safelaunch 1.0.31 → 1.0.32

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safelaunch",
-  "version": "1.0.31",
+  "version": "1.0.32",
   "description": "Backend Reliability Infrastructure - catch what breaks production before it breaks",
   "main": "index.js",
   "bin": {

package/src/scan.js

@@ -73,6 +73,16 @@ const IMPACTS = {
     impact: "Known exploits exist for these packages. Shipping them puts your users and infrastructure at risk.",
     fix:    "Run npm audit fix or check npm audit for manual fixes.",
   }),
+  PYTHON_MISMATCH: (expected, actual) => ({
+    title:  `Python version mismatch (expected: ${expected}, running: ${actual})`,
+    impact: "Code that works locally may fail in CI or production if they use the expected version.",
+    fix:    `Switch to Python ${expected} or update .python-version to match your runtime.`,
+  }),
+  NODE_ENGINES_MISMATCH: (expected, actual) => ({
+    title:  `Node version mismatch (package.json engines: ${expected}, running: ${actual})`,
+    impact: "Your package.json declares a required Node version that differs from what is running.",
+    fix:    `Switch to Node ${expected} or update the engines field in package.json.`,
+  }),
   NODE_MISMATCH: (expected, actual) => ({
     title:  `Node version mismatch (.nvmrc: ${expected}, running: ${actual})`,
     impact: "Code that works locally may fail in CI or production if they use the expected version.",
@@ -216,16 +226,63 @@ function checkNpmAudit(cwd) {
 
 function checkNodeVersion(cwd) {
   const issues = [];
-  const content = readFileSafe(path.join(cwd, ".nvmrc"));
-  if (!content) return issues;
-  const expected = content.trim().replace(/^v/, "");
-  const actual   = process.version.replace(/^v/, "");
-  if (expected.split(".")[0] !== actual.split(".")[0]) {
-    issues.push({ severity: "info", ...IMPACTS.NODE_MISMATCH(expected, actual) });
+  const actual = process.version.replace(/^v/, "");
+
+  // Check .nvmrc
+  const nvmrc = readFileSafe(path.join(cwd, ".nvmrc"));
+  if (nvmrc) {
+    const expected = nvmrc.trim().replace(/^v/, "");
+    if (expected.split(".")[0] !== actual.split(".")[0]) {
+      issues.push({ severity: "warn", ...IMPACTS.NODE_MISMATCH(expected, actual) });
+    }
   }
+
+  // Check package.json engines.node
+  const pkgRaw = readFileSafe(path.join(cwd, "package.json"));
+  if (pkgRaw) {
+    try {
+      const pkg = JSON.parse(pkgRaw);
+      const enginesNode = pkg.engines && pkg.engines.node;
+      if (enginesNode) {
+        const match = enginesNode.match(/(\d+)/);
+        if (match && match[1] !== actual.split(".")[0]) {
+          issues.push({ severity: "warn", ...IMPACTS.NODE_ENGINES_MISMATCH(enginesNode, actual) });
+        }
+      }
+    } catch {}
+  }
+
   return issues;
 }
 
+function checkPythonVersion(cwd) {
+  const issues = [];
+  const actual = exec("python3 --version") || exec("python --version");
+  if (!actual) return issues;
+  const actualVer = actual.replace(/^Python\s+/i, "").trim();
+
+  // Check .python-version
+  const pyVer = readFileSafe(path.join(cwd, ".python-version"));
+  if (pyVer) {
+    const expected = pyVer.trim();
+    if (expected.split(".")[0] !== actualVer.split(".")[0]) {
+      issues.push({ severity: "warn", ...IMPACTS.PYTHON_MISMATCH(expected, actualVer) });
+    }
+  }
+
+  // Check runtime.txt (Heroku/Render style)
+  const runtimeTxt = readFileSafe(path.join(cwd, "runtime.txt"));
+  if (runtimeTxt && runtimeTxt.startsWith("python-")) {
+    const expected = runtimeTxt.replace("python-", "").trim();
+    if (expected.split(".")[0] !== actualVer.split(".")[0]) {
+      issues.push({ severity: "warn", ...IMPACTS.PYTHON_MISMATCH(expected, actualVer) });
+    }
+  }
+
+  return issues;
+}
+
+
 function renderHookOutput(blockers, warnings, infos, elapsed) {
   const lines = [];
   const hr = gray("─".repeat(49));
@@ -325,6 +382,7 @@ async function runScan(options = {}) {
     ...checkTypeScript(cwd),
     ...checkNpmAudit(cwd),
     ...checkNodeVersion(cwd),
+    ...checkPythonVersion(cwd),
   ];
   const blockers = allIssues.filter((i) => i.severity === "block");
   const warnings = allIssues.filter((i) => i.severity === "warn");