@llm-dev-ops/agentics-cli 1.4.6 → 1.4.8

package/dist/gates/lineage-gate.js

@@ -0,0 +1,127 @@
+/**
+ * Lineage Gate — Gate 6 (ADR-004 Enforcement)
+ *
+ * PURPOSE: Enforce that artifact-producing commands reference a valid
+ * simulation parent. No integration proposal or ERP mapping may
+ * exist without traceability to a governed simulation.
+ *
+ * INVARIANTS ENFORCED:
+ * - ADR-004 Invariant 2: Every integration/ERP mapping derives from a simulation
+ * - ADR-004 Invariant 3: No integration proposal without traceability
+ * - ADR-004 Invariant 7: CLI is only path for artifact creation
+ *
+ * EXIT CODE: 110 (LINEAGE_VIOLATION)
+ *
+ * BEHAVIOR:
+ * - Commands that produce enterprise artifacts (erp surface, erp map,
+ *   erp export) must pass a simulation_id in their positional args
+ *   or flags when the lineage gate is enabled.
+ * - Commands that do not produce artifacts (list, inspect, help)
+ *   are exempt from lineage validation.
+ * - The gate validates that simulation_id is present and non-empty.
+ *   Whether the simulation exists in Ruvector is validated at the
+ *   command level, not at the gate level (gate is synchronous).
+ */
+import { validateTraceability } from '../enterprise/lineage.js';
+// ============================================================================
+// Constants
+// ============================================================================
+export const LINEAGE_VIOLATION_EXIT_CODE = 110;
+/**
+ * Commands that produce enterprise artifacts requiring lineage.
+ * These commands must reference a simulation_id.
+ */
+const LINEAGE_REQUIRED_COMMANDS = new Map([
+    ['erp', new Set(['surface', 'map', 'export'])],
+]);
+/**
+ * Commands exempt from lineage validation.
+ * These commands are read-only or do not produce artifacts.
+ */
+const LINEAGE_EXEMPT_COMMANDS = new Set([
+    'help',
+    'version',
+    'login',
+    'logout',
+    'whoami',
+    'usage',
+]);
+// ============================================================================
+// Gate Implementation
+// ============================================================================
+/**
+ * Check whether a command passes lineage validation.
+ * Returns a result indicating whether the command is allowed.
+ *
+ * Lineage is required when:
+ * 1. The command is in LINEAGE_REQUIRED_COMMANDS
+ * 2. The command is not in LINEAGE_EXEMPT_COMMANDS
+ * 3. The command produces enterprise artifacts
+ */
+export function checkLineageGate(cmd) {
+    const primary = cmd.command;
+    const sub = cmd.subcommand;
+    // Exempt commands skip lineage validation
+    if (LINEAGE_EXEMPT_COMMANDS.has(primary)) {
+        return { allowed: true, message: '', exitCode: 0, lineageRequired: false };
+    }
+    // Check if this command+subcommand requires lineage
+    const requiredSubs = LINEAGE_REQUIRED_COMMANDS.get(primary);
+    if (!requiredSubs || !sub || !requiredSubs.has(sub)) {
+        return { allowed: true, message: '', exitCode: 0, lineageRequired: false };
+    }
+    // This command requires lineage — check for simulation_id
+    // simulation_id can be provided as:
+    // 1. A flag: --simulation-id <id>
+    // 2. An option: simulation_id in options
+    // 3. The first positional arg (for commands that take simulation_id as primary arg)
+    const simulationId = cmd.options['simulation-id'] ??
+        cmd.options['simulation_id'] ??
+        cmd.flags['simulation-id'] ??
+        undefined;
+    const validation = validateTraceability(simulationId, `${primary} ${sub}`);
+    if (!validation.valid) {
+        return {
+            allowed: false,
+            message: `Lineage violation: ${validation.message}\n` +
+                `Usage: agentics ${primary} ${sub} --simulation-id <simulation_id>\n` +
+                `\n` +
+                `Enterprise artifacts must trace to a governed simulation (ADR-004).`,
+            exitCode: LINEAGE_VIOLATION_EXIT_CODE,
+            lineageRequired: true,
+        };
+    }
+    return { allowed: true, message: '', exitCode: 0, lineageRequired: true };
+}
+/**
+ * Enforce lineage gate — exits the process if validation fails.
+ */
+export function enforceLineageGate(cmd) {
+    const result = checkLineageGate(cmd);
+    if (!result.allowed) {
+        console.error(JSON.stringify({
+            error: {
+                code: 'LINEAGE_VIOLATION',
+                message: result.message,
+                command: `${cmd.command} ${cmd.subcommand ?? ''}`.trim(),
+                exit_code: result.exitCode,
+                adr: 'ADR-004',
+            },
+        }));
+        process.exit(result.exitCode);
+    }
+}
+/**
+ * Check if a command requires lineage validation.
+ */
+export function requiresLineageValidation(primary, sub) {
+    if (LINEAGE_EXEMPT_COMMANDS.has(primary))
+        return false;
+    const requiredSubs = LINEAGE_REQUIRED_COMMANDS.get(primary);
+    if (!requiredSubs)
+        return false;
+    if (!sub)
+        return false;
+    return requiredSubs.has(sub);
+}
+//# sourceMappingURL=lineage-gate.js.map

