@cejel/cejel 0.6.5 → 0.6.7

package/README.md

@@ -92,7 +92,7 @@ if (-not $expected -or $actual -ne $expected.ToLowerInvariant()) {
 ```
 
 > **Windows signing status:** `cejel-Windows-x86_64.exe` is intentionally unsigned in
-> 0.6.5 and may trigger Microsoft SmartScreen. The release build removes Node's inherited
+> 0.6.7 and may trigger Microsoft SmartScreen. The release build removes Node's inherited
 > signature before SEA injection and fails unless Windows reports the result as `NotSigned`;
 > it does not ship an invalid signature. Before running it, verify `SHA256SUMS` and the
 > GitHub build-provenance attestation. Each binary also has an attached SPDX SBOM (the packages
@@ -116,7 +116,7 @@ docker run --rm --network=none -v "$PWD:/w" -w /w -v "$PWD/cejel:/cejel:ro" debi
 npx @cejel/cejel@latest .
 ```
 
-> **Distribution note:** Cejel `0.6.5` is the coordinated release version for npm,
+> **Distribution note:** Cejel `0.6.7` is the coordinated release version for npm,
 > standalone binaries, Docker/OCI, GitHub Action, Homebrew, and MCP Registry. A GitLab CI
 > template and Code Quality export live in [`docs/gitlab-ci.md`](./docs/gitlab-ci.md).
 
@@ -187,16 +187,16 @@ gh attestation verify ./cejel-Windows-x86_64.exe -R BargLabs/cejel
 This is cryptographically signed provenance. It is distinct from Apple Developer ID or
 Microsoft Authenticode code-signing.
 
-**Docker / OCI.** The current container release is `0.6.5`:
+**Docker / OCI.** The current container release is `0.6.7`:
 
 ```bash
-docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.6.5
+docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.6.7
 ```
 
 The image defaults to `cejel-mcp` over stdio. To use the CLI instead:
 
 ```bash
-docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.6.5 .
+docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.6.7 .
 ```
 
 The OCI image carries an SBOM of its base-image packages, maximum-mode build provenance, and a
@@ -571,7 +571,7 @@ The OCI image is an alternative when Docker is the preferred execution boundary.
 the host path with the repository OpenClaw should allow Cejel to read:
 
 ```bash
-npx -y openclaw@latest mcp set cejel-oci '{"command":"docker","args":["run","--rm","-i","-v","/absolute/path/to/repo:/workspace:ro","ghcr.io/barglabs/cejel:0.6.5"]}'
+npx -y openclaw@latest mcp set cejel-oci '{"command":"docker","args":["run","--rm","-i","-v","/absolute/path/to/repo:/workspace:ro","ghcr.io/barglabs/cejel:0.6.7"]}'
 npx -y openclaw@latest mcp doctor cejel-oci --probe
 ```
 

package/dist/calibration/llm-detector.js

@@ -5,11 +5,11 @@ import {
   deriveProductIdentity,
   runCejelScan,
   serializeWitanReport
-} from "../chunk-7XQVE76B.js";
+} from "../chunk-ZZHQZW26.js";
 import {
   listCejelLlmPackFiles
-} from "../chunk-M6YYPJSN.js";
-import "../chunk-63XQDYQ5.js";
+} from "../chunk-5PFYOIOS.js";
+import "../chunk-VGBFZBZQ.js";
 import {
   external_exports
 } from "../chunk-FSMZV3Y6.js";

package/dist/{chunk-M6YYPJSN.js → chunk-5PFYOIOS.js}

@@ -5,7 +5,7 @@ import {
   describeGitFailure,
   execGit,
   isExpectedGitAbsence
-} from "./chunk-63XQDYQ5.js";
+} from "./chunk-VGBFZBZQ.js";
 import {
   init_esm_shims
 } from "./chunk-O3MHSK25.js";

package/dist/{chunk-35TRRAEC.js → chunk-TOQPQPDF.js}

@@ -5,7 +5,7 @@ import {
   renderWitanBadgeSvg,
   renderWitanHtmlReport,
   runCejelScan
-} from "./chunk-7XQVE76B.js";
+} from "./chunk-ZZHQZW26.js";
 import {
   ZodFirstPartyTypeKind,
   ZodOptional,

package/dist/{chunk-63XQDYQ5.js → chunk-VGBFZBZQ.js}

@@ -8,7 +8,8 @@ import {
 // src/witan/git-exec.ts
 init_esm_shims();
 import { execFileSync } from "child_process";
-import { resolve } from "path";
+import { realpathSync } from "fs";
+import { dirname, resolve } from "path";
 var GIT_EXEC_MAX_BUFFER_BYTES = 8 * 1024 * 1024;
 var GIT_EXEC_TIMEOUT_MS = 3e4;
 var HARDENED_GIT_ARGUMENTS = [
@@ -52,6 +53,7 @@ var HARDENED_GIT_ARGUMENTS = [
   "-c",
   "protocol.ssh.allow=never"
 ];
+var discoveryCeiling;
 function hardenedGitEnvironment(cwd) {
   const environment = {};
   for (const key of ["PATH", "HOME", "TZ"]) {
@@ -78,7 +80,8 @@ function hardenedGitEnvironment(cwd) {
     // still excluded below.
     GIT_CONFIG_COUNT: "1",
     GIT_CONFIG_KEY_0: "safe.directory",
-    GIT_CONFIG_VALUE_0: cwd
+    GIT_CONFIG_VALUE_0: cwd,
+    ...discoveryCeiling === void 0 ? {} : { GIT_CEILING_DIRECTORIES: discoveryCeiling }
   };
 }
 function errorField(error, key) {

