@neurcode-ai/cli 0.20.3 → 0.20.4

package/dist/utils/runtime-safety-check.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENTERPRISE_RUNTIME_SAFETY_V1_POLICY = void 0;
+exports.evaluateRuntimeSafetyCheck = evaluateRuntimeSafetyCheck;
+const governance_runtime_1 = require("@neurcode-ai/governance-runtime");
+Object.defineProperty(exports, "ENTERPRISE_RUNTIME_SAFETY_V1_POLICY", { enumerable: true, get: function () { return governance_runtime_1.ENTERPRISE_RUNTIME_SAFETY_V1_POLICY; } });
+function evaluateRuntimeSafetyCheck(input) {
+    const policy = (0, governance_runtime_1.parseRuntimeSafetyPolicyProfile)(input.policy ?? input.profile?.runtimeConfig?.runtimeSafetyPolicy);
+    const phase = input.phase ?? 'implementation';
+    const classifierInput = {
+        filePath: input.filePath,
+        sensitiveBoundaries: input.profile?.sensitiveBoundaries,
+        ownershipBoundaries: input.profile?.ownershipBoundaries,
+        approvalRequiredGlobs: input.profile?.approvalRequiredPaths ?? [],
+        sensitiveGlobs: input.profile?.sensitiveBoundaries.map((b) => b.glob) ?? [],
+        allowedGlobs: input.allowedGlobs,
+        approvedPaths: input.approvedPaths,
+    };
+    const classification = (0, governance_runtime_1.classifyRuntimeSafetySurface)(classifierInput);
+    const credential = input.proposedContent != null
+        ? (0, governance_runtime_1.evaluateCredentialPreWrite)({
+            filePath: input.filePath,
+            proposedContent: input.proposedContent,
+            policyAction: (0, governance_runtime_1.resolvePolicyActionForFamily)('credential_or_secret', policy),
+        })
+        : null;
+    const dependency = input.proposedContent != null &&
+        classification.primaryFamily === 'dependency_supply_chain'
+        ? (0, governance_runtime_1.classifyDependencyManifestChange)({
+            filePath: input.filePath,
+            previousContent: input.previousContent,
+            proposedContent: input.proposedContent,
+            policyAction: (0, governance_runtime_1.resolvePolicyActionForFamily)('dependency_supply_chain', policy),
+        })
+        : null;
+    const effectivePolicy = {
+        ...policy,
+        planMode: input.planMode ?? input.profile?.runtimeConfig?.planMode ?? policy.planMode,
+    };
+    const enforcement = (0, governance_runtime_1.resolveRuntimeSafetyEnforcement)({
+        classification,
+        credential,
+        dependency,
+        policy: effectivePolicy,
+        phase,
+        planFiles: input.planFiles,
+    });
+    return { classification, credential, dependency, enforcement, policy: effectivePolicy };
+}
+//# sourceMappingURL=runtime-safety-check.js.map

package/dist/utils/runtime-safety-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-safety-check.js","sourceRoot":"","sources":["../../src/utils/runtime-safety-check.ts"],"names":[],"mappings":";;;AAqCA,gEA6CC;AAlFD,wEAayC;AAuEhC,oHAjFP,wDAAmC,OAiFO;AA/C5C,SAAgB,0BAA0B,CAAC,KAA8B;IACvE,MAAM,MAAM,GAAG,IAAA,oDAA+B,EAC5C,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,mBAAmB,CAClE,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,gBAAgB,CAAC;IAC9C,MAAM,eAAe,GAAiC;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,mBAAmB,EAAE,KAAK,CAAC,OAAO,EAAE,mBAAmB;QACvD,mBAAmB,EAAE,KAAK,CAAC,OAAO,EAAE,mBAAmB;QACvD,qBAAqB,EAAE,KAAK,CAAC,OAAO,EAAE,qBAAqB,IAAI,EAAE;QACjE,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;QAC3E,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;IACF,MAAM,cAAc,GAAG,IAAA,iDAA4B,EAAC,eAAe,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,IAAI,IAAI;QAC9C,CAAC,CAAC,IAAA,+CAA0B,EAAC;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,YAAY,EAAE,IAAA,iDAA4B,EAAC,sBAAsB,EAAE,MAAM,CAAC;SAC3E,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,UAAU,GACd,KAAK,CAAC,eAAe,IAAI,IAAI;QAC7B,cAAc,CAAC,aAAa,KAAK,yBAAyB;QACxD,CAAC,CAAC,IAAA,qDAAgC,EAAC;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,YAAY,EAAE,IAAA,iDAA4B,EAAC,yBAAyB,EAAE,MAAM,CAAC;SAC9E,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,eAAe,GAA+B;QAClD,GAAG,MAAM;QACT,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;KACtF,CAAC;IACF,MAAM,WAAW,GAAG,IAAA,oDAA+B,EAAC;QAClD,cAAc;QACd,UAAU;QACV,UAAU;QACV,MAAM,EAAE,eAAe;QACvB,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC1F,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neurcode-ai/cli",
-  "version": "0.20.3",
+  "version": "0.20.4",
   "description": "Neurcode CLI — deterministic operational governance runtime for AI-assisted engineering (intent contracts, import-edge governance, replay continuity)",
   "bin": {
     "neurcode": "dist/index.js"
@@ -11,12 +11,6 @@
     "dist",
     "README.md"
   ],
-  "scripts": {
-    "build": "node ../../scripts/sync-cli-telemetry-vendor.mjs && rm -rf dist && tsc && node ../../scripts/write-cli-build-manifest.mjs && chmod +x dist/index.js",
-    "dev": "tsc --watch",
-    "start": "node dist/index.js",
-    "prepublishOnly": "npm run build"
-  },
   "keywords": [
     "cli",
     "code-governance",
@@ -72,5 +66,10 @@
     "@types/node": "^20.10.0",
     "@types/uuid": "^9.0.8",
     "typescript": "^5.3.0"
+  },
+  "scripts": {
+    "build": "node ../../scripts/sync-cli-telemetry-vendor.mjs && rm -rf dist && tsc && node ../../scripts/write-cli-build-manifest.mjs && chmod +x dist/index.js",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js"
   }
-}
+}