@tested/cli 0.1.1 → 0.1.3

package/README.md

@@ -2,12 +2,11 @@
 
 Coverage your agent can use. CLI for patch + project coverage with agent-readable JSON output.
 
-**→ [Getting started (simple path)](docs/GETTING-STARTED.md)**  
-**→ [GitHub Action](action/README.md)** (`action/action.yml` composite)
+Docs: https://tested.dev/docs
 
 ## Install
 
-Node >= 20.19.
+Node 24+.
 
 ```bash
 pnpm add -D @tested/cli
@@ -15,16 +14,21 @@ pnpm add -D @tested/cli
 npx @tested/cli          # runs `tested` (`td` is the same CLI after install)
 ```
 
-CI uses the composite Action (`tested-hq/cli/action@main`). The Action clones this repo and builds the CLI.
+```bash
+npx @tested/cli --version
+# after a local install, pnpm swallows --version unless you use exec:
+pnpm exec -- tested --version
+```
+
+CI uses the composite Action (`tested-hq/cli/action@main`). It installs `@tested/cli` from npm.
 
 ```yaml
 - uses: tested-hq/cli/action@main
   with:
+    version: 0.1.3
     token: ${{ secrets.TESTED_TOKEN }}
 ```
 
-Pin `cli-ref` to a SHA in production. See [action/README.md](action/README.md).
-
 ## First 10 minutes
 
 ```
@@ -85,7 +89,7 @@ The hook runs `tested run && tested diff` against the upstream branch (or `HEAD~
 ```yaml
 thresholds:
   patch: 80     # % of newly-added lines that must be covered
-  project: 60   # % of the whole project that must be covered
+  project: 90   # % of the whole project that must be covered
 ```
 
 ```
@@ -93,7 +97,7 @@ $ tested check
 tested.dev — coverage gate  [PASS]
 
   Patch     87.3%  (threshold 80)  [PASS]
-  Project   64.1%  (threshold 60)  [PASS]
+  Project   92.1%  (threshold 90)  [PASS]
 
 thresholds met
 $ echo $?
@@ -103,7 +107,7 @@ $ tested check
 tested.dev — coverage gate  [FAIL]
 
   Patch     42.7%  (threshold 80)  [FAIL]
-  Project   64.1%  (threshold 60)  [PASS]
+  Project   92.1%  (threshold 90)  [PASS]
 
 → add tests for uncovered ranges: tested diff
 $ echo $?
@@ -117,7 +121,7 @@ $ tested check
 tested.dev — coverage gate  [PASS]
 
   Patch     -  no executable lines in the patch  [SKIP]
-  Project   64.1%  (threshold 60)  [PASS]
+  Project   92.1%  (threshold 90)  [PASS]
 
 No executable lines in the patch — patch gate skipped. Project threshold met.
 ```
@@ -129,6 +133,7 @@ If `thresholds` is missing from `.tested.yaml`, `tested check` prints a notice o
 ```yaml
 - uses: tested-hq/cli/action@main
   with:
+    version: 0.1.3
     push: true
     pr-number: ${{ github.event.pull_request.number }}
     token: ${{ secrets.TESTED_TOKEN }}
@@ -140,7 +145,7 @@ For programmatic consumers:
 
 ```
 $ tested check --json
-{"patch":{"pct":87.3,"threshold":80,"pass":true},"project":{"pct":64.1,"threshold":60,"pass":true},"overall":"pass"}
+{"patch":{"pct":87.3,"threshold":80,"pass":true},"project":{"pct":92.1,"threshold":90,"pass":true},"overall":"pass"}
 ```
 
 `--json` suppresses the human layout; the exit code is unchanged.

