coderifts 3.2.0 → 3.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coderifts",
-  "version": "3.2.0",
+  "version": "3.3.0",
   "description": "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
   "author": "CodeRifts <hello@coderifts.com>",
   "license": "MIT",
@@ -38,12 +38,13 @@
   },
   "scripts": {
     "build": "node scripts/copy-corpus.js && esbuild bin/coderifts.js --bundle --platform=node --target=node18 --outfile=dist/cli.js",
-    "prepublishOnly": "bash ../../scripts/freeze-gate.sh && npm run build",
+    "prepublishOnly": "node scripts/assert-guard-major.js && bash ../../scripts/freeze-gate.sh && npm run build",
+    "assert-guard-major": "node scripts/assert-guard-major.js",
     "postinstall": "node scripts/postinstall.js",
     "test": "node --test test/*.test.js"
   },
   "dependencies": {
-    "@coderifts/agent-guard": "^1.6.0",
+    "@coderifts/agent-guard": "^6.4.0",
     "chalk": "^4.1.2",
     "cli-table3": "^0.6.4",
     "commander": "^12.0.0",

package/scripts/assert-guard-major.js

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+'use strict';
+
+/**
+ * CLI release gate (prepublishOnly): refuse to publish if the declared
+ * @coderifts/agent-guard range floors below the minimum acceptable major.
+ *
+ * Honest scope: compares the dependency *range floor* (e.g. ^6.4.0 → 6) to a
+ * pinned constant. Does not call npm registry. Optional: if node_modules has a
+ * resolved package, also fail when its major is below the floor (stale install).
+ *
+ * Why: evening audit 2.4 — CLI sat on ^1.6.0 while published guard is 6.x.
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+/** Minimum acceptable major for @coderifts/agent-guard (published line). */
+const MIN_GUARD_MAJOR = 6;
+const DEP = '@coderifts/agent-guard';
+
+function fail(msg) {
+  console.error(`assert-guard-major: FAIL — ${msg}`);
+  process.exit(1);
+}
+
+function ok(msg) {
+  console.log(`assert-guard-major: OK — ${msg}`);
+}
+
+/**
+ * Floor major from a semver range used in package.json dependencies.
+ * Supports: ^6.4.0, ~6.4.0, >=6.4.0, 6.4.0, 6.x, 6.*
+ * Rejects: * , latest, empty, multi-range with lower floor below MIN (takes first number).
+ */
+function floorMajorFromRange(range) {
+  if (typeof range !== 'string' || !range.trim()) return null;
+  const s = range.trim();
+  if (s === '*' || s === 'x' || s === 'latest' || s.startsWith('file:') || s.startsWith('workspace:')) {
+    return null; // wildcards / non-semver — treat as unacceptable for publish
+  }
+  // First MAJOR digit group after optional ^ ~ >= > =
+  const m = s.match(/(?:^|[\s^~>=<])(\d+)(?:\.\d+|\.x|\.\*)?/);
+  if (!m) return null;
+  return parseInt(m[1], 10);
+}
+
+function main() {
+  const pkgPath = path.join(__dirname, '..', 'package.json');
+  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+  const range = pkg.dependencies && pkg.dependencies[DEP];
+  if (!range) fail(`${DEP} missing from dependencies`);
+
+  const floor = floorMajorFromRange(range);
+  if (floor == null) {
+    fail(
+      `${DEP} range ${JSON.stringify(range)} has no parseable major floor `
+      + `(wildcards/non-semver not allowed; need e.g. ^${MIN_GUARD_MAJOR}.0.0)`,
+    );
+  }
+  if (floor < MIN_GUARD_MAJOR) {
+    fail(
+      `${DEP} range ${JSON.stringify(range)} floors at major ${floor}; `
+      + `minimum acceptable major is ${MIN_GUARD_MAJOR}`,
+    );
+  }
+
+  // Optional: resolved install must not lag the declared floor (stale node_modules).
+  try {
+    const resolved = require(path.join(
+      path.dirname(require.resolve(`${DEP}`)),
+      // package root: require('@coderifts/agent-guard') → dist/cjs/index.js
+      '..',
+      '..',
+      'package.json',
+    ));
+    // From dist/cjs → package root is ../..
+  } catch (_) {
+    // try alternate resolve
+  }
+
+  let resolvedVersion = null;
+  try {
+    // Walk up from the main entry to package.json (exports block ./package.json).
+    let dir = path.dirname(require.resolve(DEP));
+    for (let i = 0; i < 6; i++) {
+      const cand = path.join(dir, 'package.json');
+      if (fs.existsSync(cand)) {
+        const rp = JSON.parse(fs.readFileSync(cand, 'utf8'));
+        if (rp.name === DEP) {
+          resolvedVersion = rp.version;
+          break;
+        }
+      }
+      const parent = path.dirname(dir);
+      if (parent === dir) break;
+      dir = parent;
+    }
+  } catch (err) {
+    // Not installed — range check alone is enough for prepublish if install follows.
+    ok(`declared ${DEP}@${range} (floor major ${floor} ≥ ${MIN_GUARD_MAJOR}); package not resolved in tree (${err && err.message})`);
+    return;
+  }
+
+  if (resolvedVersion) {
+    const rm = /^(\d+)/.exec(resolvedVersion);
+    const rMajor = rm ? parseInt(rm[1], 10) : null;
+    if (rMajor == null || rMajor < MIN_GUARD_MAJOR) {
+      fail(
+        `resolved ${DEP}@${resolvedVersion} major ${rMajor} is below minimum ${MIN_GUARD_MAJOR}`,
+      );
+    }
+    if (rMajor < floor) {
+      fail(
+        `resolved ${DEP}@${resolvedVersion} major ${rMajor} is below declared range floor ${floor}`,
+      );
+    }
+    ok(`declared ${DEP}@${range} (floor ${floor}); resolved ${resolvedVersion} (major ≥ ${MIN_GUARD_MAJOR})`);
+    return;
+  }
+
+  ok(`declared ${DEP}@${range} (floor major ${floor} ≥ ${MIN_GUARD_MAJOR})`);
+}
+
+main();