@cejel/cejel 0.6.6 → 0.6.7

package/README.md

@@ -92,7 +92,7 @@ if (-not $expected -or $actual -ne $expected.ToLowerInvariant()) {
 ```
 
 > **Windows signing status:** `cejel-Windows-x86_64.exe` is intentionally unsigned in
-> 0.6.6 and may trigger Microsoft SmartScreen. The release build removes Node's inherited
+> 0.6.7 and may trigger Microsoft SmartScreen. The release build removes Node's inherited
 > signature before SEA injection and fails unless Windows reports the result as `NotSigned`;
 > it does not ship an invalid signature. Before running it, verify `SHA256SUMS` and the
 > GitHub build-provenance attestation. Each binary also has an attached SPDX SBOM (the packages
@@ -116,7 +116,7 @@ docker run --rm --network=none -v "$PWD:/w" -w /w -v "$PWD/cejel:/cejel:ro" debi
 npx @cejel/cejel@latest .
 ```
 
-> **Distribution note:** Cejel `0.6.6` is the coordinated release version for npm,
+> **Distribution note:** Cejel `0.6.7` is the coordinated release version for npm,
 > standalone binaries, Docker/OCI, GitHub Action, Homebrew, and MCP Registry. A GitLab CI
 > template and Code Quality export live in [`docs/gitlab-ci.md`](./docs/gitlab-ci.md).
 
@@ -187,16 +187,16 @@ gh attestation verify ./cejel-Windows-x86_64.exe -R BargLabs/cejel
 This is cryptographically signed provenance. It is distinct from Apple Developer ID or
 Microsoft Authenticode code-signing.
 
-**Docker / OCI.** The current container release is `0.6.6`:
+**Docker / OCI.** The current container release is `0.6.7`:
 
 ```bash
-docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.6.6
+docker run --rm -i -v "$PWD:/workspace:ro" ghcr.io/barglabs/cejel:0.6.7
 ```
 
 The image defaults to `cejel-mcp` over stdio. To use the CLI instead:
 
 ```bash
-docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.6.6 .
+docker run --rm -v "$PWD:/workspace:ro" --entrypoint cejel ghcr.io/barglabs/cejel:0.6.7 .
 ```
 
 The OCI image carries an SBOM of its base-image packages, maximum-mode build provenance, and a
@@ -571,7 +571,7 @@ The OCI image is an alternative when Docker is the preferred execution boundary.
 the host path with the repository OpenClaw should allow Cejel to read:
 
 ```bash
-npx -y openclaw@latest mcp set cejel-oci '{"command":"docker","args":["run","--rm","-i","-v","/absolute/path/to/repo:/workspace:ro","ghcr.io/barglabs/cejel:0.6.6"]}'
+npx -y openclaw@latest mcp set cejel-oci '{"command":"docker","args":["run","--rm","-i","-v","/absolute/path/to/repo:/workspace:ro","ghcr.io/barglabs/cejel:0.6.7"]}'
 npx -y openclaw@latest mcp doctor cejel-oci --probe
 ```
 

package/dist/calibration/llm-detector.js

@@ -5,7 +5,7 @@ import {
   deriveProductIdentity,
   runCejelScan,
   serializeWitanReport
-} from "../chunk-JNTTFAHQ.js";
+} from "../chunk-ZZHQZW26.js";
 import {
   listCejelLlmPackFiles
 } from "../chunk-5PFYOIOS.js";

package/dist/{chunk-BG4ZRBQ5.js → chunk-TOQPQPDF.js}

@@ -5,7 +5,7 @@ import {
   renderWitanBadgeSvg,
   renderWitanHtmlReport,
   runCejelScan
-} from "./chunk-JNTTFAHQ.js";
+} from "./chunk-ZZHQZW26.js";
 import {
   ZodFirstPartyTypeKind,
   ZodOptional,

