@codacy/verity-cli 0.34.0-experimental.6aa7092 → 0.34.0-experimental.7e3f52d

package/bin/verity.js

@@ -17221,7 +17221,7 @@ function readConfigFile(path) {
     return {
       git_moments: [...new Set(moments)],
       ...source2 ? { git_moments_source: source2 } : {},
-      ...raw.formal === "push" ? { formal: "push" } : {}
+      ...raw.formal === "push" || raw.formal === "off" ? { formal: raw.formal } : {}
     };
   } catch {
     return DEFAULTS;
@@ -24152,7 +24152,7 @@ function registerConfigCommands(program2) {
   config.command("formal [state]").description('Get or set formal verification at push: "push" or "off" (needs Lean \u2014 verity lean status)').action((state) => {
     if (state === void 0) {
       const cfg = readProjectConfig();
-      process.stdout.write((cfg.formal ?? "off") + "\n");
+      process.stdout.write((cfg.formal === "push" ? "push" : "off") + "\n");
       if (cfg.formal_refused) printWarn(formalRefusalMessage(cfg.formal_refused));
       return;
     }
@@ -24160,7 +24160,7 @@ function registerConfigCommands(program2) {
       printError(`Unrecognised state: ${state}. Use "push" or "off".`);
       process.exit(1);
     }
-    writeProjectConfig({ formal: state === "push" ? "push" : void 0 });
+    writeProjectConfig({ formal: state === "push" ? "push" : "off" });
     const refused2 = state === "push" ? readProjectConfig().formal_refused : void 0;
     if (refused2) {
       printWarn(`Formal verification at push: still off \u2014 ${formalRefusalMessage(refused2)}`);
@@ -27073,7 +27073,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.34.0-experimental.6aa7092" : "dev";
+    return true ? "0.34.0-experimental.7e3f52d" : "dev";
   } catch {
     return "dev";
   }
@@ -34873,10 +34873,10 @@ function parseReplayOutput(output) {
   }
   return { claim, shellCalls, executedCalls, shellTexts, outputTexts };
 }
-var RESULT_LINE = /REPLAY_RESULT=(reproduced|diverged)\b/;
+var RESULT_LINE = /REPLAY_RESULT=(reproduced|diverged)\b/g;
 function printedResult(outputTexts) {
   let last = null;
-  for (const t of outputTexts) for (const m of t.matchAll(new RegExp(RESULT_LINE.source, "g"))) last = m[1];
+  for (const t of outputTexts) for (const m of t.matchAll(RESULT_LINE)) last = m[1];
   return last;
 }
 var RESULT_MISSING = "the harness never printed REPLAY_RESULT=reproduced on its own stdout \u2014 the verdict was the model's word, not the run's";
@@ -35910,9 +35910,10 @@ function verityLeanHome(env = process.env) {
 function findToolchain(env = process.env) {
   const managedBin = (0, import_node_path43.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
   const elanBin = (0, import_node_path43.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "bin");
-  const path = [managedBin, elanBin, env.PATH ?? ""].filter(Boolean).join(import_node_path43.delimiter);
-  const merged = { ...env, PATH: path, ELAN_TOOLCHAIN: env.ELAN_TOOLCHAIN ?? LEAN_TOOLCHAIN };
   const elanHas = (0, import_node_fs58.existsSync)((0, import_node_path43.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
+  const userPath = (env.PATH ?? "").split(import_node_path43.delimiter).filter((d) => d && (elanHas || (0, import_node_path43.resolve)(d) !== (0, import_node_path43.resolve)(elanBin)));
+  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path43.delimiter);
+  const merged = { ...env, PATH: path, ELAN_TOOLCHAIN: env.ELAN_TOOLCHAIN ?? LEAN_TOOLCHAIN };
   const exe = process.platform === "win32" ? "lake.exe" : "lake";
   const candidates2 = [(0, import_node_path43.join)(managedBin, exe), ...elanHas ? [(0, import_node_path43.join)(elanBin, exe)] : [], exe];
   for (const candidate of candidates2) {
@@ -38802,6 +38803,22 @@ var import_promises18 = require("node:stream/promises");
 var import_node_stream = require("node:stream");
 var RELEASES = "https://releases.lean-lang.org/lean4";
 var LEAN_DOWNLOAD_SIZE = "\u2248800 MB download, 2.7 GB on disk";
+var DOWNLOAD_STALL_MS = 6e4;
+var LEAN_DISK_NEEDED_BYTES = 3.75 * 1024 ** 3;
+function freeBytes(dir) {
+  let d = dir;
+  for (let i2 = 0; i2 < 64; i2++) {
+    try {
+      const st = (0, import_node_fs63.statfsSync)(d);
+      return Number(st.bavail) * Number(st.bsize);
+    } catch {
+      const up = (0, import_node_path47.join)(d, "..");
+      if (up === d) return null;
+      d = up;
+    }
+  }
+  return null;
+}
 var LEAN_ASSET_SHA256 = {
   "v4.34.0": {
     "lean-4.34.0-darwin.zip": "75a2a4b8e3d35680e8f51fae5a42c79702f463dd73ee1520fb61e5a9143e336c",
@@ -38860,17 +38877,32 @@ function unzip(zip, dest) {
   }
   return { ok: false, error: errors.join("; ") };
 }
-async function download(url, dest, onProgress) {
-  const res = await fetch(url, { redirect: "follow" });
-  if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status}`);
-  const total = Number(res.headers.get("content-length")) || null;
-  let seen = 0;
-  const stream = import_node_stream.Readable.fromWeb(res.body);
-  stream.on("data", (chunk) => {
-    seen += chunk.length;
-    onProgress(seen, total);
-  });
-  await (0, import_promises18.pipeline)(stream, (0, import_node_fs63.createWriteStream)(dest));
+async function download(url, dest, onProgress, stallMs = DOWNLOAD_STALL_MS) {
+  const ctrl = new AbortController();
+  let timer;
+  const arm = () => {
+    clearTimeout(timer);
+    timer = setTimeout(() => ctrl.abort(), stallMs);
+  };
