@codacy/verity-cli 0.31.3 → 0.31.4

package/CHANGELOG.md

@@ -24,6 +24,16 @@ installs and updates it for you.
   plugin is present it owns the hooks, and the settings.json copy stands down.
   `verity init` detects the plugin and removes the duplicate wiring.
 
+### 🚪 A project that was never set up is left alone
+
+Every hook now asks the same question the same way. `verity analyze` used to run
+in a project that had never seen `verity init`, create `.verity/` there, and then —
+with no baseline to compare against — review nothing. It now stands down like the
+other hooks always have, so installing Verity no longer scatters state through
+directories you merely opened. On the first session in such a project, Claude is
+told once that the gate is off here and can offer `/verity:setup` (or `verity init`
+on an npm install). Works correctly from linked git worktrees.
+
 ### ⚙️ Git-moment gating moved into the project
 
 `verity guard` now reads `.verity/config.json` instead of taking its moments from

package/bin/verity.js

@@ -17849,6 +17849,9 @@ function createRun(opts, globals) {
   };
 }
 
+// src/commands/analyze/index.ts
+var import_node_fs38 = require("node:fs");
+
 // src/lib/repo-context.ts
 var import_node_child_process7 = require("node:child_process");
 var import_node_os3 = require("node:os");
@@ -19534,7 +19537,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.31.3" : "dev";
+    return true ? "0.31.4" : "dev";
   } catch {
     return "dev";
   }
@@ -22732,6 +22735,10 @@ function registerAnalyzeCommand(program2) {
 }
 var tracing = () => process.env.VERITY_TRACE_PHASES === "1";
 async function runAnalyze(opts, globals) {
+  if (!verityConfigured()) {
+    (0, import_node_fs38.writeSync)(2, '[verity] not set up in this project \u2014 run "verity init" first.\n');
+    process.exit(0);
+  }
   const run2 = createRun(opts, globals);
   installRunEvidence(run2);
   for (const [name, phase] of PIPELINE) {
@@ -22750,7 +22757,6 @@ async function runAnalyze(opts, globals) {
 }
 
