@cejel/cejel 0.6.1 → 0.6.3

package/README.md

@@ -92,7 +92,7 @@ if (-not $expected -or $actual -ne $expected.ToLowerInvariant()) {
 ```
 
 > **Windows signing status:** `cejel-Windows-x86_64.exe` is intentionally unsigned in
-> 0.6.1 and may trigger Microsoft SmartScreen. The release build removes Node's inherited
+> 0.6.3 and may trigger Microsoft SmartScreen. The release build removes Node's inherited
 > signature before SEA injection and fails unless Windows reports the result as `NotSigned`;
 > it does not ship an invalid signature. Before running it, verify `SHA256SUMS` and the
 > GitHub build-provenance attestation. Each binary also has an attached SPDX SBOM (the packages
@@ -116,7 +116,7 @@ docker run --rm --network=none -v "$PWD:/w" -w /w -v "$PWD/cejel:/cejel:ro" debi
 npx @cejel/cejel@latest .
 ```
 
-> **Distribution note:** Cejel `0.6.1` is the coordinated release version for npm,
+> **Distribution note:** Cejel `0.6.3` is the coordinated release version for npm,
 > standalone binaries, Docker/OCI, GitHub Action, Homebrew, and MCP Registry. A GitLab CI
 > template and Code Quality export live in [`docs/gitlab-ci.md`](./docs/gitlab-ci.md).
 
@@ -149,11 +149,17 @@ The npm package is scoped as `@cejel/cejel`; its executable remains the short co
 **GitHub Action** — score every PR and publish the badge:
 
 ```yaml
+- uses: actions/checkout@v4
+  with:
+    fetch-depth: 0     # full history: A2 and B2 read commit history
 - uses: BargLabs/cejel/action@v1
   with:
     min-score: "2.5"   # optional: fail the build below this
 ```
 
+`actions/checkout` fetches one commit by default. On a shallow clone, A2 and B2 see only that
+commit, and the certificate says so under "History limitations".
+
 For an executed public example that binds a release artifact to the same commit named by its
 Cejel certificate, see [Certified releases with GitHub build provenance](./docs/certified-release-example.md).
 
@@ -181,16 +187,16 @@ gh attestation verify ./cejel-Windows-x86_64.exe -R BargLabs/cejel
 This is cryptographically signed provenance. It is distinct from Apple Developer ID or
 Microsoft Authenticode code-signing.
 
-**Docker / OCI.** The current container release is `0.6.1`:
+**Docker / OCI.** The current container release is `0.6.3`:
 
 ```bash
-docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.6.1
+docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.6.3
 ```
 
 The image defaults to `cejel-mcp` over stdio. To use the CLI instead:
 
 ```bash
-docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.6.1 .
+docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.6.3 .
 ```
 
 The OCI image carries an SBOM of its base-image packages, maximum-mode build provenance, and a
@@ -429,11 +435,51 @@ a configurable `min-score` threshold. The scoring step makes no network calls an
 secrets.
 
 ```yaml
+- uses: actions/checkout@v4
+  with:
+    fetch-depth: 0 # full history: A2 and B2 read commit history
 - uses: BargLabs/cejel/action@v1
   with:
     min-score: '2.5' # optional; omit to never fail the check
 ```
 
+Check out with `fetch-depth: 0`: the default depth of 1 truncates the history A2 and B2 read, and
+the certificate then lists a history limitation.
+
+## Use with Claude
+
+Cejel ships as a Claude Code plugin in [`plugins/cejel/`](./plugins/cejel/). The plugin gives
+Claude the `scan` tool below, started through `npx` and pinned to this release, plus a
+`cejel-scan` skill. The skill tells Claude when a scan answers the question and how to read the
+certificate. It also tells Claude to present a score as evidence for your own judgment, never as
+an audit or a guarantee.
+
+Install it from this repository's marketplace, inside Claude Code:
+
+```text
+/plugin marketplace add BargLabs/cejel
+/plugin install cejel@cejel
+```
+
+From a shell, the same two steps are `claude plugin marketplace add BargLabs/cejel` and
+`claude plugin install cejel@cejel`.
+
+Scanning stays offline: the `scan` tool makes no network calls and writes no files. The first
+time the server starts, `npx` fetches the pinned `@cejel/cejel` package from npm. When you name
+a repository that isn't on your machine, Claude asks before cloning it with your `git`. Neither
+fetch is part of the scan.
+
+Example prompts that work on a public repository:
+
+- "Clone https://github.com/BargLabs/cejel into a temporary folder and give me its Cejel trust
+  score."
+- "Scan https://github.com/BargLabs/cejel with Cejel and explain the top findings and the criteria
+  they come from."
+- "Run Cejel on https://github.com/BargLabs/cejel and save its trust badge to ./cejel-badge.svg."
+
+Support: [GitHub issues](https://github.com/BargLabs/cejel/issues). Privacy policy:
+<https://barglabs.ai/privacy>. Terms: <https://barglabs.ai/terms>.
+
 ## MCP server (for agents)
 