package/dist/{chunk-7XQVE76B.js → chunk-ZZHQZW26.js}

@@ -5,7 +5,7 @@ import {
   describeGitFailure,
   execGit,
   isExpectedGitAbsence
-} from "./chunk-63XQDYQ5.js";
+} from "./chunk-VGBFZBZQ.js";
 import {
   external_exports
 } from "./chunk-FSMZV3Y6.js";
@@ -572,6 +572,7 @@ var WITAN_DIRECTORY_WALK_AUTHENTICATED_A1_ABSENCE_SUMMARY = "Reviewable source i
 var WITAN_LEGACY_AUTHENTICATED_A1_ABSENCE_SUMMARY = "Reviewable source is present, but the complete tracked inventory contains no concrete test file, configured test runner, CI test command, or coverage configuration.";
 var WITAN_A5_RECONCILIATION_UNSETTLED_DISCLOSURE = "Whether this repository's claims are reconciled against its implementation cannot be settled from static evidence; Cejel makes no finding on it.";
 var WITAN_A2_TENANT_ISOLATION_UNSETTLED_DISCLOSURE = "Whether tenant isolation is enforced outside the database cannot be settled from static evidence; Cejel makes no finding on it.";
+var WITAN_A3_BUILD_STEP_UNSETTLED_DISCLOSURE = "Whether this package has a build or type-check step outside the files read cannot be settled from static evidence; Cejel makes no finding on it.";
 function isWitanNoMeasurementAbstention(report) {
   return report.verdict === "insufficient_source" && report.insufficientSourceReason.startsWith(WITAN_NO_MEASUREMENT_REASON) && report.criteria.every(
     ({ status }) => status === "not_applicable" || status === "insufficient_data"
@@ -1973,6 +1974,7 @@ function buildWithheldPathsGapSentence(report) {
 }
 var SETTLING_EVIDENCE_DISCLOSURES = [
   { criterionId: "A2", sentence: WITAN_A2_TENANT_ISOLATION_UNSETTLED_DISCLOSURE },
+  { criterionId: "A3", sentence: WITAN_A3_BUILD_STEP_UNSETTLED_DISCLOSURE },
   { criterionId: "A5", sentence: WITAN_A5_RECONCILIATION_UNSETTLED_DISCLOSURE }
 ];
 function settlingEvidenceDisclosures(report) {
@@ -3205,6 +3207,7 @@ function buildWitanInputFromRepoUntracked(options) {
   const usesV24SecretContentContext = rubricVersion === WITAN_RUBRIC_VERSION_V24;
   const usesV25InlineHealthRoute = rubricVersion === WITAN_RUBRIC_VERSION_V25 || rubricVersion === WITAN_RUBRIC_VERSION_V26;
   const usesV26SettlingEvidence = rubricVersion === WITAN_RUBRIC_VERSION_V26;
+  const usesV26BuildStepEvidence = rubricVersion === WITAN_RUBRIC_VERSION_V26;
   const structuralArchetype = classifyRepoArchetype(inventoryFiles, rubricVersion);
   const readableArchetype = rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure2(rubricVersion) ? applyReadableSourceRepresentationGate(
     options.repoPath,
@@ -3246,6 +3249,7 @@ function buildWitanInputFromRepoUntracked(options) {
     usesV24SecretContentContext,
     usesV25InlineHealthRoute,
     usesV26SettlingEvidence,
+    usesV26BuildStepEvidence,
     reviewableSourceProof,
     inventoryAbsenceContext,
     scanLimitations
@@ -3860,7 +3864,7 @@ function buildNotApplicableSignal(criterionId, reason) {
     notApplicable: true
   };
 }
-function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, useV33Detectors, useV36Detectors, useV39Detectors, useV47Detectors, useV18NativeRls, useV19CommitYear, useV20A3ExplicitGaps, useV21ExecutedEscalations, useV22PackageStartEntrypoint, useV23StrictCoverageAndRecipeRunners, useV23PemPrivateKeyGrammar, useV23WithheldPathAbstention, useV24SecretContentContext, useV25InlineHealthRoute, useV26SettlingEvidence, reviewableSourceProof, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT, scanLimitations = /* @__PURE__ */ new Set()) {
+function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, useV33Detectors, useV36Detectors, useV39Detectors, useV47Detectors, useV18NativeRls, useV19CommitYear, useV20A3ExplicitGaps, useV21ExecutedEscalations, useV22PackageStartEntrypoint, useV23StrictCoverageAndRecipeRunners, useV23PemPrivateKeyGrammar, useV23WithheldPathAbstention, useV24SecretContentContext, useV25InlineHealthRoute, useV26SettlingEvidence, useV26BuildStepEvidence, reviewableSourceProof, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT, scanLimitations = /* @__PURE__ */ new Set()) {
   const signals = [];
   const mono = resolveMonorepoContext(repoPath, scanLimitations);
   const collectCriterion = (criterionId, collect) => withContentReadCriterion(criterionId, collect);
@@ -3905,7 +3909,8 @@ function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, u
       useV22PackageStartEntrypoint,
       useV23WithheldPathAbstention,
       inventoryAbsenceContext,
-      useV25InlineHealthRoute
+      useV25InlineHealthRoute,
+      useV26BuildStepEvidence
     )
   );
   const a4Signal = collectCriterion(
@@ -4828,7 +4833,7 @@ function collectCryptoHygieneEvidence(repoPath, implFiles, useV39Detectors = fal
   }
   return { evidence, findings, hasSurface, clean: hasSurface && !insecureFound };
 }
-function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, useV20ExplicitGaps = false, useV22PackageStartEntrypoint = false, useV23WithheldPathAbstention = false, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT, useV25InlineHealthRoute = false) {
