@rogatio/cli 6.0.1 → 6.1.0

package/README.md

@@ -40,8 +40,8 @@ rogatio <command> [options]
 | `rogatio verify [path]` | Validate a `.rogatio.json` file (schema + compiler). |
 | `rogatio test [path] [url...]` | Run offline dry-run tests against `.rogatio.json`. |
 | `rogatio ai <setup\|ls\|show\|delete\|test>` | AI provider configuration. `setup` interactive; `ls` list; `show` redacted; `delete` remove; `test` connection. |
-| `rogatio runtime <install\|uninstall>` | Register the native-messaging host with `install --extension-id <id>` (and, on capable platforms, the device-local CA) in one transactional install; `uninstall` removes the host manifest, the device-local CA files, and the CA trust installation (idempotent). |
-| `rogatio runtime host <path>` | Run the consolidated native-messaging host for the project (pair/authorize/body transforms over stdio). Normally launched by the browser; run manually only for debugging. |
+| `rogatio runtime <install\|uninstall\|verify>` | Register the native-messaging host with `install --extension-id <id>` and trust the device-local CA in one **transactional** call; it needs elevated privileges (Linux `sudo`, macOS keychain authorization, Windows Administrator) and rolls back with exit `1` and `trust unsupported: <reasons>` when a capability or elevation is missing. `uninstall` removes the host manifest, the device-local CA files, and the CA trust installation (idempotent). `verify` reports whether manifest, `runtime-host` wrapper, allowed origins, and CA trust are all valid. |
+| `rogatio runtime host [path]` | Run the consolidated native-messaging host for the project (pair/authorize/body transforms over stdio). Normally launched by the browser; run manually only for debugging. `--root <dir>` overrides the confined file root; `--mock-port <n>` binds the loopback mock-response faucet. |
 
 Global options: `--help, -h` and `--version, -v`. Run `rogatio <command> --help`
 for command-specific usage.
@@ -65,9 +65,29 @@ rogatio runtime host .rogatio.json
 ## Exit codes
 
 - `0` — success
-- `1` — invalid project (diagnostics present) or test/validation errors
+- `1` — invalid project (diagnostics present), test/validation errors, or a failed
+  `runtime install` / `runtime verify` check
 - `2` — usage or IO error
 