 // src/commands/baseline.ts
-var import_node_fs38 = require("node:fs");
 function registerBaselineCommands(program2) {
   const baseline = program2.command("baseline").description("Manage the task-start working-tree baseline");
   baseline.command("capture").description("Snapshot the working tree at task start (used by SessionStart hook)").option("--session-id <id>", "Session id (overrides any value from stdin)").option("--source <source>", "Lifecycle hint: startup|resume|clear|compact").action(async (opts) => {
@@ -22759,7 +22765,16 @@ function registerBaselineCommands(program2) {
         process.chdir(repoRoot());
       } catch {
       }
-      if (!(0, import_node_fs38.existsSync)(VERITY_DIR)) {
+      if (!verityConfigured()) {
+        const how = isPluginInvocation() ? "Offer to run /verity:setup for the user." : "Offer to run `verity init` (or /verity-setup) for the user.";
+        process.stdout.write(
+          JSON.stringify({
+            hookSpecificOutput: {
+              hookEventName: "SessionStart",
+              additionalContext: `Verity is installed but this project is not set up yet, so the quality gate will not review anything here. ${how}`
+            }
+          }) + "\n"
+        );
         process.exit(0);
       }
       let sessionId = opts.sessionId;
@@ -24678,6 +24693,61 @@ async function reconcileOwnWiring(moments) {
     printWarn("  Enable one: verity hooks install --moments stop");
   }
 }
+async function checkPrerequisites(step) {
+  step("Checking prerequisites");
+  const prereqs = await checkPrereqs({ install: true });
+  for (const c of prereqs.checks) {
+    if (c.status === "ok") {
+      if (c.justInstalled) continue;
+      printInfo(`  ${c.label} ${c.detail} \u2713`);
+    } else {
+      printWarn(`  ${c.label}: ${c.detail}`);
+      if (c.remedy) printWarn(`    ${c.remedy}`);
+    }
+  }
+  if (prereqs.blocked) {
+    printError("A required prerequisite is missing \u2014 cannot continue.");
+    process.exit(1);
+  }
+  return prereqs.checks.some((c) => c.id === "claude" && c.status === "ok");
+}
+async function scaffoldProject(step, defaultsOnly) {
+  step("Knowledge base, .gitignore and CLAUDE.md");
+  await (0, import_promises14.mkdir)(VERITY_DIR, { recursive: true });
+  await ensureMemoryDir();
+  const ignoreResult = ensureVerityGitignore();
+  if (ignoreResult === "failed") {
+    printWarn("  .gitignore: could not write the Verity block \u2014 add it manually");
+    printWarn("    (.verity/ holds copies of analyzed files, including any secret the gate flagged)");
+  } else if (ignoreResult === "conflict") {
+    printWarn("  .gitignore: the Verity block is in place but git still ignores .verity/standard.yaml");
+    printWarn("    Something outside this file covers it \u2014 a global (~/.gitignore) or nested");
+    printWarn("    .gitignore, or a pattern we do not recognise. Check: git check-ignore -v .verity/standard.yaml");
+    printWarn("    Until it is fixed, the Standard and the knowledge graph cannot be committed.");
+  } else if (ignoreResult === "repaired") {
+    printInfo("  .gitignore: rewrote `.verity/` to `.verity/*` so the standard stays committable \u2713");
+  } else {
+    printInfo(`  .gitignore: Verity block ${ignoreResult === "added" ? "added" : "already covered"} \u2713`);
+  }
+  const tracked = committedVerityState();
+  if (tracked.length > 0) {
+    printWarn(`  ${tracked.length} Verity state file(s) are tracked in git (e.g. ${tracked[0]}).`);
+    const untrack = defaultsOnly ? false : await promptYes("  Untrack them now (files stay on disk)? [Y/n] ", { nonInteractive: false });
+    if (untrack) {
+      const result = untrackVerityState();
+      if (result === "untracked") printInfo("  Untracked (staged) \u2014 commit to finish \u2713");
+      else if (result === "failed") printWarn('  Could not untrack \u2014 run "git rm -r --cached .verity" manually');
+    } else {
+      printWarn("  Left tracked. Fix with: git rm -r --cached .verity && git add .verity/standard.yaml .verity/memory");
+    }
+  }
+  try {
+    await ensureClaudeMdPointer();
+    printInfo("  CLAUDE.md instructions \u2713");
+  } catch (err) {
+    printWarn(`  Could not update CLAUDE.md: ${err.message}`);
+  }
+}
 function registerInitCommand(program2) {
   program2.command("init").alias("setup").description("Set up Verity in the current project (asks the setup questions, then hands off to /verity-setup)").option("--force", "Reinstall the skills even when they are already up to date (hooks are always reconciled)").option("-y, --yes", "Take the recommended answer for every question (no prompts)").option("--no-setup", "Skip the /verity-setup handoff at the end").option(
     "--plugin-mode",
@@ -24719,22 +24789,7 @@ function registerInitCommand(program2) {
       }
       console.log("");
     }
-    step("Checking prerequisites");
-    const prereqs = await checkPrereqs({ install: true });
-    for (const c of prereqs.checks) {
-      if (c.status === "ok") {
-        if (c.justInstalled) continue;
-        printInfo(`  ${c.label} ${c.detail} \u2713`);
-      } else {
-        printWarn(`  ${c.label}: ${c.detail}`);
-        if (c.remedy) printWarn(`    ${c.remedy}`);
-      }
-    }
-    if (prereqs.blocked) {
-      printError("A required prerequisite is missing \u2014 cannot continue.");
-      process.exit(1);
-    }
-    const claudeInstalled = prereqs.checks.some((c) => c.id === "claude" && c.status === "ok");
+    const claudeInstalled = await checkPrerequisites(step);
     console.log("");
     if (pluginMode) {
       printInfo("Skipping skills \u2014 the Verity plugin provides them, namespaced as /verity:<name>.");
@@ -24748,41 +24803,7 @@ function registerInitCommand(program2) {
     if (defaultsOnly) {
       printInfo(`  intensity: ${intensity} \xB7 moments: ${moments.join(", ") || "none"} (no questions asked)`);
     }
-    step("Knowledge base, .gitignore and CLAUDE.md");
-    await (0, import_promises14.mkdir)(VERITY_DIR, { recursive: true });
-    await ensureMemoryDir();
-    const ignoreResult = ensureVerityGitignore();
-    if (ignoreResult === "failed") {
-      printWarn("  .gitignore: could not write the Verity block \u2014 add it manually");
-      printWarn("    (.verity/ holds copies of analyzed files, including any secret the gate flagged)");
-    } else if (ignoreResult === "conflict") {
-      printWarn("  .gitignore: the Verity block is in place but git still ignores .verity/standard.yaml");
-      printWarn("    Something outside this file covers it \u2014 a global (~/.gitignore) or nested");
-      printWarn("    .gitignore, or a pattern we do not recognise. Check: git check-ignore -v .verity/standard.yaml");
-      printWarn("    Until it is fixed, the Standard and the knowledge graph cannot be committed.");
-    } else if (ignoreResult === "repaired") {
-      printInfo("  .gitignore: rewrote `.verity/` to `.verity/*` so the standard stays committable \u2713");
-    } else {
-      printInfo(`  .gitignore: Verity block ${ignoreResult === "added" ? "added" : "already covered"} \u2713`);
-    }
-    const tracked = committedVerityState();
-    if (tracked.length > 0) {
-      printWarn(`  ${tracked.length} Verity state file(s) are tracked in git (e.g. ${tracked[0]}).`);
-      const untrack = defaultsOnly ? false : await promptYes("  Untrack them now (files stay on disk)? [Y/n] ", { nonInteractive: false });
-      if (untrack) {
-        const result = untrackVerityState();
-        if (result === "untracked") printInfo("  Untracked (staged) \u2014 commit to finish \u2713");
-        else if (result === "failed") printWarn('  Could not untrack \u2014 run "git rm -r --cached .verity" manually');
-      } else {
-        printWarn("  Left tracked. Fix with: git rm -r --cached .verity && git add .verity/standard.yaml .verity/memory");
-      }
-    }
-    try {
-      await ensureClaudeMdPointer();
-      printInfo("  CLAUDE.md instructions \u2713");
-    } catch (err) {
-      printWarn(`  Could not update CLAUDE.md: ${err.message}`);
-    }
+    await scaffoldProject(step, defaultsOnly);
     const globalVerityDir = (0, import_node_path29.join)(process.env.HOME ?? "", ".verity");
     await (0, import_promises14.mkdir)(globalVerityDir, { recursive: true });
     console.log("");
@@ -24844,7 +24865,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.31.3" : "dev"
+          cli_version: true ? "0.31.4" : "dev"
         }
       });
     } catch (err) {
@@ -25513,8 +25534,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.31.3").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.31.3");
+program.name("verity").description("CLI for Verity quality gate service").version("0.31.4").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.31.4");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.31.3",
+  "version": "0.31.4",
   "description": "CLI for Verity quality gate service",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://verity.md",