package/dist/td.js

@@ -132,6 +132,10 @@ function formatCliError(message) {
 
 // src/commands/init.ts
 import pc2 from "picocolors";
+var DEFAULT_INIT_THRESHOLDS = {
+  patch: 80,
+  project: 90
+};
 var INIT_YAML_HEADER = "# Config schema \u2014 see https://tested.dev/docs/config\n";
 var DEFAULT_INIT_IGNORES = [
   "**/*.test.ts",
@@ -184,8 +188,8 @@ function buildInitYaml(args) {
   lines.push("# Patch gate is skipped when the diff has no executable lines");
   lines.push("# (tests-only, comments-only, docs-only, or ignored files).");
   lines.push("thresholds:");
-  lines.push("  patch: 80");
-  lines.push("  project: 60");
+  lines.push(`  patch: ${DEFAULT_INIT_THRESHOLDS.patch}`);
+  lines.push(`  project: ${DEFAULT_INIT_THRESHOLDS.project}`);
   lines.push("ignores:");
   for (const pattern of DEFAULT_INIT_IGNORES) {
     lines.push(`  - "${pattern}"`);
@@ -1049,7 +1053,9 @@ function assertSafeApiBase(raw) {
 }
 function resolveApiBase(opts) {
   const env = opts.env ?? process.env;
-  const raw = opts.flag ?? env.TESTED_API_URL ?? DEFAULT_API_BASE;
+  const flag = opts.flag?.trim();
+  const fromEnv = env.TESTED_API_URL?.trim();
+  const raw = flag || fromEnv || DEFAULT_API_BASE;
   return assertSafeApiBase(raw);
 }
 function redactGitRemote(url) {
@@ -1525,6 +1531,7 @@ function registerPushCommand(program2) {
 
 // src/commands/doctor.ts
 var TESTED_BIN_BASENAME_RE = /^tested(\.js)?$/;
+var MIN_NODE_MAJOR = 24;
 function statusBadge(status) {
   const kind = status === "pass" ? "pass" : status === "fail" ? "fail" : status === "warn" ? "warn" : "info";
   return badge(kind);
@@ -1591,20 +1598,19 @@ async function runDoctor(deps) {
   const checks = [];
   const major = parseNodeMajor(nodeVersion);
   const nodeDisplay = nodeVersion.replace(/^v/, "v");
-  if (major !== null && major >= 22) {
+  if (major !== null && major >= MIN_NODE_MAJOR) {
     checks.push({
       id: "node",
       label: "Node.js",
       status: "pass",
-      detail: `${nodeDisplay} (>= 20.19; 22+ recommended)`
+      detail: `${nodeDisplay} (>= ${MIN_NODE_MAJOR})`
     });
   } else {
     checks.push({
       id: "node",
       label: "Node.js",
-      status: "warn",
-      detail: `${nodeDisplay} runs this CLI. Node >= 22 recommended.`,
-      optional: true
+      status: "fail",
+      detail: `${nodeDisplay} is below ${MIN_NODE_MAJOR}. Node >= ${MIN_NODE_MAJOR} required.`
     });
   }
   let isRepo = false;
@@ -1826,7 +1832,7 @@ async function runDoctor(deps) {
       optional: true
     });
   }
-  const hardFailIds = /* @__PURE__ */ new Set(["git", "config", "origin"]);
+  const hardFailIds = /* @__PURE__ */ new Set(["node", "git", "config", "origin"]);
   const safetyFailIds = /* @__PURE__ */ new Set(["api_url", "tested_bin", "token"]);
   const hasHardFail = checks.some(
     (c) => c.status === "fail" && hardFailIds.has(c.id)
@@ -1871,6 +1877,73 @@ function registerDoctorCommand(program2) {
 
