@scalequality/check 0.1.1 → 0.2.0

package/bin/check.mjs

@@ -1,7 +1,13 @@
 #!/usr/bin/env node
-// ScaleQuality continuous check. Reports the project to ScaleQuality (re-measures
-// the repo) and exits non-zero when maturity is below the configured cutoff, so a
-// CI step can fail the build. Pure Node 18+ (global fetch), no dependencies.
+// ScaleQuality continuous check. Uploads THIS CI checkout to ScaleQuality (re-measures
+// the code the runner already has, including .git so durability still runs) and exits
+// non-zero when maturity is below the configured cutoff, so a CI step can fail the
+// build. Pure Node 18+ (global fetch/FormData/Blob), no npm dependencies.
+
+import { tmpdir } from "node:os"
+import { join } from "node:path"
+import { spawnSync } from "node:child_process"
+import { readFileSync, existsSync, statSync, rmSync } from "node:fs"
 
 const args = process.argv.slice(2)
 const flag = (name) => {
@@ -45,10 +51,37 @@ if (!token || !project) {
 
 async function main() {
   const auth = { Authorization: `Bearer ${token}` }
-  const r = await fetch(`${base}/report`, {
+
+  // Upload THIS checkout (the runner already has the code) instead of asking the server
+  // to clone the repo from outside — that needed a stored provider credential and failed
+  // with no_repo_reachable on private repos. Keep .git so the durability domain (git blame)
+  // still runs; node_modules + build output are excluded to stay small.
+  const archivePath = join(tmpdir(), `sq-checkout-${process.pid}.tar.gz`)
+  // Portable flags only (GNU/BSD/busybox tar all accept -czf, --exclude, -C). We do NOT
+  // rely on tar's exit code (some tars exit 1 on a benign "file changed as we read it"
+  // during a build); instead we require the archive to exist and be non-empty.
+  const tr = spawnSync("tar", [
+    "-czf", archivePath,
+    "--exclude=./node_modules", "--exclude=./dist", "--exclude=./build",
+    "--exclude=./.next", "--exclude=./out", "--exclude=./target",
+    "--exclude=./.venv", "--exclude=./venv", "--exclude=./coverage", "--exclude=./.turbo",
+    "-C", process.cwd(), ".",
+  ], { encoding: "utf8" })
+  if (!(existsSync(archivePath) && statSync(archivePath).size > 0)) {
+    fail(`could not archive the checkout (tar unavailable or failed). ${tr.error?.message || (tr.stderr || "").trim()}`)
+  }
+  const buf = readFileSync(archivePath)
+  rmSync(archivePath, { force: true })
+  const sizeMB = buf.length / (1024 * 1024)
+  if (sizeMB > 60) fail(`checkout archive too large (${sizeMB.toFixed(0)}MB > 60MB limit). Reduce clone depth or exclude build output.`)
+
+  const form = new FormData()
+  form.append("project", project)
+  form.append("file", new Blob([buf]), "checkout.tar.gz")
+  const r = await fetch(`${base}/report/upload`, {
     method: "POST",
-    headers: { ...auth, "Content-Type": "application/json" },
-    body: JSON.stringify({ project }),
+    headers: auth,
+    body: form,
   }).catch((e) => fail(`could not reach ${host} (${e.message})`))
   if (!r.ok) {
     const body = await r.text().catch(() => "")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalequality/check",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "ScaleQuality continuous code-maturity check for CI. Re-measures your repo on every build and fails the pipeline below your maturity line.",
   "type": "module",
   "bin": {