 The same package ships a second bin, `cejel-mcp` — a thin MCP (Model Context Protocol)
@@ -521,7 +567,7 @@ The OCI image is an alternative when Docker is the preferred execution boundary.
 the host path with the repository OpenClaw should allow Cejel to read:
 
 ```bash
-npx -y openclaw@latest mcp set cejel-oci '{"command":"docker","args":["run","--rm","-i","-v","/absolute/path/to/repo:/workspace:ro","ghcr.io/barglabs/cejel:0.6.1"]}'
+npx -y openclaw@latest mcp set cejel-oci '{"command":"docker","args":["run","--rm","-i","-v","/absolute/path/to/repo:/workspace:ro","ghcr.io/barglabs/cejel:0.6.3"]}'
 npx -y openclaw@latest mcp doctor cejel-oci --probe
 ```
 

package/dist/calibration/llm-detector.js

@@ -5,7 +5,7 @@ import {
   deriveProductIdentity,
   runCejelScan,
   serializeWitanReport
-} from "../chunk-UBU3PP7P.js";
+} from "../chunk-FA72HEWJ.js";
 import {
   listCejelLlmPackFiles
 } from "../chunk-M6YYPJSN.js";

package/dist/{chunk-UBU3PP7P.js → chunk-FA72HEWJ.js}

@@ -345,6 +345,10 @@ var WitanReportCommonSchema = external_exports.object({
   consumedSignals: external_exports.array(WitanConsumedSignalSummarySchema).optional(),
   archetype: WitanRepoArchetypeSchema.optional(),
   scanLimitations: external_exports.array(external_exports.string().min(1).max(1e3)).max(16).optional(),
+  // Additive-optional (report format 1.5, issue #428): disclosures about the commit history the
+  // scan read, such as a shallow clone. Declared, never scored: unlike scanLimitations it gates
+  // nothing (no score, abstention, badge or --min-score effect). Absent when history is complete.
+  historyLimitations: external_exports.array(external_exports.string().min(1).max(1e3)).max(4).optional(),
   contentReadSummary: WitanContentReadSummarySchema.optional(),
   // Additive-optional (report format 1.3): absent means a report produced before this field
   // existed, never "nothing withheld" — createWitanReport always sets it (possibly to []) on any
@@ -397,7 +401,7 @@ var WitanReportSchema = external_exports.preprocess((value) => {
 }, StrictWitanReportSchema);
 var WITAN_ATTESTATION_STATEMENT_TYPE = "https://in-toto.io/Statement/v1";
 var WITAN_ATTESTATION_PREDICATE_TYPE = "https://cejel.dev/attestations/scan/v1";
-var WITAN_REPORT_FORMAT_VERSION = "1.4";
+var WITAN_REPORT_FORMAT_VERSION = "1.5";
 var WitanAttestationOutcomeSchema = external_exports.discriminatedUnion("status", [
   external_exports.object({
     status: external_exports.literal("scored"),
@@ -638,14 +642,14 @@ init_esm_shims();
 init_esm_shims();
 import { createHash } from "crypto";
 var WITAN_RUBRIC_BEHAVIOUR_FINGERPRINTS = Object.freeze({
-  [WITAN_RUBRIC_VERSION_V17]: "sha256:eabdc78425373baf23f50c23b0b025bae4116461f3bc5ddc7d5b8496df03f653",
-  [WITAN_RUBRIC_VERSION_V18]: "sha256:23cde3839b54875cf78eb8b4295779bc66327f7f5b331628a17839c2fb9562f1",
-  [WITAN_RUBRIC_VERSION_V19]: "sha256:07e06ce68ba5ca365242f099e8860e1e466fa503dbcdac99986aab1e65c7c867",
-  [WITAN_RUBRIC_VERSION_V20]: "sha256:4fb83b8972b76fb28cc6b59796f18ecfa16a37be52997c139f5cb14f60fd3717",
-  [WITAN_RUBRIC_VERSION_V21]: "sha256:009f82a0ccaae4e9efcb1bb33776bf6cff2f268ddb21db0fb43f4b505563f645",
-  [WITAN_RUBRIC_VERSION_V22]: "sha256:df8fcacf9a6f0d57c0ff00cafc51149e1bebafd3bec03f13316803b4ae27f0cc",
-  [WITAN_RUBRIC_VERSION_V23]: "sha256:01ec9f9057f649f4bc737dc2f972bcec227237416cda5a4255db2c23d874ec5c",
-  [WITAN_RUBRIC_VERSION_V24]: "sha256:4452f3b033552b7feb205048a07d6d851d1dc459a06f39befa86d22281e201fb"
+  [WITAN_RUBRIC_VERSION_V17]: "sha256:2da86acf64c39d2edb7824df46250ea23c396264266a2cd925953e9c6ad25858",
+  [WITAN_RUBRIC_VERSION_V18]: "sha256:60917d1d81efe7cda6f6adbfaa05293e2d9bf1db37b39d084e47f9011a996b67",
+  [WITAN_RUBRIC_VERSION_V19]: "sha256:e050ce8563de0736d9cfb6c23e2ba04725d88465d378a8632576269b9bc9f269",
+  [WITAN_RUBRIC_VERSION_V20]: "sha256:0433adc34b58c0fd5500a0bdeaa910c854eedbadbeaabb9045238d4ba9be8878",
+  [WITAN_RUBRIC_VERSION_V21]: "sha256:d3796b78a45ea3593f6abe71c77c2d00a0056d0f2d88476a01329dc342166aa6",
+  [WITAN_RUBRIC_VERSION_V22]: "sha256:932bc09cbe555c6058a95be581ccf7a286c43887f90d32698f5273b7623824bf",
+  [WITAN_RUBRIC_VERSION_V23]: "sha256:db97dc999d37e3c39c3bd3e4b1778c94eb9ad3176fb5c7d7264a7e510b162fc1",
+  [WITAN_RUBRIC_VERSION_V24]: "sha256:e313fab25ae1779a11e86b23696881cd6f8fe2a845609dc93e2ff6f3ff8c16d5"
 });
 function rubricBehaviourFingerprint(rubricVersion) {
   return WITAN_RUBRIC_BEHAVIOUR_FINGERPRINTS[rubricVersion];
@@ -2179,6 +2183,13 @@ function renderWitanHtmlReport(report, options = {}) {
   ).join("")}</ul>
     </section>` : ""}
 
+    ${(report.historyLimitations?.length ?? 0) > 0 ? `<section class="scan-limitations-section evidence-section" aria-label="History limitations">
+      <h2>History limitations</h2>
+      <ul>${(report.historyLimitations ?? []).map(
+    (limitation) => `<li class="scan-warning"><strong>History limitation</strong><span>${escapeHtml(limitation)}</span></li>`
+  ).join("")}</ul>
+    </section>` : ""}
+
     ${renderContentReadSummary(report)}
 