+function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, useV20ExplicitGaps = false, useV22PackageStartEntrypoint = false, useV23WithheldPathAbstention = false, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT, useV25InlineHealthRoute = false, useV26BuildStepEvidence = false) {
   const v20DirectHttpEntrypoint = useV20ExplicitGaps ? findV20DirectHttpServerEntrypointFile(repoPath, repoFiles) : null;
   const v22PackageStartHttpEntrypoint = useV22PackageStartEntrypoint ? findV22PackageStartHttpServerEntrypointFile(repoPath, repoFiles) : null;
   const v20RuntimeContainer = useV20ExplicitGaps ? findRuntimeContainerEntrypointFile(repoPath, repoFiles, true) : null;
@@ -5045,13 +5050,22 @@ function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, us
     }
   }
   if (evidence.length === 0) return null;
+  let buildStepSettlement;
   if (useV20ExplicitGaps) {
     const workspaceManifests = packageJson ? findDeclaredWorkspaceManifests(repoPath, repoFiles, packageJson) : NO_DECLARED_WORKSPACE_MANIFESTS;
     const hasBuildOrTypecheck = scripts.has("build") || scripts.has("typecheck") || workspaceManifests.declared > workspaceManifests.read.length || workspaceManifests.read.some((file) => {
       const workspaceScripts = readPackageScripts(join(repoPath, file));
       return workspaceScripts.has("build") || workspaceScripts.has("typecheck");
     });
-    if (packageJson && !hasBuildOrTypecheck) {
+    buildStepSettlement = useV26BuildStepEvidence && packageJson ? settleV26BuildStepEvidence(
+      repoPath,
+      repoFiles,
+      packageJson,
+      workspaceManifests,
+      workflows,
+      (file) => !useV27Detectors || isAuthoredProductionPath(file)
+    ) : void 0;
+    if (packageJson && !hasBuildOrTypecheck && (buildStepSettlement === void 0 || buildStepSettlement === "fires")) {
       const workspaceRead = workspaceManifests.read.length;
       findings.push({
         severity: "info",
@@ -5192,7 +5206,8 @@ function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, us
         "Counts static rollback or migration-safety artifacts.",
         "saturating_count"
       )
-    ]
+    ],
+    ...buildStepSettlement === "unsettled" ? { notes: WITAN_A3_BUILD_STEP_UNSETTLED_DISCLOSURE } : {}
   };
 }
 function collectA4DependencyEvidence(repoPath, repoFiles, mono, useV27Detectors, useV47Detectors, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT) {
@@ -8408,22 +8423,7 @@ function packageScriptReferences(command, scripts) {
   const names = /* @__PURE__ */ new Set();
   let dynamic = false;
   for (const segment of splitShellCommandSegments(command)) {
-    for (const match of segment.matchAll(
-      /\bpnpm\s+run\s+\/((?:\\.|[^/])+)\/([dgimsuvy]*)/giu
-    )) {
-      const source = match[1];
-      if (!source) continue;
-      try {
-        const flags = (match[2] ?? "").replace(/[dgy]/g, "");
-        const selector = new RegExp(source, flags);
-        for (const name of scripts.keys()) {
-          if (selector.test(name)) names.add(name);
-          selector.lastIndex = 0;
-        }
-      } catch {
-        dynamic = true;
-      }
-    }
+    if (/\bpnpm\s+run\s+\//iu.test(segment)) dynamic = true;
     for (const match of segment.matchAll(
       /\b(?:npm|pnpm|yarn)\s+(?:run\s+)?([A-Za-z0-9][A-Za-z0-9:._-]*)/giu
     )) {
@@ -9411,40 +9411,51 @@ function findRootPackageJson(repoFiles) {
 var WORKSPACE_PATTERN_LIMIT = 64;
 var WORKSPACE_PACKAGE_MANIFEST_LIMIT = 200;
 var NO_DECLARED_WORKSPACE_MANIFESTS = { read: [], declared: 0 };
+var UNREADABLE_WORKSPACE_DECLARATION = {
+  read: [],
+  declared: 0,
+  unreadable: true
+};
 function findDeclaredWorkspaceManifests(repoPath, repoFiles, rootPackageJson) {
   const patterns = [];
   if (rootPackageJson) {
     const declared = readPackageJsonWorkspacePatterns(join(repoPath, rootPackageJson));
-    if (declared === null) return NO_DECLARED_WORKSPACE_MANIFESTS;
+    if (declared === null) return UNREADABLE_WORKSPACE_DECLARATION;
     patterns.push(...declared);
   }
   if (repoFiles.includes("pnpm-workspace.yaml")) {
     const declared = readPnpmWorkspacePatterns(join(repoPath, "pnpm-workspace.yaml"));
-    if (declared === null) return NO_DECLARED_WORKSPACE_MANIFESTS;
+    if (declared === null) return UNREADABLE_WORKSPACE_DECLARATION;
     patterns.push(...declared);
   }
-  if (patterns.length === 0 || patterns.length > WORKSPACE_PATTERN_LIMIT) {
-    return NO_DECLARED_WORKSPACE_MANIFESTS;
-  }
+  if (patterns.length === 0) return NO_DECLARED_WORKSPACE_MANIFESTS;
+  if (patterns.length > WORKSPACE_PATTERN_LIMIT) return UNREADABLE_WORKSPACE_DECLARATION;
   const include = [];
   const exclude = [];
+  let unparsedPattern = false;
   for (const pattern of patterns) {
     const negated = pattern.startsWith("!");
-    const regex = workspaceGlobToRegExp(negated ? pattern.slice(1) : pattern);
+    const matcher = workspaceGlobMatcher(negated ? pattern.slice(1) : pattern);
     if (negated) {
-      if (regex === null) return NO_DECLARED_WORKSPACE_MANIFESTS;
