@reddoorla/maintenance 0.50.0 → 0.52.0

package/dist/cli/commands/audit.js

@@ -38,6 +38,38 @@ var init_credentials = __esm({
   }
 });
 
+// src/reports/airtable/throttle.ts
+function createMinIntervalThrottle(opts) {
+  const { minIntervalMs, now, delay } = opts;
+  return function wrap(fn) {
+    let chain = Promise.resolve();
+    let last = Number.NEGATIVE_INFINITY;
+    return (...args) => {
+      chain = chain.then(async () => {
+        const wait = minIntervalMs - (now() - last);
+        if (wait > 0) await delay(wait);
+        last = now();
+        fn(...args);
+      }).catch(() => {
+      });
+    };
+  };
+}
+function applyThrottle(base, opts) {
+  const real = base._base?.runAction;
+  if (typeof real !== "function") return base;
+  const wrap = createMinIntervalThrottle(opts);
+  const throttled = wrap(real.bind(base._base));
+  base._base.runAction = throttled;
+  base.runAction = throttled;
+  return base;
+}
+var init_throttle = __esm({
+  "src/reports/airtable/throttle.ts"() {
+    "use strict";
+  }
+});
+
 // src/reports/airtable/client.ts
 var client_exports = {};
 __export(client_exports, {
@@ -61,12 +93,20 @@ function readAirtableConfig() {
   return { apiKey, baseId };
 }
 function openBase(cfg) {
-  return new Airtable({ apiKey: cfg.apiKey }).base(cfg.baseId);
+  const base = new Airtable({ apiKey: cfg.apiKey }).base(cfg.baseId);
+  return applyThrottle(base, {
+    minIntervalMs: MIN_REQUEST_INTERVAL_MS,
+    now: () => Date.now(),
+    delay: (ms) => new Promise((resolve3) => setTimeout(resolve3, ms))
+  });
 }
+var MIN_REQUEST_INTERVAL_MS;
 var init_client = __esm({
   "src/reports/airtable/client.ts"() {
     "use strict";
     init_credentials();
+    init_throttle();
+    MIN_REQUEST_INTERVAL_MS = 220;
   }
 });
 