     <section class="trust-grid" aria-label="Rubric criteria">
@@ -4800,14 +4811,14 @@ function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, us
   const serverEntrypoint = v22PackageStartHttpEntrypoint ?? findServerEntrypointFile(repoPath, repoFiles, useV27Detectors) ?? v20DirectHttpEntrypoint ?? null;
   const runtimeContainer = useV27Detectors ? findRuntimeContainerEntrypointFile(repoPath, repoFiles, useV20ExplicitGaps) : null;
   const errorBoundaries = repoFiles.filter(
-    (file) => (!useV27Detectors || isAuthoredProductionPath(file)) && /error-boundary|error\.(tsx|jsx|ts|js)$/.test(file)
+    (file) => (!useV27Detectors || isAuthoredProductionPath(file)) && isImplementationEvidencePath(file) && ERROR_BOUNDARY_FILENAME_PATTERN.test(file)
   );
-  const errorBoundaryFileReads = (file) => observabilityDepthReads(file) || (!useV27Detectors || isAuthoredProductionPath(file)) && /(^|\/)server\//.test(file) && /\.(?:mjs|cjs)$/.test(file);
+  const errorBoundaryFileReads = (file) => isImplementationEvidencePath(file) && (observabilityDepthReads(file) || (!useV27Detectors || isAuthoredProductionPath(file)) && /(^|\/)server\//.test(file) && /\.(?:mjs|cjs)$/.test(file));
   const expressErrorMiddlewareFile = errorBoundaries.length > 0 ? void 0 : withContentReadSignal(
     "A3",
     "prod_readiness_primitives",
     () => repoFiles.find(
-      (file) => errorBoundaryFileReads(file) && fileContains(repoPath, file, EXPRESS_ERROR_MIDDLEWARE_PATTERN) && fileMatchesOutsideLineComments(repoPath, file, EXPRESS_MIDDLEWARE_REACHABLE_PATTERN)
+      (file) => errorBoundaryFileReads(file) && fileMatchesOutsideComments(repoPath, file, EXPRESS_ERROR_MIDDLEWARE_PATTERN) && fileMatchesOutsideComments(repoPath, file, EXPRESS_MIDDLEWARE_REACHABLE_PATTERN)
     )
   );
   const errorBoundary = errorBoundaries[0] ?? expressErrorMiddlewareFile;
@@ -4886,7 +4897,11 @@ function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, us
         errorBoundary,
         "prod_check",
         "Error boundary",
-        findFirstMatchingLine(repoPath, errorBoundary, EXPRESS_ERROR_MIDDLEWARE_PATTERN)
+        findFirstMatchingLineOutsideComments(
+          repoPath,
+          errorBoundary,
+          EXPRESS_ERROR_MIDDLEWARE_PATTERN
+        )
       ) : evidenceForRelative(repoPath, errorBoundary, "prod_check", "Error boundary")
     );
   }
@@ -5425,7 +5440,7 @@ function collectB2PrTraceEvidence(repoPath, repoFiles) {
     (file) => /(^|\/)(pull_request_template|PULL_REQUEST_TEMPLATE)(\.md$|\/[^/]+\.md$)/.test(file)
   );
   const branchProtectionDoc = repoFiles.find(
-    (file) => /branch.*protection|review.*gate|CODEOWNERS/i.test(file)
+    (file) => /branch.*protection|review.*gate/i.test(file) || GITHUB_CODEOWNERS_PATH_PATTERN.test(file)
   );
   const evidence = [
     ...workflows.slice(0, 3).map((file) => evidenceForRelative(repoPath, file, "ci_run", "Pull-request CI workflow")),
@@ -5678,32 +5693,36 @@ function collectB4AuditEvidence(repoPath, repoFiles, generatedAt, useV19CommitYe