 // src/commands/setup.ts
 import pc3 from "picocolors";
+
+// package.json
+var package_default = {
+  name: "@tested/cli",
+  version: "0.1.3",
+  description: "Coverage your agent can use. CLI for patch + project coverage with agent-readable JSON output.",
+  license: "MIT",
+  homepage: "https://tested.dev",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/tested-hq/cli.git"
+  },
+  bugs: {
+    url: "https://github.com/tested-hq/cli/issues"
+  },
+  publishConfig: {
+    access: "public"
+  },
+  type: "module",
+  packageManager: "pnpm@11.3.0",
+  bin: {
+    tested: "./dist/tested.js",
+    td: "./dist/tested.js"
+  },
+  files: [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  scripts: {
+    build: "tsup",
+    dev: "tsx bin/tested.ts",
+    test: "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    typecheck: "tsc --noEmit",
+    prepare: "node ./scripts/prepare.mjs",
+    prepublishOnly: "pnpm run build"
+  },
+  engines: {
+    node: ">=24"
+  },
+  dependencies: {
+    commander: "14.0.3",
+    minimatch: "10.2.5",
+    picocolors: "1.1.1",
+    "simple-git": "3.36.0",
+    yaml: "2.9.0",
+    zod: "4.4.3"
+  },
+  devDependencies: {
+    "@types/node": "25.9.1",
+    "@vitest/coverage-v8": "4.1.7",
+    husky: "9.1.7",
+    "is-ci": "3.0.1",
+    tsup: "8.5.1",
+    tsx: "4.22.3",
+    typescript: "6.0.3",
+    vite: "8.0.14",
+    vitest: "4.1.7"
+  }
+};
+
+// src/version.ts
+var CLI_VERSION = package_default.version;
+
+// src/commands/setup.ts
 var PINNED_CLI = "@tested/cli";
 function buildCiSnippet() {
   return [
@@ -1884,8 +1957,7 @@ function buildCiSnippet() {
     "      - uses: actions/checkout@v4",
     "      - uses: tested-hq/cli/action@main",
     "        with:",
-    "          # pin ref for reproducible installs (do not use floating tags in prod)",
-    "          cli-ref: main",
+    `          version: ${CLI_VERSION}`,
     "          push: true",
     "          pr-number: ${{ github.event.pull_request.number }}",
     "          token: ${{ secrets.TESTED_TOKEN }}"
@@ -1902,6 +1974,7 @@ function buildTokenInstructions() {
 function buildInstallInstructions() {
   return [
     "Install CLI:",
+    "  Node 24+",
     `  pnpm add -D ${PINNED_CLI}`,
     `  # or: npx ${PINNED_CLI}`,
     "",
@@ -2593,7 +2666,7 @@ function createProgram() {
       "Agent loop:",
       "  tested setup \u2192 tested run \u2192 tested diff \u2192 tested check \u2192 tested push --pr <n>"
     ].join("\n")
-  ).version("0.1.1");
+  ).version(CLI_VERSION);
   registerSetupCommand(program2);
   registerDoctorCommand(program2);
   registerInitCommand(program2);

package/dist/tested.js

@@ -132,6 +132,10 @@ function formatCliError(message) {
 
 // src/commands/init.ts
 import pc2 from "picocolors";
+var DEFAULT_INIT_THRESHOLDS = {
+  patch: 80,
+  project: 90
+};
 var INIT_YAML_HEADER = "# Config schema \u2014 see https://tested.dev/docs/config\n";
 var DEFAULT_INIT_IGNORES = [
   "**/*.test.ts",
@@ -184,8 +188,8 @@ function buildInitYaml(args) {
   lines.push("# Patch gate is skipped when the diff has no executable lines");
   lines.push("# (tests-only, comments-only, docs-only, or ignored files).");
   lines.push("thresholds:");
-  lines.push("  patch: 80");
-  lines.push("  project: 60");
+  lines.push(`  patch: ${DEFAULT_INIT_THRESHOLDS.patch}`);
+  lines.push(`  project: ${DEFAULT_INIT_THRESHOLDS.project}`);
   lines.push("ignores:");
   for (const pattern of DEFAULT_INIT_IGNORES) {
     lines.push(`  - "${pattern}"`);
@@ -1049,7 +1053,9 @@ function assertSafeApiBase(raw) {
 }
 function resolveApiBase(opts) {
   const env = opts.env ?? process.env;
-  const raw = opts.flag ?? env.TESTED_API_URL ?? DEFAULT_API_BASE;
+  const flag = opts.flag?.trim();
+  const fromEnv = env.TESTED_API_URL?.trim();
+  const raw = flag || fromEnv || DEFAULT_API_BASE;
   return assertSafeApiBase(raw);
 }
 function redactGitRemote(url) {
@@ -1525,6 +1531,7 @@ function registerPushCommand(program2) {
 
 // src/commands/doctor.ts
 var TESTED_BIN_BASENAME_RE = /^tested(\.js)?$/;
+var MIN_NODE_MAJOR = 24;
 function statusBadge(status) {
   const kind = status === "pass" ? "pass" : status === "fail" ? "fail" : status === "warn" ? "warn" : "info";
   return badge(kind);
@@ -1591,20 +1598,19 @@ async function runDoctor(deps) {
   const checks = [];
   const major = parseNodeMajor(nodeVersion);
   const nodeDisplay = nodeVersion.replace(/^v/, "v");
-  if (major !== null && major >= 22) {
+  if (major !== null && major >= MIN_NODE_MAJOR) {
     checks.push({
       id: "node",
       label: "Node.js",
       status: "pass",
-      detail: `${nodeDisplay} (>= 20.19; 22+ recommended)`
+      detail: `${nodeDisplay} (>= ${MIN_NODE_MAJOR})`
     });
   } else {
     checks.push({
       id: "node",
       label: "Node.js",
-      status: "warn",
-      detail: `${nodeDisplay} runs this CLI. Node >= 22 recommended.`,
-      optional: true
+      status: "fail",
+      detail: `${nodeDisplay} is below ${MIN_NODE_MAJOR}. Node >= ${MIN_NODE_MAJOR} required.`
     });
   }
   let isRepo = false;
@@ -1826,7 +1832,7 @@ async function runDoctor(deps) {
       optional: true
     });
   }
-  const hardFailIds = /* @__PURE__ */ new Set(["git", "config", "origin"]);
+  const hardFailIds = /* @__PURE__ */ new Set(["node", "git", "config", "origin"]);
   const safetyFailIds = /* @__PURE__ */ new Set(["api_url", "tested_bin", "token"]);
   const hasHardFail = checks.some(
     (c) => c.status === "fail" && hardFailIds.has(c.id)
@@ -1871,6 +1877,73 @@ function registerDoctorCommand(program2) {
 