@@ -74,12 +114,15 @@ var init_client = __esm({
 var websites_exports = {};
 __export(websites_exports, {
   ACTIVE_STATUSES: () => ACTIVE_STATUSES,
+  SEVERITY_RANK: () => SEVERITY_RANK,
   WEBSITES_TABLE: () => WEBSITES_TABLE,
   getWebsiteBySlug: () => getWebsiteBySlug,
   isDashboardVisible: () => isDashboardVisible,
   listWebsites: () => listWebsites,
   mapRow: () => mapRow,
+  normalizeSecurityAdvisory: () => normalizeSecurityAdvisory,
   parseNotifyRouting: () => parseNotifyRouting,
+  parseSecurityAdvisories: () => parseSecurityAdvisories,
   siteSlug: () => siteSlug,
   updateA11yCounts: () => updateA11yCounts,
   updateAuditFields: () => updateAuditFields,
@@ -160,6 +203,7 @@ function mapRow(rec) {
     securityVulnsModerate: f["Security Vulns Moderate"] ?? null,
     securityVulnsLow: f["Security Vulns Low"] ?? null,
     lastSecurityAuditAt: f["Last security audit at"] ?? null,
+    securityAdvisories: parseSecurityAdvisories(f["Security advisories"]),
     certDaysRemaining: f["Cert days remaining"] ?? null,
     domainCheckedAt: f["Domain checked at"] ?? null,
     crossbrowserOk: typeof f["Crossbrowser OK"] === "boolean" ? f["Crossbrowser OK"] : null,
@@ -223,6 +267,38 @@ function depsFields(counts) {
   }
   return fields;
 }
+function normalizeSecurityAdvisory(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  const e = raw;
+  const module = typeof e["module"] === "string" ? e["module"] : null;
+  const severity = e["severity"];
+  if (module === null) return null;
+  if (severity !== "low" && severity !== "moderate" && severity !== "high" && severity !== "critical")
+    return null;
+  const cves = Array.isArray(e["cves"]) ? e["cves"].filter((c) => typeof c === "string") : [];
+  return {
+    module,
+    severity,
+    title: typeof e["title"] === "string" ? e["title"] : "",
+    cves,
+    url: typeof e["url"] === "string" ? e["url"] : null
+  };
+}
+function parseSecurityAdvisories(raw) {
+  if (typeof raw !== "string" || raw.trim() === "") return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!Array.isArray(parsed)) return null;
+  return parsed.map(normalizeSecurityAdvisory).filter((a) => a !== null);
+}
+function securityAdvisoryFields(advisories) {
+  const capped = [...advisories].sort((a, b) => SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity]).slice(0, MAX_PERSISTED_ADVISORIES);
+  return { "Security advisories": JSON.stringify(capped) };
+}
 function securityFields(counts) {
   return {
     "Security Vulns Critical": counts.critical,
@@ -266,6 +342,8 @@ async function updateAuditFields(base, recordId, audits) {
   if (audits.a11y) Object.assign(fields, a11yFields(audits.a11y));
   if (audits.deps) Object.assign(fields, depsFields(audits.deps));
   if (audits.security) Object.assign(fields, securityFields(audits.security));
+  if (audits.securityAdvisories)
+    Object.assign(fields, securityAdvisoryFields(audits.securityAdvisories));
   if (audits.domain) Object.assign(fields, domainFields(audits.domain));
   if (audits.browser) Object.assign(fields, browserFields(audits.browser));
   await base(WEBSITES_TABLE).update([{ id: recordId, fields }]);
@@ -286,7 +364,7 @@ async function updateLaunched(base, recordId, at) {
   const fields = { Status: "maintenance", "Launched at": at };
   await base(WEBSITES_TABLE).update([{ id: recordId, fields }]);
 }
-var WEBSITES_TABLE, ACTIVE_STATUSES, FREQUENCIES;
+var WEBSITES_TABLE, ACTIVE_STATUSES, FREQUENCIES, SEVERITY_RANK, MAX_PERSISTED_ADVISORIES;
 var init_websites = __esm({
   "src/reports/airtable/websites.ts"() {
     "use strict";
@@ -296,6 +374,13 @@ var init_websites = __esm({
       "launch period"
     ]);
     FREQUENCIES = ["None", "Monthly", "Quarterly", "Yearly"];
+    SEVERITY_RANK = {
+      critical: 0,
+      high: 1,
+      moderate: 2,
+      low: 3
+    };
+    MAX_PERSISTED_ADVISORIES = 25;
   }
 });
 
@@ -456,9 +541,19 @@ function securityCountsFromResult(result) {
   const c = details?.counts ?? { low: 0, moderate: 0, high: 0, critical: 0 };
   return { critical: c.critical, high: c.high, moderate: c.moderate, low: c.low };
 }
+function advisoriesFromResult(result) {
+  if (result.audit !== "security") {
+    throw new Error(`Expected a 'security' AuditResult, got '${result.audit}'`);
+  }
+  const details = result.details;
+  const raw = details?.advisories;
+  if (!Array.isArray(raw)) return [];
+  return raw.map(normalizeSecurityAdvisory).filter((a) => a !== null);
+}
 var init_security_airtable = __esm({
   "src/audits/security-airtable.ts"() {
     "use strict";
+    init_websites();
   }
 });
 
@@ -547,6 +642,7 @@ async function writeAuditsToAirtable(args) {
   if (sec && hasSecurityCounts(sec)) {
     const counts = securityCountsFromResult(sec);
     audits.security = counts;
+    audits.securityAdvisories = advisoriesFromResult(sec);
     writes.push({ audit: "security", counts });
   }
   const dom = results.find((r) => r.audit === "domain");