@contextecf/guardian-cli 0.1.8 → 0.1.9

package/dist/packages/guardian-cli/src/bin.js

@@ -17545,14 +17545,16 @@ function buildGuardianDistributionReadiness(npmPreviewReady) {
       workflow: GUARDIAN_RELEASE_DISPATCH_WORKFLOW,
       dryRunCommand: buildGuardianReleaseDispatchCommand(true),
       publishCommand: buildGuardianReleaseDispatchCommand(false),
-      requiredPublishCredentialName: "NPM_TOKEN",
+      defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+      tokenFallbackCredentialName: "NPM_TOKEN",
       channels: ["all", "npm", "browser", "evidence"],
       defaultDockerSmoke: true,
       provenance: "github_actions_oidc_supported",
       status: npmPreviewReady ? "ready_for_dispatch_after_preview_evidence" : "blocked_until_preview_release_evidence_passes",
       boundaries: [
         "Use dry_run=true before public publication.",
-        "dry_run=false requires the repository secret NPM_TOKEN and must not print npm tokens, OTP values, or .npmrc contents.",
+        "dry_run=false defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+        "The token fallback route remains available with publish_auth=token and requires the repository secret NPM_TOKEN.",
         "The workflow can publish the npm preview package, upload evidence, submit future Chrome Web Store updates for review when browser_store_publish=api, and run public install smokes; it does not sign native installers or prove future browser-store approval.",
         "GitHub Actions OIDC/provenance applies to CI release context; manual local publishes are recorded separately and should not claim CI provenance."
       ]
@@ -17574,7 +17576,7 @@ function buildGuardianReleaseDispatchCommand(dryRun) {
   });
 }
 function buildGuardianReleaseDispatchCommandFor(input2) {
-  const publishAuth = input2.publishAuth ?? "token";
+  const publishAuth = input2.publishAuth ?? GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
   const browserStorePublish = input2.browserStorePublish ?? "manual";
   return [
     `gh workflow run ${GUARDIAN_RELEASE_DISPATCH_WORKFLOW} \\`,
@@ -17690,7 +17692,7 @@ async function runReleaseCommand(argv, flags, options) {
   }
   const dryRun = flags.has("publish") ? false : booleanFlag(flags, "dry-run", true);
   const runDockerSmoke = booleanFlag(flags, "run-docker-smoke", true);
-  const publishAuth = stringFlag(flags, "publish-auth") ?? "token";
+  const publishAuth = stringFlag(flags, "publish-auth") ?? GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
   if (!isValidReleasePublishAuth(publishAuth)) {
     write(stderr, "Invalid --publish-auth. Expected one of: token, trusted_publisher.\n");
     return 1;
@@ -17818,7 +17820,7 @@ function renderGuardianReleaseDispatchCommand(result, flags) {
     `Docker smoke: ${result.runDockerSmoke ? "yes" : "no"}`,
     `Publish auth: ${result.publishAuth}`,
     `Browser store publish: ${result.browserStorePublish}`,
-    result.requiredPublishCredentialName ? `Required repository secret: ${result.requiredPublishCredentialName}` : "Required repository secret: not needed for dry run",
+    result.requiredPublishCredentialName ? `Required repository secret: ${result.requiredPublishCredentialName}` : result.publishAuth === "trusted_publisher" && !result.dryRun ? "Required npm setup: Trusted Publisher connection" : "Required repository secret: not needed for dry run",
     result.requiredBrowserStoreCredentialNames ? `Required browser-store secrets: ${result.requiredBrowserStoreCredentialNames.join(", ")}` : "Required browser-store secrets: not needed for manual browser handoff",
     "Command:",
     result.command,
@@ -17927,7 +17929,9 @@ function buildGuardianReleaseSecretSetup() {
     schema_version: "contextecf/project-guardian-release-secret-setup/v1",
     cli_version: GUARDIAN_CLI_VERSION,
     repository: GUARDIAN_RELEASE_REPOSITORY,
-    requiredForPublish: "NPM_TOKEN",
+    defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+    requiredForPublish: "npm_trusted_publisher_connection",
+    tokenFallbackCredentialName: "NPM_TOKEN",
     requiredForBrowserStoreApi: GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES,
     githubActionsSecretUrl: `https://github.com/${GUARDIAN_RELEASE_REPOSITORY}/settings/secrets/actions/new`,
     commands: {
@@ -17961,10 +17965,11 @@ function buildGuardianReleaseSecretSetup() {
       })
     },
     boundaries: [
-      "NPM_TOKEN belongs only in GitHub Actions repository secrets for guarded dry_run=false npm publication.",
+      "npm Trusted Publishing is the default Guardian release path and uses this GitHub Actions workflow identity.",
+      "NPM_TOKEN is a fallback credential only; when used, it belongs only in GitHub Actions repository secrets for guarded dry_run=false npm publication.",
       "Chrome Web Store API OAuth values belong only in GitHub Actions repository secrets for guarded browser_store_publish=api upload/submission.",
       "Do not paste npm tokens, OTP values, .npmrc contents, signing keys, browser-store credentials, raw prompts, raw responses, private policy packs, or customer content into chat, PR bodies, release evidence, or CLI output.",
-      "Use dry_run=true before dry_run=false; dry-run dispatch does not require NPM_TOKEN.",
+      "Use dry_run=true before dry_run=false; dry-run dispatch does not require npm publish credentials.",
       "Adding NPM_TOKEN enables the npm preview publish lane only; it does not close signed-installer, browser-store, high-risk desktop, or autonomous app production gates.",
       "Chrome Web Store API secrets enable browser update upload/submission only; official review approval evidence is still required for production browser-store claims."
