@safetnsr/vet 1.7.0 → 1.8.2

package/dist/cli.js

@@ -106,22 +106,40 @@ if (configContent) {
 }
 const ignore = config.ignore || [];
 if (command === 'init') {
-    const { init } = await import('./init.js');
-    await init(cwd);
+    try {
+        const { init } = await import('./init.js');
+        await init(cwd);
+    }
+    catch (e) {
+        console.error(`${c.red}init failed:${c.reset}`, e instanceof Error ? e.message : e);
+        process.exit(1);
+    }
     process.exit(0);
 }
 if (command === 'receipt') {
-    const format = isJSON ? 'json' : 'ascii';
-    await runReceiptCommand(format);
+    try {
+        const format = isJSON ? 'json' : 'ascii';
+        await runReceiptCommand(format);
+    }
+    catch (e) {
+        console.error(`${c.red}receipt failed:${c.reset}`, e instanceof Error ? e.message : e);
+        process.exit(1);
+    }
     process.exit(0);
 }
 if (command === 'map') {
-    const result = await checkMap(cwd);
-    if (isJSON) {
-        console.log(renderMapReport(result, true));
+    try {
+        const result = await checkMap(cwd);
+        if (isJSON) {
+            console.log(renderMapReport(result, true));
+        }
+        else {
+            console.log(renderMapReport(result, false));
+        }
     }
-    else {
-        console.log(renderMapReport(result, false));
+    catch (e) {
+        console.error(`${c.red}map failed:${c.reset}`, e instanceof Error ? e.message : e);
+        process.exit(1);
     }
     process.exit(0);
 }
@@ -155,61 +173,79 @@ if (!isGitRepo(cwd)) {
 }
 // --fix mode
 if (isFix) {
-    console.log(`\n  ${c.bold}vet --fix${c.reset}\n`);
-    const { fixConfig } = await import('./fix/config.js');
-    const { fixModels } = await import('./fix/models.js');
-    const configResult = fixConfig(cwd);
-    const modelsResult = fixModels(cwd, ignore);
-    const allMessages = [...configResult.messages, ...modelsResult.messages];
-    const totalFixed = configResult.fixed + modelsResult.fixed;
-    if (allMessages.length > 0) {
-        for (const msg of allMessages)
-            console.log(msg);
+    try {
+        console.log(`\n  ${c.bold}vet --fix${c.reset}\n`);
+        const { fixConfig } = await import('./fix/config.js');
+        const { fixModels } = await import('./fix/models.js');
+        const configResult = fixConfig(cwd);
+        const modelsResult = fixModels(cwd, ignore);
+        const allMessages = [...configResult.messages, ...modelsResult.messages];
+        const totalFixed = configResult.fixed + modelsResult.fixed;
+        if (allMessages.length > 0) {
+            for (const msg of allMessages)
+                console.log(msg);
+        }
+        console.log(`\n  ${totalFixed > 0 ? c.green : c.dim}fixed ${totalFixed} issue${totalFixed !== 1 ? 's' : ''}${c.reset}\n`);
+    }
+    catch (e) {
+        console.error(`${c.red}fix failed:${c.reset}`, e instanceof Error ? e.message : e);
+        process.exit(1);
     }
-    console.log(`\n  ${totalFixed > 0 ? c.green : c.dim}fixed ${totalFixed} issue${totalFixed !== 1 ? 's' : ''}${c.reset}\n`);
     process.exit(0);
 }
 async function runChecks() {
-    // Run all checks, grouped into categories
-    // Security: scan, secrets, config, models, owasp, permissions
-    const [scanResult, secretsResult, configResult, modelsResult, owaspResult] = await Promise.all([
-        Promise.resolve(checkScan(cwd)),
-        checkSecrets(cwd),
-        Promise.resolve(checkConfig(cwd, ignore)),
-        checkModels(cwd, ignore),
-        Promise.resolve(checkOwasp(cwd)),
-    ]);
-    const permissionsResult = checkPermissions(cwd);
-    // Integrity: diff, integrity checks
-    const diffResult = checkDiff(cwd, { since });
-    const integrityResult = await checkIntegrity(cwd, ignore);
-    // Debt: ready, history, debt
-    const [readyResult, debtResult] = await Promise.all([
-        checkReady(cwd, ignore),
-        checkDebt(cwd, ignore),
-    ]);
-    const historyResult = checkHistory(cwd);
-    // Deps: deps
-    const depsResult = await checkDeps(cwd);
-    // Receipt is informational — fold into integrity category but keep low weight
-    const receiptResult = await checkReceipt(cwd);
-    // Memory: stale facts in agent memory files
-    const memoryResult = checkMemory(cwd);
-    // Verify: agent claim validation
-    const verifyResult = checkVerify(cwd, since);
-    // Tests: test theater detection
-    const testsResult = checkTests(cwd, ignore);
-    return score(cwd, {
-        security: [scanResult, secretsResult, configResult, modelsResult, owaspResult, permissionsResult],
-        integrity: [diffResult, integrityResult, receiptResult, memoryResult, verifyResult, testsResult],
