@cejel/cejel 0.6.11 → 0.7.0-rc.2

package/dist/{chunk-S5B5KMSO.js → chunk-IJYGVKYU.js}

@@ -5,7 +5,7 @@ import {
   renderWitanBadgeSvg,
   renderWitanHtmlReport,
   runCejelScan
-} from "./chunk-4YOIR3E6.js";
+} from "./chunk-G6AN4EDL.js";
 import {
   ZodFirstPartyTypeKind,
   ZodOptional,

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "./chunk-S5B5KMSO.js";
+} from "./chunk-IJYGVKYU.js";
 import {
   CALLER_CONTEXT_PRODUCT_IDENTITY_NOTICE,
   CERTIFICATE_GLOSSARY,
@@ -45,7 +45,7 @@ import {
   verifyRecordedInputDigests,
   verifyWitanAttestationBinding,
   witanHistoryAbstentionInstruction
-} from "./chunk-4YOIR3E6.js";
+} from "./chunk-G6AN4EDL.js";
 import "./chunk-2UMHJ23V.js";
 import {
   external_exports
@@ -608,6 +608,64 @@ function renderGitLabCodeQualityFooter(result) {
 `;
 }
 
+// src/export/gitlab-metrics.ts
+init_esm_shims();
+var UNMEASURED_STATUSES = /* @__PURE__ */ new Set([
+  "insufficient_data",
+  "not_applicable"
+]);
+function formatGitLabMetricScore(score) {
+  return score.toFixed(1);
+}
+function gitLabCriterionMetricName(id) {
+  return `cejel_criterion_${id.toLowerCase().replaceAll("-", "_")}_score`;
+}
+function isMeasured(criterion) {
+  return !UNMEASURED_STATUSES.has(criterion.status);
+}
+function exportGitLabMetrics(report) {
+  if (report.verdict === "insufficient_source") {
+    return { lines: [], leftOut: [], abstainedReason: report.insufficientSourceReason };
+  }
+  const lines = [];
+  const leftOut = [];
+  const add = (name, score, measured) => {
+    if (score === null || !measured) {
+      leftOut.push(name);
+      return;
+    }
+    lines.push(`${name} ${formatGitLabMetricScore(score)}`);
+  };
+  const criteria = report.criteria;
+  add("cejel_overall_score", report.overallScore, criteria.some(isMeasured));
+  const trust = [
+    ["cejel_process_trust_score", report.processTrustScore, "process_trust"],
+    ["cejel_code_trust_score", report.codeTrustScore, "code_trust"]
+  ];
+  for (const [name, score, category] of trust) {
+    const inCategory = criteria.filter((criterion) => criterion.category === category);
+    if (inCategory.length === 0) continue;
+    add(name, score, inCategory.some(isMeasured));
+  }
+  for (const criterion of criteria) {
+    add(gitLabCriterionMetricName(criterion.id), criterion.score, isMeasured(criterion));
+  }
+  return { lines, leftOut };
+}
+function renderGitLabMetricsFile(result) {
+  return result.lines.length === 0 ? "" : `${result.lines.join("\n")}
+`;
+}
+function renderGitLabMetricsFooter(result) {
+  if (result.abstainedReason !== void 0) {
+    return `Cejel: abstained report (insufficient_source): wrote 0 metrics. ${result.abstainedReason}
+`;
+  }
+  const named = result.leftOut.length === 0 ? "" : ` (${result.leftOut.join(", ")})`;
+  return `Cejel: wrote ${result.lines.length} metric(s); ${result.leftOut.length} value(s) left out because Cejel did not measure them${named}.
+`;
+}
+
 // src/npx-version-guard.ts
 init_esm_shims();
 import { delimiter, resolve } from "path";
@@ -1070,6 +1128,7 @@ Usage:
   npx ${NPX_PACKAGE_NAME} scan [path] [options]
   npx ${NPX_PACKAGE_NAME} verify <report.json> <attestation.json> [issuance.json issuance.json.sig]
   npx ${NPX_PACKAGE_NAME} export gitlab-codequality <report.json> [-o gl-code-quality-report.json]
+  npx ${NPX_PACKAGE_NAME} export gitlab-metrics <report.json> [-o metrics.txt]
   npx ${NPX_PACKAGE_NAME} mcp
   npx ${NPX_PACKAGE_NAME} issue [path] --report <report.json> --attestation <attestation.json> --key <key.pub> --engagement-ref <ref>
 
