@cejel/cejel 0.1.3 → 0.1.5

package/dist/index.js

@@ -1,11 +1,13 @@
 #!/usr/bin/env node
 import {
+  createWitanAttestation,
   formatExternalSourceLine,
   renderWitanBadgeEndpoint,
   renderWitanBadgeSvg,
   renderWitanHtmlReport,
-  runCejelScan
-} from "./chunk-QQVCIG4N.js";
+  runCejelScan,
+  serializeWitanReport
+} from "./chunk-A7NZKJ5H.js";
 
 // src/index.ts
 import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
@@ -14,11 +16,15 @@ import { pathToFileURL } from "url";
 
 // src/terminal.ts
 function renderTerminalCertificate(summary) {
-  const lines = summary.insufficientSourceReason ? [
+  const abstained = summary.verdict === "Insufficient source";
+  if (!abstained && (summary.overallScore === null || summary.codeTrustScore === null || summary.processTrustScore === null)) {
+    throw new Error("A scored Cejel summary must carry numeric headline scores.");
+  }
+  const lines = abstained ? [
     `Cejel Trust Certificate \u2014 ${summary.productDisplayName}`,
     "",
     "Insufficient source to certify.",
-    `  ${summary.insufficientSourceReason}`,
+    `  ${summary.insufficientSourceReason ?? "No ratable source was found."}`,
     ""
   ] : [
     `Cejel Trust Certificate \u2014 ${summary.productDisplayName}`,
@@ -35,7 +41,7 @@ function renderTerminalCertificate(summary) {
     }
     lines.push("");
   }
-  if (summary.insufficientSourceReason) {
+  if (abstained) {
     lines.push("See report.json / certificate.html for the full per-criterion detail.");
   } else if (summary.topFindings.length === 0) {
     lines.push("No evidence-backed findings.");
@@ -49,7 +55,7 @@ function renderTerminalCertificate(summary) {
       lines.push(`  ...and ${remaining} more \u2014 see the written report for the full list.`);
     }
   }
-  if (!summary.insufficientSourceReason && summary.externalFindingCount > 0) {
+  if (!abstained && summary.externalFindingCount > 0) {
     lines.push(
       "",
       `External findings (${summary.externalFindingCount} total, attributed to tool + criterion):`
@@ -68,6 +74,7 @@ function renderTerminalCertificate(summary) {
 `;
 }
 function formatScore(score) {
+  if (score === null) throw new Error("A scored Cejel summary must carry numeric scores.");
   return score.toFixed(1);
 }
 
@@ -115,6 +122,9 @@ var CLI_FLAG_KIND_BY_TOKEN = new Map(
   CLI_FLAG_SPECS.flatMap((spec) => spec.tokens.map((token) => [token, spec.kind]))
 );
 function cliVersion() {
+  if (typeof __CEJEL_SEA_VERSION__ === "string" && __CEJEL_SEA_VERSION__.length > 0) {
+    return __CEJEL_SEA_VERSION__;
+  }
   const manifest = JSON.parse(
     readFileSync(new URL("../package.json", import.meta.url), "utf8")
   );
@@ -132,7 +142,7 @@ var usageOptions = CLI_FLAG_SPECS.map(
 ).join("\n");
 var USAGE = `cejel \u2014 a trust certificate for your codebase
 
-Usage:  npx @cejel/cejel [path] [options]
+Usage:  npx cejel [path] [options]
 
 Options:
 ${usageOptions}
@@ -160,8 +170,14 @@ async function runWitanFreeCli(args) {
     ingestPatterns: options.ingestPatterns,
     warnOnEmptyIngestMatch: !options.quiet
   });
+  const attestation = createWitanAttestation(report, { toolVersion: cliVersion() });
   mkdirSync(options.outDir, { recursive: true });
-  writeFileSync(join(options.outDir, "report.json"), JSON.stringify(report, null, 2), "utf8");
+  writeFileSync(join(options.outDir, "report.json"), serializeWitanReport(report), "utf8");
+  writeFileSync(
+    join(options.outDir, "attestation.json"),
+    JSON.stringify(attestation, null, 2),
+    "utf8"
+  );
   writeFileSync(join(options.outDir, "certificate.html"), renderWitanHtmlReport(report), "utf8");
   writeFileSync(
     join(options.outDir, "badge.json"),
@@ -176,18 +192,28 @@ async function runWitanFreeCli(args) {
       `
 Wrote:
   ${options.outDir}/report.json
+  ${options.outDir}/attestation.json
   ${options.outDir}/certificate.html
   ${options.outDir}/badge.json
   ${options.outDir}/badge.svg
 `
     );
   }
-  if (options.minScore != null && report.overallScore < options.minScore) {
-    process.stderr.write(
-      `Cejel: overall score ${report.overallScore.toFixed(1)}/4.0 is below the required minimum ${options.minScore.toFixed(1)}/4.0
+  if (options.minScore != null) {
+    if (report.verdict === "insufficient_source") {
+      process.stderr.write(
+        `Cejel: cannot evaluate the required minimum ${options.minScore.toFixed(1)}/4.0 because this repository has insufficient source.
 `
-    );
-    return 1;
+      );
+      return 1;
+    }
+    if (report.overallScore < options.minScore) {
+      process.stderr.write(
+        `Cejel: overall score ${report.overallScore.toFixed(1)}/4.0 is below the required minimum ${options.minScore.toFixed(1)}/4.0
+`
+      );
+      return 1;
+    }
   }
   return 0;
 }