     ],
@@ -17980,7 +17985,8 @@ function renderGuardianReleaseSecretSetup(result, flags) {
   return `${[
     "Project Guardian Release Secret Setup",
     `Repository: ${result.repository}`,
-    `Required for npm publish: ${result.requiredForPublish}`,
+    "Default npm publish setup: Trusted Publisher connection",
+    `Fallback npm publish secret: ${result.tokenFallbackCredentialName}`,
     `Required for Chrome Web Store API: ${result.requiredForBrowserStoreApi.join(", ")}`,
     `GitHub Actions secret page: ${result.githubActionsSecretUrl}`,
     "NPM publish secret:",
@@ -18031,7 +18037,8 @@ function buildGuardianReleaseChecklist(releaseVersion) {
       browserStoreHandoff: "guardian release browser-store",
       readiness: "guardian readiness"
     },
-    requiredRepositoryCredentialName: "NPM_TOKEN",
+    defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+    tokenFallbackCredentialName: "NPM_TOKEN",
     evidenceOutputs: [
       "release/evidence/guardian-release-dispatch-summary.json",
       "release/evidence/guardian-npm-publish-execution-summary.json",
@@ -18048,7 +18055,8 @@ function buildGuardianReleaseChecklist(releaseVersion) {
     boundaries: [
       "This checklist is an operator command surface for Guardian preview releases; it is not production-gate proof.",
       "Run the dry-run dispatch before any dry_run=false publish dispatch.",
-      "dry_run=false requires NPM_TOKEN in GitHub Actions repository secrets and must not print npm tokens, OTP values, or .npmrc contents.",
+      "dry_run=false defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+      "The token fallback route remains available with publish_auth=token and requires NPM_TOKEN in GitHub Actions repository secrets.",
       "The checklist does not sign native installers, submit browser-store packages, execute high-risk desktop actions, or enable autonomous local app execution.",
       "Full production claims remain blocked until every not-proven production gate has real validated external evidence."
     ],
@@ -18086,7 +18094,7 @@ function buildGuardianReleaseFlow(releaseVersion) {
       },
       {
         id: "verify-secrets",
-        label: "Verify npm publish secret setup",
+        label: "Verify npm Trusted Publisher setup or token fallback",
         command: "guardian release secrets",
         credentialRequired: false
       },
@@ -18100,7 +18108,7 @@ function buildGuardianReleaseFlow(releaseVersion) {
         id: "publish-dispatch",
         label: "Run the guarded publish dispatch after dry-run evidence passes",
         command: publishDispatch,
-        credentialRequired: true
+        credentialRequired: false
       },
       {
         id: "verify-public-release",
@@ -18136,7 +18144,8 @@ function buildGuardianReleaseFlow(releaseVersion) {
     })),
     boundaries: [
       "This release flow is copy-paste operator guidance only; it is not release evidence or production-gate proof.",
-      "Publish dispatch requires NPM_TOKEN in GitHub Actions repository secrets and must not print npm tokens, OTP values, or .npmrc contents.",
+      "Publish dispatch defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+      "The token fallback route remains available with publish_auth=token and requires NPM_TOKEN in GitHub Actions repository secrets.",
       "Run the dry-run dispatch before the guarded dry_run=false publish dispatch.",
       "Public npm preview publication and local install smoke prove the CLI preview lane only.",
       "Signed native installers, high-risk desktop action execution, and autonomous local app execution remain separate not-proven production gates until real external evidence is collected and validated."
@@ -18185,7 +18194,8 @@ function renderGuardianReleaseChecklist(result, flags) {
     `Release: ${result.releaseVersion}`,
     `Repository: ${result.repository}`,
     `Status: ${result.status}`,
-    `Required repository credential: ${result.requiredRepositoryCredentialName}`,
+    "Default npm publish setup: Trusted Publisher connection",
+    `Fallback npm publish secret: ${result.tokenFallbackCredentialName}`,
     "1. Secret setup:",
     result.operatorCommands.secretSetup,
     "2. Dry-run dispatch:",
@@ -23500,16 +23510,17 @@ function openUrlInDefaultBrowser(url2, options = {}) {
     });
   });
 }