 function collectB6PrivilegedOpsGatingEvidence(repoPath, repoFiles, useV39Detectors = false, useV21ExecutedEscalations = false) {
   const evidence = [];
   const findings = [];
-  const docFiles = repoFiles.filter((file) => /\.(md|mdx)$/i.test(file));
+  const policyDocFiles = repoFiles.filter(
+    (file) => /\.(md|mdx)$/i.test(file) && isPolicyDocumentEvidencePath(file)
+  );
+  const isPolicyDocMatching = (file, pattern) => fileContains(repoPath, file, pattern) && !isCejelCertificateText(repoPath, file);
   const humanGateDoc = withContentReadSignal(
     "B6",
     "human_gate_documented",
-    () => docFiles.find((file) => fileContains(repoPath, file, HUMAN_GATE_MARKER_PATTERN))
+    () => policyDocFiles.find((file) => isPolicyDocMatching(file, HUMAN_GATE_MARKER_PATTERN))
   );
   const implFiles = repoFiles.filter(isImplementationFile);
+  const implementationEvidenceFiles = implFiles.filter(isImplementationEvidencePath);
   const gatedPrivilegeCheckFile = withContentReadSignal(
     "B6",
     "fail_closed_privilege_check",
-    () => implFiles.find(
-      (file) => fileContains(repoPath, file, GATED_PRIVILEGE_CHECK_PATTERN) && fileContains(repoPath, file, SET_ROLE_PATTERN)
+    () => implementationEvidenceFiles.find(
+      (file) => fileMatchesOutsideComments(repoPath, file, GATED_PRIVILEGE_CHECK_PATTERN) && fileMatchesOutsideComments(repoPath, file, SET_ROLE_PATTERN)
     )
   );
   const killSwitchFile = withContentReadSignal(
     "B6",
     "kill_switch_fail_safe_present",
-    () => implFiles.find(
-      (file) => fileContains(repoPath, file, KILL_SWITCH_NAME_PATTERN) && fileContains(repoPath, file, KILL_SWITCH_FAIL_CLOSED_PATTERN)
+    () => implementationEvidenceFiles.find(
+      (file) => fileMatchesOutsideComments(repoPath, file, KILL_SWITCH_NAME_PATTERN) && fileMatchesOutsideComments(repoPath, file, KILL_SWITCH_FAIL_CLOSED_PATTERN)
     )
   );
-  const codeownersFile = repoFiles.find((file) => /(^|\/)CODEOWNERS$/.test(file));
+  const codeownersFile = repoFiles.find((file) => GITHUB_CODEOWNERS_PATH_PATTERN.test(file));
   const reviewGateDoc = withContentReadSignal(
     "B6",
     "protected_path_review_gate",
-    () => docFiles.find((file) => fileContains(repoPath, file, REQUIRED_REVIEW_PATTERN))
+    () => policyDocFiles.find((file) => isPolicyDocMatching(file, REQUIRED_REVIEW_PATTERN))
   );
   const protectedPathReviewGate = codeownersFile ?? reviewGateDoc;
   const { executableFiles, v21ExecutedEscalationFileSet, productionUngatedEscalationFiles } = withContentReadSignal("B6", "privilege_escalation_cleanliness", () => {
@@ -5781,7 +5800,7 @@ function collectB6PrivilegedOpsGatingEvidence(repoPath, repoFiles, useV39Detecto
           repoPath,
           protectedPathReviewGate,
           "artifact",
-          "CODEOWNERS/required-review gate on protected paths"