package/dist/{chunk-JNTTFAHQ.js → chunk-ZZHQZW26.js}

@@ -572,6 +572,7 @@ var WITAN_DIRECTORY_WALK_AUTHENTICATED_A1_ABSENCE_SUMMARY = "Reviewable source i
 var WITAN_LEGACY_AUTHENTICATED_A1_ABSENCE_SUMMARY = "Reviewable source is present, but the complete tracked inventory contains no concrete test file, configured test runner, CI test command, or coverage configuration.";
 var WITAN_A5_RECONCILIATION_UNSETTLED_DISCLOSURE = "Whether this repository's claims are reconciled against its implementation cannot be settled from static evidence; Cejel makes no finding on it.";
 var WITAN_A2_TENANT_ISOLATION_UNSETTLED_DISCLOSURE = "Whether tenant isolation is enforced outside the database cannot be settled from static evidence; Cejel makes no finding on it.";
+var WITAN_A3_BUILD_STEP_UNSETTLED_DISCLOSURE = "Whether this package has a build or type-check step outside the files read cannot be settled from static evidence; Cejel makes no finding on it.";
 function isWitanNoMeasurementAbstention(report) {
   return report.verdict === "insufficient_source" && report.insufficientSourceReason.startsWith(WITAN_NO_MEASUREMENT_REASON) && report.criteria.every(
     ({ status }) => status === "not_applicable" || status === "insufficient_data"
@@ -1973,6 +1974,7 @@ function buildWithheldPathsGapSentence(report) {
 }
 var SETTLING_EVIDENCE_DISCLOSURES = [
   { criterionId: "A2", sentence: WITAN_A2_TENANT_ISOLATION_UNSETTLED_DISCLOSURE },
+  { criterionId: "A3", sentence: WITAN_A3_BUILD_STEP_UNSETTLED_DISCLOSURE },
   { criterionId: "A5", sentence: WITAN_A5_RECONCILIATION_UNSETTLED_DISCLOSURE }
 ];
 function settlingEvidenceDisclosures(report) {
@@ -3205,6 +3207,7 @@ function buildWitanInputFromRepoUntracked(options) {
   const usesV24SecretContentContext = rubricVersion === WITAN_RUBRIC_VERSION_V24;
   const usesV25InlineHealthRoute = rubricVersion === WITAN_RUBRIC_VERSION_V25 || rubricVersion === WITAN_RUBRIC_VERSION_V26;
   const usesV26SettlingEvidence = rubricVersion === WITAN_RUBRIC_VERSION_V26;
+  const usesV26BuildStepEvidence = rubricVersion === WITAN_RUBRIC_VERSION_V26;
   const structuralArchetype = classifyRepoArchetype(inventoryFiles, rubricVersion);
   const readableArchetype = rubricVersion === WITAN_RUBRIC_VERSION_V13 || rubricVersion === WITAN_RUBRIC_VERSION_V14 || rubricVersion === WITAN_RUBRIC_VERSION_V15 || rubricVersion === WITAN_RUBRIC_VERSION_V16 || usesV17DetectorClosure2(rubricVersion) ? applyReadableSourceRepresentationGate(
     options.repoPath,
@@ -3246,6 +3249,7 @@ function buildWitanInputFromRepoUntracked(options) {
     usesV24SecretContentContext,
     usesV25InlineHealthRoute,
     usesV26SettlingEvidence,
+    usesV26BuildStepEvidence,
     reviewableSourceProof,
     inventoryAbsenceContext,
     scanLimitations
@@ -3860,7 +3864,7 @@ function buildNotApplicableSignal(criterionId, reason) {
     notApplicable: true
   };
 }
-function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, useV33Detectors, useV36Detectors, useV39Detectors, useV47Detectors, useV18NativeRls, useV19CommitYear, useV20A3ExplicitGaps, useV21ExecutedEscalations, useV22PackageStartEntrypoint, useV23StrictCoverageAndRecipeRunners, useV23PemPrivateKeyGrammar, useV23WithheldPathAbstention, useV24SecretContentContext, useV25InlineHealthRoute, useV26SettlingEvidence, reviewableSourceProof, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT, scanLimitations = /* @__PURE__ */ new Set()) {
+function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, useV33Detectors, useV36Detectors, useV39Detectors, useV47Detectors, useV18NativeRls, useV19CommitYear, useV20A3ExplicitGaps, useV21ExecutedEscalations, useV22PackageStartEntrypoint, useV23StrictCoverageAndRecipeRunners, useV23PemPrivateKeyGrammar, useV23WithheldPathAbstention, useV24SecretContentContext, useV25InlineHealthRoute, useV26SettlingEvidence, useV26BuildStepEvidence, reviewableSourceProof, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT, scanLimitations = /* @__PURE__ */ new Set()) {
   const signals = [];
   const mono = resolveMonorepoContext(repoPath, scanLimitations);
   const collectCriterion = (criterionId, collect) => withContentReadCriterion(criterionId, collect);
@@ -3905,7 +3909,8 @@ function collectRepoSignals(repoPath, generatedAt, repoFiles, useV27Detectors, u
       useV22PackageStartEntrypoint,
       useV23WithheldPathAbstention,
       inventoryAbsenceContext,
-      useV25InlineHealthRoute
+      useV25InlineHealthRoute,
+      useV26BuildStepEvidence
     )
   );
   const a4Signal = collectCriterion(
@@ -4828,7 +4833,7 @@ function collectCryptoHygieneEvidence(repoPath, implFiles, useV39Detectors = fal
   }
   return { evidence, findings, hasSurface, clean: hasSurface && !insecureFound };
 }
-function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, useV20ExplicitGaps = false, useV22PackageStartEntrypoint = false, useV23WithheldPathAbstention = false, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT, useV25InlineHealthRoute = false) {