-var GUARDIAN_CLI_VERSION, GUARDIAN_PROFILE_SCHEMA_VERSION, GUARDIAN_NPM_PACKAGE_NAME, GUARDIAN_NPM_REGISTRY, GUARDIAN_GLOBAL_INSTALL_COMMAND, GUARDIAN_NPX_SETUP_COMMAND, GUARDIAN_FIRST_RUN_COMMAND, GUARDIAN_OPEN_CONTROL_TOWER_COMMAND, GUARDIAN_HALO_CHROME_EXTENSION_ID, GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL, GUARDIAN_RELEASE_DISPATCH_WORKFLOW, GUARDIAN_RELEASE_REPOSITORY, GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES, GUARDIAN_DEFAULT_CONTROL_TOWER_URL, GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ENV, GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ID_ENV, GUARDIAN_SQLITE_PAGE_ENCRYPTION_KEY_ENV, GUARDIAN_SQLITE_PAGE_ENCRYPTION_KEY_ID_ENV, GUARDIAN_DESKTOP_ADAPTER_SIMULATE_OPEN_ENV, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_ID, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_VERSION, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_PROOF_SCHEMA_VERSION, GUARDIAN_SERVICE_PROOF_SCHEMA_VERSION, GUARDIAN_OS_KEY_STORAGE_PROOF_SCHEMA_VERSION, GUARDIAN_WINDOWS_NATIVE_HOST_REGISTRY_PROOF_SCHEMA_VERSION, PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION2, PROMPT_COACH_MODES, DEFAULT_PROMPT_COACH_DAILY_SOFT_CARD_LIMIT, GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG, GUARDIAN_POSTURE_PROFILE_IDS, GUARDIAN_POSTURE_PROFILE_CATALOG, GUARDIAN_POLICY_PACK_MARKETPLACE_CATALOG, GUARDIAN_PROVIDER_IDS, GUARDIAN_SOURCE_TYPES, GUARDIAN_NOT_PROVEN_PRODUCTION_GATES, DEFAULT_POLICY_PACKS, GUARDIAN_BRIDGE_CONFIG_STORAGE_KEY, GUARDIAN_BRIDGE_TOKEN_STORAGE_KEY, GUARDIAN_BRIDGE_CONFIG_SCHEMA_VERSION, GUARDIAN_NATIVE_HOST_NAME, MCP_CLIENTS, NATIVE_HOST_BROWSERS, HELP_TEXT, ADVANCED_HELP_TEXT, normalizeGuardianPreferences, GUARDIAN_DATA_FILE_NAMES, GUARDIAN_DATA_DIR_NAMES, GUARDIAN_MIN_SUPPORTED_NODE_VERSION;
+var GUARDIAN_CLI_VERSION, GUARDIAN_PROFILE_SCHEMA_VERSION, GUARDIAN_NPM_PACKAGE_NAME, GUARDIAN_NPM_REGISTRY, GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH, GUARDIAN_GLOBAL_INSTALL_COMMAND, GUARDIAN_NPX_SETUP_COMMAND, GUARDIAN_FIRST_RUN_COMMAND, GUARDIAN_OPEN_CONTROL_TOWER_COMMAND, GUARDIAN_HALO_CHROME_EXTENSION_ID, GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL, GUARDIAN_RELEASE_DISPATCH_WORKFLOW, GUARDIAN_RELEASE_REPOSITORY, GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES, GUARDIAN_DEFAULT_CONTROL_TOWER_URL, GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ENV, GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ID_ENV, GUARDIAN_SQLITE_PAGE_ENCRYPTION_KEY_ENV, GUARDIAN_SQLITE_PAGE_ENCRYPTION_KEY_ID_ENV, GUARDIAN_DESKTOP_ADAPTER_SIMULATE_OPEN_ENV, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_ID, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_VERSION, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_PROOF_SCHEMA_VERSION, GUARDIAN_SERVICE_PROOF_SCHEMA_VERSION, GUARDIAN_OS_KEY_STORAGE_PROOF_SCHEMA_VERSION, GUARDIAN_WINDOWS_NATIVE_HOST_REGISTRY_PROOF_SCHEMA_VERSION, PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION2, PROMPT_COACH_MODES, DEFAULT_PROMPT_COACH_DAILY_SOFT_CARD_LIMIT, GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG, GUARDIAN_POSTURE_PROFILE_IDS, GUARDIAN_POSTURE_PROFILE_CATALOG, GUARDIAN_POLICY_PACK_MARKETPLACE_CATALOG, GUARDIAN_PROVIDER_IDS, GUARDIAN_SOURCE_TYPES, GUARDIAN_NOT_PROVEN_PRODUCTION_GATES, DEFAULT_POLICY_PACKS, GUARDIAN_BRIDGE_CONFIG_STORAGE_KEY, GUARDIAN_BRIDGE_TOKEN_STORAGE_KEY, GUARDIAN_BRIDGE_CONFIG_SCHEMA_VERSION, GUARDIAN_NATIVE_HOST_NAME, MCP_CLIENTS, NATIVE_HOST_BROWSERS, HELP_TEXT, ADVANCED_HELP_TEXT, normalizeGuardianPreferences, GUARDIAN_DATA_FILE_NAMES, GUARDIAN_DATA_DIR_NAMES, GUARDIAN_MIN_SUPPORTED_NODE_VERSION;
 var init_runtime = __esm({
   "packages/guardian-cli/src/runtime.ts"() {
     "use strict";
     init_src();
     init_src2();
-    GUARDIAN_CLI_VERSION = "0.1.8";
+    GUARDIAN_CLI_VERSION = "0.1.9";
     GUARDIAN_PROFILE_SCHEMA_VERSION = "contextecf/project-guardian-profile/v1";
     GUARDIAN_NPM_PACKAGE_NAME = "@contextecf/guardian-cli";
     GUARDIAN_NPM_REGISTRY = "https://registry.npmjs.org/";
+    GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH = "trusted_publisher";
     GUARDIAN_GLOBAL_INSTALL_COMMAND = `npm install -g ${GUARDIAN_NPM_PACKAGE_NAME}`;
     GUARDIAN_NPX_SETUP_COMMAND = `npx ${GUARDIAN_NPM_PACKAGE_NAME}@latest setup`;
     GUARDIAN_FIRST_RUN_COMMAND = "guardian setup";
@@ -24515,7 +24526,7 @@ function detectRisk(promptManifest, policyPacks) {
     risks.add("healthcare_data");
     matchedPolicyRefs.push("guardian:builtin:healthcare-data");
   }
-  if (WORK_PATTERN.test(prompt)) {
+  if (containsSensitiveWorkData(prompt)) {
     risks.add("work_data");
     matchedPolicyRefs.push("guardian:builtin:work-data");
   }
@@ -24527,7 +24538,7 @@ function detectRisk(promptManifest, policyPacks) {
     risks.add("destructive_action");
     matchedPolicyRefs.push("guardian:builtin:destructive-action");
   }
-  if (promptManifest.source_permissions_snapshot.length === 0 && /\b(this|that|them|it|latest)\b/i.test(prompt)) {
+  if (shouldOfferContextHelp(promptManifest, policyPacks)) {
     risks.add("insufficient_context");
     matchedPolicyRefs.push("guardian:builtin:context-sufficiency");
   }
@@ -24854,6 +24865,19 @@ function containsFullSsn(prompt) {
   SSN_PATTERN.lastIndex = 0;
   return SSN_PATTERN.test(prompt);
 }
+function containsSensitiveWorkData(prompt) {
+  return WORK_SENSITIVE_PATTERN.test(prompt) || WORK_ENTITY_CONTEXT_PATTERN.test(prompt) || WORK_CONTEXT_ENTITY_PATTERN.test(prompt);
+}
+function shouldOfferContextHelp(promptManifest, policyPacks) {
+  if (promptManifest.source_permissions_snapshot.length > 0) {
+    return false;
+  }
+  if (effectivePromptCoachMode(policyPacks) !== "hands_on") {
+    return false;
+  }
+  const prompt = promptManifest.prompt_text;
+  return CONTEXT_HELP_ACTION_PATTERN.test(prompt) && CONTEXT_HELP_REFERENCE_PATTERN.test(prompt);
