@cejel/cejel 0.6.0 → 0.6.2

package/dist/packs/d-series/index.js

@@ -19,6 +19,41 @@ import {
 // src/packs/d-series/index.ts
 init_esm_shims();
 
+// src/packs/d-series/tiers.ts
+init_esm_shims();
+var D_SERIES_RULE_TIERS = {
+  D1: {
+    tier: "semantic",
+    sourceFile: "src/packs/d-series/declared-but-unread-config.ts",
+    evidence: "resolvedSymbol() follows import aliases with checker.getAliasedSymbol across the first-party module graph to find read sites of a declared key"
+  },
+  D2: {
+    tier: "structural",
+    sourceFile: "src/packs/d-series/swallowed-error.ts",
+    evidence: "walks the TypeScript AST for catch clauses; bindingIsUnused() compares checker symbols for the catch binding inside its own block"
+  },
+  D3: {
+    tier: "structural",
+    sourceFile: "src/packs/d-series/unasserted-set-transform.ts",
+    evidence: "walks each file's TypeScript AST for a direct-parameter .filter call, an empty ledger and a literal-success return; no symbol resolution"
+  },
+  D4: {
+    tier: "semantic",
+    sourceFile: "src/packs/d-series/empty-failure-conflation.ts",
+    evidence: "calleeContract() resolves a call to its declaration in another first-party file via checker.getAliasedSymbol and reads that callee's return states"
+  },
+  D5: {
+    tier: "semantic",
+    sourceFile: "src/packs/d-series/self-referential-verification.ts",
+    evidence: "importedBinding() resolves test imports to their declaring source files with checker.getAliasedSymbol and compares the module under test across files"
+  },
+  D6: {
+    tier: "lexical",
+    sourceFile: "src/packs/d-series/unobserved-control.ts",
+    evidence: "exitStatusAnalysis() regex-matches single shell lines plus the next line, with a whole-file presence test for set -e; no parse, no name resolution, no flow"
+  }
+};
+
 // src/packs/d-series/declared-but-unread-config.ts
 init_esm_shims();
 var import_typescript2 = __toESM(require_typescript(), 1);
@@ -1111,7 +1146,14 @@ function scanUnobservedControls(repoRoot) {
   }
   return inspectionFromAnalyses(analyses, findings, anchorAbstentions);
 }
+
+// src/packs/d-series/index.ts
+process.emitWarning(
+  "@cejel/cejel/d-series is deprecated and will be removed in 0.7.0. D-series detection was retired: its rules are a taxonomy, not a production detector, and a zero-result scan does not mean a repository is clean. See https://github.com/BargLabs/cejel/issues/419.",
+  { type: "DeprecationWarning", code: "CEJEL_DEP_D_SERIES" }
+);
 export {
+  D_SERIES_RULE_TIERS,
   detectDeclaredButUnreadConfig,
   detectEmptyFailureConflation,
   detectSelfReferentialVerification,

package/dist/packs/decision-contracts/index.js

@@ -16,6 +16,16 @@ import {
 // src/packs/decision-contracts/index.ts
 init_esm_shims();
 
+// src/packs/decision-contracts/tiers.ts
+init_esm_shims();
+var DECISION_CONTRACT_RULE_TIERS = {
+  "DECISION-CONTRACT-EDGE": {
+    tier: "semantic",
+    sourceFile: "src/packs/decision-contracts/decision-contract-conformance.ts",
+    evidence: "parses one file with ts.createSourceFile (structural), but transitiveDecisionReferences() expands local initializers to follow which premises the returned decision depends on (data flow, within one function); ambiguous, so the higher tier"
+  }
+};
+
 // src/packs/decision-contracts/decision-contract-conformance.ts
 init_esm_shims();
 var import_typescript = __toESM(require_typescript(), 1);
@@ -308,6 +318,7 @@ function scanDecisionContracts(repoRoot) {
 }
 export {
   DECISION_CONTRACT_MANIFEST_PATH,
+  DECISION_CONTRACT_RULE_TIERS,
   decisionContractManifestSchema,
   decisionContractSchema,
   evaluateDecisionContracts,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "mcpName": "io.github.BargLabs/cejel",
   "private": false,
   "publishConfig": {
@@ -62,7 +62,10 @@
     "gate:d4": "pnpm run build && node scripts/d4-precision-gate.mjs",
     "gate:d5": "pnpm run build && node scripts/d5-precision-gate.mjs",
     "gate:d6": "pnpm run build && node scripts/d6-precision-gate.mjs",
-    "validate:distribution": "node scripts/validate-distribution-metadata.mjs",
+    "sbom:generate": "node scripts/sbom/generate-bundle-sbom.mjs",
+    "sbom:check": "node scripts/sbom/check-sbom-inventory.mjs",
+    "test:sbom": "node --test scripts/sbom/sbom.node-test.mjs",
+    "validate:distribution":"node scripts/validate-distribution-metadata.mjs",
     "test:release": "bash scripts/release_tests.sh",
     "pnpm:devPreinstall": "node scripts/assert-dev-environment.mjs --phase=preinstall",
     "prepublishOnly": "pnpm run build",
@@ -73,7 +76,7 @@
     "test": "vitest run"
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@types/node": "^25.9.1",
     "postject": "^1.0.0-alpha.6",
     "tsup": "^8.0.0",