@cejel/cejel 0.6.4 → 0.6.6

package/dist/{chunk-63XQDYQ5.js → chunk-VGBFZBZQ.js}

@@ -8,7 +8,8 @@ import {
 // src/witan/git-exec.ts
 init_esm_shims();
 import { execFileSync } from "child_process";
-import { resolve } from "path";
+import { realpathSync } from "fs";
+import { dirname, resolve } from "path";
 var GIT_EXEC_MAX_BUFFER_BYTES = 8 * 1024 * 1024;
 var GIT_EXEC_TIMEOUT_MS = 3e4;
 var HARDENED_GIT_ARGUMENTS = [
@@ -52,6 +53,7 @@ var HARDENED_GIT_ARGUMENTS = [
   "-c",
   "protocol.ssh.allow=never"
 ];
+var discoveryCeiling;
 function hardenedGitEnvironment(cwd) {
   const environment = {};
   for (const key of ["PATH", "HOME", "TZ"]) {
@@ -78,7 +80,8 @@ function hardenedGitEnvironment(cwd) {
     // still excluded below.
     GIT_CONFIG_COUNT: "1",
     GIT_CONFIG_KEY_0: "safe.directory",
-    GIT_CONFIG_VALUE_0: cwd
+    GIT_CONFIG_VALUE_0: cwd,
+    ...discoveryCeiling === void 0 ? {} : { GIT_CEILING_DIRECTORIES: discoveryCeiling }
   };
 }
 function errorField(error, key) {