-      exclude.push(regex);
-    } else if (regex !== null) {
-      include.push(regex);
+      if (matcher === null) return UNREADABLE_WORKSPACE_DECLARATION;
+      exclude.push(matcher);
+    } else if (matcher !== null) {
+      include.push(matcher);
+    } else {
+      unparsedPattern = true;
     }
   }
   const matched = repoFiles.filter((file) => {
     if (file === rootPackageJson || !file.endsWith("/package.json")) return false;
     if (!isAuthoredProductionPath(file)) return false;
     const dir = file.slice(0, -"/package.json".length);
-    return include.some((regex) => regex.test(dir)) && !exclude.some((regex) => regex.test(dir));
+    return include.some((matches) => matches(dir)) && !exclude.some((matches) => matches(dir));
   }).sort();
-  return { read: matched.slice(0, WORKSPACE_PACKAGE_MANIFEST_LIMIT), declared: matched.length };
+  return {
+    read: matched.slice(0, WORKSPACE_PACKAGE_MANIFEST_LIMIT),
+    declared: matched.length,
+    ...unparsedPattern ? { unreadable: true } : {}
+  };
 }
 function readPackageJsonWorkspacePatterns(packageJsonPath) {
   if (!isRegularFile(packageJsonPath)) return [];
@@ -9503,27 +9514,69 @@ function yamlScalar(raw) {
   const plain = stripYamlLineComment(raw).trim();
   return plain === "" || /^["'[{&*|>]/.test(plain) ? null : plain;
 }
-function workspaceGlobToRegExp(pattern) {
+var WORKSPACE_GLOB_MAX_LENGTH = 256;
+var WORKSPACE_GLOB_MAX_SEGMENTS = 32;
+function workspaceGlobMatcher(pattern) {
+  if (pattern.length > WORKSPACE_GLOB_MAX_LENGTH) return null;
   const normalised = pattern.trim().replace(/^\.\//, "").replace(/\/+$/, "");
   if (normalised === "" || normalised.startsWith("/") || /(^|\/)\.\.?(\/|$)/.test(normalised) || /[[\]{}()!+@\\]/.test(normalised)) {
     return null;
   }
-  const segments = normalised.split("/").filter((segment, index, all) => !(segment === "**" && all[index - 1] === "**"));
-  const anySegment = "(?!\\.)[^/]+";
-  if (segments.length === 1 && segments[0] === "**") return new RegExp(`^${anySegment}(?:/${anySegment})*$`);
-  let source = "";
-  segments.forEach((segment, index) => {
-    if (segment === "**") {
-      source += index === 0 ? `(?:${anySegment}/)*` : `(?:/${anySegment})*`;
-      return;
+  const split = normalised.split("/");
+  if (split.length > WORKSPACE_GLOB_MAX_SEGMENTS) return null;
+  const segments = split.filter((segment, index, all) => !(segment === "**" && all[index - 1] === "**"));
+  const isAnySegment = (part) => part !== "" && !part.startsWith(".");
+  if (segments.length === 1 && segments[0] === "**") {
+    return (dir) => dir.split("/").every(isAnySegment);
+  }
+  return (dir) => {
+    let reachable = withGlobstarSkips(segments, [true, ...segments.map(() => false)]);
+    for (const part of dir.split("/")) {
+      const next = segments.map(() => false).concat(false);
+      segments.forEach((segment, index) => {
+        if (!reachable[index]) return;
+        if (segment === "**") {
+          if (isAnySegment(part)) next[index] = true;
+        } else if (matchesWildcardSegment(segment, part)) {
+          next[index + 1] = true;
+        }
+      });
+      reachable = withGlobstarSkips(segments, next);
+      if (!reachable.includes(true)) return false;
     }
-    if (index > 0 && !(index === 1 && segments[0] === "**")) source += "/";
-    const body = segment.split("").map(
-      (char) => char === "*" ? "[^/]*" : char === "?" ? "[^/]" : char.replace(/[.^$|]/g, "\\$&")
-    ).join("");
-    source += /^[*?]/.test(segment) ? `(?!\\.)${body}` : body;
+    return reachable[segments.length] === true;
+  };
+}
+function withGlobstarSkips(segments, reachable) {
+  segments.forEach((segment, index) => {
+    if (segment === "**" && reachable[index]) reachable[index + 1] = true;
   });
-  return new RegExp(`^${source}$`);
+  return reachable;
+}
+function matchesWildcardSegment(glob, part) {
+  if ((glob.startsWith("*") || glob.startsWith("?")) && part.startsWith(".")) return false;
+  let g = 0;
+  let p = 0;
+  let starGlob = -1;
+  let starPart = 0;
+  while (p < part.length) {
+    if (g < glob.length && glob[g] === "*") {
+      starGlob = g;
+      starPart = p;
+      g += 1;
+    } else if (g < glob.length && (glob[g] === "?" || glob[g] === part[p])) {
+      g += 1;
+      p += 1;
+    } else if (starGlob !== -1) {
+      g = starGlob + 1;
+      starPart += 1;
+      p = starPart;
+    } else {
+      return false;
+    }
+  }
+  while (g < glob.length && glob[g] === "*") g += 1;
+  return g === glob.length;
 }
 function ciWorkflowCitationLabel(baseLabel, verb, considered, cited, unread, delegated = NO_DELEGATED_CI_STEPS) {
   const unreadTotal = [...unread.values()].reduce((sum, count) => sum + count, 0);
@@ -9612,6 +9665,263 @@ function unreadCiWorkflowReasons(includes) {
   }
   return unread;
 }
+var BUILD_STEP_EXECUTABLES = /* @__PURE__ */ new Set([
+  "babel",
+  "esbuild",
+  "ncc",
+  "rollup",
+  "svelte-check",
+  "swc",
+  "tsc",
+  "tsup",
+  "vue-tsc",
+  "webpack",
+  "webpack-cli"
+]);