+}
 function hasFullSsnRisk(policyRefs) {
   return policyRefs.includes("guardian:builtin:ssn-full-value");
 }
@@ -24952,7 +24976,7 @@ function digest2(value) {
 function isPresent(value) {
   return value !== void 0;
 }
-var DEFAULT_RISK_THRESHOLDS, POLICY_PACK_PRESET_VERSION, HIGH_RISK_TERMS, SECRET_PATTERNS, EMAIL_PATTERN, SSN_PATTERN, SSN_CONTEXT_PATTERN, FINANCIAL_PATTERN, HEALTHCARE_PATTERN, WORK_PATTERN, PROMPT_INJECTION_PATTERN, GUARDIAN_POLICY_PACK_PRESETS;
+var DEFAULT_RISK_THRESHOLDS, POLICY_PACK_PRESET_VERSION, HIGH_RISK_TERMS, SECRET_PATTERNS, EMAIL_PATTERN, SSN_PATTERN, SSN_CONTEXT_PATTERN, FINANCIAL_PATTERN, HEALTHCARE_PATTERN, WORK_SENSITIVE_PATTERN, WORK_ENTITY_CONTEXT_PATTERN, WORK_CONTEXT_ENTITY_PATTERN, PROMPT_INJECTION_PATTERN, CONTEXT_HELP_ACTION_PATTERN, CONTEXT_HELP_REFERENCE_PATTERN, GUARDIAN_POLICY_PACK_PRESETS;
 var init_src3 = __esm({
   "packages/personal-fabric-runtime/src/index.ts"() {
     "use strict";
@@ -24977,8 +25001,12 @@ var init_src3 = __esm({
     SSN_CONTEXT_PATTERN = /\b(ssn|social security(?: number)?)\b/i;
     FINANCIAL_PATTERN = /\b(bank|wire|routing number|account number|payroll|invoice|revenue|forecast|contract value|credit card)\b/i;
     HEALTHCARE_PATTERN = /\b(patient|diagnosis|medication|hipaa|medical record|prescription|clinical)\b/i;
-    WORK_PATTERN = /\b(contract|client|customer|salesforce|pipeline|renewal|board|employee|confidential)\b/i;
+    WORK_SENSITIVE_PATTERN = /\b(confidential|internal|non[-\s]?public|private|proprietary|salesforce|pipeline|renewal)\b/i;
+    WORK_ENTITY_CONTEXT_PATTERN = /\b(?:client|customer|employee|vendor|partner)\b[\s\S]{0,80}\b(?:contract|account|record|data|list|pricing|renewal|pipeline|payroll|confidential|private|proprietary)\b/i;
+    WORK_CONTEXT_ENTITY_PATTERN = /\b(?:contract|account|record|data|list|pricing|renewal|pipeline|payroll|confidential|private|proprietary)\b[\s\S]{0,80}\b(?:client|customer|employee|vendor|partner)\b/i;
     PROMPT_INJECTION_PATTERN = /\b(ignore previous instructions|system prompt|developer message|jailbreak|exfiltrate|bypass policy|reveal hidden)\b/i;
+    CONTEXT_HELP_ACTION_PATTERN = /\b(summarize|summarise|analyze|analyse|review|compare|extract|rewrite|improve|turn|convert|update)\b/i;
+    CONTEXT_HELP_REFERENCE_PATTERN = /\b(this|that|these|those|attached|uploaded|latest version|current version|file|document|deck|slide|email|thread|conversation|transcript|meeting|pdf)\b/i;
     GUARDIAN_POLICY_PACK_PRESETS = [
       createPolicyPackPreset({
         pack_id: "privacy-first",
@@ -26630,8 +26658,12 @@ async function handleRequest(input2) {
   }
   if (input2.request.method === "GET" && activityUrl?.pathname === "/v1/guardian/activity") {
     const filter = parseActivityFilter(activityUrl.searchParams.get("filter") ?? "all");
-    const receipts = (await input2.store.listReceipts()).slice().sort((left, right) => right.created_at.localeCompare(left.created_at)).slice(0, CONTROL_TOWER_RECEIPT_LIMIT);
-    const result2 = processGuardianControlTowerActivityRequest(receipts, filter);
+    const [receipts, searchGraph] = await Promise.all([
+      input2.store.listReceipts(),
+      input2.store.searchGraph({ limit: 100 })
+    ]);
+    const recentReceipts = receipts.slice().sort((left, right) => right.created_at.localeCompare(left.created_at)).slice(0, CONTROL_TOWER_RECEIPT_LIMIT);
+    const result2 = processGuardianControlTowerActivityRequest(recentReceipts, filter, searchGraph);
     writeJson(input2.response, result2.statusCode, result2.body);
     return;
   }
@@ -26864,7 +26896,7 @@ function processGuardianDaemonHealthRequest(input2) {
     }
   };
 }
-function processGuardianControlTowerActivityRequest(receipts, filterValue) {
+function processGuardianControlTowerActivityRequest(receipts, filterValue, searchGraph = { nodes: [], edges: [] }) {
   const filter = parseActivityFilter(filterValue);
   return {
     statusCode: 200,
@@ -26874,7 +26906,7 @@ function processGuardianControlTowerActivityRequest(receipts, filterValue) {
       filter,
       raw_content_included: false,
       token_printed: false,
-      activities: buildActivityItems(receipts, filter)
+      activities: buildActivityItems(receipts, filter, searchGraph)
     }
   };
 }
@@ -28729,7 +28761,7 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
               <div class="metric-detail">${escapeHtml(metric.detail)}</div>
             </article>`
   ).join("\n");
-  const activityFeedHtml = renderActivityFeed(recentReceipts);
+  const activityFeedHtml = renderActivityFeed(recentReceipts, searchGraph);
   const postureCardsHtml = GUARDIAN_POSTURE_PROFILE_CATALOG.map((postureProfile) => {
     const selected = profile.posture_profile.selected === postureProfile.id;
     const icon = postureProfile.id === "calm" ? "&#9790;" : postureProfile.id === "balanced" ? "&#9878;" : postureProfile.id === "guided" ? "&#127891;" : postureProfile.id === "high_assurance" ? "&#128274;" : "&#9881;";
@@ -29898,7 +29930,7 @@ ${adminPanelsHtml}
             time.setAttribute('data-guardian-local-time', '');
