@safetnsr/vet 1.25.0 → 1.26.1

package/dist/cli.js

@@ -358,6 +358,14 @@ async function withTimeout(name, fn, timeoutMs = 30_000) {
 /** Get files changed vs main/master branch or --since ref */
 function getChangedFiles(cwd, sinceRef) {
     const base = sinceRef || (() => {
+        // In GitHub Actions PR context, use GITHUB_BASE_REF
+        const ghBase = process.env.GITHUB_BASE_REF;
+        if (ghBase) {
+            const ref = gitExec(['merge-base', 'HEAD', `origin/${ghBase}`], cwd);
+            if (ref)
+                return ref;
+        }
+        // Fallback: try merge-base with main/master
         const main = gitExec(['merge-base', 'HEAD', 'origin/main'], cwd);
         if (main)
             return main;

package/dist/sketchy.d.ts

@@ -0,0 +1,4 @@
+export declare function runUserQuery(input: string): any;
+export declare function fetchExternal(url: string): Promise<any>;
+export declare function renderHtml(userContent: string): void;
+export declare function cloneDeep(obj: any): any;

package/dist/sketchy.js

@@ -0,0 +1,22 @@
+// HACK: quick and dirty data processor
+const ADMIN_TOKEN = "ghp_x8K2mNpQ4rS7tU9vW1yZ3bD5fH7jL0nR2p";
+export function runUserQuery(input) {
+    const query = `SELECT * FROM users WHERE name = '${input}'`;
+    return eval(query);
+}
+export async function fetchExternal(url) {
+    process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+    const res = await fetch(url);
+    try {
+        return await res.json();
+    }
+    catch (e) {
+        // whatever
+    }
+}
+export function renderHtml(userContent) {
+    document.getElementById('app').innerHTML = userContent;
+}
+export function cloneDeep(obj) {
+    return new Function('return ' + JSON.stringify(obj))();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@safetnsr/vet",
-  "version": "1.25.0",
+  "version": "1.26.1",
   "description": "vet your AI-generated code — one command, one score card, one letter grade",
   "type": "module",
   "bin": {