@@ -1077,7 +1136,8 @@ Commands:
   scan    score a repository (default when the command is omitted)
   verify  verify the report/attestation binding; with an issuance pair, also check the issuer
           signature against docs/security/${ISSUER_SIGNERS_FILE} and docs/security/${ISSUER_REVOCATIONS_FILE}
-  export  write report.json's located findings as a GitLab Code Quality report (offline)
+  export  write report.json's located findings as a GitLab Code Quality report, or its scores
+          as a GitLab metrics report (offline)
   mcp     serve the MCP server over stdio (the same server as the cejel-mcp bin)
   issue   re-run this version at the certificate's revision and, only if report.json reproduces
           byte for byte, write an unsigned issuance.json for the issuer to sign through ssh-agent
@@ -1292,12 +1352,22 @@ function parseCliInvocation(args) {
   }
   return { command: "scan", options: parseArgs(args) };
 }
-var EXPORT_USAGE = () => `Usage: npx ${NPX_PACKAGE_NAME} export gitlab-codequality <report.json> [-o gl-code-quality-report.json]`;
+var EXPORT_DEFAULT_OUT = {
+  "gitlab-codequality": "gl-code-quality-report.json",
+  "gitlab-metrics": "metrics.txt"
+};
+function isExportFormat(value) {
+  return value !== void 0 && Object.hasOwn(EXPORT_DEFAULT_OUT, value);
+}
+var EXPORT_USAGE = () => [
+  `Usage: npx ${NPX_PACKAGE_NAME} export gitlab-codequality <report.json> [-o gl-code-quality-report.json]`,
+  `       npx ${NPX_PACKAGE_NAME} export gitlab-metrics <report.json> [-o metrics.txt]`
+].join("\n");
 function parseExportArgs(args) {
   const [format, ...rest] = args;
-  if (format !== "gitlab-codequality") throw new Error(EXPORT_USAGE());
+  if (!isExportFormat(format)) throw new Error(EXPORT_USAGE());
   const positionals = [];
-  let outPath = "gl-code-quality-report.json";
+  let outPath = EXPORT_DEFAULT_OUT[format];
   for (let index = 0; index < rest.length; index += 1) {
     const arg = rest[index];
     if (arg === void 0) continue;
@@ -1334,6 +1404,12 @@ ${members.map((member) => `  - ${member}`).join("\n")}
     );
     return 1;
   }
+  if (invocation.format === "gitlab-metrics") {
+    const metrics = exportGitLabMetrics(reportResult.data);
+    writeOutputFile(invocation.outPath, renderGitLabMetricsFile(metrics), "export output");
+    process.stderr.write(renderGitLabMetricsFooter(metrics));
+    return 0;
+  }
   const result = exportGitLabCodeQuality(reportResult.data);
   writeOutputFile(
     invocation.outPath,

package/dist/mcp/index.js

@@ -3,8 +3,8 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "../chunk-S5B5KMSO.js";
-import "../chunk-4YOIR3E6.js";
+} from "../chunk-IJYGVKYU.js";
+import "../chunk-G6AN4EDL.js";
 import "../chunk-2UMHJ23V.js";
 import "../chunk-AMVP7L26.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.6.11",
+  "version": "0.7.0-rc.2",
   "mcpName": "io.github.BargLabs/cejel",
   "private": false,
   "publishConfig": {