             time.textContent = formatLocalTime(activity.created_at);
             time.title = 'Your local time: ' + formatAbsoluteLocalTime(activity.created_at) + ' \xB7 Stored by Guardian as ' + activity.created_at;
-            meta.append(time, ' \xB7 ' + (activity.receipt_type || 'receipt'));
+            meta.append(time, ' \xB7 ' + (activity.meta_detail || activity.receipt_type || 'receipt'));
           } else {
             meta.textContent = activity.meta;
           }
@@ -30434,7 +30466,7 @@ function renderReceiptRows(receipts) {
   }
   return receipts.map((receipt) => renderReceiptRow(receipt)).join("\n");
 }
-function renderActivityFeed(receipts) {
+function renderActivityFeed(receipts, searchGraph = { nodes: [], edges: [] }) {
   if (receipts.length === 0) {
     return `          <article class="activity-card allow" data-activity-state="allowed">
             <div class="activity-icon">&#9989;</div>
@@ -30445,7 +30477,8 @@ function renderActivityFeed(receipts) {
             <div class="activity-badge allow">READY</div>
           </article>`;
   }
-  return receipts.map((receipt) => renderActivityCard(receipt)).join("\n");
+  const attribution = buildActivityAttributionIndex(searchGraph);
+  return receipts.map((receipt) => renderActivityCard(receipt, attribution)).join("\n");
 }
 function parseActivityFilter(value) {
   if (value === "blocked" || value === "flagged" || value === "allowed") {
@@ -30453,35 +30486,146 @@ function parseActivityFilter(value) {
   }
   return "all";
 }
-function buildActivityItems(receipts, filter) {
+function buildActivityItems(receipts, filter, searchGraph = { nodes: [], edges: [] }) {
+  const attribution = buildActivityAttributionIndex(searchGraph);
   return receipts.filter((receipt) => {
     const group = activityFilterGroup(receipt.disposition);
     return filter === "all" || group === filter;
-  }).map((receipt) => ({
-    id: receipt.receipt_id,
-    state: activityFilterGroup(receipt.disposition),
-    tone: activityTone(receipt.disposition),
-    icon: activityPlainIcon(receipt.disposition),
-    title: receipt.summary,
-    created_at: receipt.created_at,
-    receipt_type: receipt.receipt_type,
-    meta: `${formatActivityTime(receipt.created_at)} \xB7 ${receipt.receipt_type}`,
-    label: activityLabel(receipt.disposition),
-    raw_content_included: false
-  }));
+  }).map((receipt) => {
+    const detail = activityDetailForReceipt(receipt, attribution);
+    return {
+      id: receipt.receipt_id,
+      state: activityFilterGroup(receipt.disposition),
+      tone: activityTone(receipt.disposition),
+      icon: activityPlainIcon(receipt.disposition),
+      title: receipt.summary,
+      created_at: receipt.created_at,
+      receipt_type: receipt.receipt_type,
+      source_label: detail.surfaceLabel,
+      provider_label: detail.providerLabel,
+      meta_detail: detail.metaDetail,
+      meta: `${formatActivityTime(receipt.created_at)} \xB7 ${detail.metaDetail}`,
+      label: activityLabel(receipt.disposition),
+      raw_content_included: false
+    };
+  });
 }
-function renderActivityCard(receipt) {
+function renderActivityCard(receipt, attribution = /* @__PURE__ */ new Map()) {
   const tone = activityTone(receipt.disposition);
   const filterGroup = activityFilterGroup(receipt.disposition);
+  const detail = activityDetailForReceipt(receipt, attribution);
   return `          <article class="activity-card ${tone}" data-activity-state="${escapeHtml(filterGroup)}">
             <div class="activity-icon">${activityIcon(receipt.disposition)}</div>
             <div>
               <div class="activity-title">${escapeHtml(receipt.summary)}</div>
-              <div class="activity-meta">${renderLocalTime(receipt.created_at)} \xB7 ${escapeHtml(receipt.receipt_type)}</div>
+              <div class="activity-meta">${renderLocalTime(receipt.created_at)} \xB7 ${escapeHtml(detail.metaDetail)}</div>
             </div>
             <div class="activity-badge ${tone}">${escapeHtml(activityLabel(receipt.disposition))}</div>
           </article>`;
 }
+function buildActivityAttributionIndex(searchGraph) {
+  const index = /* @__PURE__ */ new Map();
+  for (const node of searchGraph.nodes) {
+    if (node.node_type !== "prompt" || !node.summary) {
+      continue;
+    }
+    const attribution = parsePromptNodeAttribution(node.summary);
+    if (!attribution) {
+      continue;
+    }
+    for (const evidenceRef of node.evidence_refs) {
+      if (evidenceRef.startsWith("receipt:")) {
+        index.set(evidenceRef, attribution);
+      }
+    }
+  }
+  return index;
+}
+function parsePromptNodeAttribution(summary) {
+  const match = /^Prompt sent from ([a-z_]+) to ([a-z_]+)\.$/.exec(summary.trim());
+  if (!match) {
+    return null;
+  }
+  return {
+    surfaceLabel: friendlySurfaceLabel(match[1]),
+    providerLabel: friendlyProviderLabel(match[2])
+  };
+}
+function activityDetailForReceipt(receipt, attribution) {
+  const graphAttribution = attribution.get(receipt.receipt_id);
