@kirrosh/zond 0.26.0 → 0.26.1

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.26.1] — 2026-07-09
+
+Follow-up from the v0.26.0 petstore verify audit (report-zond findings).
+
+### Fixed
+- **`zond run` on a non-existent path is now a hard error (ARV-383):** a path
+  absent on disk exits 2 with `No such file or directory: <path> — nothing to
+  run`, instead of falling through to the ARV-357 empty-report path and
+  reporting a green 0-test "pass". Real trigger: a probe that matched 0 fields
+  never created its output dir, then `zond run <that-dir>` went silently green.
+  An existing-but-empty dir keeps its ARV-357 advisory exit-0 behavior.
+
 ## [0.26.0] — 2026-07-09
 
 Deterministic gap-fills surfaced by a docgen-core-service audit — all pass the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kirrosh/zond",
-  "version": "0.26.0",
+  "version": "0.26.1",
   "description": "API testing platform — define tests in YAML, run from CLI, generate from OpenAPI specs",
   "license": "MIT",
   "module": "index.ts",

package/src/cli/commands/run.ts

@@ -160,6 +160,26 @@ export async function runCommand(options: RunOptions): Promise<number> {
   // the rogue character. Mutating options.paths so downstream lookups
   // (collection by test_path, env-file search) see the cleaned form.
   options.paths = options.paths.map((p) => p.trim());
+
+  // ARV-383: a path that does not exist on disk is a hard error, not an
+  // empty (exit-0) run. Without this, `parseDirectorySafe` globs a missing
+  // cwd -> 0 suites and run falls through to the ARV-357 empty-report path,
+  // reporting a green 0-test "pass". Real-world trigger: a probe that matched
+  // 0 fields never created its output dir, then `zond run <that-dir>` went
+  // silently green. An existing-but-empty dir still flows to ARV-357.
+  const missingPaths: string[] = [];
+  for (const p of options.paths) {
+    try {
+      await stat(p);
+    } catch {
+      missingPaths.push(p);
+    }
+  }
+  if (missingPaths.length > 0) {
+    printError(`No such file or directory: ${missingPaths.join(", ")} — nothing to run`);
+    return 2;
+  }
+
   const primaryPath = options.paths[0]!;
 
   // 1. Parse test files from every input path (collect parse errors instead