@greenarmor/ges 1.5.5 → 1.5.7

package/dist/commands/init.js

@@ -4,6 +4,7 @@ import { banner, divider, blank, success, error, warn, info, step, kv, label, BO
 import { PROJECT_TYPES, FRAMEWORKS, DEFAULT_FRAMEWORKS, GES_DIR, COMPLIANCE_DIR, SECURITY_DIR, CONTROLS_DIR, POLICIES_DIR, CHECKLISTS_DIR, DOCS_DIR, REPORTS_DIR, } from "@greenarmor/ges-core";
 import { CLI_VERSION } from "../utils/version.js";
 import { recordActivity } from "@greenarmor/ges-core";
+import { createGovernanceRecord, addGovernanceRecord } from "@greenarmor/ges-core";
 import { getPacksForProjectType, getPack, PRIVACY_COUNTRIES, getCountryByCode } from "@greenarmor/ges-policy-engine";
 import { generateComplianceDocs, generateSecurityDocs, generateConfigJson, generateMetadataJson, generateFrameworkVersionJson, generateScoreJson, } from "@greenarmor/ges-doc-generator";
 import { generateAllWorkflows } from "@greenarmor/ges-cicd-generator";
@@ -193,6 +194,18 @@ export const initCommand = new Command("init")
     for (const wf of workflows) {
         writeFileSync(path.join(process.cwd(), wf.filePath), wf.content);
     }
+    // Genesis governance record — establishes the root of the approval provenance chain
+    // using project info collected during init, so audit findings can be assigned immediately.
+    const genesisSystemType = mapProjectTypeToSystemType(projectType);
+    const genesisRiskLevel = inferRiskLevel(projectType);
+    const genesisRecord = createGovernanceRecord({
+        system_name: projectName,
+        system_description: `Genesis governance record auto-created by ges init for a ${projectType} project. Frameworks: ${selectedFrameworks.join(", ")}. Update this record with approval, risk assessment, and evidence as your project matures.`,
+        system_type: genesisSystemType,
+        risk_level: genesisRiskLevel,
+        created_by: "ges-init",
+    });
+    addGovernanceRecord(process.cwd(), genesisRecord);
     blank();
     step(1, 4, "Creating project structure");
     success("Project structure created");
@@ -210,6 +223,7 @@ export const initCommand = new Command("init")
     }
     success("Control packs installed", packs.map(p => p.id).join(", "));
     success("GitHub Actions workflows generated");
+    success("Genesis governance record created", `${genesisRecord.id} (${genesisSystemType}, ${genesisRiskLevel} risk)`);
     success("Developer logs directory created", ".dev-logs/");
     blank();
     step(2, 4, "Project summary");
@@ -230,8 +244,28 @@ export const initCommand = new Command("init")
         source: "cli",
         action: "init",
         title: `Project initialized: ${projectName}`,
-        description: `Initialized GESF for ${projectType} project${countryInfo ? ` in ${countryInfo.name}` : ""} with frameworks: ${selectedFrameworks.join(", ")}. Installed ${packs.length} policy packs: ${packs.map(p => p.id).join(", ")}.`,
-        details: { packs_affected: packs.map(p => p.id), frameworks_added: selectedFrameworks.map((f) => String(f)), country: countryCode },
+        description: `Initialized GESF for ${projectType} project${countryInfo ? ` in ${countryInfo.name}` : ""} with frameworks: ${selectedFrameworks.join(", ")}. Installed ${packs.length} policy packs: ${packs.map(p => p.id).join(", ")}. Genesis governance record created: ${genesisRecord.id}.`,
+        details: { packs_affected: packs.map(p => p.id), frameworks_added: selectedFrameworks.map((f) => String(f)), country: countryCode, genesis_governance_record_id: genesisRecord.id },
     });
     await showNextStepsMenu("init");
 });
+function mapProjectTypeToSystemType(projectType) {
+    switch (projectType) {
+        case "ai-application":
+        case "mcp-server":
+            return "ai-system";
+        case "api-backend":
+            return "api";
+        default:
+            return "application";
+    }
+}
+function inferRiskLevel(projectType) {
+    if (projectType === "healthcare-system" || projectType === "government-system") {
+        return "high";
+    }
+    if (projectType === "blockchain" || projectType === "wallet") {
+        return "high";
+    }
+    return "medium";
+}

package/package.json

@@ -3,19 +3,19 @@
     "ges": "./dist/cli.js"
   },
   "dependencies": {
-    "@greenarmor/ges-audit-engine": "1.5.5",
-    "@greenarmor/ges-cicd-generator": "1.5.5",
-    "@greenarmor/ges-compliance-engine": "1.5.5",
-    "@greenarmor/ges-core": "1.5.5",
-    "@greenarmor/ges-doc-generator": "1.5.5",
-    "@greenarmor/ges-git-hooks": "1.5.5",
-    "@greenarmor/ges-mcp-server": "1.5.5",
-    "@greenarmor/ges-policy-engine": "1.5.5",
-    "@greenarmor/ges-report-generator": "1.5.5",
-    "@greenarmor/ges-rules-engine": "1.5.5",
-    "@greenarmor/ges-scanner-integration": "1.5.5",
-    "@greenarmor/ges-scoring-engine": "1.5.5",
-    "@greenarmor/ges-web-dashboard": "1.5.5",
+    "@greenarmor/ges-audit-engine": "1.5.7",
+    "@greenarmor/ges-cicd-generator": "1.5.7",
+    "@greenarmor/ges-compliance-engine": "1.5.7",
+    "@greenarmor/ges-core": "1.5.7",
+    "@greenarmor/ges-doc-generator": "1.5.7",
+    "@greenarmor/ges-git-hooks": "1.5.7",
+    "@greenarmor/ges-mcp-server": "1.5.7",
+    "@greenarmor/ges-policy-engine": "1.5.7",
+    "@greenarmor/ges-report-generator": "1.5.7",
+    "@greenarmor/ges-rules-engine": "1.5.7",
+    "@greenarmor/ges-scanner-integration": "1.5.7",
+    "@greenarmor/ges-scoring-engine": "1.5.7",
+    "@greenarmor/ges-web-dashboard": "1.5.7",
     "chalk": "^5.6.2",
     "commander": "^13.0.0"
   },
@@ -60,7 +60,7 @@
   },
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "1.5.5",
+  "version": "1.5.7",
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",