coderifts 1.8.4 → 2.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coderifts",
-  "version": "1.8.4",
+  "version": "2.0.0",
   "description": "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
   "author": "CodeRifts <hello@coderifts.com>",
   "license": "MIT",
@@ -43,11 +43,12 @@
     "test": "node --test test/*.test.js"
   },
   "dependencies": {
+    "@coderifts/agent-guard": "^1.6.0",
     "chalk": "^4.1.2",
     "cli-table3": "^0.6.4",
     "commander": "^12.0.0",
     "inquirer": "^8.2.6",
-    "js-yaml": "^4.2.0",
+    "js-yaml": "^4.3.1",
     "openapi-diff": "^0.24.1",
     "ora": "^5.4.1"
   },
@@ -55,7 +56,9 @@
     "z-schema": "^7.2.0",
     "json-schema-ref-parser": "npm:@apidevtools/json-schema-ref-parser@^11.7.3",
     "form-data": "^4.0.6",
-    "axios": ">=1.18.0"
+    "axios": ">=1.18.0",
+    "fast-uri": ">=3.1.5",
+    "brace-expansion": "5.0.9"
   },
   "devDependencies": {
     "esbuild": "^0.28.1"

package/scripts/assert-publish-gate.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# Assert-guarded checks that publish-gate source is present and wired.
+# Aborts loudly on drift. Does not copy vendored files.
+set -euo pipefail
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+fail() { echo "ASSERT FAIL: $*" >&2; exit 1; }
+
+# Preconditions
+[[ -f "$ROOT/src/commands/publish-gate.js" ]] || fail "missing src/commands/publish-gate.js"
+[[ -f "$ROOT/bin/coderifts.js" ]] || fail "missing bin/coderifts.js"
+[[ -f "$ROOT/test/publish-gate.test.js" ]] || fail "missing test/publish-gate.test.js"
+[[ -f "$ROOT/README.md" ]] || fail "missing README.md"
+
+# Expected strings in source
+grep -q "runPublishGate" "$ROOT/src/commands/publish-gate.js" || fail "runPublishGate not in publish-gate.js"
+grep -q "EMPTY_BEFORE" "$ROOT/src/commands/publish-gate.js" || fail "EMPTY_BEFORE guard missing"
+grep -q "execution_action" "$ROOT/src/commands/publish-gate.js" || fail "execution_action eval missing"
+grep -q "NEW_ARTIFACT" "$ROOT/src/commands/publish-gate.js" || fail "NEW_ARTIFACT rejection note missing"
+grep -q "publish-gate" "$ROOT/bin/coderifts.js" || fail "publish-gate command not registered"
+grep -q "prepublishOnly" "$ROOT/README.md" || fail "README missing prepublishOnly wiring"
+grep -q "coderifts publish-gate" "$ROOT/README.md" || fail "README missing publish-gate docs"
+
+# Test coverage markers
+grep -q "breaking change BLOCK" "$ROOT/test/publish-gate.test.js" || fail "test missing BLOCK case"
+grep -q "GIT_ERROR" "$ROOT/test/publish-gate.test.js" || fail "test missing GIT_ERROR case"
+grep -q "EMPTY_BEFORE" "$ROOT/test/publish-gate.test.js" || fail "test missing EMPTY_BEFORE case"
+grep -q "clean pass" "$ROOT/test/publish-gate.test.js" || fail "test missing clean pass case"
+grep -q "child.status" "$ROOT/test/publish-gate.test.js" || fail "test missing process-level child.status fixtures"
+grep -q "spawnSync" "$ROOT/test/publish-gate.test.js" || fail "test missing spawnSync process fixtures"
+
+# Command boundary must set process exit (library must not be the sole exit owner)
+grep -q "process.exit" "$ROOT/bin/coderifts.js" || fail "bin missing process.exit at publish-gate boundary"
+grep -q "result.exitCode" "$ROOT/bin/coderifts.js" || fail "bin missing result.exitCode mapping"
+# Library must not process.exit (fail-closed is boundary-owned)
+if grep -n "process\.exit" "$ROOT/src/commands/publish-gate.js" | grep -v 'never\|//\|process.exitCode' >/dev/null 2>&1; then
+  # Allow comments mentioning process.exit; fail on real calls
+  if grep -E "process\.exit\(" "$ROOT/src/commands/publish-gate.js" >/dev/null; then
+    fail "publish-gate.js must not call process.exit( — exit is command-boundary only"
+  fi
+fi
+
+echo "assert-publish-gate: OK"