+  const surfaceLabel = graphAttribution?.surfaceLabel ?? (receipt.policy_basis.some((basis) => basis.includes("guardian:mcp:")) ? "MCP" : void 0);
+  const providerLabel = graphAttribution?.providerLabel;
+  const parts = [
+    surfaceLabel,
+    providerLabel,
+    friendlyReceiptTypeLabel(receipt.receipt_type)
+  ].filter((part) => Boolean(part));
+  return {
+    surfaceLabel,
+    providerLabel,
+    metaDetail: parts.join(" \xB7 ") || friendlyReceiptTypeLabel(receipt.receipt_type)
+  };
+}
+function friendlySurfaceLabel(surface) {
+  switch (surface) {
+    case "browser":
+      return "Browser";
+    case "mcp":
+      return "MCP";
+    case "ide":
+      return "IDE";
+    case "cli":
+      return "CLI";
+    case "desktop":
+      return "Desktop app";
+    case "rest":
+      return "API";
+    case "voice":
+      return "Voice";
+    default:
+      return void 0;
+  }
+}
+function friendlyProviderLabel(provider) {
+  switch (provider) {
+    case "chatgpt":
+      return "ChatGPT";
+    case "claude":
+      return "Claude";
+    case "gemini":
+      return "Gemini";
+    case "perplexity":
+      return "Perplexity";
+    case "cursor":
+      return "Cursor";
+    case "windsurf":
+      return "Windsurf";
+    case "openrouter":
+      return "OpenRouter";
+    case "local_model":
+      return "Local AI";
+    case "unknown":
+      return void 0;
+    default:
+      return provider ? provider.split(/[_-]+/g).filter(Boolean).map((part) => part[0]?.toUpperCase() + part.slice(1)).join(" ") : void 0;
+  }
+}
+function friendlyReceiptTypeLabel(receiptType) {
+  switch (receiptType) {
+    case "prompt":
+      return "Prompt check";
+    case "policy":
+      return "Policy receipt";
+    case "context":
+      return "Context receipt";
+    case "local_action":
+      return "Local action";
+    case "learning":
+      return "Learning receipt";
+    case "output":
+      return "Output check";
+  }
+}
 function renderReceiptRow(receipt) {
   const policyBasis = receipt.policy_basis.length > 0 ? receipt.policy_basis.join(", ") : "none recorded";
   return `          <tr class="receipt-row" data-receipt-row data-receipt-id="${escapeHtml(receipt.receipt_id)}"><th scope="row"><code>${escapeHtml(receipt.receipt_id)}</code></th><td>${escapeHtml(receipt.receipt_type)}</td><td>${escapeHtml(receipt.disposition)}</td><td><details><summary>${escapeHtml(receipt.summary)}</summary><dl><dt>Transaction</dt><dd><code>${escapeHtml(receipt.transaction_id)}</code></dd><dt>Created</dt><dd>${renderLocalTime(receipt.created_at)}</dd><dt>Policy basis</dt><dd>${escapeHtml(policyBasis)}</dd><dt>Receipt hash</dt><dd><code>${escapeHtml(receipt.receipt_hash)}</code></dd><dt>Raw content</dt><dd>${receipt.raw_content_included ? "included" : "metadata-only"}</dd></dl></details></td></tr>`;

package/dist/packages/guardian-cli/src/index.js

@@ -16275,10 +16275,11 @@ function cloneList(values) {
 }
 
 // packages/guardian-cli/src/runtime.ts
-var GUARDIAN_CLI_VERSION = "0.1.8";
+var GUARDIAN_CLI_VERSION = "0.1.9";
 var GUARDIAN_PROFILE_SCHEMA_VERSION = "contextecf/project-guardian-profile/v1";
 var GUARDIAN_NPM_PACKAGE_NAME = "@contextecf/guardian-cli";
 var GUARDIAN_NPM_REGISTRY = "https://registry.npmjs.org/";
+var GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH = "trusted_publisher";
 var GUARDIAN_GLOBAL_INSTALL_COMMAND = `npm install -g ${GUARDIAN_NPM_PACKAGE_NAME}`;
 var GUARDIAN_NPX_SETUP_COMMAND = `npx ${GUARDIAN_NPM_PACKAGE_NAME}@latest setup`;
 var GUARDIAN_FIRST_RUN_COMMAND = "guardian setup";
@@ -17612,14 +17613,16 @@ function buildGuardianDistributionReadiness(npmPreviewReady) {
       workflow: GUARDIAN_RELEASE_DISPATCH_WORKFLOW,
       dryRunCommand: buildGuardianReleaseDispatchCommand(true),
       publishCommand: buildGuardianReleaseDispatchCommand(false),
-      requiredPublishCredentialName: "NPM_TOKEN",
+      defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+      tokenFallbackCredentialName: "NPM_TOKEN",
       channels: ["all", "npm", "browser", "evidence"],
       defaultDockerSmoke: true,
       provenance: "github_actions_oidc_supported",
       status: npmPreviewReady ? "ready_for_dispatch_after_preview_evidence" : "blocked_until_preview_release_evidence_passes",
       boundaries: [
         "Use dry_run=true before public publication.",
-        "dry_run=false requires the repository secret NPM_TOKEN and must not print npm tokens, OTP values, or .npmrc contents.",
+        "dry_run=false defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+        "The token fallback route remains available with publish_auth=token and requires the repository secret NPM_TOKEN.",
         "The workflow can publish the npm preview package, upload evidence, submit future Chrome Web Store updates for review when browser_store_publish=api, and run public install smokes; it does not sign native installers or prove future browser-store approval.",
         "GitHub Actions OIDC/provenance applies to CI release context; manual local publishes are recorded separately and should not claim CI provenance."