+function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, useV20ExplicitGaps = false, useV22PackageStartEntrypoint = false, useV23WithheldPathAbstention = false, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT, useV25InlineHealthRoute = false, useV26BuildStepEvidence = false) {
   const v20DirectHttpEntrypoint = useV20ExplicitGaps ? findV20DirectHttpServerEntrypointFile(repoPath, repoFiles) : null;
   const v22PackageStartHttpEntrypoint = useV22PackageStartEntrypoint ? findV22PackageStartHttpServerEntrypointFile(repoPath, repoFiles) : null;
   const v20RuntimeContainer = useV20ExplicitGaps ? findRuntimeContainerEntrypointFile(repoPath, repoFiles, true) : null;
@@ -5045,13 +5050,22 @@ function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, us
     }
   }
   if (evidence.length === 0) return null;
+  let buildStepSettlement;
   if (useV20ExplicitGaps) {
     const workspaceManifests = packageJson ? findDeclaredWorkspaceManifests(repoPath, repoFiles, packageJson) : NO_DECLARED_WORKSPACE_MANIFESTS;
     const hasBuildOrTypecheck = scripts.has("build") || scripts.has("typecheck") || workspaceManifests.declared > workspaceManifests.read.length || workspaceManifests.read.some((file) => {
       const workspaceScripts = readPackageScripts(join(repoPath, file));
       return workspaceScripts.has("build") || workspaceScripts.has("typecheck");
     });
-    if (packageJson && !hasBuildOrTypecheck) {
+    buildStepSettlement = useV26BuildStepEvidence && packageJson ? settleV26BuildStepEvidence(
+      repoPath,
+      repoFiles,
+      packageJson,
+      workspaceManifests,
+      workflows,
+      (file) => !useV27Detectors || isAuthoredProductionPath(file)
+    ) : void 0;
+    if (packageJson && !hasBuildOrTypecheck && (buildStepSettlement === void 0 || buildStepSettlement === "fires")) {
       const workspaceRead = workspaceManifests.read.length;
       findings.push({
         severity: "info",
@@ -5192,7 +5206,8 @@ function collectA3ProdReadinessEvidence(repoPath, repoFiles, useV27Detectors, us
         "Counts static rollback or migration-safety artifacts.",
         "saturating_count"
       )
-    ]
+    ],
+    ...buildStepSettlement === "unsettled" ? { notes: WITAN_A3_BUILD_STEP_UNSETTLED_DISCLOSURE } : {}
   };
 }
 function collectA4DependencyEvidence(repoPath, repoFiles, mono, useV27Detectors, useV47Detectors, inventoryAbsenceContext = LEGACY_INVENTORY_ABSENCE_CONTEXT) {
@@ -9396,31 +9411,38 @@ function findRootPackageJson(repoFiles) {
 var WORKSPACE_PATTERN_LIMIT = 64;
 var WORKSPACE_PACKAGE_MANIFEST_LIMIT = 200;
 var NO_DECLARED_WORKSPACE_MANIFESTS = { read: [], declared: 0 };
+var UNREADABLE_WORKSPACE_DECLARATION = {
+  read: [],
+  declared: 0,
+  unreadable: true
+};
 function findDeclaredWorkspaceManifests(repoPath, repoFiles, rootPackageJson) {
   const patterns = [];
   if (rootPackageJson) {
     const declared = readPackageJsonWorkspacePatterns(join(repoPath, rootPackageJson));
-    if (declared === null) return NO_DECLARED_WORKSPACE_MANIFESTS;
+    if (declared === null) return UNREADABLE_WORKSPACE_DECLARATION;
     patterns.push(...declared);
   }
   if (repoFiles.includes("pnpm-workspace.yaml")) {
     const declared = readPnpmWorkspacePatterns(join(repoPath, "pnpm-workspace.yaml"));
-    if (declared === null) return NO_DECLARED_WORKSPACE_MANIFESTS;
+    if (declared === null) return UNREADABLE_WORKSPACE_DECLARATION;
     patterns.push(...declared);
   }
-  if (patterns.length === 0 || patterns.length > WORKSPACE_PATTERN_LIMIT) {
-    return NO_DECLARED_WORKSPACE_MANIFESTS;
-  }
+  if (patterns.length === 0) return NO_DECLARED_WORKSPACE_MANIFESTS;
+  if (patterns.length > WORKSPACE_PATTERN_LIMIT) return UNREADABLE_WORKSPACE_DECLARATION;
   const include = [];
   const exclude = [];
+  let unparsedPattern = false;
   for (const pattern of patterns) {
     const negated = pattern.startsWith("!");
     const matcher = workspaceGlobMatcher(negated ? pattern.slice(1) : pattern);
     if (negated) {
-      if (matcher === null) return NO_DECLARED_WORKSPACE_MANIFESTS;
+      if (matcher === null) return UNREADABLE_WORKSPACE_DECLARATION;
       exclude.push(matcher);
     } else if (matcher !== null) {
       include.push(matcher);
+    } else {
+      unparsedPattern = true;
     }
   }
   const matched = repoFiles.filter((file) => {
@@ -9429,7 +9451,11 @@ function findDeclaredWorkspaceManifests(repoPath, repoFiles, rootPackageJson) {
     const dir = file.slice(0, -"/package.json".length);
     return include.some((matches) => matches(dir)) && !exclude.some((matches) => matches(dir));
   }).sort();
-  return { read: matched.slice(0, WORKSPACE_PACKAGE_MANIFEST_LIMIT), declared: matched.length };
+  return {
+    read: matched.slice(0, WORKSPACE_PACKAGE_MANIFEST_LIMIT),
+    declared: matched.length,
+    ...unparsedPattern ? { unreadable: true } : {}
+  };
 }
 function readPackageJsonWorkspacePatterns(packageJsonPath) {
   if (!isRegularFile(packageJsonPath)) return [];
@@ -9639,6 +9665,263 @@ function unreadCiWorkflowReasons(includes) {
   }
   return unread;
 }
+var BUILD_STEP_EXECUTABLES = /* @__PURE__ */ new Set([
+  "babel",
+  "esbuild",
+  "ncc",
+  "rollup",
+  "svelte-check",