+          protectedPathReviewGate === codeownersFile ? "CODEOWNERS file in a location GitHub reads (protected-path review gate)" : "Documented required-review/branch-protection policy"
         )
       )
     );
@@ -5872,7 +5891,7 @@ function collectB6PrivilegedOpsGatingEvidence(repoPath, repoFiles, useV39Detecto
         1,
         hasPrivilegedOpsSurface ? 0.2 : 0.6,
         "present",
-        "Credits a CODEOWNERS file or documented required-review/branch-protection policy \u2014 the general OSS-observable analogue of human-gating changes to sensitive paths."
+        "Credits a CODEOWNERS file where GitHub reads it (root, .github/ or docs/) or a documented required-review/branch-protection policy (not a changelog, record, review note or report) \u2014 the general OSS-observable analogue of human-gating changes to sensitive paths."
       ),
       ...killSwitchMetrics
     ],
@@ -5918,6 +5937,19 @@ function isTestFile(file, rubricVersion = WITAN_RUBRIC_VERSION) {
 }
 var NAME_SHAPED_TEST_FILE_PATTERN = /^test(?:-[^/]+)?\.[cm]?[jt]sx?$|\.(test|spec)\.[cm]?[jt]sx?$|(^|\/)__tests__\/|(^|\/)test_[^/]*\.py$|(^|\/)tests?\.py$|_test\.go$|(^|\/)test_[^/]*\.(cpp|cc|cxx)$|_(test|tests)\.(cpp|cc|cxx)$|Tests?\.(java|kt)$|(_test|_spec)\.(rs|rb|php|swift|kt)$/;
 var NAME_SHAPED_TEST_FILE_PATTERN_V17 = /\.tftest\.hcl$|\.bats$|(^|\/)test[^/]*\.m$|_test\.m$/i;
+var CALIBRATION_RECORD_DIR_PATTERN = /(^|\/)calibrations?(\/|$)/i;
+function isImplementationEvidencePath(path) {
+  return isProductionSourcePath(path) && !CALIBRATION_RECORD_DIR_PATTERN.test(path);
+}
+var CHANGELOG_FILE_PATTERN = /(^|\/)(?:CHANGELOG|CHANGES|HISTORY|NEWS|RELEASE[-_]?NOTES|RELEASES)(?:\.[^/]*)?$/i;
+var NON_POLICY_RECORD_DIR_PATTERN = /(^|\/)(?:\.changesets?|changelogs?|changelog\.d|experiments?|calibrations?|reviews|review[-_]notes?|reports)(\/|$)/i;
+function isPolicyDocumentEvidencePath(path) {
+  return isProductionSourcePath(path) && !CHANGELOG_FILE_PATTERN.test(path) && !NON_POLICY_RECORD_DIR_PATTERN.test(path);
+}
+var CEJEL_CERTIFICATE_TEXT_PATTERN = /^# Cejel Trust Report\b[\s\S]*?^- Rubric: /m;
+function isCejelCertificateText(repoPath, file) {
+  return fileContains(repoPath, file, CEJEL_CERTIFICATE_TEXT_PATTERN);
+}
 var TEST_RUNNER_PATTERN = /\b(vitest|jest|mocha|ava|tap|pytest|go test|cargo test|rspec|phpunit|gradle test|mvn test|node\s+--test|node:test)\b/i;
 function hasCredibleTestScript(scripts) {
   const script = scripts.get("test");
@@ -5969,6 +6001,7 @@ function fileHasV21RawSqlEscalation(repoPath, file) {
 var GATED_PRIVILEGE_CHECK_PATTERN = /pg_has_role\s*\(|has_role\s*\(|is not a member of/i;
 var SET_ROLE_PATTERN = /\bset\s+(local\s+)?role\b/i;
 var REQUIRED_REVIEW_PATTERN = /required review|branch protection|protected branch/i;
+var GITHUB_CODEOWNERS_PATH_PATTERN = /^(?:\.github\/|docs\/)?CODEOWNERS$/;
 var HISTORY_SECRET_SCAN_CREDENTIAL_BLOB_LIMIT = 5e3;
 var V23_PEM_WIDENED_HISTORY_BLOB_LIMIT = 500;
 var SECRET_IDENTIFIER_KEYWORD_PATTERN = /secret|token|api[_-]?key|password|access[_-]?key/gi;
