@cejel/cejel 0.4.5 → 0.4.7

package/dist/{chunk-KGFGX3TP.js → chunk-UYJBSQCV.js}

@@ -4,7 +4,7 @@ const require = __cejelCreateRequire(import.meta.url);
 import {
   __export,
   init_esm_shims
-} from "./chunk-R4DPQLS2.js";
+} from "./chunk-ZNVILRHK.js";
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};

package/dist/{chunk-EW6NAHE4.js → chunk-XHAETB7N.js}

@@ -7,7 +7,7 @@ import {
   __filename,
   __require,
   init_esm_shims
-} from "./chunk-R4DPQLS2.js";
+} from "./chunk-ZNVILRHK.js";
 
 // node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/typescript.js
 var require_typescript = __commonJS({

package/dist/{chunk-R4DPQLS2.js → chunk-ZNVILRHK.js}

@@ -54,10 +54,17 @@ var init_esm_shims = __esm({
   }
 });
 
+// src/filesystem-limits.ts
+init_esm_shims();
+var MAX_REPOSITORY_CONTENT_BYTES = 512e3;
+
 // src/witan/content-reads.ts
 init_esm_shims();
 import { closeSync, lstatSync, openSync, readFileSync, readSync } from "fs";
 import { resolve } from "path";
+function contentReadSignalKey(criterionId, signalId) {
+  return [criterionId, signalId].join(":");
+}
 var activeSession;
 function errnoClass(error) {
   if (typeof error !== "object" || error === null || !("code" in error)) return null;
@@ -69,6 +76,14 @@ function recordSkip(path2, reason, errno, affectsCurrentCriterion = false, dedup
   if (!session) return;
   if (affectsCurrentCriterion && session.criterion) {
     session.affectedCriteria.add(session.criterion);
+    const signals = session.signals;
+    if (signals && signals.length > 0) {
+      for (const signal of signals) {
+        session.affectedSignals.add(contentReadSignalKey(session.criterion, signal));
+      }
+    } else {
+      session.unattributedCriteria.add(session.criterion);
+    }
   }
   if (deduplicate) {
     const key = `${resolve(path2)}\0${reason}\0${errno ?? ""}`;
@@ -104,7 +119,9 @@ function trackContentReads(_repoPath, collect) {
     return {
       value: collect(),
       summary: summaryFor(existing),
-      affectedCriteria: existing.affectedCriteria
+      affectedCriteria: existing.affectedCriteria,
+      affectedSignals: existing.affectedSignals,
+      unattributedCriteria: existing.unattributedCriteria
     };
   }
   const session = {
@@ -117,7 +134,9 @@ function trackContentReads(_repoPath, collect) {
     },
     unreadableByErrno: /* @__PURE__ */ new Map(),
     deduplicatedSkips: /* @__PURE__ */ new Set(),
-    affectedCriteria: /* @__PURE__ */ new Set()
+    affectedCriteria: /* @__PURE__ */ new Set(),
+    affectedSignals: /* @__PURE__ */ new Set(),
+    unattributedCriteria: /* @__PURE__ */ new Set()
   };
   activeSession = session;
   try {
@@ -125,7 +144,9 @@ function trackContentReads(_repoPath, collect) {
     return {
       value,
       summary: summaryFor(session),
-      affectedCriteria: session.affectedCriteria
+      affectedCriteria: session.affectedCriteria,
+      affectedSignals: session.affectedSignals,
+      unattributedCriteria: session.unattributedCriteria
     };
   } finally {
     activeSession = void 0;
@@ -142,9 +163,36 @@ function withContentReadCriterion(criterion, collect) {
     session.criterion = previous;
   }
 }
+function withContentReadSignal(criterionId, signalId, collect) {
+  return withContentReadSignals(criterionId, [signalId], collect);
+}
+function withContentReadSignals(criterionId, signalIds, collect) {
+  if (signalIds.length === 0) {
+    throw new Error("Cejel invariant: withContentReadSignals requires at least one signal id");
+  }
+  const session = activeSession;
+  if (!session || session.criterion !== criterionId) return collect();
+  const previous = session.signals;
+  session.signals = signalIds;
+  try {
+    return collect();
+  } finally {
+    session.signals = previous;
+  }
+}
 function recordContentSkip(path2, reason, deduplicate = false) {
   recordSkip(path2, reason, void 0, false, deduplicate);
 }
+function recordContentSkipForCriteria(path2, reason, criteria, deduplicate = false) {
+  const session = activeSession;
+  if (session) {
+    for (const criterion of criteria) {
+      session.affectedCriteria.add(criterion);
+      session.unattributedCriteria.add(criterion);
+    }
+  }
+  recordSkip(path2, reason, void 0, false, deduplicate);
+}
 function recordFilesystemSkip(path2, error, deniedContext = false, deduplicate = true) {
   const errno = errnoClass(error);
   if (!errno) throw error;
@@ -161,6 +209,10 @@ function readRepoText(path2, encoding = "utf8") {
       recordSkip(path2, "non_regular_file", void 0, true, true);
       return "";
     }
+    if (stat.size > MAX_REPOSITORY_CONTENT_BYTES) {
+      recordSkip(path2, "too_large", void 0, true, true);
+      return "";
+    }
   } catch (error) {
     recordFilesystemSkip(path2, error);
     return "";
@@ -211,9 +263,14 @@ export {
   __dirname,
   __filename,
   init_esm_shims,
+  MAX_REPOSITORY_CONTENT_BYTES,
+  contentReadSignalKey,
   trackContentReads,
   withContentReadCriterion,
+  withContentReadSignal,
+  withContentReadSignals,
   recordContentSkip,
+  recordContentSkipForCriteria,
   recordFilesystemSkip,
   readRepoText,
   readRepoTextPrefix