+  "swc",
+  "tsc",
+  "tsup",
+  "vue-tsc",
+  "webpack",
+  "webpack-cli"
+]);
+var BUILD_STEP_SUBCOMMANDS = /* @__PURE__ */ new Map([
+  ["bun", "build"],
+  ["nest", "build"],
+  ["next", "build"],
+  ["ng", "build"],
+  ["parcel", "build"],
+  ["vite", "build"]
+]);
+var BUILD_STEP_TASK_RUNNERS = /* @__PURE__ */ new Set([
+  "bun",
+  "gmake",
+  "just",
+  "lerna",
+  "make",
+  "npm",
+  "nx",
+  "pnpm",
+  "turbo",
+  "yarn"
+]);
+var BUILD_STEP_TARGET_NAME_PATTERN = /^(?:build|typecheck)$/u;
+var BUILD_STEP_TARGET_ARGUMENT_PATTERN = /^(?:[^\s:]+:)?(?:build|typecheck)$/u;
+var TYPESCRIPT_SOURCE_PATTERN = /\.(?:ts|tsx|mts|cts)$/u;
+var TYPESCRIPT_DECLARATION_PATTERN = /\.d\.(?:ts|mts|cts)$/u;
+var TSCONFIG_PATTERN = /(^|\/)tsconfig[^/]*\.json$/u;
+var BUILD_STEP_DOCKERFILE_PATTERN = /(^|\/)(?:dockerfile|containerfile)(?:\.[^/]*)?$|[^/]\.dockerfile$/iu;
+function settleV26BuildStepEvidence(repoPath, repoFiles, packageJson, workspaceManifests, workflows, includesWorkflow) {
+  const nestedPackageDirs = repoFiles.filter((file) => file !== packageJson && /(^|\/)package\.json$/u.test(file)).map((file) => file.slice(0, -"package.json".length));
+  const hasSomethingToBuild = repoFiles.some(
+    (file) => isAuthoredProductionPath(file) && (TYPESCRIPT_SOURCE_PATTERN.test(file) && !TYPESCRIPT_DECLARATION_PATTERN.test(file) || TSCONFIG_PATTERN.test(file)) && !nestedPackageDirs.some((dir) => file.startsWith(dir))
+  );
+  if (!hasSomethingToBuild) return "nothing-to-build";
+  let unsettled = false;
+  const commandRunsStep = (command) => {
+    const state = classifyBuildStepCommand(command);
+    if (state === "unparseable") unsettled = true;
+    return state === "step";
+  };
+  for (const manifest of [packageJson, ...workspaceManifests.read]) {
+    const scripts = readBuildStepPackageScripts(join(repoPath, manifest));
+    if (scripts === null) {
+      unsettled = true;
+      continue;
+    }
+    for (const [name, command] of scripts) {
+      if (BUILD_STEP_TARGET_NAME_PATTERN.test(name) || commandRunsStep(command)) return "step-found";
+    }
+  }
+  for (const workflow of workflows) {
+    const fullPath = join(repoPath, workflow);
+    if (!/^\.github\/workflows\//u.test(workflow) || !isRegularFile(fullPath)) {
+      unsettled = true;
+      continue;
+    }
+    if (extractCiRunCommands(readRepoText(fullPath, "utf8")).some(commandRunsStep)) {
+      return "step-found";
+    }
+  }
+  for (const file of repoFiles.filter((path) => BUILD_STEP_DOCKERFILE_PATTERN.test(path))) {
+    const fullPath = join(repoPath, file);
+    if (!isRegularFile(fullPath)) {
+      unsettled = true;
+      continue;
+    }
+    const run = dockerfileRunCommands(readRepoText(fullPath, "utf8"));
+    if (run.unparseable) unsettled = true;
+    if (run.commands.some(commandRunsStep)) return "step-found";
+  }
+  for (const file of repoFiles.filter(isRecipeFile)) {
+    const fullPath = join(repoPath, file);
+    if (!isRegularFile(fullPath)) {
+      unsettled = true;
+      continue;
+    }
+    for (const [name, target] of readRecipeTargets(readRepoText(fullPath, "utf8"))) {
+      if (BUILD_STEP_TARGET_NAME_PATTERN.test(name)) return "step-found";
+      if (target.commands.some((command) => commandRunsStep(command.replace(/\\$/u, "")))) {
+        return "step-found";
+      }
+    }
+  }
+  if (workspaceManifests.declared > workspaceManifests.read.length || workspaceManifests.unreadable) {
+    unsettled = true;
+  }
+  if (unreadCiWorkflowReasons(includesWorkflow).size > 0) unsettled = true;
+  const delegated = countDelegatedCiSteps(repoPath, workflows);
+  if (delegated.crossRepositoryReusableWorkflows + delegated.compositeActions > 0) unsettled = true;
+  if (withheldRepoPaths().some(
+    ({ path }) => BUILD_STEP_DOCKERFILE_PATTERN.test(path) || isRecipeFile(path) || /(^|\/)package\.json$/u.test(path) && isAuthoredProductionPath(path)
+  )) {
+    unsettled = true;
+  }
+  return unsettled ? "unsettled" : "fires";
+}
+function readBuildStepPackageScripts(packageJsonPath) {
+  if (!isRegularFile(packageJsonPath)) return null;
+  const parsed = parseJsonObject(readRepoText(packageJsonPath, "utf8"));
+  if (parsed === null) return null;
+  if (parsed.scripts === void 0) return /* @__PURE__ */ new Map();
+  if (!isRecord(parsed.scripts)) return null;
+  const entries = Object.entries(parsed.scripts);
+  if (!entries.every((entry) => typeof entry[1] === "string")) return null;
+  return new Map(entries);
+}
+function dockerfileRunCommands(contents) {
+  if (/^#\s*escape\s*=/imu.test(contents)) return { commands: [], unparseable: true };
+  const lines = contents.split(/\r?\n/u);
+  const commands = [];
+  let unparseable = false;
+  for (let index = 0; index < lines.length; index += 1) {
+    const match = /^\s*RUN(?:\s+(.*))?$/iu.exec(lines[index] ?? "");
+    if (!match) continue;
+    const chunks = [match[1] ?? ""];
+    while (endsWithLineContinuation(chunks) && index + 1 < lines.length) {
+      index += 1;
+      const next = lines[index] ?? "";
+      if (/^\s*#/u.test(next)) continue;
