@cejel/cejel 0.6.3 → 0.6.5

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "./chunk-KAMWXGY7.js";
+} from "./chunk-35TRRAEC.js";
 import {
   CALLER_CONTEXT_PRODUCT_IDENTITY_NOTICE,
   CERTIFICATE_GLOSSARY,
@@ -29,7 +29,7 @@ import {
   runCejelScan,
   serializeWitanReport,
   verifyWitanAttestationBinding
-} from "./chunk-FA72HEWJ.js";
+} from "./chunk-7XQVE76B.js";
 import "./chunk-63XQDYQ5.js";
 import {
   external_exports
@@ -42,7 +42,7 @@ import {
 init_esm_shims();
 import { createHash as createHash3 } from "crypto";
 import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
-import { dirname, join, resolve } from "path";
+import { dirname, join, resolve as resolve2 } from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 
 // src/issuance/index.ts
@@ -541,6 +541,43 @@ function renderGitLabCodeQualityFooter(result) {
 `;
 }
 
+// src/npx-version-guard.ts
+init_esm_shims();
+import { delimiter, resolve } from "path";
+var EXACT_VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+function npxVersionMismatchWarning(context) {
+  const { env, packageName, runningVersion, runningPath } = context;
+  if (env.npm_lifecycle_event !== "npx") return void 0;
+  if (env.npm_config_call) return void 0;
+  const pinned = exactPackageSpecVersion(env.npm_config_package, packageName);
+  if (pinned !== void 0) {
+    if (pinned === runningVersion) return void 0;
+    return `warning: npx was asked for ${packageName}@${pinned}, but cejel ${runningVersion} is running from ${runningPath}. Inside a ${packageName} checkout, npx can run the cejel on PATH; run it from another directory (#436).`;
+  }
+  const requested = env.npm_package_version;
+  if (env.npm_package_name !== packageName || !requested) return void 0;
+  if (!resolvedToLocalTree(env, context.cwd)) return void 0;
+  if (requested === runningVersion) return void 0;
+  const checkout = env.npm_config_local_prefix || context.cwd;
+  return `warning: npx resolved ${packageName} to the ${requested} checkout at ${checkout} and ran the cejel on PATH instead: cejel ${runningVersion} from ${runningPath}. Run npx from another directory to get the version you asked for (#436).`;
+}
+function exactPackageSpecVersion(packageSpecs, packageName) {
+  if (!packageSpecs) return void 0;
+  const prefix = `${packageName}@`;
+  for (const spec of packageSpecs.split(/\n+/)) {
+    const trimmed = spec.trim();
+    if (!trimmed.startsWith(prefix)) continue;
+    const version = trimmed.slice(prefix.length);
+    if (EXACT_VERSION_PATTERN.test(version)) return version;
+  }
+  return void 0;
+}
+function resolvedToLocalTree(env, cwd) {
+  const pathKey = Object.keys(env).find((key) => /^path$/i.test(key) && env[key]);
+  const first = pathKey ? env[pathKey]?.split(delimiter)[0] : void 0;
+  return first !== void 0 && first === resolve(cwd, "node_modules", ".bin");
+}
+
 // src/terminal.ts
 init_esm_shims();
 function renderMinScoreAbstentionFailure(summary, minScore) {
@@ -862,8 +899,29 @@ async function main() {
   process.exitCode = exitCode;
 }
 async function runWitanFreeCli(args) {
+  warnIfNpxRanAnotherVersion();
   return runWitanCli(args);
 }
+function warnIfNpxRanAnotherVersion() {
+  const warning = npxVersionMismatchWarning({
+    env: process.env,
+    cwd: process.cwd(),
+    packageName: NPX_PACKAGE_NAME,
+    runningVersion: cliVersion(),
+    runningPath: runningEntryPath()
+  });
+  if (warning) process.stderr.write(`${warning}
+`);
+}
+function runningEntryPath() {
+  const invokedPath = process.argv[1];
+  if (!invokedPath) return process.execPath;
+  try {
+    return realpathSync(invokedPath);