package/dist/index.js

@@ -10,6 +10,7 @@ import {
   assertSelectableRubricVersion,
   buildRelyingPartySummary,
   createWitanAttestation,
+  formatCertificateMetricAppliedWeightPercent,
   formatCertificateMetricLabel,
   formatCertificateMetricValue,
   formatExternalSourceLine,
@@ -20,12 +21,12 @@ import {
   runCejelScan,
   serializeWitanReport,
   verifyWitanAttestationBinding
-} from "./chunk-4IXESHG7.js";
-import "./chunk-EPK7UTIK.js";
-import "./chunk-KGFGX3TP.js";
+} from "./chunk-QTLLASOO.js";
+import "./chunk-OIGCYULH.js";
+import "./chunk-UYJBSQCV.js";
 import {
   init_esm_shims
-} from "./chunk-R4DPQLS2.js";
+} from "./chunk-ZNVILRHK.js";
 
 // src/index.ts
 init_esm_shims();
@@ -113,13 +114,16 @@ function renderTerminalCertificate(summary, report) {
     (criterion) => criterion.metrics.map((metric) => ({
       criterionId: criterion.id,
       label: formatCertificateMetricLabel(metric),
-      value: formatCertificateMetricValue(criterion, metric)
+      value: formatCertificateMetricValue(criterion, metric),
+      weightPercent: formatCertificateMetricAppliedWeightPercent(criterion, metric)
     }))
   );
   if (!abstained && (measurements?.length ?? 0) > 0) {
     lines.push("Measurements:");
     for (const measurement of measurements ?? []) {
-      lines.push(`  ${measurement.criterionId} \u2014 ${measurement.label}: ${measurement.value}`);
+      lines.push(
+        `  ${measurement.criterionId} \u2014 ${measurement.label}: ${measurement.value} (weight ${measurement.weightPercent}% of ${measurement.criterionId})`
+      );
     }
     lines.push("");
   }
@@ -210,6 +214,12 @@ var CLI_FLAG_SPECS = [
     description: "EXPLICIT OPT-IN: pin a rubric other than the calibrated default (see docs); prospective rubrics carry no calibration claim",
     kind: "rubricPin"
   },
+  {
+    tokens: ["--run-attempt"],
+    value: "<n>",
+    description: "record which CI run attempt produced this certificate (set by the GitHub Action; omit otherwise)",
+    kind: "runAttempt"
+  },
   {
     tokens: ["--quiet"],
     description: "suppress the terminal summary",
@@ -316,7 +326,11 @@ async function runWitanCli(args, rubricVersion) {
     ingestPatterns: options.ingestPatterns,
     warnOnEmptyIngestMatch: !options.quiet
   });
-  const attestation = createWitanAttestation(report, { toolVersion: cliVersion(), generatedAt });
+  const attestation = createWitanAttestation(report, {
+    toolVersion: cliVersion(),
+    generatedAt,
+    ...options.runAttempt ? { githubRunAttempt: options.runAttempt } : {}
+  });
   mkdirSync(options.outDir, { recursive: true });
   writeFileSync(join(options.outDir, "report.json"), serializeWitanReport(report), "utf8");
   writeFileSync(
@@ -326,7 +340,11 @@ async function runWitanCli(args, rubricVersion) {
   );
   writeFileSync(
     join(options.outDir, "certificate.html"),
-    renderWitanHtmlReport(report, { cliVersion: cliVersion(), generatedAt }),
+    renderWitanHtmlReport(report, {
+      cliVersion: cliVersion(),
+      generatedAt,