+      dropLineContinuation(chunks);
+      chunks.push(" ", next.trim());
+    }
+    let instruction = chunks.join("");
+    instruction = instruction.replace(/^(?:--[A-Za-z][\w-]*(?:=\S*)?\s+)*/u, "").trim();
+    if (instruction === "" || /<<-?\s*["']?[A-Za-z_]/u.test(instruction)) {
+      unparseable = true;
+      continue;
+    }
+    if (!instruction.startsWith("[")) {
+      commands.push(instruction);
+      continue;
+    }
+    const execForm = dockerfileExecFormCommand(instruction);
+    if (execForm === null) unparseable = true;
+    else commands.push(execForm);
+  }
+  return { commands, unparseable };
+}
+function endsWithLineContinuation(chunks) {
+  for (let c = chunks.length - 1; c >= 0; c -= 1) {
+    const chunk = chunks[c] ?? "";
+    for (let i = chunk.length - 1; i >= 0; i -= 1) {
+      const character = chunk.charAt(i);
+      if (/\s/u.test(character)) continue;
+      return character === "\\";
+    }
+  }
+  return false;
+}
+function dropLineContinuation(chunks) {
+  while (chunks.length > 0) {
+    const chunk = chunks[chunks.length - 1] ?? "";
+    let i = chunk.length - 1;
+    while (i >= 0 && /\s/u.test(chunk.charAt(i))) i -= 1;
+    if (i < 0) {
+      chunks.pop();
+      continue;
+    }
+    chunks[chunks.length - 1] = chunk.slice(0, i);
+    return;
+  }
+}
+function dockerfileExecFormCommand(instruction) {
+  let parsed;
+  try {
+    parsed = JSON.parse(instruction);
+  } catch {
+    return null;
+  }
+  if (!Array.isArray(parsed) || parsed.length === 0 || !parsed.every((part) => typeof part === "string")) {
+    return null;
+  }
+  return parsed.map(
+    (part) => /^[A-Za-z0-9_@%+=:,./-]+$/u.test(part) ? part : `'${part.replaceAll("'", "'\\''")}'`
+  ).join(" ");
+}
+function classifyBuildStepCommand(command) {
+  return buildStepCommandState(command, 0);
+}
+function buildStepCommandState(command, depth) {
+  if (depth > 4) return "unparseable";
+  const states = splitShellCommandSegments(command).map(
+    (segment) => buildStepSegmentState(segment, depth)
+  );
+  if (states.includes("step")) return "step";
+  return states.includes("unparseable") ? "unparseable" : "none";
+}
+function buildStepSegmentState(raw, depth) {
+  let segment = stripUnbalancedShellParentheses(raw.trim());
+  for (; ; ) {
+    const keyword = /^(?:if|then|else|elif|do|while|until|exec|!|\{)(?:\s+|$)/u.exec(segment);
+    if (!keyword) break;
+    segment = segment.slice(keyword[0].length);
+  }
+  if (segment === "" || /^(?:fi|done|esac|\})$/u.test(segment)) return "none";
+  const normalized = normalizeCoverageCommandPrefixes(segment);
+  if (normalized.splitShellOperators && splitShellCommandSegments(normalized.segment).length > 1) {
+    return buildStepCommandState(normalized.segment, depth + 1);
+  }
+  if (/\b(?:npm|pnpm|yarn|bun)\s+run\s+(?:\$|["']\$|`)/u.test(normalized.segment)) {
+    return "unparseable";
+  }
+  const words = strictShellWords(normalized.segment);
+  if (words === null) return "unparseable";
+  return words.length === 0 ? "none" : buildStepWordsState(words);
+}
+function buildStepWordsState(words) {
+  const first = words[0] === "$(MAKE)" || words[0] === "${MAKE}" ? "make" : words[0] ?? "";
+  if (isUnresolvedCommandWord(first)) return "unparseable";
+  const runner = buildStepCommandName(first);
+  if (BUILD_STEP_TASK_RUNNERS.has(runner) && words.slice(1).some((word) => BUILD_STEP_TARGET_ARGUMENT_PATTERN.test(word))) {
+    return "step";
+  }
+  const command = runner === "bunx" ? words.slice(1) : runner === "bun" && words[1] === "x" ? words.slice(2) : unwrapPackageManagerExecutable(words);
+  const executable = command[0] ?? "";
+  if (isUnresolvedCommandWord(executable)) return "unparseable";
+  const name = buildStepCommandName(executable);
+  if (BUILD_STEP_EXECUTABLES.has(name)) return "step";
+  const subcommand = BUILD_STEP_SUBCOMMANDS.get(name);
+  return subcommand !== void 0 && command.slice(1).includes(subcommand) ? "step" : "none";
+}
+function isUnresolvedCommandWord(word) {
+  return word.startsWith("$") || word.includes("`");
+}
+function buildStepCommandName(word) {
+  return basename(word).replace(/\.(?:cmd|exe)$/iu, "").toLowerCase();
+}
+function stripUnbalancedShellParentheses(segment) {
+  const opens = segment.split("(").length - 1;
+  const closes = segment.split(")").length - 1;
+  if (opens > closes) return segment.replace(/^\(+\s*/u, "");
+  if (closes > opens) return segment.replace(/\s*\)+$/u, "");
+  return segment;
+}
+function strictShellWords(segment) {
+  const words = [];
+  let offset = 0;
+  for (; ; ) {
+    while (offset < segment.length && /\s/u.test(segment[offset] ?? "")) offset += 1;
+    if (offset >= segment.length) return words;
+    const scanned = scanShellWord(segment, offset);
+    if (!scanned) return null;
+    if (scanned.word !== "") words.push(scanned.word);
+    offset = scanned.end;
+  }
+}
 function rootOnlyPackageScriptsDisclosure(repoFiles, rootPackageJson) {
   const others = repoFiles.filter(
     (file) => file !== rootPackageJson && /(^|\/)package\.json$/.test(file) && isAuthoredProductionPath(file)