 // src/commands/setup.ts
 import pc3 from "picocolors";
+
+// package.json
+var package_default = {
+  name: "@tested/cli",
+  version: "0.1.3",
+  description: "Coverage your agent can use. CLI for patch + project coverage with agent-readable JSON output.",
+  license: "MIT",
+  homepage: "https://tested.dev",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/tested-hq/cli.git"
+  },
+  bugs: {
+    url: "https://github.com/tested-hq/cli/issues"
+  },
+  publishConfig: {
+    access: "public"
+  },
+  type: "module",
+  packageManager: "pnpm@11.3.0",
+  bin: {
+    tested: "./dist/tested.js",
+    td: "./dist/tested.js"
+  },
+  files: [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  scripts: {
+    build: "tsup",
+    dev: "tsx bin/tested.ts",
+    test: "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    typecheck: "tsc --noEmit",
+    prepare: "node ./scripts/prepare.mjs",
+    prepublishOnly: "pnpm run build"
+  },
+  engines: {
+    node: ">=24"
+  },
+  dependencies: {
+    commander: "14.0.3",
+    minimatch: "10.2.5",
+    picocolors: "1.1.1",
+    "simple-git": "3.36.0",
+    yaml: "2.9.0",
+    zod: "4.4.3"
+  },
+  devDependencies: {
+    "@types/node": "25.9.1",
+    "@vitest/coverage-v8": "4.1.7",
+    husky: "9.1.7",
+    "is-ci": "3.0.1",
+    tsup: "8.5.1",
+    tsx: "4.22.3",
+    typescript: "6.0.3",
+    vite: "8.0.14",
+    vitest: "4.1.7"
+  }
+};
+
+// src/version.ts
+var CLI_VERSION = package_default.version;
+
+// src/commands/setup.ts
 var PINNED_CLI = "@tested/cli";
 function buildCiSnippet() {
   return [
@@ -1884,8 +1957,7 @@ function buildCiSnippet() {
     "      - uses: actions/checkout@v4",
     "      - uses: tested-hq/cli/action@main",
     "        with:",
-    "          # pin ref for reproducible installs (do not use floating tags in prod)",
-    "          cli-ref: main",
+    `          version: ${CLI_VERSION}`,
     "          push: true",
     "          pr-number: ${{ github.event.pull_request.number }}",
     "          token: ${{ secrets.TESTED_TOKEN }}"
@@ -1902,6 +1974,7 @@ function buildTokenInstructions() {
 function buildInstallInstructions() {
   return [
     "Install CLI:",
+    "  Node 24+",
     `  pnpm add -D ${PINNED_CLI}`,
     `  # or: npx ${PINNED_CLI}`,
     "",
@@ -2593,7 +2666,7 @@ function createProgram() {
       "Agent loop:",
       "  tested setup \u2192 tested run \u2192 tested diff \u2192 tested check \u2192 tested push --pr <n>"
     ].join("\n")
-  ).version("0.1.1");
+  ).version(CLI_VERSION);
   registerSetupCommand(program2);
   registerDoctorCommand(program2);
   registerInitCommand(program2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tested/cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Coverage your agent can use. CLI for patch + project coverage with agent-readable JSON output.",
   "license": "MIT",
   "homepage": "https://tested.dev",
@@ -36,7 +36,7 @@
     "prepublishOnly": "pnpm run build"
   },
   "engines": {
-    "node": ">=20.19.0"
+    "node": ">=24"
   },
   "dependencies": {
     "commander": "14.0.3",