@contextecf/guardian-cli 0.1.6 → 0.1.9

package/dist/packages/guardian-cli/src/runtime.d.ts

@@ -1,16 +1,20 @@
 import type { Writable } from 'node:stream';
 import { type PolicyPackMarketplaceManifest } from '@contextecf/personal-fabric-contracts';
 import { SQLitePersonalFabricStore, type PersonalFabricDataImportResult, type PersonalFabricMutableDataDeleteResult, type SQLitePersonalFabricBackupResult } from '@contextecf/personal-fabric-store';
-export declare const GUARDIAN_CLI_VERSION = "0.1.6";
+export declare const GUARDIAN_CLI_VERSION = "0.1.9";
 export declare const GUARDIAN_PROFILE_SCHEMA_VERSION = "contextecf/project-guardian-profile/v1";
 export declare const GUARDIAN_NPM_PACKAGE_NAME = "@contextecf/guardian-cli";
 export declare const GUARDIAN_NPM_REGISTRY = "https://registry.npmjs.org/";
+export declare const GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH = "trusted_publisher";
 export declare const GUARDIAN_GLOBAL_INSTALL_COMMAND = "npm install -g @contextecf/guardian-cli";
 export declare const GUARDIAN_NPX_SETUP_COMMAND = "npx @contextecf/guardian-cli@latest setup";
 export declare const GUARDIAN_FIRST_RUN_COMMAND = "guardian setup";
 export declare const GUARDIAN_OPEN_CONTROL_TOWER_COMMAND = "guardian open";
+export declare const GUARDIAN_HALO_CHROME_EXTENSION_ID = "dopkdppbiakhbglhgjfacfdhpheejkck";
+export declare const GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL = "https://chromewebstore.google.com/detail/contextecf-halo/dopkdppbiakhbglhgjfacfdhpheejkck";
 export declare const GUARDIAN_RELEASE_DISPATCH_WORKFLOW = "guardian-release-dispatch.yml";
 export declare const GUARDIAN_RELEASE_REPOSITORY = "Intelligent-Context-AI-Inc/ContextECF-GITHUB";
+export declare const GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES: readonly ["CHROME_WEB_STORE_CLIENT_ID", "CHROME_WEB_STORE_CLIENT_SECRET", "CHROME_WEB_STORE_REFRESH_TOKEN", "CHROME_WEB_STORE_PUBLISHER_ID", "CHROME_WEB_STORE_EXTENSION_ID"];
 export declare const GUARDIAN_CONTROL_TOWER_URL_ENV = "GUARDIAN_CONTROL_TOWER_URL";
 export declare const GUARDIAN_DEFAULT_CONTROL_TOWER_URL = "http://127.0.0.1:4317/control-tower";
 export declare const GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ENV = "GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY";
@@ -148,8 +152,11 @@ export interface GuardianReleaseDispatchCommandResult {
     channels: string;
     dryRun: boolean;
     runDockerSmoke: boolean;
+    publishAuth: 'token' | 'trusted_publisher';
+    browserStorePublish: 'manual' | 'api';
     command: string;
     requiredPublishCredentialName?: 'NPM_TOKEN';
+    requiredBrowserStoreCredentialNames?: readonly string[];
     provenance: 'github_actions_oidc_supported';
     boundaries: string[];
     tokenPrinted: false;
@@ -181,6 +188,7 @@ export interface GuardianBrowserStoreHandoffCommandResult {
     cli_version: string;
     status: 'chrome_distribution_proven_next_submission_pack_ready';
     primaryStore: 'chrome_web_store';
+    publicListingUrl: typeof GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL;
     productionGate: {
         id: 'browser-store-distribution';
         status: 'proven';
@@ -210,13 +218,23 @@ export interface GuardianReleaseSecretSetupResult {
     schema_version: 'contextecf/project-guardian-release-secret-setup/v1';
     cli_version: string;
     repository: typeof GUARDIAN_RELEASE_REPOSITORY;
-    requiredForPublish: 'NPM_TOKEN';
+    defaultPublishAuth: typeof GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+    requiredForPublish: 'npm_trusted_publisher_connection';
+    tokenFallbackCredentialName: 'NPM_TOKEN';
+    requiredForBrowserStoreApi: typeof GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES;
     githubActionsSecretUrl: string;
     commands: {
         setNpmToken: string;
+        setChromeWebStoreClientId: string;
+        setChromeWebStoreClientSecret: string;
+        setChromeWebStoreRefreshToken: string;
+        setChromeWebStorePublisherId: string;
+        setChromeWebStoreExtensionId: string;
         verifyNpmTokenPresence: string;
+        verifyChromeWebStoreSecretsPresence: string;
         dryRunDispatch: string;
         publishDispatch: string;