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "./chunk-BG4ZRBQ5.js";
+} from "./chunk-TOQPQPDF.js";
 import {
   CALLER_CONTEXT_PRODUCT_IDENTITY_NOTICE,
   CERTIFICATE_GLOSSARY,
@@ -29,7 +29,7 @@ import {
   runCejelScan,
   serializeWitanReport,
   verifyWitanAttestationBinding
-} from "./chunk-JNTTFAHQ.js";
+} from "./chunk-ZZHQZW26.js";
 import "./chunk-VGBFZBZQ.js";
 import {
   external_exports
@@ -41,8 +41,8 @@ import {
 // src/index.ts
 init_esm_shims();
 import { createHash as createHash3 } from "crypto";
-import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
-import { dirname, join, resolve as resolve2 } from "path";
+import { existsSync, readFileSync, realpathSync } from "fs";
+import { dirname, join as join2, resolve as resolve3 } from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 
 // src/issuance/index.ts
@@ -578,6 +578,68 @@ function resolvedToLocalTree(env, cwd) {
   return first !== void 0 && first === resolve(cwd, "node_modules", ".bin");
 }
 
+// src/output-files.ts
+init_esm_shims();
+import { closeSync, constants, lstatSync, mkdirSync, openSync, writeFileSync } from "fs";
+import { join, resolve as resolve2 } from "path";
+var O_NOFOLLOW = constants.O_NOFOLLOW ?? 0;
+function isSymbolicLink(path) {
+  try {
+    return lstatSync(path).isSymbolicLink();
+  } catch (error) {
+    if (error.code === "ENOENT") return false;
+    throw error;
+  }
+}
+function refusal(what, subject) {
+  return new Error(
+    `Cejel: refusing to write ${what}: ${subject} is a symbolic link. Nothing was written; remove the link or choose another output path.`
+  );
+}
+function refuseSymlinkedDirectory(dir, what) {
+  if (isSymbolicLink(resolve2(dir))) throw refusal(what, `output directory ${dir}`);
+}
+function refuseSymlinkedFile(path, what) {
+  if (isSymbolicLink(resolve2(path))) throw refusal(what, path);
+}
+function refuseSymlinkedOutputs(dir, names, what) {
+  refuseSymlinkedDirectory(dir, what);
+  for (const name of names) refuseSymlinkedFile(join(dir, name), what);
+}
+function writeOutputFileNoFollow(path, contents, what) {
+  let fd;
+  try {
+    fd = openSync(
+      path,
+      constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC | O_NOFOLLOW,
+      438
+    );
+  } catch (error) {
+    if (error.code === "ELOOP") {
+      throw new Error(
+        `Cejel: refusing to write ${what}: ${path} is a symbolic link (the open was refused without following it).`
+      );
+    }
+    throw error;
+  }
+  try {
+    writeFileSync(fd, contents, "utf8");
+  } finally {
+    closeSync(fd);
+  }
+}
+function writeOutputFile(path, contents, what) {
+  refuseSymlinkedFile(path, what);
+  writeOutputFileNoFollow(path, contents, what);
+}
+function writeOutputFiles(dir, files, what) {
+  const names = files.map((file) => file.name);
+  refuseSymlinkedOutputs(dir, names, what);
+  mkdirSync(dir, { recursive: true });
+  refuseSymlinkedDirectory(dir, what);
+  for (const file of files) writeOutputFileNoFollow(join(dir, file.name), file.contents, what);
+}
+
 // src/terminal.ts
 init_esm_shims();
 function renderMinScoreAbstentionFailure(summary, minScore) {
@@ -744,6 +806,15 @@ function formatScore(score) {
 
