@codacy/verity-cli 0.35.1 → 0.35.2

package/CHANGELOG.md

@@ -64,6 +64,23 @@ installs are untouched.
   which is the ordinary case for someone whose first Verity install *is* the
   plugin.
 
+## [0.35.2] — 2026-10-30
+
+### 🔧 Fixes
+
+- **`verity init --standard new` works when `.verity/standard.yaml` already
+  exists.** Init sets your file aside (a copy goes to
+  `.verity/standard.<time>.yaml`) and builds a new Standard with review packs
+  and, if you send the repository profile, project rules. Before, init kept
+  the old file and ignored the flag.
+- **A kept Standard that does not use review packs says how to move it:**
+  `verity standard push` keeps your rules, and `verity init --standard new`
+  starts over.
+- **A copy of your Standard never replaces an earlier copy.** `verity init
+  --standard new` and `verity standard pull` create the copy as a new file.
+  If a copy with the same time exists, the new copy gets the next name
+  (`standard.<time>-1.yaml`).
+
 ## [0.35.1] — 2026-10-30
 
 ### 📐 Standards

package/bin/verity.js

@@ -15325,7 +15325,7 @@ function pinRefusalMessage(verdict, targetUrl) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.35.1" : "dev";
+    return true ? "0.35.2" : "dev";
   } catch {
     return "dev";
   }
@@ -16683,12 +16683,14 @@ function removeIfOurs(fd, path) {
   } catch {
   }
 }
-function openTarget(path, append2) {
+function openTarget(path, append2, createOnly = false) {
   const base = import_node_fs7.constants.O_WRONLY | (append2 ? import_node_fs7.constants.O_APPEND : 0) | O_NOFOLLOW;
-  try {
-    return { fd: (0, import_node_fs7.openSync)(path, base), created: false };
-  } catch (e) {
-    if (e.code !== "ENOENT") return null;
+  if (!createOnly) {
+    try {
+      return { fd: (0, import_node_fs7.openSync)(path, base), created: false };
+    } catch (e) {
+      if (e.code !== "ENOENT") return null;
+    }
   }
   try {
     return { fd: (0, import_node_fs7.openSync)(path, base | import_node_fs7.constants.O_CREAT | import_node_fs7.constants.O_EXCL, 384), created: true };
@@ -16696,13 +16698,13 @@ function openTarget(path, append2) {
     return null;
   }
 }
-function writeVerified(root, name2, hooks, append2, write) {
+function writeVerified(root, name2, hooks, append2, write, createOnly = false) {
   const r = validateRoot(root);
   if (!r || !bareName(name2)) return false;
   const path = (0, import_node_path7.join)(r.real, name2);
   if (!absentOrRegular(path)) return false;
   if (!runHook(hooks)) return false;
-  const opened = openTarget(path, append2);
+  const opened = openTarget(path, append2, createOnly);
   if (!opened) return false;
   try {
     if (!verifyOpened(opened.fd, path, r)) {
@@ -16739,6 +16741,11 @@ function replaceInRoot(root, name2, text3, hooks = {}) {
     (0, import_node_fs7.writeSync)(fd, text3, 0);
   });
 }
+function createInRoot(root, name2, text3, hooks = {}) {
+  return writeVerified(root, name2, hooks, false, (fd) => {
+    (0, import_node_fs7.writeSync)(fd, text3, 0);
+  }, true);
+}
 
 // src/lib/repo-file.ts
 var DEFAULT_MAX_BYTES = 512 * 1024;
@@ -16748,6 +16755,16 @@ function writeRepoFile(relative9, body2) {
     throw new Error(`refused to write ${relative9}: it, or its folder, is a link or not a regular file`);
   }
 }
+var COPY_NAMES = 10;
+function keepStandardCopy(body2, now = /* @__PURE__ */ new Date()) {
+  const stamp2 = now.toISOString().replace(/[:.]/g, "-");
+  for (let n2 = 0; n2 < COPY_NAMES; n2++) {
+    const relative9 = `${VERITY_DIR}/standard.${stamp2}${n2 === 0 ? "" : `-${n2}`}.yaml`;
+    const path = projectPath(relative9);
+    if (createInRoot((0, import_node_path8.dirname)(path), (0, import_node_path8.basename)(path), body2)) return relative9;
+  }
+  throw new Error(`refused to create ${VERITY_DIR}/standard.${stamp2}.yaml: ${VERITY_DIR} is a link or not a folder, or ${COPY_NAMES} copies with that time exist`);
+}
 function readRepoFile(relative9, maxBytes = DEFAULT_MAX_BYTES) {
   const root = repoRoot();
   if (throughLinkedFolder(root, relative9)) return null;
@@ -25786,9 +25803,8 @@ async function pullStandard(globals, opts = {}) {
     if (local && typeof local === "object" && !Array.isArray(local) && sameStandard(local, remote.standard.content)) {
       return { status: "same", version };
     }
-    backup = `.verity/standard.${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.yaml`;
     try {
-      writeRepoFile(backup, raw);
+      backup = keepStandardCopy(raw);
     } catch (err2) {
       return { status: "failed", message: `Could not keep a copy of ${STANDARD_FILE} (${terminalText(err2 instanceof Error ? err2.message : String(err2), 200)}), so it was not replaced. Nothing changed.` };
     }
@@ -43538,6 +43554,16 @@ function sayAdopted(ui, team) {
 }
 
