sf-plugin-preflight 0.8.0 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.10.0]
+
+- Same version as the CLI; the new checks come through `sf preflight analyze` and the other commands.
+
+## [0.9.1]
+
+- Same as 0.9.0, which was never published.
+
+## [0.9.0]
+
+- Adds `sf preflight monitor`.
+
 ## [0.8.0]
 
 - First release (the plugin shares the CLI version): `sf preflight analyze | tests | agents | agent-tests | incidents | rollback | explain | evidence`, passing `--target-org` and `--json` through to the sf-preflight CLI.

package/README.md

@@ -25,6 +25,7 @@ sf preflight analyze --base origin/main --json     # same as --format json
 sf preflight tests --base origin/main --validate --target-org my-sandbox
 sf preflight agents Sales_Agent
 sf preflight incidents --target-org prod --since 7d
+sf preflight monitor --target-org prod --since 1h --notify-on high   # risky changes made in the org
 sf preflight rollback a1b2c3d
 sf preflight explain Opportunity
 sf preflight evidence --base origin/main --out preflight-evidence.json
@@ -41,7 +42,7 @@ listed or not (for example `--md-out`, `--sarif-out`, `--config`); see the
 | `-o <org>`, `--target-org <org>` | `--org <org>` |
 | `--json` | `--format json` (commands without formats ignore it) |
 
-On commands that read an org (`analyze`, `tests`, `agent-tests`, `incidents`, `rollback`), `-o` is
+On commands that read an org (`analyze`, `tests`, `agent-tests`, `incidents`, `monitor`, `rollback`), `-o` is
 the org, as everywhere in `sf`. The CLI's own output file flag is spelled `--out` there. On
 `evidence` and `explain`, which never read an org, `-o` stays the CLI's `--out`.
 

package/dist/commands/preflight/monitor.js

@@ -0,0 +1,19 @@
+// SPDX-License-Identifier: Apache-2.0
+import { Flags } from "@oclif/core";
+import { preflightCommand } from "../../command.js";
+export default preflightCommand({
+    cli: "monitor",
+    summary: "Watch an org's Setup Audit Trail for risky changes and alert Slack or Teams.",
+    description: "Reads the Setup Audit Trail of the target org (read-only; production is fine) and reports validation rules or flows switched off, broad permissions, Apex, sharing and security changes. Set PREFLIGHT_WEBHOOK_URL and use --notify-on to send an alert.",
+    examples: [
+        "<%= config.bin %> <%= command.id %> --target-org prod --since 24h",
+        "<%= config.bin %> <%= command.id %> --target-org prod --since 1h --notify-on high",
+    ],
+    org: true,
+    hasFormat: true,
+    flags: {
+        since: Flags.string({ summary: "Changes since a duration (1h, 24h, 7d) or a date." }),
+        "notify-on": Flags.string({ summary: "Send an alert at this risk or higher.", options: ["medium", "high"] }),
+        format: Flags.string({ summary: "Output format.", options: ["md", "json"] }),
+    },
+});

package/oclif.manifest.json

@@ -405,6 +405,84 @@
         "incidents.js"
       ]
     },
+    "preflight:monitor": {
+      "aliases": [],
+      "args": {},
+      "description": "Reads the Setup Audit Trail of the target org (read-only; production is fine) and reports validation rules or flows switched off, broad permissions, Apex, sharing and security changes. Set PREFLIGHT_WEBHOOK_URL and use --notify-on to send an alert.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %> --target-org prod --since 24h",
+        "<%= config.bin %> <%= command.id %> --target-org prod --since 1h --notify-on high"
+      ],
+      "flags": {
+        "project": {
+          "char": "p",
+          "name": "project",
+          "summary": "SFDX project directory (default: the current directory).",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "target-org": {
+          "char": "o",
+          "name": "target-org",
+          "summary": "Org to read from, by username or alias (an `sf org login` org).",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "since": {
+          "name": "since",
+          "summary": "Changes since a duration (1h, 24h, 7d) or a date.",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "notify-on": {
+          "name": "notify-on",
+          "summary": "Send an alert at this risk or higher.",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "medium",
+            "high"
+          ],
+          "type": "option"
+        },
+        "format": {
+          "name": "format",
+          "summary": "Output format.",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "md",
+            "json"
+          ],
+          "type": "option"
+        },
+        "json": {
+          "name": "json",
+          "summary": "Print JSON (same as --format json).",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "preflight:monitor",
+      "pluginAlias": "sf-plugin-preflight",
+      "pluginName": "sf-plugin-preflight",
+      "pluginType": "core",
+      "strict": false,
+      "summary": "Watch an org's Setup Audit Trail for risky changes and alert Slack or Teams.",
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "preflight",
+        "monitor.js"
+      ]
+    },
     "preflight:rollback": {
       "aliases": [],
       "args": {},
@@ -566,5 +644,5 @@
       ]
     }
   },
-  "version": "0.8.0"
+  "version": "0.10.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sf-plugin-preflight",
-  "version": "0.8.0",
-  "description": "Salesforce CLI plugin for sf-preflight: see what a Salesforce change sets off before it ships. Adds `sf preflight analyze`, `tests`, `agents`, `incidents`, `rollback` and more.",
+  "version": "0.10.0",
+  "description": "Salesforce CLI plugin for sf-preflight: see what a Salesforce change sets off before it ships. Adds `sf preflight analyze`, `tests`, `agents`, `incidents`, `monitor`, `rollback` and more.",
   "license": "Apache-2.0",
   "author": "sf-preflight contributors",
   "homepage": "https://visparashar.github.io/sf-preflight/",
@@ -55,7 +55,7 @@
   },
   "dependencies": {
     "@oclif/core": "^4.0.0",
-    "sf-preflight": "^0.8.0"
+    "sf-preflight": "^0.10.0"
   },
   "devDependencies": {
     "@types/node": "^26.6.4",