+  } catch {
+    return invokedPath;
+  }
+}
 async function runWitanV22CalibrationCli(args) {
   return runWitanCli(args, WITAN_RUBRIC_VERSION_V22);
 }
@@ -1039,8 +1097,8 @@ function parseExportArgs(args) {
   return {
     command: "export",
     format,
-    reportPath: resolve(reportPath),
-    outPath: resolve(outPath)
+    reportPath: resolve2(reportPath),
+    outPath: resolve2(outPath)
   };
 }
 function runExport(invocation) {
@@ -1074,8 +1132,8 @@ function parseVerifyArgs(args) {
     if (arg === "--signers" || arg === "--revocations") {
       const value = args[index + 1];
       if (!value) throw new Error(`Missing value for ${arg}`);
-      if (arg === "--signers") signersPath = resolve(value);
-      else revocationsPath = resolve(value);
+      if (arg === "--signers") signersPath = resolve2(value);
+      else revocationsPath = resolve2(value);
       index += 1;
       continue;
     }
@@ -1087,10 +1145,10 @@ function parseVerifyArgs(args) {
   if (!reportPath || !attestationPath) throw new Error(VERIFY_USAGE());
   return {
     command: "verify",
-    reportPath: resolve(reportPath),
-    attestationPath: resolve(attestationPath),
-    ...issuancePath ? { issuancePath: resolve(issuancePath) } : {},
-    ...issuanceSignaturePath ? { issuanceSignaturePath: resolve(issuanceSignaturePath) } : {},
+    reportPath: resolve2(reportPath),
+    attestationPath: resolve2(attestationPath),
+    ...issuancePath ? { issuancePath: resolve2(issuancePath) } : {},
+    ...issuanceSignaturePath ? { issuanceSignaturePath: resolve2(issuanceSignaturePath) } : {},
     ...signersPath ? { signersPath } : {},
     ...revocationsPath ? { revocationsPath } : {}
   };
@@ -1116,15 +1174,15 @@ function parseIssueArgs(args) {
     if (arg === void 0) continue;
     switch (arg) {
       case "--report":
-        reportPath = resolve(takeValue(arg, index + 1));
+        reportPath = resolve2(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--attestation":
-        attestationPath = resolve(takeValue(arg, index + 1));
+        attestationPath = resolve2(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--key":
-        keyPath = resolve(takeValue(arg, index + 1));
+        keyPath = resolve2(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--engagement-ref":
@@ -1133,7 +1191,7 @@ function parseIssueArgs(args) {
         continue;
       case "--out":
       case "--out-dir":
-        outDir = resolve(takeValue(arg, index + 1));
+        outDir = resolve2(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--product-name":
@@ -1177,7 +1235,7 @@ function parseIssueArgs(args) {
     throw new Error("--product-name and --name cannot be used together");
   }
   return {
-    repoPath: resolve(repoPath ?? "."),
+    repoPath: resolve2(repoPath ?? "."),
     reportPath,
     attestationPath,
     keyPath,
@@ -1530,7 +1588,7 @@ function parseArgs(args) {
     throw new Error("--product-name and --name cannot be used together");
   }
   return {
-    repoPath: resolve(repoPath ?? "."),
+    repoPath: resolve2(repoPath ?? "."),
     outDir,
     ...minScore != null ? { minScore } : {},
     ...productName ? { productName } : {},

package/dist/mcp/index.js

@@ -3,8 +3,8 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "../chunk-KAMWXGY7.js";
-import "../chunk-FA72HEWJ.js";
+} from "../chunk-35TRRAEC.js";
+import "../chunk-7XQVE76B.js";
 import "../chunk-63XQDYQ5.js";
 import "../chunk-FSMZV3Y6.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.6.3",
+  "version": "0.6.5",
   "mcpName": "io.github.BargLabs/cejel",
   "private": false,
   "publishConfig": {