+var BUILD_STEP_SUBCOMMANDS = /* @__PURE__ */ new Map([
+  ["bun", "build"],
+  ["nest", "build"],
+  ["next", "build"],
+  ["ng", "build"],
+  ["parcel", "build"],
+  ["vite", "build"]
+]);
+var BUILD_STEP_TASK_RUNNERS = /* @__PURE__ */ new Set([
+  "bun",
+  "gmake",
+  "just",
+  "lerna",
+  "make",
+  "npm",
+  "nx",
+  "pnpm",
+  "turbo",
+  "yarn"
+]);
+var BUILD_STEP_TARGET_NAME_PATTERN = /^(?:build|typecheck)$/u;
+var BUILD_STEP_TARGET_ARGUMENT_PATTERN = /^(?:[^\s:]+:)?(?:build|typecheck)$/u;
+var TYPESCRIPT_SOURCE_PATTERN = /\.(?:ts|tsx|mts|cts)$/u;
+var TYPESCRIPT_DECLARATION_PATTERN = /\.d\.(?:ts|mts|cts)$/u;
+var TSCONFIG_PATTERN = /(^|\/)tsconfig[^/]*\.json$/u;
+var BUILD_STEP_DOCKERFILE_PATTERN = /(^|\/)(?:dockerfile|containerfile)(?:\.[^/]*)?$|[^/]\.dockerfile$/iu;
+function settleV26BuildStepEvidence(repoPath, repoFiles, packageJson, workspaceManifests, workflows, includesWorkflow) {
+  const nestedPackageDirs = repoFiles.filter((file) => file !== packageJson && /(^|\/)package\.json$/u.test(file)).map((file) => file.slice(0, -"package.json".length));
+  const hasSomethingToBuild = repoFiles.some(
+    (file) => isAuthoredProductionPath(file) && (TYPESCRIPT_SOURCE_PATTERN.test(file) && !TYPESCRIPT_DECLARATION_PATTERN.test(file) || TSCONFIG_PATTERN.test(file)) && !nestedPackageDirs.some((dir) => file.startsWith(dir))
+  );
+  if (!hasSomethingToBuild) return "nothing-to-build";
+  let unsettled = false;
+  const commandRunsStep = (command) => {
+    const state = classifyBuildStepCommand(command);
+    if (state === "unparseable") unsettled = true;
+    return state === "step";
+  };
+  for (const manifest of [packageJson, ...workspaceManifests.read]) {
+    const scripts = readBuildStepPackageScripts(join(repoPath, manifest));
+    if (scripts === null) {
+      unsettled = true;
+      continue;
+    }
+    for (const [name, command] of scripts) {
+      if (BUILD_STEP_TARGET_NAME_PATTERN.test(name) || commandRunsStep(command)) return "step-found";
+    }
+  }
+  for (const workflow of workflows) {
+    const fullPath = join(repoPath, workflow);
+    if (!/^\.github\/workflows\//u.test(workflow) || !isRegularFile(fullPath)) {
+      unsettled = true;
+      continue;
+    }
+    if (extractCiRunCommands(readRepoText(fullPath, "utf8")).some(commandRunsStep)) {
+      return "step-found";
+    }
+  }
+  for (const file of repoFiles.filter((path) => BUILD_STEP_DOCKERFILE_PATTERN.test(path))) {
+    const fullPath = join(repoPath, file);
+    if (!isRegularFile(fullPath)) {
+      unsettled = true;
+      continue;
+    }
+    const run = dockerfileRunCommands(readRepoText(fullPath, "utf8"));
+    if (run.unparseable) unsettled = true;
+    if (run.commands.some(commandRunsStep)) return "step-found";
+  }
+  for (const file of repoFiles.filter(isRecipeFile)) {
+    const fullPath = join(repoPath, file);
+    if (!isRegularFile(fullPath)) {
+      unsettled = true;
+      continue;
+    }
+    for (const [name, target] of readRecipeTargets(readRepoText(fullPath, "utf8"))) {
+      if (BUILD_STEP_TARGET_NAME_PATTERN.test(name)) return "step-found";
+      if (target.commands.some((command) => commandRunsStep(command.replace(/\\$/u, "")))) {
+        return "step-found";
+      }
+    }
+  }
+  if (workspaceManifests.declared > workspaceManifests.read.length || workspaceManifests.unreadable) {
+    unsettled = true;
+  }
+  if (unreadCiWorkflowReasons(includesWorkflow).size > 0) unsettled = true;
+  const delegated = countDelegatedCiSteps(repoPath, workflows);
+  if (delegated.crossRepositoryReusableWorkflows + delegated.compositeActions > 0) unsettled = true;
+  if (withheldRepoPaths().some(
+    ({ path }) => BUILD_STEP_DOCKERFILE_PATTERN.test(path) || isRecipeFile(path) || /(^|\/)package\.json$/u.test(path) && isAuthoredProductionPath(path)
+  )) {
+    unsettled = true;
+  }
+  return unsettled ? "unsettled" : "fires";
+}
+function readBuildStepPackageScripts(packageJsonPath) {
+  if (!isRegularFile(packageJsonPath)) return null;
+  const parsed = parseJsonObject(readRepoText(packageJsonPath, "utf8"));
+  if (parsed === null) return null;
+  if (parsed.scripts === void 0) return /* @__PURE__ */ new Map();
+  if (!isRecord(parsed.scripts)) return null;
+  const entries = Object.entries(parsed.scripts);
+  if (!entries.every((entry) => typeof entry[1] === "string")) return null;
+  return new Map(entries);
+}
+function dockerfileRunCommands(contents) {
+  if (/^#\s*escape\s*=/imu.test(contents)) return { commands: [], unparseable: true };
+  const lines = contents.split(/\r?\n/u);
+  const commands = [];
+  let unparseable = false;
+  for (let index = 0; index < lines.length; index += 1) {
+    const match = /^\s*RUN(?:\s+(.*))?$/iu.exec(lines[index] ?? "");
+    if (!match) continue;
+    const chunks = [match[1] ?? ""];
+    while (endsWithLineContinuation(chunks) && index + 1 < lines.length) {
+      index += 1;
+      const next = lines[index] ?? "";
+      if (/^\s*#/u.test(next)) continue;
+      dropLineContinuation(chunks);
+      chunks.push(" ", next.trim());