@@ -8027,6 +8060,7 @@ var HEALTH_ROUTE_FUNCTIONS_DIR_PATTERN = /(^|\/)functions\/.*\.(?:ts|tsx|js|jsx|
 var V20_HEALTH_OR_READINESS_ROUTE_PATTERN = /["'`](?:[\w${}./-]{0,60}\/[_-]?(?:(?:health|ready|live)z?|readiness|liveness|up)(?=["'`/])|(?:healthz|readiness|liveness)(?=["'`]))|@Get\s*\(\s*(["'`])health\1\s*\)/i;
 var EXPRESS_ERROR_MIDDLEWARE_PATTERN = /\(\s*(?:_?err|_?error)(?:\s*:\s*(?:[^,()<]|<[^<>]*>)*)?\s*,\s*(?:req|request)(?:\s*:\s*(?:[^,()<]|<[^<>]*>)*)?\s*,\s*(?:res|response)(?:\s*:\s*(?:[^,()<]|<[^<>]*>)*)?\s*,\s*_?next(?:\s*:\s*(?:[^,()<]|<[^<>]*>)*)?\s*\)\s*(?:=>|\{)/i;
 var EXPRESS_MIDDLEWARE_REACHABLE_PATTERN = /\.use\s*\(|\bmodule\.exports\b|\bexport\s+(?:default\b|function\b|const\b|class\b)/;
+var ERROR_BOUNDARY_FILENAME_PATTERN = /(^|\/)(?:error-boundary|error)\.(?:tsx|jsx|ts|js)$/;
 var RACK_SERVER_ENTRYPOINT_PATTERN = /Rack::(?:Server|Handler(?:::\w+)?)\.(?:start|run)\s*\(/;
 var RACK_CONFIG_RUN_PATTERN = /^\s*run\s+(?:(?:[A-Z]\w*(?:::\w+)*(?:\.new)?|lambda)\b|->)/m;
 var RUNTIME_CONTAINER_COMMAND_PATTERN = /^\s*(?:CMD|ENTRYPOINT)\s+.*(?:\b(?:start|serve|server|qgis|nginx|apache|gunicorn|uvicorn)\b|manage\.py\s+runserver).*$/im;
@@ -8221,11 +8255,22 @@ function fileContains(repoPath, file, pattern) {
   if (!isRegularFile(fullPath)) return false;
   return pattern.test(readRepoText(fullPath, "utf8"));
 }
-function fileMatchesOutsideLineComments(repoPath, file, pattern) {
+var HASH_COMMENT_SOURCE_PATTERN = /\.(?:py|rb)$/i;
+function stripCodeComments(file, contents) {
+  const withoutComments = contents.replace(/\/\*[\s\S]*?\*\//g, (block) => block.replace(/[^\n]/g, "")).replace(/(?<!:)\/\/.*$/gm, "");
+  return HASH_COMMENT_SOURCE_PATTERN.test(file) ? withoutComments.replace(/^[ \t]*#.*$/gm, "") : withoutComments;
+}
+function fileMatchesOutsideComments(repoPath, file, pattern) {
   const fullPath = join(repoPath, file);
   if (!isRegularFile(fullPath)) return false;
-  const withoutLineComments = readRepoText(fullPath, "utf8").replace(/(?<!:)\/\/.*$/gm, "");
-  return pattern.test(withoutLineComments);
+  return pattern.test(stripCodeComments(file, readRepoText(fullPath, "utf8")));
+}
+function findFirstMatchingLineOutsideComments(repoPath, file, pattern) {
+  const fullPath = join(repoPath, file);
+  if (!isRegularFile(fullPath)) return null;
+  const lines = stripCodeComments(file, readRepoText(fullPath, "utf8")).split("\n");
+  const index = lines.findIndex((line) => pattern.test(line));
+  return index === -1 ? null : index + 1;
 }
 var PEM_PRIVATE_KEY_ASSIGNMENT_PATTERN = /(?:["'])?([A-Za-z_$][\w$.-]*)(?:["'])?\s*[:=]\s*(?:\|[-+0-9]*\s*\r?\n[ \t]*)?["'`]?-----BEGIN((?: (?:RSA|DSA|EC|OPENSSH|ENCRYPTED))? PRIVATE KEY)-----([\s\S]{0,32768}?)-----END\2-----/g;
 var BARE_PEM_PRIVATE_KEY_PATTERN = /["'`]?-----BEGIN((?: (?:RSA|DSA|EC|OPENSSH|ENCRYPTED))? PRIVATE KEY)-----([\s\S]{0,32768}?)-----END\1-----/g;
@@ -9218,6 +9263,15 @@ function hasEnvPathInGitHistory(repoPath, scanLimitations) {
 // src/witan/public-scan.ts
 init_esm_shims();
 