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "./chunk-HC2WASRS.js";
+} from "./chunk-BG4ZRBQ5.js";
 import {
   CALLER_CONTEXT_PRODUCT_IDENTITY_NOTICE,
   CERTIFICATE_GLOSSARY,
@@ -29,8 +29,8 @@ import {
   runCejelScan,
   serializeWitanReport,
   verifyWitanAttestationBinding
-} from "./chunk-4YK23CST.js";
-import "./chunk-63XQDYQ5.js";
+} from "./chunk-JNTTFAHQ.js";
+import "./chunk-VGBFZBZQ.js";
 import {
   external_exports
 } from "./chunk-FSMZV3Y6.js";
@@ -601,19 +601,22 @@ function renderMinScoreCoverageFailure(coverage, minScore) {
   return `Cejel: cannot evaluate the required minimum ${minScore.toFixed(1)}/4.0 because fewer than half of the applicable dimensions were measured in at least one score (${formatCoverageSummary(coverage)}). Resolve the reported evidence gaps and re-scan.
 `;
 }
+function stripTerminalControls(text) {
+  return text.replace(/[\t\n]/g, " ").replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
+}
 function renderTerminalCertificate(summary, report) {
   const abstained = summary.verdict === "Insufficient source" || summary.verdict === "Insufficient evidence";
   if (!abstained && (summary.overallScore === null || summary.codeTrustScore === null || summary.processTrustScore === null)) {
     throw new Error("A scored Cejel summary must carry numeric headline scores.");
   }
   const lines = abstained ? [
-    `Cejel Trust Certificate \u2014 ${summary.productDisplayName}`,
+    `Cejel Trust Certificate \u2014 ${stripTerminalControls(summary.productDisplayName)}`,
     "",
     `${summary.verdict} to certify.`,
-    `  ${summary.insufficientSourceReason ?? "No ratable source or measurable evidence was found."}`,
+    `  ${summary.insufficientSourceReason === void 0 ? "No ratable source or measurable evidence was found." : stripTerminalControls(summary.insufficientSourceReason)}`,
     ""
   ] : [
-    `Cejel Trust Certificate \u2014 ${summary.productDisplayName}`,
+    `Cejel Trust Certificate \u2014 ${stripTerminalControls(summary.productDisplayName)}`,
     "",
     `Overall: ${formatScore(summary.overallScore)}/4.0 (${summary.verdict})`,
     `  Code trust:    ${formatScore(summary.codeTrustScore)}/4.0`,
@@ -629,7 +632,7 @@ function renderTerminalCertificate(summary, report) {
       2,
       0,
       `Scope: ${relyingPartySummary.scope}`,
-      `What was examined: ${relyingPartySummary.examined}`,
+      `What was examined: ${stripTerminalControls(relyingPartySummary.examined)}`,
       `What was established: ${relyingPartySummary.established}`,
       `What was not established: ${relyingPartySummary.notEstablished}`,
       `What to do next: ${relyingPartySummary.next}`,
@@ -639,14 +642,14 @@ function renderTerminalCertificate(summary, report) {
   if (summary.scanLimitations.length > 0) {
     lines.push(
       "LIMITED EVIDENCE \u2014 the score and verdict are qualified by scan limitations:",
-      ...summary.scanLimitations.map((limitation) => `  - ${limitation}`),
+      ...summary.scanLimitations.map((limitation) => `  - ${stripTerminalControls(limitation)}`),
       ""
     );
   }
   if (summary.historyLimitations?.length) {
     lines.push(
       "HISTORY LIMITATION \u2014 scored as usual, but some criteria read truncated history:",
-      ...summary.historyLimitations.map((limitation) => `  - ${limitation}`),
+      ...summary.historyLimitations.map((limitation) => `  - ${stripTerminalControls(limitation)}`),
       ""
     );
   }
@@ -664,9 +667,11 @@ function renderTerminalCertificate(summary, report) {
     lines.push("");
   }
   if (summary.contributingSources.length > 0) {
-    lines.push(`Incorporates findings from: ${summary.contributingSources.join(", ")}`);
+    lines.push(
+      `Incorporates findings from: ${summary.contributingSources.map(stripTerminalControls).join(", ")}`
+    );
     for (const source of summary.externalSources) {
-      lines.push(`  ${formatExternalSourceLine(source)}`);
+      lines.push(`  ${stripTerminalControls(formatExternalSourceLine(source))}`);
     }
     lines.push("");
   }
@@ -697,7 +702,7 @@ function renderTerminalCertificate(summary, report) {
     );
     for (const finding of summary.topFindings) {
       lines.push(
-        `  [finding severity: ${finding.severity}] ${finding.criterionId} [dimension band: ${finding.dimensionBand}]: ${finding.displaySummary ?? finding.summary}`
+        `  [finding severity: ${finding.severity}] ${finding.criterionId} [dimension band: ${finding.dimensionBand}]: ${stripTerminalControls(finding.displaySummary ?? finding.summary)}`
       );
     }
     const remaining = summary.findingCount - summary.topFindings.length;
@@ -714,7 +719,7 @@ function renderTerminalCertificate(summary, report) {
     );
     for (const finding of summary.topExternalFindings) {
       lines.push(
-        `  [${finding.severity}] ${finding.label} \u2192 ${finding.dimension}: ${finding.ruleId} \u2014 ${finding.message}${finding.location ? ` (${finding.location})` : ""}`
+        `  [${finding.severity}] ${stripTerminalControls(finding.label)} \u2192 ${finding.dimension}: ${stripTerminalControls(finding.ruleId)} \u2014 ${stripTerminalControls(finding.message)}${finding.location ? ` (${stripTerminalControls(finding.location)})` : ""}`
       );
     }
     const remaining = summary.externalFindingCount - summary.topExternalFindings.length;

package/dist/mcp/index.js

@@ -3,9 +3,9 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "../chunk-HC2WASRS.js";
-import "../chunk-4YK23CST.js";
-import "../chunk-63XQDYQ5.js";
+} from "../chunk-BG4ZRBQ5.js";
+import "../chunk-JNTTFAHQ.js";
+import "../chunk-VGBFZBZQ.js";
 import "../chunk-FSMZV3Y6.js";
 import {
   init_esm_shims

package/dist/packs/d-series/index.js

@@ -3,10 +3,10 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   listCejelLlmPackFiles
-} from "../../chunk-M6YYPJSN.js";
+} from "../../chunk-5PFYOIOS.js";
 import {
   execGit
-} from "../../chunk-63XQDYQ5.js";
+} from "../../chunk-VGBFZBZQ.js";
 import {
   require_typescript
 } from "../../chunk-RH6FKREX.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "mcpName": "io.github.BargLabs/cejel",
   "private": false,
   "publishConfig": {