@meterian/cli 0.1.1 → 0.1.2

package/dist/cli.js

@@ -21047,6 +21047,40 @@ var require_vs = __commonJS({
   }
 });
 
+// ../../src/meterian/CanonicalUserId.js
+var require_CanonicalUserId = __commonJS({
+  "../../src/meterian/CanonicalUserId.js"(exports2, module2) {
+    var fs = require("fs");
+    var path2 = require("path");
+    var os2 = require("os");
+    var log = require_log4js().getLogger("Heidi.CanonicalUserId");
+    var USER_JSON_PATH = path2.join(os2.homedir(), ".meterian", "heidi", "config", "user.json");
+    function getOrCreate(computeFn) {
+      try {
+        const content = fs.readFileSync(USER_JSON_PATH, "utf8");
+        const { canonicalUserId } = JSON.parse(content);
+        if (canonicalUserId && typeof canonicalUserId === "string") {
+          return canonicalUserId;
+        }
+      } catch (_) {
+      }
+      const id = computeFn();
+      if (!id || typeof id !== "string") {
+        log.warn("computeFn returned invalid ID; canonical user ID not persisted");
+        return id;
+      }
+      try {
+        fs.mkdirSync(path2.dirname(USER_JSON_PATH), { recursive: true });
+        fs.writeFileSync(USER_JSON_PATH, JSON.stringify({ canonicalUserId: id }));
+      } catch (e) {
+        log.warn(`Unable to persist canonical user ID: ${e.message}`);
+      }
+      return id;
+    }
+    module2.exports = { getOrCreate };
+  }
+});
+
 // ../../src/meterian/Auth.js
 var require_Auth = __commonJS({
   "../../src/meterian/Auth.js"(exports2, module2) {
@@ -21058,7 +21092,8 @@ var require_Auth = __commonJS({
         this.token = token;
         if (config != null) {
           const { workspace } = require_vs();
-          this.id = workspace.getId();
+          const { getOrCreate } = require_CanonicalUserId();
+          this.id = getOrCreate(() => workspace.getId());
           this.config = config;
         }
       }
@@ -21070,8 +21105,9 @@ var require_Auth = __commonJS({
         const machineId = crypto.createHash("sha256").update(data).digest("hex");
         const username = os2.userInfo().username;
         const usernameHash = crypto.createHash("md5").update(username).digest("hex");
+        const { getOrCreate } = require_CanonicalUserId();
         const auth = new _Auth(null, null);
-        auth.id = machineId + ":" + usernameHash;
+        auth.id = getOrCreate(() => machineId + ":" + usernameHash);
         return auth;
       }
       async isAuthenticated() {
@@ -21363,15 +21399,14 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@meterian/cli",
-      version: "0.1.1",
+      version: "0.1.2",
       description: "Meterian security audit CLI \u2014 check open-source dependencies for vulnerabilities",
       bin: {
         meterian: "bin/meterian"
       },
       files: [
         "dist/",
-        "bin/",
-        "CHANGELOG.md"
+        "bin/"
       ],
       scripts: {
         prepack: "esbuild src/cli.js --bundle --platform=node --external:vscode --outfile=dist/cli.js",

package/package.json

@@ -1,14 +1,13 @@
 {
   "name": "@meterian/cli",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Meterian security audit CLI — check open-source dependencies for vulnerabilities",
   "bin": {
     "meterian": "bin/meterian"
   },
   "files": [
     "dist/",
-    "bin/",
-    "CHANGELOG.md"
+    "bin/"
   ],
   "scripts": {
     "prepack": "esbuild src/cli.js --bundle --platform=node --external:vscode --outfile=dist/cli.js",

package/CHANGELOG.md

@@ -1,23 +0,0 @@
-# Changelog
-
-All notable changes to `@meterian/cli` are documented here.
-
-The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
-
-## [0.1.1] — 2026-05-15
-
-### Fixed
-
-- Set the correct `meterian/cli <version>` User-Agent header on all outbound HTTP calls to the Kiwi API (previously the header was unset or used the wrong client identifier).
-
-## [0.1.0] — 2026-04-28
-
-Initial public release.
-
-### Added
-
-- `check` command — batch dependency audit; reads `[{language, name, version}]` from stdin, returns a compact vulnerability summary with safe-version suggestions.
-- `advisories get` command — returns the full advisory list for a single package.
-- `nextsafe` command — returns the next safe version at each semver level (patch / minor / major).
-- Human-readable `--help` output for all commands.
-- Aliases for common language names (`npm` → `nodejs`, `cargo` → `rust`, `pypi` → `python`, etc.).