verimu 0.0.15 → 0.0.16

package/dist/{cli.js → cli.mjs}

@@ -16874,6 +16874,71 @@ var VerimuApiClient = class {
   }
 };
 
+// src/core/source.ts
+var CI_ENV_SIGNATURES = {
+  // Generic CI marker (most CI systems set this)
+  CI: "true",
+  // GitHub Actions
+  GITHUB_ACTIONS: "true",
+  // GitLab CI
+  GITLAB_CI: "true",
+  // Bitbucket Pipelines
+  BITBUCKET_BUILD_NUMBER: "*",
+  // CircleCI
+  CIRCLECI: "true",
+  // Jenkins
+  JENKINS_URL: "*",
+  // Azure Pipelines
+  TF_BUILD: "True",
+  // Travis CI
+  TRAVIS: "true",
+  // TeamCity
+  TEAMCITY_VERSION: "*",
+  // AWS CodeBuild
+  CODEBUILD_BUILD_ID: "*",
+  // Drone CI
+  DRONE: "true",
+  // Buildkite
+  BUILDKITE: "true",
+  // Vercel
+  VERCEL: "1",
+  // Netlify
+  NETLIFY: "true",
+  // Heroku CI
+  HEROKU_TEST_RUN_ID: "*",
+  // Semaphore CI
+  SEMAPHORE: "true",
+  // AppVeyor
+  APPVEYOR: "True",
+  // Woodpecker CI
+  CI_PIPELINE_ID: "*"
+};
+function isInCiEnvironment() {
+  for (const [envVar, expectedValue] of Object.entries(CI_ENV_SIGNATURES)) {
+    const actualValue = process.env[envVar];
+    if (actualValue === void 0 || actualValue === "") {
+      continue;
+    }
+    if (expectedValue === "*" || actualValue.toLowerCase() === expectedValue.toLowerCase()) {
+      return true;
+    }
+  }
+  return false;
+}
+function detectSource() {
+  const explicitSource = process.env.VERIMU_SOURCE?.trim().toLowerCase();
+  if (explicitSource) {
+    if (explicitSource === "cicd" || explicitSource === "ci/cd" || explicitSource === "ci") {
+      return "cicd";
+    }
+    return "cli";
+  }
+  if (isInCiEnvironment()) {
+    return "cicd";
+  }
+  return "cli";
+}
+
 // src/context/snippet-extractor.ts
 import { relative } from "path";
 var DEFAULT_NUM_CONTEXT_LINES = 4;
@@ -17721,6 +17786,7 @@ function deriveArtifactOutputPaths(cycloneDxOutput) {
   };
 }
 function buildUploadPayload(report) {
+  const source = detectSource();
   if (!report.artifacts) {
     return report.sbom.content;
   }
@@ -17729,7 +17795,8 @@ function buildUploadPayload(report) {
     cyclonedx: JSON.parse(report.artifacts.cyclonedx.content),
     spdx: JSON.parse(report.artifacts.spdx.content),
     swid: report.artifacts.swid.content,
-    usage_context: usageContext
+    usage_context: usageContext,
+    meta: { source }
   };
 }
 function sanitizeUsageContextForUpload(usageContext) {
@@ -18064,4 +18131,4 @@ if (isDirectRun) {
 export {
   parseArgs
 };
-//# sourceMappingURL=cli.js.map
+//# sourceMappingURL=cli.mjs.map