       ]
@@ -17641,7 +17644,7 @@ function buildGuardianReleaseDispatchCommand(dryRun) {
   });
 }
 function buildGuardianReleaseDispatchCommandFor(input) {
-  const publishAuth = input.publishAuth ?? "token";
+  const publishAuth = input.publishAuth ?? GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
   const browserStorePublish = input.browserStorePublish ?? "manual";
   return [
     `gh workflow run ${GUARDIAN_RELEASE_DISPATCH_WORKFLOW} \\`,
@@ -17757,7 +17760,7 @@ async function runReleaseCommand(argv, flags, options) {
   }
   const dryRun = flags.has("publish") ? false : booleanFlag(flags, "dry-run", true);
   const runDockerSmoke = booleanFlag(flags, "run-docker-smoke", true);
-  const publishAuth = stringFlag(flags, "publish-auth") ?? "token";
+  const publishAuth = stringFlag(flags, "publish-auth") ?? GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
   if (!isValidReleasePublishAuth(publishAuth)) {
     write(stderr, "Invalid --publish-auth. Expected one of: token, trusted_publisher.\n");
     return 1;
@@ -17885,7 +17888,7 @@ function renderGuardianReleaseDispatchCommand(result, flags) {
     `Docker smoke: ${result.runDockerSmoke ? "yes" : "no"}`,
     `Publish auth: ${result.publishAuth}`,
     `Browser store publish: ${result.browserStorePublish}`,
-    result.requiredPublishCredentialName ? `Required repository secret: ${result.requiredPublishCredentialName}` : "Required repository secret: not needed for dry run",
+    result.requiredPublishCredentialName ? `Required repository secret: ${result.requiredPublishCredentialName}` : result.publishAuth === "trusted_publisher" && !result.dryRun ? "Required npm setup: Trusted Publisher connection" : "Required repository secret: not needed for dry run",
     result.requiredBrowserStoreCredentialNames ? `Required browser-store secrets: ${result.requiredBrowserStoreCredentialNames.join(", ")}` : "Required browser-store secrets: not needed for manual browser handoff",
     "Command:",
     result.command,
@@ -17994,7 +17997,9 @@ function buildGuardianReleaseSecretSetup() {
     schema_version: "contextecf/project-guardian-release-secret-setup/v1",
     cli_version: GUARDIAN_CLI_VERSION,
     repository: GUARDIAN_RELEASE_REPOSITORY,
-    requiredForPublish: "NPM_TOKEN",
+    defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+    requiredForPublish: "npm_trusted_publisher_connection",
+    tokenFallbackCredentialName: "NPM_TOKEN",
     requiredForBrowserStoreApi: GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES,
     githubActionsSecretUrl: `https://github.com/${GUARDIAN_RELEASE_REPOSITORY}/settings/secrets/actions/new`,
     commands: {
@@ -18028,10 +18033,11 @@ function buildGuardianReleaseSecretSetup() {
       })
     },
     boundaries: [
-      "NPM_TOKEN belongs only in GitHub Actions repository secrets for guarded dry_run=false npm publication.",
+      "npm Trusted Publishing is the default Guardian release path and uses this GitHub Actions workflow identity.",
+      "NPM_TOKEN is a fallback credential only; when used, it belongs only in GitHub Actions repository secrets for guarded dry_run=false npm publication.",
       "Chrome Web Store API OAuth values belong only in GitHub Actions repository secrets for guarded browser_store_publish=api upload/submission.",
       "Do not paste npm tokens, OTP values, .npmrc contents, signing keys, browser-store credentials, raw prompts, raw responses, private policy packs, or customer content into chat, PR bodies, release evidence, or CLI output.",
-      "Use dry_run=true before dry_run=false; dry-run dispatch does not require NPM_TOKEN.",
+      "Use dry_run=true before dry_run=false; dry-run dispatch does not require npm publish credentials.",
       "Adding NPM_TOKEN enables the npm preview publish lane only; it does not close signed-installer, browser-store, high-risk desktop, or autonomous app production gates.",
       "Chrome Web Store API secrets enable browser update upload/submission only; official review approval evidence is still required for production browser-store claims."
     ],
@@ -18047,7 +18053,8 @@ function renderGuardianReleaseSecretSetup(result, flags) {
   return `${[
     "Project Guardian Release Secret Setup",
     `Repository: ${result.repository}`,
-    `Required for npm publish: ${result.requiredForPublish}`,
+    "Default npm publish setup: Trusted Publisher connection",
+    `Fallback npm publish secret: ${result.tokenFallbackCredentialName}`,
     `Required for Chrome Web Store API: ${result.requiredForBrowserStoreApi.join(", ")}`,
     `GitHub Actions secret page: ${result.githubActionsSecretUrl}`,
     "NPM publish secret:",
@@ -18098,7 +18105,8 @@ function buildGuardianReleaseChecklist(releaseVersion) {
       browserStoreHandoff: "guardian release browser-store",
       readiness: "guardian readiness"
     },
-    requiredRepositoryCredentialName: "NPM_TOKEN",
+    defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+    tokenFallbackCredentialName: "NPM_TOKEN",
     evidenceOutputs: [
       "release/evidence/guardian-release-dispatch-summary.json",
       "release/evidence/guardian-npm-publish-execution-summary.json",
@@ -18115,7 +18123,8 @@ function buildGuardianReleaseChecklist(releaseVersion) {
     boundaries: [
       "This checklist is an operator command surface for Guardian preview releases; it is not production-gate proof.",
       "Run the dry-run dispatch before any dry_run=false publish dispatch.",
-      "dry_run=false requires NPM_TOKEN in GitHub Actions repository secrets and must not print npm tokens, OTP values, or .npmrc contents.",
+      "dry_run=false defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+      "The token fallback route remains available with publish_auth=token and requires NPM_TOKEN in GitHub Actions repository secrets.",
       "The checklist does not sign native installers, submit browser-store packages, execute high-risk desktop actions, or enable autonomous local app execution.",
       "Full production claims remain blocked until every not-proven production gate has real validated external evidence."