+  arm();
+  try {
+    const res = await fetch(url, { redirect: "follow", signal: ctrl.signal });
+    if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status}`);
+    const total = Number(res.headers.get("content-length")) || null;
+    let seen = 0;
+    const stream = import_node_stream.Readable.fromWeb(res.body);
+    stream.on("data", (chunk) => {
+      arm();
+      seen += chunk.length;
+      onProgress(seen, total);
+    });
+    await (0, import_promises18.pipeline)(stream, (0, import_node_fs63.createWriteStream)(dest), { signal: ctrl.signal });
+  } catch (err2) {
+    if (ctrl.signal.aborted) throw new Error(`download stalled: nothing received for ${Math.round(stallMs / 1e3)} s`);
+    throw err2;
+  } finally {
+    clearTimeout(timer);
+  }
 }
 function inPlaceProgress(label2, write = (s) => process.stderr.write(s)) {
   let active = false;
@@ -38908,6 +38940,12 @@ async function installLean(opts = {}) {
   const dir = pinnedVersionDir(env);
   const url = `${RELEASES}/${pinnedVersion()}/${asset}`;
   const home = verityLeanHome(env);
+  const free = freeBytes(home);
+  const needed = opts.minFreeBytes ?? LEAN_DISK_NEEDED_BYTES;
+  if (free !== null && free < needed) {
+    const gb = (n) => (n / 1024 ** 3).toFixed(1);
+    return { ok: false, error: `not enough disk space for Lean: ${gb(free)} GB free where ${home} lives, needs about ${gb(needed)} GB` };
+  }
   const tmp = (0, import_node_path47.join)(home, ".tmp");
   (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
   (0, import_node_fs63.mkdirSync)(tmp, { recursive: true });
@@ -39216,8 +39254,10 @@ var INTENSITY_CHOICES = [
   { id: "thorough", label: "thorough", hint: "all tools, all rules (~15s)" }
 ];
 var FORMAL_CHOICES = [
-  { id: "yes", label: "yes", hint: "a Lean model of the riskiest changed function; blocks only on a REPRODUCED counterexample", recommended: true },
-  { id: "no", label: "no", hint: "enable later with: verity config formal push" }
+  { id: "yes", label: "yes", hint: "a Lean model of the riskiest changed function; blocks only on a REPRODUCED counterexample" },
+  // No is the default (review of #255): "yes" downloads ≈800 MB and unpacks
+  // 2.7 GB, and a bare Enter must never do that.
+  { id: "no", label: "no", hint: "enable later with: verity config formal push", recommended: true }
 ];
 var MOMENT_CHOICES = [
   { id: "stop", label: "On stop", hint: "after every agent turn \u2014 fast feedback while you work", recommended: true },
@@ -39623,16 +39663,20 @@ async function offerFormalVerification(defaultsOnly, pluginMode) {
     printWarn(`  Formal verification: off \u2014 ${formalRefusalMessage(cfg.formal_refused)}`);
     return;
   }
-  const toolchain = findToolchain();
   if (cfg.formal === "push") {
-    if (toolchain) printInfo("  Formal verification at push \u2713");
+    if (findToolchain()) printInfo("  Formal verification at push \u2713");
     else printWarn("  Formal verification is on but Lean is missing \u2014 run: verity lean install");
     return;
   }
+  if (cfg.formal === "off") {
+    printInfo("  Formal verification: off (enable with: verity config formal push)");
+    return;
+  }
   if (defaultsOnly || !interactive()) {
     printInfo("  Formal verification (a model-based bug finder at push): off \u2014 enable with: verity config formal push");
     return;
   }
+  const toolchain = findToolchain();
   console.log("");
   console.log("  Formal verification review \u2014 a model-based bug finder for your riskiest code.");
   console.log("    At push, Verity picks the riskiest changed function, checks a small model of");
@@ -39640,9 +39684,10 @@ async function offerFormalVerification(defaultsOnly, pluginMode) {
   console.log("    Verity for that). Only a reproduced bug can block; most pushes get no model.");
   console.log(`    Adds /verity-prove <worry> to check any code on demand.${toolchain ? "" : ` Needs to install Lean 4 (${LEAN_DOWNLOAD_SIZE}) on "yes".`}`);
   console.log("");
-  const wants = await promptChoice("Formal verification at push?", FORMAL_CHOICES, "yes");
+  const wants = await promptChoice("Formal verification at push?", FORMAL_CHOICES, "no");
   if (wants === "yes" && pluginMode) printInfo("  Plugin: the push check works now; /verity:verity-prove arrives with the plugin's next release.");
   if (wants !== "yes") {
+    writeProjectConfig({ formal: "off" });
     printInfo("  Formal verification: off (enable later with: verity config formal push)");
     return;
   }
@@ -39901,7 +39946,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.34.0-experimental.6aa7092" : "dev"
+          cli_version: true ? "0.34.0-experimental.7e3f52d" : "dev"
         }
       });
     } catch (err2) {
@@ -41374,8 +41419,8 @@ function registerLeanCommand(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.34.0-experimental.6aa7092").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.0-experimental.6aa7092");
+program.name("verity").description("CLI for Verity quality gate service").version("0.34.0-experimental.7e3f52d").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.0-experimental.7e3f52d");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.34.0-experimental.6aa7092",
+  "version": "0.34.0-experimental.7e3f52d",
   "description": "CLI for Verity quality gate service",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://verity.md",