@cejel/cejel 0.2.2 → 0.3.1

package/dist/index.js

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+import { createRequire as __cejelCreateRequire } from 'node:module';
+const require = __cejelCreateRequire(import.meta.url);
 import {
   WitanReportSchema,
   createWitanAttestation,
@@ -9,15 +11,20 @@ import {
   runCejelScan,
   serializeWitanReport,
   verifyWitanAttestationBinding
-} from "./chunk-SNDRU52Z.js";
+} from "./chunk-XB65L6WE.js";
+import {
+  init_esm_shims
+} from "./chunk-LZVKQV3R.js";
 
 // src/index.ts
+init_esm_shims();
 import { createHash } from "crypto";
 import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
 import { join, resolve } from "path";
 import { pathToFileURL } from "url";
 
 // src/terminal.ts
+init_esm_shims();
 function renderMinScoreAbstentionFailure(summary, minScore) {
   if (summary.verdict !== "Insufficient source" && summary.verdict !== "Insufficient evidence") {
     throw new Error("A minimum-score abstention message requires an abstained Cejel summary.");
@@ -25,6 +32,13 @@ function renderMinScoreAbstentionFailure(summary, minScore) {
   return `Cejel: cannot evaluate the required minimum ${minScore.toFixed(1)}/4.0 because this repository has ${summary.verdict.toLowerCase()}.
 `;
 }
+function renderMinScoreLimitationFailure(summary, minScore) {
+  if (summary.scanLimitations.length === 0) {
+    throw new Error("A minimum-score limitation message requires a limited Cejel summary.");
+  }
+  return `Cejel: cannot evaluate the required minimum ${minScore.toFixed(1)}/4.0 because the scan has limited evidence (${summary.scanLimitations.length} limitation${summary.scanLimitations.length === 1 ? "" : "s"}). Resolve the reported limitations and re-scan.
+`;
+}
 function renderTerminalCertificate(summary) {
   const abstained = summary.verdict === "Insufficient source" || summary.verdict === "Insufficient evidence";
   if (!abstained && (summary.overallScore === null || summary.codeTrustScore === null || summary.processTrustScore === null)) {
@@ -44,6 +58,26 @@ function renderTerminalCertificate(summary) {
     `  Process trust: ${formatScore(summary.processTrustScore)}/4.0`,
     ""
   ];
+  if (summary.scanLimitations.length > 0) {
+    lines.push(
+      "LIMITED EVIDENCE \u2014 the score and verdict are qualified by scan limitations:",
+      ...summary.scanLimitations.map((limitation) => `  - ${limitation}`),
+      ""
+    );
+  }
+  if (summary.contentReadSummary && summary.contentReadSummary.skipped > 0) {
+    const reads = summary.contentReadSummary;
+    const errnoCounts = Object.entries(reads.unreadableByErrno).map(([errno, count]) => `${errno}: ${count}`).join(", ");
+    lines.push(
+      `Skipped content entries: ${reads.skipped} (unreadable: ${reads.byReason.unreadable}${errnoCounts ? ` [${errnoCounts}]` : ""}; too large: ${reads.byReason.tooLarge}; excluded by extension: ${reads.byReason.excludedByExtension}; denied path: ${reads.byReason.deniedPath}; non-regular file: ${reads.byReason.nonRegularFile}).`
+    );
+    if (reads.affectedCriteria.length > 0) {
+      lines.push(
+        `Criteria abstaining as insufficient_data: ${reads.affectedCriteria.join(", ")}.`
+      );
+    }
+    lines.push("");
+  }
   if (summary.contributingSources.length > 0) {
     lines.push(`Incorporates findings from: ${summary.contributingSources.join(", ")}`);
     for (const source of summary.externalSources) {
@@ -210,13 +244,13 @@ async function runWitanFreeCli(args) {
     process.stdout.write(USAGE);
     return 0;
   }
-  const { report, summary } = runCejelScan({
+  const { report, summary, generatedAt } = runCejelScan({
     repoPath: options.repoPath,
     ...options.productDisplayName ? { productDisplayName: options.productDisplayName } : {},
     ingestPatterns: options.ingestPatterns,
     warnOnEmptyIngestMatch: !options.quiet
   });
-  const attestation = createWitanAttestation(report, { toolVersion: cliVersion() });
+  const attestation = createWitanAttestation(report, { toolVersion: cliVersion(), generatedAt });
   mkdirSync(options.outDir, { recursive: true });
   writeFileSync(join(options.outDir, "report.json"), serializeWitanReport(report), "utf8");
   writeFileSync(
@@ -226,7 +260,7 @@ async function runWitanFreeCli(args) {
   );
   writeFileSync(
     join(options.outDir, "certificate.html"),
-    renderWitanHtmlReport(report, { cliVersion: cliVersion() }),
+    renderWitanHtmlReport(report, { cliVersion: cliVersion(), generatedAt }),
     "utf8"
   );
   writeFileSync(
@@ -250,6 +284,10 @@ Wrote:
     );
   }
   if (options.minScore != null) {
+    if (summary.scanLimitations.length > 0) {
+      process.stderr.write(renderMinScoreLimitationFailure(summary, options.minScore));
+      return 1;
+    }
     if (report.verdict === "insufficient_source") {
       process.stderr.write(renderMinScoreAbstentionFailure(summary, options.minScore));
       return 1;