+      ...options.runAttempt ? { runAttempt: options.runAttempt } : {}
+    }),
     "utf8"
   );
   writeFileSync(
@@ -453,6 +471,7 @@ function parseArgs(args) {
   let showHelp = false;
   let showVersion = false;
   let rubricPin;
+  let runAttempt;
   const ingestPatterns = [];
   for (let index = 0; index < args.length; index += 1) {
     const arg = args[index];
@@ -531,6 +550,16 @@ function parseArgs(args) {
           index += 1;
           break;
         }
+        case "runAttempt": {
+          const value = args[index + 1];
+          if (!value) throw new Error("Missing value for --run-attempt");
+          if (!/^[1-9][0-9]*$/.test(value)) {
+            throw new Error(`--run-attempt must be a positive integer, got: ${value}`);
+          }
+          runAttempt = value;
+          index += 1;
+          break;
+        }
       }
       continue;
     }
@@ -553,7 +582,8 @@ function parseArgs(args) {
     showHelp,
     showVersion,
     ingestPatterns,
-    ...rubricPin ? { rubricPin } : {}
+    ...rubricPin ? { rubricPin } : {},
+    ...runAttempt ? { runAttempt } : {}
   };
 }
 function hasUnsafeDisplayNameCharacter(value) {

package/dist/mcp/index.js

@@ -5,20 +5,20 @@ import {
   renderWitanBadgeSvg,
   renderWitanHtmlReport,
   runCejelScan
-} from "../chunk-4IXESHG7.js";
-import "../chunk-EPK7UTIK.js";
+} from "../chunk-QTLLASOO.js";
+import "../chunk-OIGCYULH.js";
 import {
   ZodFirstPartyTypeKind,
   ZodOptional,
   external_exports,
   objectType
-} from "../chunk-KGFGX3TP.js";
+} from "../chunk-UYJBSQCV.js";
 import {
   __commonJS,
   __export,
   __toESM,
   init_esm_shims
-} from "../chunk-R4DPQLS2.js";
+} from "../chunk-ZNVILRHK.js";
 
 // node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/code.js
 var require_code = __commonJS({

package/dist/packs/d-series/index.js

@@ -3,18 +3,18 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   listCejelLlmPackFiles
-} from "../../chunk-RW6YJVHZ.js";
+} from "../../chunk-EP7YYWEP.js";
 import {
   execGit
-} from "../../chunk-EPK7UTIK.js";
+} from "../../chunk-OIGCYULH.js";
 import {
   require_typescript
-} from "../../chunk-EW6NAHE4.js";
+} from "../../chunk-XHAETB7N.js";
 import {
   __toESM,
   init_esm_shims,
   readRepoText
-} from "../../chunk-R4DPQLS2.js";
+} from "../../chunk-ZNVILRHK.js";
 
 // src/packs/d-series/index.ts
 init_esm_shims();

package/dist/packs/decision-contracts/index.js

@@ -3,15 +3,15 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   external_exports
-} from "../../chunk-KGFGX3TP.js";
+} from "../../chunk-UYJBSQCV.js";
 import {
   require_typescript
-} from "../../chunk-EW6NAHE4.js";
+} from "../../chunk-XHAETB7N.js";
 import {
   __toESM,
   init_esm_shims,
   readRepoText
-} from "../../chunk-R4DPQLS2.js";
+} from "../../chunk-ZNVILRHK.js";
 
 // src/packs/decision-contracts/index.ts
 init_esm_shims();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.4.5",
+  "version": "0.4.7",
   "mcpName": "io.github.BargLabs/cejel",
   "private": false,
   "publishConfig": {