feat: add dispute statuses, npm audit, license compliance, and fix integration test CI (#371)

Co-authored-by: Levi-Ojukwu <ojukwulevichinedu@gmail.com>

Author: devonahi

.github/workflows/ci.yml

@@ -20,6 +20,41 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Run npm audit
+        run: npm audit --audit-level=moderate
+        continue-on-error: false
+
+      - name: Generate audit report
+        if: always()
+        run: npm audit --json > audit-report.json || true
+
+      - name: Upload audit report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: npm-audit-report
+          path: audit-report.json
+
+      - name: Install license-checker
+        run: npm install -g license-checker
+
+      - name: Check license compliance
+        run: |
+          npx license-checker --production --failOn "GPL-2.0;GPL-3.0;AGPL-3.0;SSPL-1.0;EUPL-1.1;OSL-3.0;CPAL-1.0;CPL-1.0;EPL-1.0;EPL-2.0;CDDL-1.0;CDDL-1.1;MPL-2.0" --summary
+          echo "License compliance check passed"
+
+      - name: Generate license report
+        if: always()
+        run: |
+          npx license-checker --production --json --out license-report.json || true
+
+      - name: Upload license report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: license-report
+          path: license-report.json
+
       - name: Cache TypeScript build output
         uses: actions/cache@v4
         with:

.github/workflows/integration-test.yml

@@ -8,6 +8,7 @@ on:
 jobs:
   integration-test:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
 
     services:
       postgres:
@@ -46,8 +47,21 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Generate Prisma client
+        run: npx prisma generate
+
       - name: Run database migrations
         run: npx prisma migrate deploy
 
       - name: Run integration tests
-        run: npm run test:integration
+        run: npm run test:integration -- --forceExit
+
+      - name: Upload test artifacts on failure
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: integration-test-results
+          path: |
+            test-results/
+            coverage/
+          retention-days: 7

prisma/migrations/20260628000000_add_cancelled_abandoned_to_dispute_status/migration.sql

@@ -0,0 +1,3 @@
+-- AlterEnum
+ALTER TYPE "DisputeStatus" ADD VALUE 'CANCELLED';
+ALTER TYPE "DisputeStatus" ADD VALUE 'ABANDONED';

prisma/schema.prisma

@@ -22,6 +22,8 @@ enum DisputeStatus {
   OPEN
   UNDER_REVIEW
   RESOLVED
+  CANCELLED
+  ABANDONED
 }
 
 model Escrow {

src/common/enums/escrow-state.enum.ts

@@ -26,4 +26,6 @@ export enum DisputeStatusEnum {
   OPEN = 'OPEN',
   UNDER_REVIEW = 'UNDER_REVIEW',
   RESOLVED = 'RESOLVED',
+  CANCELLED = 'CANCELLED',
+  ABANDONED = 'ABANDONED',
 }

src/prisma/prisma.service.ts

@@ -37,7 +37,7 @@ export type NotificationType =
   | 'DISPUTED'
   | 'COMPLETED'
   | 'REFUNDED';
-export type DisputeState = 'OPEN' | 'UNDER_REVIEW' | 'RESOLVED';
+export type DisputeState = 'OPEN' | 'UNDER_REVIEW' | 'RESOLVED' | 'CANCELLED' | 'ABANDONED';
 
 export interface EscrowRecord {
   id: string;