+// src/witan/history-depth.ts
+init_esm_shims();
+var SHALLOW_HISTORY_LIMITATION = "This repository is a shallow clone (git rev-parse --is-shallow-repository reports true), so its commit history is truncated. A2 (credentials and .env files in earlier commits) and B2 (pull-request merge ratio over recent commits) read history and saw only the commits present; on a full clone their results may differ. Scores are computed exactly as for any other scan. Re-scan a full clone (for actions/checkout, set fetch-depth: 0).";
+function detectHistoryLimitations(repoPath) {
+  const result = execGit(["rev-parse", "--is-shallow-repository"], { cwd: repoPath });
+  if (!result.ok || result.stdout.trim() !== "true") return void 0;
+  return [SHALLOW_HISTORY_LIMITATION];
+}
+
 // src/witan/ingest.ts
 init_esm_shims();
 import { lstatSync as lstatSync3, opendirSync, readFileSync as readFileSync4, realpathSync as realpathSync3 } from "fs";
@@ -9755,12 +9809,14 @@ function scoreRepoWithPublicCejel(options) {
     ...options.rubricVersion ? { rubricVersion: options.rubricVersion } : {}
   });
   const inputSignals = resolvePublicIngestSignals(options);
-  const report = createWitanReport(
+  const scored = createWitanReport(
     input,
     inputSignals.length > 0 ? inputSignals : void 0,
     void 0,
     options.toolVersion
   );
+  const historyLimitations = detectHistoryLimitations(options.repoPath);
+  const report = historyLimitations ? { ...scored, historyLimitations } : scored;
   if (report.verdict !== "insufficient_source" || !isWitanNoMeasurementAbstention(report)) {
     return report;
   }
@@ -9982,6 +10038,7 @@ function buildWitanCliSummary(report) {
     externalFindingCount: allExternalFindings.length,
     topExternalFindings: allExternalFindings.slice(0, EXTERNAL_FINDINGS_DISPLAY_LIMIT),
     scanLimitations: [...report.scanLimitations ?? []],
+    ...report.historyLimitations?.length ? { historyLimitations: [...report.historyLimitations] } : {},
     ...report.contentReadSummary ? { contentReadSummary: report.contentReadSummary } : {}
   };
   if (report.verdict === "insufficient_source") {