throw new Error(`Registry returned ${response.status} for ${name}`);
   const metadata = await response.json();
   const version = metadata['dist-tags']?.latest;
-  if (typeof version !== 'string') throw new Error(`Registry returned no latest version for ${name}`);
+  if (typeof version !== 'string')
+    throw new Error(`Registry returned no latest version for ${name}`);
   const publishedAt = metadata.time?.[version];
-  if (typeof publishedAt !== 'string') throw new Error(`Registry returned no publish time for ${name}@${version}`);
+  if (typeof publishedAt !== 'string')
+    throw new Error(`Registry returned no publish time for ${name}@${version}`);
   return { version, publishedAt };
 }

package/src/cli.mjs

@@ -1,27 +1,41 @@
 #!/usr/bin/env node
-import { DEFAULT_GRACE_DAYS, fetchLatestRelease, findRepositoryRoot, inspectRepository } from './checks.mjs';
+import {
+  DEFAULT_GRACE_DAYS,
+  fetchLatestRelease,
+  findRepositoryRoot,
+  inspectRepository,
+} from './checks.mjs';
 
 const argv = process.argv.slice(2);
 const args = new Set(argv);
 if (args.has('--help') || args.has('-h')) {
-  console.log(`oxy-doctor [--ci] [--json] [--grace-days=N]\n\nRead-only checks for Oxy ecosystem dependency health.\nA newer @oxy.so release is a warning for N days after it is published (default ${DEFAULT_GRACE_DAYS}), then an error.\n--ci exits 1 on errors only.`);
+  console.log(
+    `oxy-doctor [--ci] [--json] [--grace-days=N]\n\nRead-only checks for Oxy ecosystem dependency health.\nA newer @oxy.so release is a warning for N days after it is published (default ${DEFAULT_GRACE_DAYS}), then an error.\n--ci exits 1 on errors only.`,
+  );
   process.exit(0);
 }
 const graceArg = argv.find((value) => value.startsWith('--grace-days='));
-const graceDays = graceArg === undefined ? DEFAULT_GRACE_DAYS : Number(graceArg.slice('--grace-days='.length));
+const graceDays =
+  graceArg === undefined ? DEFAULT_GRACE_DAYS : Number(graceArg.slice('--grace-days='.length));
 if (!Number.isInteger(graceDays) || graceDays < 0) {
   console.error('Oxy Doctor failed: --grace-days must be a non-negative integer');
   process.exit(2);
 }
 try {
-  const report = await inspectRepository(await findRepositoryRoot(), fetchLatestRelease, { graceDays });
+  const report = await inspectRepository(await findRepositoryRoot(), fetchLatestRelease, {
+    graceDays,
+  });
   if (args.has('--json')) console.log(JSON.stringify(report, null, 2));
   else {
-    console.log(`Oxy Doctor: ${report.packages} first-party packages across ${report.manifests} manifests`);
+    console.log(
+      `Oxy Doctor: ${report.packages} first-party packages across ${report.manifests} manifests`,
+    );
     if (report.findings.length === 0) console.log('✓ No dependency-health findings');
-    for (const finding of report.findings) console.log(`${finding.severity === 'error' ? '✗' : '!'} ${finding.message}`);
+    for (const finding of report.findings)
+      console.log(`${finding.severity === 'error' ? '✗' : '!'} ${finding.message}`);
   }
-  if (args.has('--ci') && report.findings.some((finding) => finding.severity === 'error')) process.exitCode = 1;
+  if (args.has('--ci') && report.findings.some((finding) => finding.severity === 'error'))
+    process.exitCode = 1;
 } catch (error) {
   console.error(`Oxy Doctor failed: ${error instanceof Error ? error.message : String(error)}`);
   process.exitCode = 2;