@cejel/cejel 0.6.0 → 0.6.2

package/dist/index.js

@@ -1,6 +1,9 @@
 #!/usr/bin/env node
 import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
+import {
+  serveCejelMcpOverStdio
+} from "./chunk-QDP7QWA7.js";
 import {
   CALLER_CONTEXT_PRODUCT_IDENTITY_NOTICE,
   CERTIFICATE_GLOSSARY,
@@ -9,13 +12,16 @@ import {
   WitanReportSchema,
   assertSelectableRubricVersion,
   buildRelyingPartySummary,
+  buildVerdictExplanation,
   computeApplicableMeasuredCoverage,
   createWitanAttestation,
   formatCertificateMetricAppliedWeightPercent,
   formatCertificateMetricLabel,
   formatCertificateMetricValue,
   formatCoverageSummary,
+  formatDimensionsMeasuredSentence,
   formatExternalSourceLine,
+  formatLowConfidenceSentence,
   isProspectiveRubricVersion,
   renderWitanBadgeEndpoint,
   renderWitanBadgeSvg,
@@ -23,7 +29,7 @@ import {
   runCejelScan,
   serializeWitanReport,
   verifyWitanAttestationBinding
-} from "./chunk-2453M7C2.js";
+} from "./chunk-KG62JCJZ.js";
 import "./chunk-63XQDYQ5.js";
 import {
   external_exports
@@ -575,13 +581,15 @@ function renderTerminalCertificate(summary, report) {
     `Overall: ${formatScore(summary.overallScore)}/4.0 (${summary.verdict})`,
     `  Code trust:    ${formatScore(summary.codeTrustScore)}/4.0`,
     `  Process trust: ${formatScore(summary.processTrustScore)}/4.0`,
+    ...report ? [`  ${formatDimensionsMeasuredSentence(report)}`] : [],
+    ...report && formatLowConfidenceSentence(report) ? [`  ${formatLowConfidenceSentence(report)}`] : [],
     ""
   ];
-  lines.splice(1, 0, `Product identity: ${CALLER_CONTEXT_PRODUCT_IDENTITY_NOTICE}`);
+  lines.splice(lines.length - 1, 0, `About the name: ${CALLER_CONTEXT_PRODUCT_IDENTITY_NOTICE}`);
   if (report) {
     const relyingPartySummary = buildRelyingPartySummary(report);
     lines.splice(
-      3,
+      2,
       0,
       `Scope: ${relyingPartySummary.scope}`,
       `What was examined: ${relyingPartySummary.examined}`,
@@ -598,6 +606,13 @@ function renderTerminalCertificate(summary, report) {
       ""
     );
   }
+  if (summary.historyLimitations?.length) {
+    lines.push(
+      "HISTORY LIMITATION \u2014 scored as usual, but some criteria read truncated history:",
+      ...summary.historyLimitations.map((limitation) => `  - ${limitation}`),
+      ""
+    );
+  }
   if (summary.contentReadSummary && summary.contentReadSummary.skipped > 0) {
     const reads = summary.contentReadSummary;
     const errnoCounts = Object.entries(reads.unreadableByErrno).map(([errno, count]) => `${errno}: ${count}`).join(", ");
@@ -653,6 +668,8 @@ function renderTerminalCertificate(summary, report) {
       lines.push(`  ...and ${remaining} more \u2014 see the written report for the full list.`);
     }
   }
+  const verdictExplanation = !abstained && report ? buildVerdictExplanation(report) : void 0;
+  if (verdictExplanation) lines.push(verdictExplanation);
   if (!abstained && summary.externalFindingCount > 0) {
     lines.push(
       "",
@@ -805,6 +822,7 @@ Usage:
   npx ${NPX_PACKAGE_NAME} scan [path] [options]
   npx ${NPX_PACKAGE_NAME} verify <report.json> <attestation.json> [issuance.json issuance.json.sig]
   npx ${NPX_PACKAGE_NAME} export gitlab-codequality <report.json> [-o gl-code-quality-report.json]
+  npx ${NPX_PACKAGE_NAME} mcp
   npx ${NPX_PACKAGE_NAME} issue [path] --report <report.json> --attestation <attestation.json> --key <key.pub> --engagement-ref <ref>
 
 Commands:
@@ -812,6 +830,7 @@ Commands:
   verify  verify the report/attestation binding; with an issuance pair, also check the issuer
           signature against docs/security/${ISSUER_SIGNERS_FILE} and docs/security/${ISSUER_REVOCATIONS_FILE}
   export  write report.json's located findings as a GitLab Code Quality report (offline)
+  mcp     serve the MCP server over stdio (the same server as the cejel-mcp bin)
   issue   re-run this version at the certificate's revision and, only if report.json reproduces
           byte for byte, write an unsigned issuance.json for the issuer to sign through ssh-agent
 
@@ -850,6 +869,10 @@ async function runWitanV22CalibrationCli(args) {
 }
 async function runWitanCli(args, rubricVersion) {
   const invocation = parseCliInvocation(args);
+  if (invocation.command === "mcp") {
+    await serveCejelMcpOverStdio({ packageName: NPX_PACKAGE_NAME, version: cliVersion() });
+    return 0;
+  }
   if (invocation.command === "verify") {
     return runVerifyBinding(invocation);
   }
@@ -967,6 +990,19 @@ function parseCliInvocation(args) {
     }
     return parseExportArgs(exportArgs);
   }
+  if (command === "mcp") {
+    const mcpArgs = args.slice(1);
+    if (mcpArgs.some((arg) => arg === "-h" || arg === "--help")) {
+      return { command: "scan", options: parseArgs(["--help"]) };
+    }
+    if (mcpArgs.some((arg) => arg === "-v" || arg === "--version")) {
+      return { command: "scan", options: parseArgs(["--version"]) };
+    }
+    if (mcpArgs.length > 0) {
+      throw new Error(`cejel mcp takes no arguments; got ${mcpArgs.join(" ")}`);
+    }
+    return { command: "mcp" };
+  }
   if (command === "issue") {
     const issueArgs = args.slice(1);
     if (issueArgs.some((arg) => arg === "-h" || arg === "--help")) {