 // src/index.ts
 var DEFAULT_OUT_DIR = ".cejel";
+var SCAN_OUTPUT_FILES = [
+  "report.json",
+  "attestation.json",
+  "certificate.html",
+  "badge.json",
+  "badge.svg",
+  "summary.json"
+];
+var ISSUANCE_OUTPUT_FILE = "issuance.json";
 var ISSUER_SIGNERS_FILE = "issuer-signers";
 var ISSUER_REVOCATIONS_FILE = "issuer-revocations";
 var SECURITY_FILE_CANDIDATES = ["../docs/security/", "../../docs/security/"];
@@ -956,6 +1027,7 @@ async function runWitanCli(args, rubricVersion) {
     return 0;
   }
   const effectiveRubricVersion = options.rubricPin ?? rubricVersion;
+  refuseSymlinkedOutputs(options.outDir, SCAN_OUTPUT_FILES, "scan output");
   const { report, summary, generatedAt } = runCejelScan({
     repoPath: options.repoPath,
     ...options.productName ? { productName: options.productName } : {},
@@ -970,29 +1042,25 @@ async function runWitanCli(args, rubricVersion) {
     generatedAt,
     ...options.runAttempt ? { githubRunAttempt: options.runAttempt } : {}
   });
-  mkdirSync(options.outDir, { recursive: true });
-  writeFileSync(join(options.outDir, "report.json"), serializeWitanReport(report), "utf8");
-  writeFileSync(
-    join(options.outDir, "attestation.json"),
-    JSON.stringify(attestation, null, 2),
-    "utf8"
-  );
-  writeFileSync(
-    join(options.outDir, "certificate.html"),
-    renderWitanHtmlReport(report, {
-      cliVersion: cliVersion(),
-      generatedAt,
-      ...options.runAttempt ? { runAttempt: options.runAttempt } : {}
-    }),
-    "utf8"
-  );
-  writeFileSync(
-    join(options.outDir, "badge.json"),
-    JSON.stringify(renderWitanBadgeEndpoint(report), null, 2),
-    "utf8"
+  writeOutputFiles(
+    options.outDir,
+    [
+      { name: "report.json", contents: serializeWitanReport(report) },
+      { name: "attestation.json", contents: JSON.stringify(attestation, null, 2) },
+      {
+        name: "certificate.html",
+        contents: renderWitanHtmlReport(report, {
+          cliVersion: cliVersion(),
+          generatedAt,
+          ...options.runAttempt ? { runAttempt: options.runAttempt } : {}
+        })
+      },
+      { name: "badge.json", contents: JSON.stringify(renderWitanBadgeEndpoint(report), null, 2) },
+      { name: "badge.svg", contents: renderWitanBadgeSvg(report) },
+      { name: "summary.json", contents: JSON.stringify(summary, null, 2) }
+    ],
+    "scan output"
   );
-  writeFileSync(join(options.outDir, "badge.svg"), renderWitanBadgeSvg(report), "utf8");
-  writeFileSync(join(options.outDir, "summary.json"), JSON.stringify(summary, null, 2), "utf8");
   if (!options.quiet) {
     process.stdout.write(renderTerminalCertificate(summary, report));
     process.stdout.write(
@@ -1102,8 +1170,8 @@ function parseExportArgs(args) {
   return {
     command: "export",
     format,
-    reportPath: resolve2(reportPath),
-    outPath: resolve2(outPath)
+    reportPath: resolve3(reportPath),
+    outPath: resolve3(outPath)
   };
 }
 function runExport(invocation) {
@@ -1121,8 +1189,12 @@ ${members.map((member) => `  - ${member}`).join("\n")}
     return 1;
   }
   const result = exportGitLabCodeQuality(reportResult.data);
-  writeFileSync(invocation.outPath, `${JSON.stringify(result.entries, null, 2)}
-`, "utf8");
+  writeOutputFile(
+    invocation.outPath,
+    `${JSON.stringify(result.entries, null, 2)}
+`,
+    "export output"
+  );
   process.stderr.write(renderGitLabCodeQualityFooter(result));
   return 0;
 }
@@ -1137,8 +1209,8 @@ function parseVerifyArgs(args) {
     if (arg === "--signers" || arg === "--revocations") {
       const value = args[index + 1];
       if (!value) throw new Error(`Missing value for ${arg}`);
-      if (arg === "--signers") signersPath = resolve2(value);
-      else revocationsPath = resolve2(value);
+      if (arg === "--signers") signersPath = resolve3(value);
+      else revocationsPath = resolve3(value);
       index += 1;
       continue;
     }
@@ -1150,10 +1222,10 @@ function parseVerifyArgs(args) {