+    }
+    let instruction = chunks.join("");
+    instruction = instruction.replace(/^(?:--[A-Za-z][\w-]*(?:=\S*)?\s+)*/u, "").trim();
+    if (instruction === "" || /<<-?\s*["']?[A-Za-z_]/u.test(instruction)) {
+      unparseable = true;
+      continue;
+    }
+    if (!instruction.startsWith("[")) {
+      commands.push(instruction);
+      continue;
+    }
+    const execForm = dockerfileExecFormCommand(instruction);
+    if (execForm === null) unparseable = true;
+    else commands.push(execForm);
+  }
+  return { commands, unparseable };
+}
+function endsWithLineContinuation(chunks) {
+  for (let c = chunks.length - 1; c >= 0; c -= 1) {
+    const chunk = chunks[c] ?? "";
+    for (let i = chunk.length - 1; i >= 0; i -= 1) {
+      const character = chunk.charAt(i);
+      if (/\s/u.test(character)) continue;
+      return character === "\\";
+    }
+  }
+  return false;
+}
+function dropLineContinuation(chunks) {
+  while (chunks.length > 0) {
+    const chunk = chunks[chunks.length - 1] ?? "";
+    let i = chunk.length - 1;
+    while (i >= 0 && /\s/u.test(chunk.charAt(i))) i -= 1;
+    if (i < 0) {
+      chunks.pop();
+      continue;
+    }
+    chunks[chunks.length - 1] = chunk.slice(0, i);
+    return;
+  }
+}
+function dockerfileExecFormCommand(instruction) {
+  let parsed;
+  try {
+    parsed = JSON.parse(instruction);
+  } catch {
+    return null;
+  }
+  if (!Array.isArray(parsed) || parsed.length === 0 || !parsed.every((part) => typeof part === "string")) {
+    return null;
+  }
+  return parsed.map(
+    (part) => /^[A-Za-z0-9_@%+=:,./-]+$/u.test(part) ? part : `'${part.replaceAll("'", "'\\''")}'`
+  ).join(" ");
+}
+function classifyBuildStepCommand(command) {
+  return buildStepCommandState(command, 0);
+}
+function buildStepCommandState(command, depth) {
+  if (depth > 4) return "unparseable";
+  const states = splitShellCommandSegments(command).map(
+    (segment) => buildStepSegmentState(segment, depth)
+  );
+  if (states.includes("step")) return "step";
+  return states.includes("unparseable") ? "unparseable" : "none";
+}
+function buildStepSegmentState(raw, depth) {
+  let segment = stripUnbalancedShellParentheses(raw.trim());
+  for (; ; ) {
+    const keyword = /^(?:if|then|else|elif|do|while|until|exec|!|\{)(?:\s+|$)/u.exec(segment);
+    if (!keyword) break;
+    segment = segment.slice(keyword[0].length);
+  }
+  if (segment === "" || /^(?:fi|done|esac|\})$/u.test(segment)) return "none";
+  const normalized = normalizeCoverageCommandPrefixes(segment);
+  if (normalized.splitShellOperators && splitShellCommandSegments(normalized.segment).length > 1) {
+    return buildStepCommandState(normalized.segment, depth + 1);
+  }
+  if (/\b(?:npm|pnpm|yarn|bun)\s+run\s+(?:\$|["']\$|`)/u.test(normalized.segment)) {
+    return "unparseable";
+  }
+  const words = strictShellWords(normalized.segment);
+  if (words === null) return "unparseable";
+  return words.length === 0 ? "none" : buildStepWordsState(words);
+}
+function buildStepWordsState(words) {
+  const first = words[0] === "$(MAKE)" || words[0] === "${MAKE}" ? "make" : words[0] ?? "";
+  if (isUnresolvedCommandWord(first)) return "unparseable";
+  const runner = buildStepCommandName(first);
+  if (BUILD_STEP_TASK_RUNNERS.has(runner) && words.slice(1).some((word) => BUILD_STEP_TARGET_ARGUMENT_PATTERN.test(word))) {
+    return "step";
+  }
+  const command = runner === "bunx" ? words.slice(1) : runner === "bun" && words[1] === "x" ? words.slice(2) : unwrapPackageManagerExecutable(words);
+  const executable = command[0] ?? "";
+  if (isUnresolvedCommandWord(executable)) return "unparseable";
+  const name = buildStepCommandName(executable);
+  if (BUILD_STEP_EXECUTABLES.has(name)) return "step";
+  const subcommand = BUILD_STEP_SUBCOMMANDS.get(name);
+  return subcommand !== void 0 && command.slice(1).includes(subcommand) ? "step" : "none";
+}
+function isUnresolvedCommandWord(word) {
+  return word.startsWith("$") || word.includes("`");
+}
+function buildStepCommandName(word) {
+  return basename(word).replace(/\.(?:cmd|exe)$/iu, "").toLowerCase();
+}
+function stripUnbalancedShellParentheses(segment) {
+  const opens = segment.split("(").length - 1;
+  const closes = segment.split(")").length - 1;
+  if (opens > closes) return segment.replace(/^\(+\s*/u, "");
+  if (closes > opens) return segment.replace(/\s*\)+$/u, "");
+  return segment;
+}
+function strictShellWords(segment) {
+  const words = [];
+  let offset = 0;
+  for (; ; ) {
+    while (offset < segment.length && /\s/u.test(segment[offset] ?? "")) offset += 1;
+    if (offset >= segment.length) return words;
+    const scanned = scanShellWord(segment, offset);
+    if (!scanned) return null;
+    if (scanned.word !== "") words.push(scanned.word);
+    offset = scanned.end;
+  }
+}
 function rootOnlyPackageScriptsDisclosure(repoFiles, rootPackageJson) {
   const others = repoFiles.filter(
     (file) => file !== rootPackageJson && /(^|\/)package\.json$/.test(file) && isAuthoredProductionPath(file)