-        debt: [readyResult, historyResult, debtResult],
-        deps: [depsResult],
-    });
+    try {
+        // Run all checks, grouped into categories
+        // Security: scan, secrets, config, models, owasp, permissions
+        const [scanResult, secretsResult, configResult, modelsResult, owaspResult] = await Promise.all([
+            Promise.resolve(checkScan(cwd)),
+            checkSecrets(cwd),
+            Promise.resolve(checkConfig(cwd, ignore)),
+            checkModels(cwd, ignore),
+            Promise.resolve(checkOwasp(cwd)),
+        ]);
+        const permissionsResult = checkPermissions(cwd);
+        // Integrity: diff, integrity checks
+        const diffResult = checkDiff(cwd, { since });
+        const integrityResult = await checkIntegrity(cwd, ignore);
+        // Debt: ready, history, debt
+        const [readyResult, debtResult] = await Promise.all([
+            checkReady(cwd, ignore),
+            checkDebt(cwd, ignore),
+        ]);
+        const historyResult = checkHistory(cwd);
+        // Deps: deps
+        const depsResult = await checkDeps(cwd);
+        // Receipt is informational — fold into integrity category but keep low weight
+        const receiptResult = await checkReceipt(cwd);
+        // Memory: stale facts in agent memory files
+        const memoryResult = checkMemory(cwd);
+        // Verify: agent claim validation
+        const verifyResult = checkVerify(cwd, since);
+        // Tests: test theater detection
+        const testsResult = checkTests(cwd, ignore);
+        return score(cwd, {
+            security: [scanResult, secretsResult, configResult, modelsResult, owaspResult, permissionsResult],
+            integrity: [diffResult, integrityResult, receiptResult, memoryResult, verifyResult, testsResult],
+            debt: [readyResult, historyResult, debtResult],
+            deps: [depsResult],
+        });
+    }
+    catch (e) {
+        console.error('check failed:', e instanceof Error ? e.message : e);
+        process.exit(1);
+    }
 }
 // --badge mode
 if (isBadge && !isWatch) {
-    const result = await runChecks();
-    console.log(reportBadge(result));
+    try {
+        const result = await runChecks();
+        console.log(reportBadge(result));
+    }
+    catch (e) {
+        console.error(`${c.red}badge failed:${c.reset}`, e instanceof Error ? e.message : e);
+        process.exit(1);
+    }
     process.exit(0);
 }
 // --watch mode
@@ -247,18 +283,24 @@ if (isWatch) {
 }
 else {
     // Normal run
-    const result = await runChecks();
-    if (isJSON) {
-        console.log(reportJSON(result));
-    }
-    else {
-        console.log(reportPretty(result));
+    try {
+        const result = await runChecks();
+        if (isJSON) {
+            console.log(reportJSON(result));
+        }
+        else {
+            console.log(reportPretty(result));
+        }
+        if (isCI || isHook) {
+            // --hook uses grade C (60) as threshold
+            // --ci uses config threshold or grade C default
+            const minScore = isHook ? 60 : (config.thresholds?.min ?? 60);
+            const minGrade = isHook ? 'C' : (config.thresholds?.grade ?? 'C');
+            process.exit(result.score >= minScore ? 0 : 1);
+        }
     }
-    if (isCI || isHook) {
-        // --hook uses grade C (60) as threshold
-        // --ci uses config threshold or grade C default
-        const minScore = isHook ? 60 : (config.thresholds?.min ?? 60);
-        const minGrade = isHook ? 'C' : (config.thresholds?.grade ?? 'C');
-        process.exit(result.score >= minScore ? 0 : 1);
+    catch (e) {
+        console.error(`${c.red}vet failed:${c.reset}`, e instanceof Error ? e.message : e);
+        process.exit(1);
     }
 }

package/dist/util.d.ts

@@ -22,4 +22,3 @@ export declare function walkFiles(dir: string, ignore?: string[]): string[];
 export declare function isTextFile(filePath: string): boolean;
 /** Recursively collect all file paths under a directory */
 export declare function collectDirFiles(dir: string): string[];
-export declare function matchesAny(file: string, patterns: string[]): boolean;

package/dist/util.js

@@ -103,7 +103,7 @@ export function collectDirFiles(dir) {
     catch { /* skip */ }
     return files;
 }
-export function matchesAny(file, patterns) {
+function matchesAny(file, patterns) {
     return patterns.some(p => {
         if (p.endsWith('/'))
             return file.startsWith(p) || file.includes('/' + p);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@safetnsr/vet",
-  "version": "1.7.0",
+  "version": "1.8.2",
   "description": "vet your AI-generated code — one command, one score card, one letter grade",
   "type": "module",
   "bin": {