@cejel/cejel 0.4.10 → 0.5.0

package/README.md

@@ -92,7 +92,7 @@ if (-not $expected -or $actual -ne $expected.ToLowerInvariant()) {
 ```
 
 > **Windows signing status:** `cejel-Windows-x86_64.exe` is intentionally unsigned in
-> 0.4.10 and may trigger Microsoft SmartScreen. The release build removes Node's inherited
+> 0.5.0 and may trigger Microsoft SmartScreen. The release build removes Node's inherited
 > signature before SEA injection and fails unless Windows reports the result as `NotSigned`;
 > it does not ship an invalid signature. Before running it, verify `SHA256SUMS` and the
 > GitHub build-provenance attestation. Each binary also has an attached SPDX SBOM and an
@@ -115,7 +115,7 @@ docker run --rm --network=none -v "$PWD:/w" -w /w -v "$PWD/cejel:/cejel:ro" debi
 npx @cejel/cejel@latest .
 ```
 
-> **Distribution note:** Cejel `0.4.10` is the coordinated release version for npm,
+> **Distribution note:** Cejel `0.5.0` is the coordinated release version for npm,
 > standalone binaries, Docker/OCI, GitHub Action, Homebrew, and MCP Registry.
 
 `npx` can reuse a stale cached package. Force the current npm release with the `@latest`
@@ -177,16 +177,16 @@ gh attestation verify ./cejel-Windows-x86_64.exe -R BargLabs/cejel
 This is cryptographically signed provenance. It is distinct from Apple Developer ID or
 Microsoft Authenticode code-signing.
 
-**Docker / OCI.** The current container release is `0.4.10`:
+**Docker / OCI.** The current container release is `0.5.0`:
 
 ```bash
-docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.4.10
+docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.5.0
 ```
 
 The image defaults to `cejel-mcp` over stdio. To use the CLI instead:
 
 ```bash
-docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.4.10 .
+docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.5.0 .
 ```
 
 The OCI image carries an SBOM, maximum-mode build provenance, and a signed registry
@@ -274,9 +274,9 @@ prints that boundary on every successful verification.
 - `<path>` — repo to score (default: current directory)
 - `--out <dir>` — where to write report/certificate/badge files (default: `.cejel`;
   `--out-dir` remains available as a compatibility alias)
-- `--min-score <n>` — exit non-zero if the overall score is below `n` (0–4), or if Cejel
-  abstains and therefore cannot evaluate the threshold; used by the GitHub Action's optional
-  threshold gate
+- `--min-score <n>` — exit non-zero if the overall score is below `n` (0–4), if Cejel abstains,
+  or if fewer than half of the applicable dimensions behind any score were measured; used by the
+  GitHub Action's optional threshold gate
 - `--product-name <name>` — Set both the caller-context
   display name and slugified product ID so differently named checkouts can emit identical
   certificates.
@@ -516,7 +516,7 @@ The OCI image is an alternative when Docker is the preferred execution boundary.
 the host path with the repository OpenClaw should allow Cejel to read:
 
 ```bash
-npx -y openclaw@latest mcp set cejel-oci '{"command":"docker","args":["run","--rm","-i","-v","/absolute/path/to/repo:/workspace:ro","ghcr.io/barglabs/cejel:0.4.10"]}'
+npx -y openclaw@latest mcp set cejel-oci '{"command":"docker","args":["run","--rm","-i","-v","/absolute/path/to/repo:/workspace:ro","ghcr.io/barglabs/cejel:0.5.0"]}'
 npx -y openclaw@latest mcp doctor cejel-oci --probe
 ```
 

package/dist/calibration/llm-detector.js

@@ -5,20 +5,20 @@ import {
   deriveProductIdentity,
   runCejelScan,
   serializeWitanReport
-} from "../chunk-TUUNJP27.js";
+} from "../chunk-2453M7C2.js";
 import {
   listCejelLlmPackFiles
-} from "../chunk-IN2LPGGU.js";
-import "../chunk-IHT7B6L7.js";
+} from "../chunk-M6YYPJSN.js";
+import "../chunk-63XQDYQ5.js";
 import {
   external_exports
-} from "../chunk-GKYTLWQK.js";
+} from "../chunk-FSMZV3Y6.js";
 import {
   init_esm_shims,
   readRepoText,
   recordContentSkip,
   recordFilesystemSkip
-} from "../chunk-PTZU6G4E.js";
+} from "../chunk-O3MHSK25.js";
 
 // src/calibration/llm-detector.ts
 init_esm_shims();