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "./chunk-35TRRAEC.js";
+} from "./chunk-TOQPQPDF.js";
 import {
   CALLER_CONTEXT_PRODUCT_IDENTITY_NOTICE,
   CERTIFICATE_GLOSSARY,
@@ -29,8 +29,8 @@ import {
   runCejelScan,
   serializeWitanReport,
   verifyWitanAttestationBinding
-} from "./chunk-7XQVE76B.js";
-import "./chunk-63XQDYQ5.js";
+} from "./chunk-ZZHQZW26.js";
+import "./chunk-VGBFZBZQ.js";
 import {
   external_exports
 } from "./chunk-FSMZV3Y6.js";
@@ -41,8 +41,8 @@ import {
 // src/index.ts
 init_esm_shims();
 import { createHash as createHash3 } from "crypto";
-import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
-import { dirname, join, resolve as resolve2 } from "path";
+import { existsSync, readFileSync, realpathSync } from "fs";
+import { dirname, join as join2, resolve as resolve3 } from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 
 // src/issuance/index.ts
@@ -578,6 +578,68 @@ function resolvedToLocalTree(env, cwd) {
   return first !== void 0 && first === resolve(cwd, "node_modules", ".bin");
 }
 
+// src/output-files.ts
+init_esm_shims();
+import { closeSync, constants, lstatSync, mkdirSync, openSync, writeFileSync } from "fs";
+import { join, resolve as resolve2 } from "path";
+var O_NOFOLLOW = constants.O_NOFOLLOW ?? 0;
+function isSymbolicLink(path) {
+  try {
+    return lstatSync(path).isSymbolicLink();
+  } catch (error) {
+    if (error.code === "ENOENT") return false;
+    throw error;
+  }
+}
+function refusal(what, subject) {
+  return new Error(
+    `Cejel: refusing to write ${what}: ${subject} is a symbolic link. Nothing was written; remove the link or choose another output path.`
+  );
+}
+function refuseSymlinkedDirectory(dir, what) {
+  if (isSymbolicLink(resolve2(dir))) throw refusal(what, `output directory ${dir}`);
+}
+function refuseSymlinkedFile(path, what) {
+  if (isSymbolicLink(resolve2(path))) throw refusal(what, path);
+}
+function refuseSymlinkedOutputs(dir, names, what) {
+  refuseSymlinkedDirectory(dir, what);
+  for (const name of names) refuseSymlinkedFile(join(dir, name), what);
+}
+function writeOutputFileNoFollow(path, contents, what) {
+  let fd;
+  try {
+    fd = openSync(
+      path,
+      constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC | O_NOFOLLOW,
+      438
+    );
+  } catch (error) {
+    if (error.code === "ELOOP") {
+      throw new Error(
+        `Cejel: refusing to write ${what}: ${path} is a symbolic link (the open was refused without following it).`
+      );
+    }
+    throw error;
+  }
+  try {
+    writeFileSync(fd, contents, "utf8");
+  } finally {
+    closeSync(fd);
+  }
+}
+function writeOutputFile(path, contents, what) {
+  refuseSymlinkedFile(path, what);
+  writeOutputFileNoFollow(path, contents, what);
+}
+function writeOutputFiles(dir, files, what) {
+  const names = files.map((file) => file.name);
+  refuseSymlinkedOutputs(dir, names, what);
+  mkdirSync(dir, { recursive: true });
+  refuseSymlinkedDirectory(dir, what);
+  for (const file of files) writeOutputFileNoFollow(join(dir, file.name), file.contents, what);
+}
+
 // src/terminal.ts
 init_esm_shims();
 function renderMinScoreAbstentionFailure(summary, minScore) {
@@ -601,19 +663,22 @@ function renderMinScoreCoverageFailure(coverage, minScore) {
   return `Cejel: cannot evaluate the required minimum ${minScore.toFixed(1)}/4.0 because fewer than half of the applicable dimensions were measured in at least one score (${formatCoverageSummary(coverage)}). Resolve the reported evidence gaps and re-scan.
 `;
 }
+function stripTerminalControls(text) {
+  return text.replace(/[\t\n]/g, " ").replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
+}
 function renderTerminalCertificate(summary, report) {
   const abstained = summary.verdict === "Insufficient source" || summary.verdict === "Insufficient evidence";
   if (!abstained && (summary.overallScore === null || summary.codeTrustScore === null || summary.processTrustScore === null)) {
     throw new Error("A scored Cejel summary must carry numeric headline scores.");
   }
   const lines = abstained ? [
-    `Cejel Trust Certificate \u2014 ${summary.productDisplayName}`,
+    `Cejel Trust Certificate \u2014 ${stripTerminalControls(summary.productDisplayName)}`,
     "",
     `${summary.verdict} to certify.`,
-    `  ${summary.insufficientSourceReason ?? "No ratable source or measurable evidence was found."}`,
+    `  ${summary.insufficientSourceReason === void 0 ? "No ratable source or measurable evidence was found." : stripTerminalControls(summary.insufficientSourceReason)}`,
     ""
   ] : [
-    `Cejel Trust Certificate \u2014 ${summary.productDisplayName}`,
+    `Cejel Trust Certificate \u2014 ${stripTerminalControls(summary.productDisplayName)}`,
     "",
     `Overall: ${formatScore(summary.overallScore)}/4.0 (${summary.verdict})`,
     `  Code trust:    ${formatScore(summary.codeTrustScore)}/4.0`,
@@ -629,7 +694,7 @@ function renderTerminalCertificate(summary, report) {
       2,
       0,
       `Scope: ${relyingPartySummary.scope}`,
-      `What was examined: ${relyingPartySummary.examined}`,
+      `What was examined: ${stripTerminalControls(relyingPartySummary.examined)}`,
       `What was established: ${relyingPartySummary.established}`,
       `What was not established: ${relyingPartySummary.notEstablished}`,
       `What to do next: ${relyingPartySummary.next}`,
@@ -639,14 +704,14 @@ function renderTerminalCertificate(summary, report) {
   if (summary.scanLimitations.length > 0) {
     lines.push(
       "LIMITED EVIDENCE \u2014 the score and verdict are qualified by scan limitations:",
-      ...summary.scanLimitations.map((limitation) => `  - ${limitation}`),
+      ...summary.scanLimitations.map((limitation) => `  - ${stripTerminalControls(limitation)}`),
       ""
     );
   }
   if (summary.historyLimitations?.length) {
     lines.push(
       "HISTORY LIMITATION \u2014 scored as usual, but some criteria read truncated history:",
-      ...summary.historyLimitations.map((limitation) => `  - ${limitation}`),
+      ...summary.historyLimitations.map((limitation) => `  - ${stripTerminalControls(limitation)}`),
       ""
     );
   }
@@ -664,9 +729,11 @@ function renderTerminalCertificate(summary, report) {
     lines.push("");
   }
   if (summary.contributingSources.length > 0) {
-    lines.push(`Incorporates findings from: ${summary.contributingSources.join(", ")}`);
+    lines.push(
+      `Incorporates findings from: ${summary.contributingSources.map(stripTerminalControls).join(", ")}`
+    );
     for (const source of summary.externalSources) {
-      lines.push(`  ${formatExternalSourceLine(source)}`);
+      lines.push(`  ${stripTerminalControls(formatExternalSourceLine(source))}`);
     }
     lines.push("");
   }
@@ -697,7 +764,7 @@ function renderTerminalCertificate(summary, report) {
     );
     for (const finding of summary.topFindings) {
       lines.push(
-        `  [finding severity: ${finding.severity}] ${finding.criterionId} [dimension band: ${finding.dimensionBand}]: ${finding.displaySummary ?? finding.summary}`
+        `  [finding severity: ${finding.severity}] ${finding.criterionId} [dimension band: ${finding.dimensionBand}]: ${stripTerminalControls(finding.displaySummary ?? finding.summary)}`
       );
     }
     const remaining = summary.findingCount - summary.topFindings.length;
@@ -714,7 +781,7 @@ function renderTerminalCertificate(summary, report) {
     );
     for (const finding of summary.topExternalFindings) {
       lines.push(
-        `  [${finding.severity}] ${finding.label} \u2192 ${finding.dimension}: ${finding.ruleId} \u2014 ${finding.message}${finding.location ? ` (${finding.location})` : ""}`
+        `  [${finding.severity}] ${stripTerminalControls(finding.label)} \u2192 ${finding.dimension}: ${stripTerminalControls(finding.ruleId)} \u2014 ${stripTerminalControls(finding.message)}${finding.location ? ` (${stripTerminalControls(finding.location)})` : ""}`
       );
     }
     const remaining = summary.externalFindingCount - summary.topExternalFindings.length;
@@ -739,6 +806,15 @@ function formatScore(score) {
 