     ],
@@ -18153,7 +18162,7 @@ function buildGuardianReleaseFlow(releaseVersion) {
       },
       {
         id: "verify-secrets",
-        label: "Verify npm publish secret setup",
+        label: "Verify npm Trusted Publisher setup or token fallback",
         command: "guardian release secrets",
         credentialRequired: false
       },
@@ -18167,7 +18176,7 @@ function buildGuardianReleaseFlow(releaseVersion) {
         id: "publish-dispatch",
         label: "Run the guarded publish dispatch after dry-run evidence passes",
         command: publishDispatch,
-        credentialRequired: true
+        credentialRequired: false
       },
       {
         id: "verify-public-release",
@@ -18203,7 +18212,8 @@ function buildGuardianReleaseFlow(releaseVersion) {
     })),
     boundaries: [
       "This release flow is copy-paste operator guidance only; it is not release evidence or production-gate proof.",
-      "Publish dispatch requires NPM_TOKEN in GitHub Actions repository secrets and must not print npm tokens, OTP values, or .npmrc contents.",
+      "Publish dispatch defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+      "The token fallback route remains available with publish_auth=token and requires NPM_TOKEN in GitHub Actions repository secrets.",
       "Run the dry-run dispatch before the guarded dry_run=false publish dispatch.",
       "Public npm preview publication and local install smoke prove the CLI preview lane only.",
       "Signed native installers, high-risk desktop action execution, and autonomous local app execution remain separate not-proven production gates until real external evidence is collected and validated."
@@ -18252,7 +18262,8 @@ function renderGuardianReleaseChecklist(result, flags) {
     `Release: ${result.releaseVersion}`,
     `Repository: ${result.repository}`,
     `Status: ${result.status}`,
-    `Required repository credential: ${result.requiredRepositoryCredentialName}`,
+    "Default npm publish setup: Trusted Publisher connection",
+    `Fallback npm publish secret: ${result.tokenFallbackCredentialName}`,
     "1. Secret setup:",
     result.operatorCommands.secretSetup,
     "2. Dry-run dispatch:",
@@ -23582,6 +23593,7 @@ export {
   GUARDIAN_CLI_VERSION,
   GUARDIAN_CONTROL_TOWER_URL_ENV,
   GUARDIAN_DEFAULT_CONTROL_TOWER_URL,
+  GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
   GUARDIAN_DESKTOP_ADAPTER_SIMULATE_OPEN_ENV,
   GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_ID,
   GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_PROOF_SCHEMA_VERSION,

package/dist/packages/guardian-cli/src/runtime.d.ts

@@ -1,10 +1,11 @@
 import type { Writable } from 'node:stream';
 import { type PolicyPackMarketplaceManifest } from '@contextecf/personal-fabric-contracts';
 import { SQLitePersonalFabricStore, type PersonalFabricDataImportResult, type PersonalFabricMutableDataDeleteResult, type SQLitePersonalFabricBackupResult } from '@contextecf/personal-fabric-store';
-export declare const GUARDIAN_CLI_VERSION = "0.1.8";
+export declare const GUARDIAN_CLI_VERSION = "0.1.9";
 export declare const GUARDIAN_PROFILE_SCHEMA_VERSION = "contextecf/project-guardian-profile/v1";
 export declare const GUARDIAN_NPM_PACKAGE_NAME = "@contextecf/guardian-cli";
 export declare const GUARDIAN_NPM_REGISTRY = "https://registry.npmjs.org/";
+export declare const GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH = "trusted_publisher";
 export declare const GUARDIAN_GLOBAL_INSTALL_COMMAND = "npm install -g @contextecf/guardian-cli";
 export declare const GUARDIAN_NPX_SETUP_COMMAND = "npx @contextecf/guardian-cli@latest setup";
 export declare const GUARDIAN_FIRST_RUN_COMMAND = "guardian setup";
@@ -217,7 +218,9 @@ export interface GuardianReleaseSecretSetupResult {
     schema_version: 'contextecf/project-guardian-release-secret-setup/v1';
     cli_version: string;
     repository: typeof GUARDIAN_RELEASE_REPOSITORY;
-    requiredForPublish: 'NPM_TOKEN';
+    defaultPublishAuth: typeof GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+    requiredForPublish: 'npm_trusted_publisher_connection';
+    tokenFallbackCredentialName: 'NPM_TOKEN';
     requiredForBrowserStoreApi: typeof GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES;
     githubActionsSecretUrl: string;
     commands: {
@@ -250,7 +253,9 @@ export interface GuardianReleaseChecklistResult {
         browserStoreHandoff: string;
         readiness: string;
     };
-    requiredRepositoryCredentialName: 'NPM_TOKEN';
+    defaultPublishAuth: typeof GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+    requiredRepositoryCredentialName?: 'NPM_TOKEN';
+    tokenFallbackCredentialName: 'NPM_TOKEN';
     evidenceOutputs: string[];
     notProvenProductionGates: Array<{
         id: string;
@@ -616,7 +621,9 @@ export interface GuardianProductionReadinessStatus {
             workflow: typeof GUARDIAN_RELEASE_DISPATCH_WORKFLOW;
             dryRunCommand: string;
             publishCommand: string;
-            requiredPublishCredentialName: 'NPM_TOKEN';
+            defaultPublishAuth: typeof GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+            requiredPublishCredentialName?: 'NPM_TOKEN';
+            tokenFallbackCredentialName: 'NPM_TOKEN';
             channels: readonly ['all', 'npm', 'browser', 'evidence'];
             defaultDockerSmoke: true;
             provenance: 'github_actions_oidc_supported';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contextecf/guardian-cli",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Project Guardian local-first Personal Context Fabric CLI",
   "type": "module",
   "license": "UNLICENSED",