 // src/commands/init/standard.ts
+function usesReviewPacks() {
+  const raw = readRepoFile(STANDARD_FILE);
+  if (raw === null) return true;
+  try {
+    const content = (0, import_yaml10.parse)(raw);
+    return Array.isArray(content?.extends);
+  } catch {
+    return true;
+  }
+}
 function hasProjectRules() {
   const raw = readRepoFile(STANDARD_FILE);
   if (raw === null) return true;
@@ -43602,7 +43628,7 @@ function localStandardProblem() {
   if (!valid.ok) return `${STANDARD_FILE} is not a Standard the service accepts: ${terminalText(valid.error, 200)}`;
   return null;
 }
-function removeDerivedStandard() {
+function removeLocalStandard() {
   const path = projectPath(STANDARD_FILE);
   try {
     const folder = (0, import_node_fs77.lstatSync)((0, import_node_path66.dirname)(path));
@@ -43611,6 +43637,19 @@ function removeDerivedStandard() {
   } catch {
   }
 }
+function setLocalStandardAside(now = /* @__PURE__ */ new Date(), remove = removeLocalStandard) {
+  const raw = readRepoFile(STANDARD_FILE);
+  if (raw === null) return { ok: false, message: `${STANDARD_FILE} is a link, not a regular file, or larger than 512 KB, so it was not set aside.` };
+  let path;
+  try {
+    path = keepStandardCopy(raw, now);
+  } catch (err2) {
+    return { ok: false, message: `Could not keep a copy of ${STANDARD_FILE} (${terminalText(err2 instanceof Error ? err2.message : String(err2), 200)}), so it was not set aside.` };
+  }
+  remove();
+  if ((0, import_node_fs77.existsSync)(projectPath(STANDARD_FILE))) return { ok: false, message: `Could not remove ${STANDARD_FILE} after copying it to ${path}.` };
+  return { ok: true, path };
+}
 async function standardStep(ui, ctx) {
   const { rail } = ui;
   const s = ui.screen.s;
@@ -43639,7 +43678,7 @@ async function standardStep(ui, ctx) {
       sayAdopted(ui, again);
       return end({ source: "adopted", version: again.version, profile: profile2 });
     }
-    removeDerivedStandard();
+    removeLocalStandard();
     if (again.status === "write-failed" || again.status === "unavailable") rail.line(terminalText(again.reason, 300));
     return { ...leaveTeamStandard(again.status === "write-failed" ? "write-failed" : "unavailable", null), profile: profile2 };
   };
@@ -43670,12 +43709,25 @@ async function standardStep(ui, ctx) {
     rail.line(team2.status === "none" ? `There is no Standard on the service either, so reviews have no rules. Fix ${STANDARD_FILE}, or delete it, then run verity init again.` : team2.status === "unavailable" ? `The Verity service did not answer (${terminalText(team2.reason, 200)}), so no Standard is confirmed. Fix ${STANDARD_FILE}, then run verity init again.` : `No Standard on the service was looked up. Fix ${STANDARD_FILE}, or sign in, then run verity init again.`);
     return end({ source: "none", version: null, profile: notAsked });
   };
+  if (ctx.standard === "new" && (0, import_node_fs77.lstatSync)(projectPath(STANDARD_FILE), { throwIfNoEntry: false })) {
+    const aside = setLocalStandardAside();
+    if (!aside.ok) {
+      rail.warn("Could not set your Standard aside for a new one");
+      rail.line(terminalText(aside.message, 300));
+      rail.line("Your Standard is as it was. Fix the cause, or move the file yourself, then run verity init --standard new again.");
+      return end({ source: "none", version: null, profile: notAsked });
+    }
+    rail.done(`Set your Standard aside ${s.gray}\xB7 a copy is in ${aside.path}${s.reset}`);
+  }
   if ((0, import_node_fs77.existsSync)(projectPath(STANDARD_FILE))) {
     const problem = localStandardProblem();
     if (problem !== null) return unusableHere(problem);
     const sync = await pushLocalStandardIfMissing(ctx.globals);
     rail.done("Kept your Standard");
     rail.line(`${STANDARD_FILE} is already here, so this run leaves it as it is. Edit it there, then share the change: verity standard push`);
+    if (!usesReviewPacks()) {
+      rail.line("It does not use review packs. To move it to packs and keep your rules: verity standard push. To build a new one: verity init --standard new", "muted");
+    }
     if (sync.status === "pushed") {
       rail.line(sync.version !== null ? `It was only on this machine. It is shared now as v${sync.version}.` : "It is only on this machine:", sync.version !== null ? "muted" : "warn");
       for (const line2 of sync.lines) if (!line2.startsWith("Standard pushed")) rail.line(terminalText(line2, 600), "warn");
@@ -44360,7 +44412,7 @@ async function recordAnswers(ui, momentIds, telemetry, completed) {
       moments: momentIds,
       ...telemetry ? { telemetry } : {},
       // A failed run also clears an earlier stamp: "done" describes this checkout now.
-      init: completed ? { completed_at: (/* @__PURE__ */ new Date()).toISOString(), cli_version: true ? "0.35.1" : "dev" } : void 0
+      init: completed ? { completed_at: (/* @__PURE__ */ new Date()).toISOString(), cli_version: true ? "0.35.2" : "dev" } : void 0
     });
   } catch (err2) {
     ui.rail.line(`Could not record the setup answers: ${terminalText(err2.message, 200)}`, "warn");
@@ -46283,10 +46335,10 @@ function registerLeanCommand(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.35.1").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+program.name("verity").description("CLI for Verity quality gate service").version("0.35.2").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
   const isTelemetryHelper = actionCommand.name() === "headers" && actionCommand.parent?.name() === "telemetry";
   if (!isTelemetryHelper) {
-    installStderrLog(actionCommand.name(), process.argv.slice(2), "0.35.1");
+    installStderrLog(actionCommand.name(), process.argv.slice(2), "0.35.2");
   }
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.35.1",
+  "version": "0.35.2",
   "description": "CLI for Verity quality gate service",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://verity.md",