 // src/index.ts
 var DEFAULT_OUT_DIR = ".cejel";
+var SCAN_OUTPUT_FILES = [
+  "report.json",
+  "attestation.json",
+  "certificate.html",
+  "badge.json",
+  "badge.svg",
+  "summary.json"
+];
+var ISSUANCE_OUTPUT_FILE = "issuance.json";
 var ISSUER_SIGNERS_FILE = "issuer-signers";
 var ISSUER_REVOCATIONS_FILE = "issuer-revocations";
 var SECURITY_FILE_CANDIDATES = ["../docs/security/", "../../docs/security/"];
@@ -951,6 +1027,7 @@ async function runWitanCli(args, rubricVersion) {
     return 0;
   }
   const effectiveRubricVersion = options.rubricPin ?? rubricVersion;
+  refuseSymlinkedOutputs(options.outDir, SCAN_OUTPUT_FILES, "scan output");
   const { report, summary, generatedAt } = runCejelScan({
     repoPath: options.repoPath,
     ...options.productName ? { productName: options.productName } : {},
@@ -965,29 +1042,25 @@ async function runWitanCli(args, rubricVersion) {
     generatedAt,
     ...options.runAttempt ? { githubRunAttempt: options.runAttempt } : {}
   });
-  mkdirSync(options.outDir, { recursive: true });
-  writeFileSync(join(options.outDir, "report.json"), serializeWitanReport(report), "utf8");
-  writeFileSync(
-    join(options.outDir, "attestation.json"),
-    JSON.stringify(attestation, null, 2),
-    "utf8"
-  );
-  writeFileSync(
-    join(options.outDir, "certificate.html"),
-    renderWitanHtmlReport(report, {
-      cliVersion: cliVersion(),
-      generatedAt,
-      ...options.runAttempt ? { runAttempt: options.runAttempt } : {}
-    }),
-    "utf8"
-  );
-  writeFileSync(
-    join(options.outDir, "badge.json"),
-    JSON.stringify(renderWitanBadgeEndpoint(report), null, 2),
-    "utf8"
+  writeOutputFiles(
+    options.outDir,
+    [
+      { name: "report.json", contents: serializeWitanReport(report) },
+      { name: "attestation.json", contents: JSON.stringify(attestation, null, 2) },
+      {
+        name: "certificate.html",
+        contents: renderWitanHtmlReport(report, {
+          cliVersion: cliVersion(),
+          generatedAt,
+          ...options.runAttempt ? { runAttempt: options.runAttempt } : {}
+        })
+      },
+      { name: "badge.json", contents: JSON.stringify(renderWitanBadgeEndpoint(report), null, 2) },
+      { name: "badge.svg", contents: renderWitanBadgeSvg(report) },
+      { name: "summary.json", contents: JSON.stringify(summary, null, 2) }
+    ],
+    "scan output"
   );
-  writeFileSync(join(options.outDir, "badge.svg"), renderWitanBadgeSvg(report), "utf8");
-  writeFileSync(join(options.outDir, "summary.json"), JSON.stringify(summary, null, 2), "utf8");
   if (!options.quiet) {
     process.stdout.write(renderTerminalCertificate(summary, report));
     process.stdout.write(
@@ -1097,8 +1170,8 @@ function parseExportArgs(args) {
   return {
     command: "export",
     format,
-    reportPath: resolve2(reportPath),
-    outPath: resolve2(outPath)
+    reportPath: resolve3(reportPath),
+    outPath: resolve3(outPath)
   };
 }
 function runExport(invocation) {
@@ -1116,8 +1189,12 @@ ${members.map((member) => `  - ${member}`).join("\n")}
     return 1;
   }
   const result = exportGitLabCodeQuality(reportResult.data);
-  writeFileSync(invocation.outPath, `${JSON.stringify(result.entries, null, 2)}
-`, "utf8");
+  writeOutputFile(
+    invocation.outPath,
+    `${JSON.stringify(result.entries, null, 2)}
+`,
+    "export output"
+  );
   process.stderr.write(renderGitLabCodeQualityFooter(result));
   return 0;
 }
@@ -1132,8 +1209,8 @@ function parseVerifyArgs(args) {
     if (arg === "--signers" || arg === "--revocations") {
       const value = args[index + 1];
       if (!value) throw new Error(`Missing value for ${arg}`);
-      if (arg === "--signers") signersPath = resolve2(value);
-      else revocationsPath = resolve2(value);
+      if (arg === "--signers") signersPath = resolve3(value);
+      else revocationsPath = resolve3(value);
       index += 1;
       continue;
     }
@@ -1145,10 +1222,10 @@ function parseVerifyArgs(args) {
   if (!reportPath || !attestationPath) throw new Error(VERIFY_USAGE());
   return {
     command: "verify",
-    reportPath: resolve2(reportPath),
-    attestationPath: resolve2(attestationPath),
-    ...issuancePath ? { issuancePath: resolve2(issuancePath) } : {},
-    ...issuanceSignaturePath ? { issuanceSignaturePath: resolve2(issuanceSignaturePath) } : {},
+    reportPath: resolve3(reportPath),
+    attestationPath: resolve3(attestationPath),
+    ...issuancePath ? { issuancePath: resolve3(issuancePath) } : {},
+    ...issuanceSignaturePath ? { issuanceSignaturePath: resolve3(issuanceSignaturePath) } : {},
     ...signersPath ? { signersPath } : {},
     ...revocationsPath ? { revocationsPath } : {}
   };
@@ -1174,15 +1251,15 @@ function parseIssueArgs(args) {
     if (arg === void 0) continue;
     switch (arg) {
       case "--report":
-        reportPath = resolve2(takeValue(arg, index + 1));
+        reportPath = resolve3(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--attestation":
-        attestationPath = resolve2(takeValue(arg, index + 1));
+        attestationPath = resolve3(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--key":
-        keyPath = resolve2(takeValue(arg, index + 1));
+        keyPath = resolve3(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--engagement-ref":
@@ -1191,7 +1268,7 @@ function parseIssueArgs(args) {
         continue;
       case "--out":
       case "--out-dir":
-        outDir = resolve2(takeValue(arg, index + 1));
+        outDir = resolve3(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--product-name":
@@ -1235,7 +1312,7 @@ function parseIssueArgs(args) {
     throw new Error("--product-name and --name cannot be used together");
   }
   return {
-    repoPath: resolve2(repoPath ?? "."),
+    repoPath: resolve3(repoPath ?? "."),
     reportPath,
     attestationPath,
     keyPath,
@@ -1405,6 +1482,7 @@ ${attestationBinding.errors.map((error) => `  - ${error}`).join("\n")}
     throw new Error(`Cejel: could not read --key file ${options.keyPath}: ${message}`);
   }
   const issuerKey = parseIssuerPublicKey(keyContents);
+  refuseSymlinkedOutputs(options.outDir, [ISSUANCE_OUTPUT_FILE], "issuance output");
   const reproduction = runCejelScan({
     repoPath: options.repoPath,
     ...options.productName ? { productName: options.productName } : {},
@@ -1439,9 +1517,12 @@ ${attestationBinding.errors.map((error) => `  - ${error}`).join("\n")}
     issuedAt: (/* @__PURE__ */ new Date()).toISOString(),
     engagementRef: options.engagementRef
   });
-  mkdirSync(options.outDir, { recursive: true });
-  const issuancePath = join(options.outDir, "issuance.json");
-  writeFileSync(issuancePath, serializeWitanIssuance(statement), "utf8");
+  const issuancePath = join2(options.outDir, ISSUANCE_OUTPUT_FILE);
+  writeOutputFiles(
+    options.outDir,
+    [{ name: ISSUANCE_OUTPUT_FILE, contents: serializeWitanIssuance(statement) }],
+    "issuance output"
+  );
   process.stdout.write(
     [
       `Cejel: reproduced report.json byte for byte (sha256:${reportSha256}).`,
@@ -1588,7 +1669,7 @@ function parseArgs(args) {
     throw new Error("--product-name and --name cannot be used together");
   }
   return {
-    repoPath: resolve2(repoPath ?? "."),
+    repoPath: resolve3(repoPath ?? "."),
     outDir,
     ...minScore != null ? { minScore } : {},
     ...productName ? { productName } : {},

package/dist/mcp/index.js

@@ -3,9 +3,9 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "../chunk-35TRRAEC.js";
-import "../chunk-7XQVE76B.js";
-import "../chunk-63XQDYQ5.js";
+} from "../chunk-TOQPQPDF.js";
+import "../chunk-ZZHQZW26.js";
+import "../chunk-VGBFZBZQ.js";
 import "../chunk-FSMZV3Y6.js";
 import {
   init_esm_shims

package/dist/packs/d-series/index.js

@@ -3,10 +3,10 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   listCejelLlmPackFiles
-} from "../../chunk-M6YYPJSN.js";
+} from "../../chunk-5PFYOIOS.js";
 import {
   execGit
-} from "../../chunk-63XQDYQ5.js";
+} from "../../chunk-VGBFZBZQ.js";
 import {
   require_typescript
 } from "../../chunk-RH6FKREX.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "mcpName": "io.github.BargLabs/cejel",
   "private": false,
   "publishConfig": {