@codacy/verity-cli 0.34.0-experimental.421a631 → 0.34.0-experimental.675f6d2

package/bin/verity.js

@@ -17250,10 +17250,10 @@ function readProjectConfigRaw() {
 function readProjectConfig() {
   const cfg = readProjectConfigRaw();
   if (cfg.formal !== "push" || !cfg.path) return cfg;
-  const refused = formalRefusal(cfg.path);
-  if (!refused) return cfg;
+  const refused2 = formalRefusal(cfg.path);
+  if (!refused2) return cfg;
   const { formal: _dropped, ...rest } = cfg;
-  return { ...rest, formal_refused: refused };
+  return { ...rest, formal_refused: refused2 };
 }
 function formalRefusalMessage(reason) {
   switch (reason) {
@@ -24161,9 +24161,9 @@ function registerConfigCommands(program2) {
       process.exit(1);
     }
     writeProjectConfig({ formal: state === "push" ? "push" : void 0 });
-    const refused = state === "push" ? readProjectConfig().formal_refused : void 0;
-    if (refused) {
-      printWarn(`Formal verification at push: still off \u2014 ${formalRefusalMessage(refused)}`);
+    const refused2 = state === "push" ? readProjectConfig().formal_refused : void 0;
+    if (refused2) {
+      printWarn(`Formal verification at push: still off \u2014 ${formalRefusalMessage(refused2)}`);
       return;
     }
     printInfo(state === "push" ? "Formal verification at push: on for this checkout (Lean must be installed \u2014 verity lean status)" : "Formal verification at push: off");
@@ -27073,7 +27073,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.34.0-experimental.421a631" : "dev";
+    return true ? "0.34.0-experimental.675f6d2" : "dev";
   } catch {
     return "dev";
   }
@@ -35989,10 +35989,35 @@ function runAsync(tc, cwd, args2, timeoutMs) {
 }
 var DEFAULT_BUILD_TIMEOUT_MS = 10 * 6e4;
 var DEFAULT_CHECK_TIMEOUT_MS = 12e4;
+function proofsWorkspaceProblem(root) {
+  for (const rel of [".verity", PROOFS_DIR, `${PROOFS_DIR}/.lake`]) {
+    let st;
+    try {
+      st = (0, import_node_fs58.lstatSync)((0, import_node_path43.join)(root, rel));
+    } catch {
+      break;
+    }
+    if (st.isSymbolicLink()) return `${rel} is a symlink; Lean is not run through it`;
+  }
+  const r = runGitSync(root, ["ls-files", "-z", "--", PROOFS_DIR], { timeoutMs: 5e3 });
+  if (!r.ok) return `could not confirm with git that ${PROOFS_DIR} holds no committed files; Lean is not run`;
+  const tracked = r.stdout.split("\0").filter(Boolean);
+  if (tracked.length > 0) {
+    return `${tracked.length} file(s) under ${PROOFS_DIR} are tracked in git (e.g. ${tracked[0]}); Lean is not run on a workspace the repository supplies \u2014 untrack them with: git rm -r --cached ${PROOFS_DIR}`;
+  }
+  return null;
+}
+function refused(problem) {
+  return { ok: false, stdout: "", stderr: problem, durationMs: 0, timedOut: false };
+}
 function buildLibrary(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
+  const problem = proofsWorkspaceProblem(root);
+  if (problem) return refused(problem);
   return run2(tc, (0, import_node_path43.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
-function buildLibraryAsync(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
+async function buildLibraryAsync(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
+  const problem = proofsWorkspaceProblem(root);
+  if (problem) return refused(problem);
   return runAsync(tc, (0, import_node_path43.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 function isModelInRoot(modelsAbs, rel) {
@@ -36019,13 +36044,15 @@ function trimDiagnostics(text) {
 function checkModel(tc, root, modelFile, opts = {}) {
   const proofsAbs = (0, import_node_path43.join)(root, PROOFS_DIR);
   const rel = (0, import_node_path43.relative)(proofsAbs, modelFile);
-  const res = run2(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
+  const problem = proofsWorkspaceProblem(root);
+  const res = problem ? refused(problem) : run2(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
 }
 async function checkModelAsync(tc, root, modelFile, opts = {}) {
   const proofsAbs = (0, import_node_path43.join)(root, PROOFS_DIR);
   const rel = (0, import_node_path43.relative)(proofsAbs, modelFile);
-  const res = await runAsync(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
+  const problem = proofsWorkspaceProblem(root);
+  const res = problem ? refused(problem) : await runAsync(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
 }
 function toReport(res, root, modelFile, timeoutMs) {
@@ -36845,6 +36872,8 @@ async function prepareFormalPhase(root, env = process.env, auth2, readSource, co
   const apiKey = direct ? env.OPENAI_API_KEY : void 0;
   const toolchain = findToolchain(env);
   if (!toolchain) return { ok: false, skip: "no-toolchain" };
+  const untrusted = proofsWorkspaceProblem(root);
+  if (untrusted) return { ok: false, skip: "workspace-untrusted", detail: untrusted.slice(0, 200) };
   try {
     scaffoldProofs(root);
   } catch (err2) {
@@ -39872,7 +39901,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.34.0-experimental.421a631" : "dev"
+          cli_version: true ? "0.34.0-experimental.675f6d2" : "dev"
         }
       });
     } catch (err2) {
@@ -41345,8 +41374,8 @@ function registerLeanCommand(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.34.0-experimental.421a631").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.0-experimental.421a631");
+program.name("verity").description("CLI for Verity quality gate service").version("0.34.0-experimental.675f6d2").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.0-experimental.675f6d2");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.34.0-experimental.421a631",
+  "version": "0.34.0-experimental.675f6d2",
   "description": "CLI for Verity quality gate service",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://verity.md",