+        browserStoreApiPublishDispatch: string;
     };
     boundaries: string[];
     tokenPrinted: false;
@@ -235,7 +253,9 @@ export interface GuardianReleaseChecklistResult {
         browserStoreHandoff: string;
         readiness: string;
     };
-    requiredRepositoryCredentialName: 'NPM_TOKEN';
+    defaultPublishAuth: typeof GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+    requiredRepositoryCredentialName?: 'NPM_TOKEN';
+    tokenFallbackCredentialName: 'NPM_TOKEN';
     evidenceOutputs: string[];
     notProvenProductionGates: Array<{
         id: string;
@@ -258,9 +278,9 @@ export interface GuardianReleaseVerifyResult {
     commands: {
         registryVersion: string;
         publicInstall: string;
+        chromeWebStoreListing: string;
         installedVersion: string;
         setup: string;
-        launch: string;
         status: string;
         openControlTower: string;
         copyPasteLocalSmoke: string;
@@ -307,8 +327,38 @@ export interface GuardianReleasePasteResult {
     tokenPrinted: false;
     rawContentIncluded: false;
 }
+export type GuardianPromptCardDisposition = 'allow' | 'warn' | 'rewrite' | 'confirm' | 'block' | 'unavailable' | 'live_sensitive_warning';
+export interface GuardianPromptCardActionOption {
+    id: string;
+    label: string;
+    role: 'recommended' | 'allowed_override' | 'safe_escape' | 'none';
+    sendsPrompt: boolean;
+    sendsRevisedPrompt: boolean;
+    requiresConfirmation: boolean;
+    visibleToUser: boolean;
+}
+export interface GuardianPromptCardCatalogEntry {
+    disposition: GuardianPromptCardDisposition;
+    cardStyle: string;
+    whenShown: string;
+    actions: readonly GuardianPromptCardActionOption[];
+    sendAsIsAllowed: boolean;
+    hardBlock: boolean;
+    receiptExpected: boolean;
+}
+export interface GuardianPromptCardOptionsResult {
+    schema_version: 'contextecf/project-guardian-prompt-card-options/v1';
+    cli_version: string;
+    status: 'catalog_ready';
+    summary: string;
+    catalog: readonly GuardianPromptCardCatalogEntry[];
+    rules: readonly string[];
+    tokenPrinted: false;
+    rawContentIncluded: false;
+}
 declare const PROMPT_COACH_MODES: readonly ["off", "quiet", "balanced", "hands_on"];
 export type GuardianPromptCoachMode = (typeof PROMPT_COACH_MODES)[number];
+export declare const GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG: readonly GuardianPromptCardCatalogEntry[];
 export declare const GUARDIAN_POSTURE_PROFILE_IDS: readonly ["calm", "balanced", "guided", "high_assurance", "autopilot_lite"];
 export type GuardianPostureProfileId = (typeof GUARDIAN_POSTURE_PROFILE_IDS)[number];
 export interface GuardianPostureProfileDefinition {
@@ -554,8 +604,8 @@ export interface GuardianProductionReadinessStatus {
         };
         aiToolIntegration: {
             mcpInstallCommand: 'guardian mcp install --client=all --write';
-            browserSetupCommand: 'guardian extension open-setup';
-            nativeHostInstallCommand: 'guardian extension native-host install --extension-id=<browser-extension-id>';
+            browserSetupCommand: 'guardian connect';
+            nativeHostInstallCommand: string;
         };
         browserStoreHandoff: {
             status: 'operator_handoff_ready_not_submitted' | 'blocked_until_preview_ready';
@@ -571,7 +621,9 @@ export interface GuardianProductionReadinessStatus {
             workflow: typeof GUARDIAN_RELEASE_DISPATCH_WORKFLOW;
             dryRunCommand: string;
             publishCommand: string;
-            requiredPublishCredentialName: 'NPM_TOKEN';
+            defaultPublishAuth: typeof GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+            requiredPublishCredentialName?: 'NPM_TOKEN';
+            tokenFallbackCredentialName: 'NPM_TOKEN';
             channels: readonly ['all', 'npm', 'browser', 'evidence'];
             defaultDockerSmoke: true;
             provenance: 'github_actions_oidc_supported';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contextecf/guardian-cli",
-  "version": "0.1.6",
+  "version": "0.1.9",
   "description": "Project Guardian local-first Personal Context Fabric CLI",
   "type": "module",
   "license": "UNLICENSED",