   if (!reportPath || !attestationPath) throw new Error(VERIFY_USAGE());
   return {
     command: "verify",
-    reportPath: resolve2(reportPath),
-    attestationPath: resolve2(attestationPath),
-    ...issuancePath ? { issuancePath: resolve2(issuancePath) } : {},
-    ...issuanceSignaturePath ? { issuanceSignaturePath: resolve2(issuanceSignaturePath) } : {},
+    reportPath: resolve3(reportPath),
+    attestationPath: resolve3(attestationPath),
+    ...issuancePath ? { issuancePath: resolve3(issuancePath) } : {},
+    ...issuanceSignaturePath ? { issuanceSignaturePath: resolve3(issuanceSignaturePath) } : {},
     ...signersPath ? { signersPath } : {},
     ...revocationsPath ? { revocationsPath } : {}
   };
@@ -1179,15 +1251,15 @@ function parseIssueArgs(args) {
     if (arg === void 0) continue;
     switch (arg) {
       case "--report":
-        reportPath = resolve2(takeValue(arg, index + 1));
+        reportPath = resolve3(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--attestation":
-        attestationPath = resolve2(takeValue(arg, index + 1));
+        attestationPath = resolve3(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--key":
-        keyPath = resolve2(takeValue(arg, index + 1));
+        keyPath = resolve3(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--engagement-ref":
@@ -1196,7 +1268,7 @@ function parseIssueArgs(args) {
         continue;
       case "--out":
       case "--out-dir":
-        outDir = resolve2(takeValue(arg, index + 1));
+        outDir = resolve3(takeValue(arg, index + 1));
         index += 1;
         continue;
       case "--product-name":
@@ -1240,7 +1312,7 @@ function parseIssueArgs(args) {
     throw new Error("--product-name and --name cannot be used together");
   }
   return {
-    repoPath: resolve2(repoPath ?? "."),
+    repoPath: resolve3(repoPath ?? "."),
     reportPath,
     attestationPath,
     keyPath,
@@ -1410,6 +1482,7 @@ ${attestationBinding.errors.map((error) => `  - ${error}`).join("\n")}
     throw new Error(`Cejel: could not read --key file ${options.keyPath}: ${message}`);
   }
   const issuerKey = parseIssuerPublicKey(keyContents);
+  refuseSymlinkedOutputs(options.outDir, [ISSUANCE_OUTPUT_FILE], "issuance output");
   const reproduction = runCejelScan({
     repoPath: options.repoPath,
     ...options.productName ? { productName: options.productName } : {},
@@ -1444,9 +1517,12 @@ ${attestationBinding.errors.map((error) => `  - ${error}`).join("\n")}
     issuedAt: (/* @__PURE__ */ new Date()).toISOString(),
     engagementRef: options.engagementRef
   });
-  mkdirSync(options.outDir, { recursive: true });
-  const issuancePath = join(options.outDir, "issuance.json");
-  writeFileSync(issuancePath, serializeWitanIssuance(statement), "utf8");
+  const issuancePath = join2(options.outDir, ISSUANCE_OUTPUT_FILE);
+  writeOutputFiles(
+    options.outDir,
+    [{ name: ISSUANCE_OUTPUT_FILE, contents: serializeWitanIssuance(statement) }],
+    "issuance output"
+  );
   process.stdout.write(
     [
       `Cejel: reproduced report.json byte for byte (sha256:${reportSha256}).`,
@@ -1593,7 +1669,7 @@ function parseArgs(args) {
     throw new Error("--product-name and --name cannot be used together");
   }
   return {
-    repoPath: resolve2(repoPath ?? "."),
+    repoPath: resolve3(repoPath ?? "."),
     outDir,
     ...minScore != null ? { minScore } : {},
     ...productName ? { productName } : {},

package/dist/mcp/index.js

@@ -3,8 +3,8 @@ import { createRequire as __cejelCreateRequire } from 'node:module';
 const require = __cejelCreateRequire(import.meta.url);
 import {
   serveCejelMcpOverStdio
-} from "../chunk-BG4ZRBQ5.js";
-import "../chunk-JNTTFAHQ.js";
+} from "../chunk-TOQPQPDF.js";
+import "../chunk-ZZHQZW26.js";
 import "../chunk-VGBFZBZQ.js";
 import "../chunk-FSMZV3Y6.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cejel/cejel",
-  "version": "0.6.6",
+  "version": "0.6.7",
   "mcpName": "io.github.BargLabs/cejel",
   "private": false,
   "publishConfig": {