package/dist/gates/lineage-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lineage-gate.js","sourceRoot":"","sources":["../../src/gates/lineage-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAE/C;;;GAGG;AACH,MAAM,yBAAyB,GAA6C,IAAI,GAAG,CAAC;IAClF,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;CAC/C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAiBH,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAkB;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC;IAE3B,0CAA0C;IAC1C,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IAED,oDAAoD;IACpD,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC7E,CAAC;IAED,0DAA0D;IAC1D,oCAAoC;IACpC,kCAAkC;IAClC,yCAAyC;IACzC,oFAAoF;IACpF,MAAM,YAAY,GACf,GAAG,CAAC,OAAO,CAAC,eAAe,CAAwB;QACnD,GAAG,CAAC,OAAO,CAAC,eAAe,CAAwB;QACnD,GAAG,CAAC,KAAK,CAAC,eAAe,CAAwB;QAClD,SAAS,CAAC;IAEZ,MAAM,UAAU,GAAG,oBAAoB,CAAC,YAAY,EAAE,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IAE3E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,sBAAsB,UAAU,CAAC,OAAO,IAAI;gBACnD,mBAAmB,OAAO,IAAI,GAAG,oCAAoC;gBACrE,IAAI;gBACJ,qEAAqE;YACvE,QAAQ,EAAE,2BAA2B;YACrC,eAAe,EAAE,IAAI;SACtB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAkB;IACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3B,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;gBACxD,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,GAAG,EAAE,SAAS;aACf;SACF,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe,EAAE,GAAY;IACrE,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/dist/mcp/mcp-server.d.ts

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+/**
+ * Agentics CLI — MCP Server (stdio transport)
+ *
+ * Exposes every CLI command + subcommand as an MCP tool so Claude Code
+ * can call them directly, the same way claude-flow works.
+ *
+ * Protocol: JSON-RPC 2.0 over newline-delimited stdin/stdout
+ *
+ * Tool inventory (48 tools across 12 domains):
+ *
+ *   Identity & Access   login, logout, whoami
+ *   Simulation          simulate_create, simulate_run, simulate_list,
+ *                       simulate_inspect, simulate_delete
+ *   Planning            plan_create, plan_list, plan_inspect,
+ *                       plan_approve, plan_delete
+ *   Inspect             inspect_query, inspect_run, inspect_latest,
+ *                       inspect_artifacts
+ *   Usage & Billing     usage, usage_history, usage_limits, usage_reset
+ *   ROI / Quantify      quantify_create, quantify_inspect, quantify_list,
+ *                       quantify_compare
+ *   Deployment          deploy_preview, deploy_run, deploy_status,
+ *                       deploy_rollback
+ *   Export              export_terraform, export_kubernetes, export_erp
+ *   Policy              policy_list, policy_inspect, policy_create,
+ *                       policy_edit, policy_delete, policy_enable,
+ *                       policy_disable, policy_dry_run, policy_scope
+ *   ERP Surface         erp_list, erp_inspect, erp_surface, erp_map,
+ *                       erp_export
+ *   Diligence           diligence
+ *   Audit               audit
+ *   Meta                version, help
+ */
+export {};
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/mcp/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../src/mcp/mcp-server.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG"}