+## Local runtime
+
+```sh
+# Register the native-messaging host and trust the device-local CA (needs elevation)
+rogatio runtime install --extension-id <id>
+
+# Check manifest, runtime-host wrapper, allowed origins, and CA trust
+rogatio runtime verify
+
+# Remove the host manifest, CA files, and trust installation
+rogatio runtime uninstall
+
+# Run the native-messaging host (normally launched by the browser)
+rogatio runtime host .rogatio.json
+```
+
+Start and stop of the runtime **session** is driven from the extension's **Start runtime** /
+**Stop runtime** controls. The CLI has no session lifecycle subcommand.
+
 ## AI-Assisted Rule Authoring
 
 ```sh

package/dist/editor/index.css

@@ -385,6 +385,10 @@
   justify-content: space-between;
   gap: 0.65rem;
 }
+.rogatio-editor [data-group-heading] button[data-group-enable] {
+  padding: 0.55rem 1.05rem;
+  font-size: 0.95rem;
+}
 .rogatio-editor [data-group-heading] h2,
 .rogatio-editor [data-section-heading] h2,
 .rogatio-editor [data-rule-heading] h3 {

package/dist/editor/index.js

@@ -2108,6 +2108,8 @@ var EditorControllerImpl = class {
   conversionDiagnostics = /* @__PURE__ */ new Map();
   extensionErrors = /* @__PURE__ */ new Map();
   controls = /* @__PURE__ */ new Map();
+  /** Live draft group object to the id last saved for that group. */
+  savedGroupIds = /* @__PURE__ */ new WeakMap();
   extensionControls = /* @__PURE__ */ new Map();
   extensionCleanups = [];
   confirmation;
@@ -2137,6 +2139,7 @@ var EditorControllerImpl = class {
     this.instanceId = `rogatio-editor-${++editorInstanceCount}`;
     this.draft = initial;
     this.committed = cloneSnapshot(initial);
+    this.bindSavedGroupIds();
     this.errors = this.collectDiagnostics(this.draft);
     if (this.errors.length > 0) {
       this.statusMessage = `${this.errors.length} validation error${this.errors.length === 1 ? "" : "s"} found.`;
@@ -2893,6 +2896,7 @@ var EditorControllerImpl = class {
       return;
     }
     this.draft = cloneSnapshot(this.committed);
+    this.bindSavedGroupIds();
     this.revision += 1;
     this.errors = [];
     this.conversionDiagnostics.clear();
@@ -2941,6 +2945,7 @@ var EditorControllerImpl = class {
     }
     if (isSaveSuccess(result)) {
       this.committed = cloneSnapshot(snapshot);
+      this.bindSavedGroupIds();
       this.errors = [];
       this.statusMessage = "Saved";
       this.render();
@@ -3318,6 +3323,22 @@ var EditorControllerImpl = class {
     this.statusMessage = "";
     this.render();
   }
+  syncGroupEnablement(enabledGroupIds) {
+    if (this.destroyed) return;
+    const enabled = /* @__PURE__ */ new Set();
+    for (const id of enabledGroupIds) {
+      if (typeof id === "string") enabled.add(id);
+    }
+    const buttons = this.host.querySelectorAll(
+      "button[data-group-enable]"
+    );
+    for (const button of buttons) {
+      const groupId = button.dataset.groupId ?? "";
+      const headingName = button.parentElement?.querySelector("h2")?.textContent?.trim();
+      const groupName = headingName && headingName.length > 0 ? headingName : displayName(this.groupById(groupId)?.name, "Unnamed group");
+      this.applyGroupEnablementLabel(button, enabled.has(groupId), groupName);
+    }
+  }
   navigateToSearchResult(path) {
     const segments = decodePointer(path);
     if (segments?.[0] !== "groups") {
@@ -3645,7 +3666,35 @@ var EditorControllerImpl = class {
       { groupId },
       "danger"
     );
-    headingRow.append(heading, copyGroup, removeGroup);
+    const savedGroupId = this.savedGroupId(group);
+    const enablement = this.options.groupEnablement;
+    if (enablement && savedGroupId) {
+      const enableButton = this.document.createElement("button");
+      enableButton.type = "button";
+      enableButton.dataset.groupEnable = "true";
+      enableButton.dataset.groupId = savedGroupId;
+      enableButton.dataset.btn = "primary";
+      this.applyGroupEnablementLabel(
+        enableButton,
+        enablement.isEnabled(savedGroupId) === true,
+        groupName
+      );
+      enableButton.addEventListener("click", (event) => {
+        event.preventDefault();
+        event.stopPropagation();
+        if (enableButton.disabled) return;
+        const next = enablement.isEnabled(savedGroupId) !== true;
+        enableButton.disabled = true;
+        void Promise.resolve(enablement.setEnabled(savedGroupId, next)).finally(
+          () => {
+            if (enableButton.isConnected) enableButton.disabled = false;
+          }
+        );
+      });
+      headingRow.append(heading, enableButton, copyGroup, removeGroup);
+    } else {
+      headingRow.append(heading, copyGroup, removeGroup);
+    }
     this.form.append(headingRow);
     const settings = this.document.createElement("fieldset");
     settings.dataset.groupCard = "true";
@@ -4403,6 +4452,26 @@ var EditorControllerImpl = class {
     button.dataset.editorKey = `button:${key}`;
     return button;
   }
+  applyGroupEnablementLabel(button, enabled, groupName) {
+    const action = enabled ? "Disable" : "Enable";
+    button.textContent = action;
+    button.setAttribute("aria-label", `${action} group ${groupName}`);
+  }
+  bindSavedGroupIds() {
+    for (let index = 0; index < this.draft.groups.length; index += 1) {
+      const draftGroup = this.draft.groups[index];
+      const savedGroup = this.committed.groups[index];
+      const savedId = savedGroup?.id;
+      if (!draftGroup || typeof savedId !== "string" || savedId.length === 0) {
+        continue;
+      }
+      this.savedGroupIds.set(draftGroup, savedId);
+    }
+  }
+  savedGroupId(group) {
+    const savedId = this.savedGroupIds.get(group);
+    return typeof savedId === "string" && savedId.length > 0 ? savedId : void 0;
+  }
   createCommandButton(label, command, disabled, data = {}, tone = "secondary") {
     const button = this.createButton(
       label,

package/dist/node/index.js

@@ -24974,9 +24974,12 @@ Commands:
   install   Install the native-messaging host manifest and (on capable
             platforms) provision the device-local CA (requires --extension-id).
             CA trust requires root/admin privileges (Linux: sudo, macOS: keychain
-            password, Windows: Administrator).
+            password, Windows: Administrator). Transactional: when CA trust is
+            unavailable the manifest is rolled back and the command exits 1.
   uninstall Remove the native-messaging host manifest and device-local CA trust
             (idempotent).
+  verify    Check that the manifest, runtime-host wrapper, allowed origins, and
+            device-local CA trust are all present and valid.
   host [path]  Run the native-messaging runtime host. The browser launches this
                process via the native-messaging manifest to handle rule matching.
 
@@ -24986,12 +24989,14 @@ Start/Stop controls, not the CLI. Run 'rogatio runtime install --extension-id
 
 Options:
   --extension-id  Extension ID for native messaging manifest (required for install)
-  --root <dir>    Root for confined runtime file access (default: project directory)
+  --root <dir>    Root for confined runtime file access (host only; default: project directory)
+  --mock-port <n> Bind the loopback mock-response faucet to this port (host only, 1-65535)
   --help, -h      Show this help
 
 Exit codes:
   0  Stopped cleanly / success
-  1  Invalid project (diagnostics present) or file outside the root
+  1  Invalid project (diagnostics present), file outside the root, or a failed
+     trust / verification check
   2  Error (IO or usage)`);
 }
 function showTestHelp() {
@@ -27328,11 +27333,11 @@ async function runtimeCommand(args, options = {}) {
     return 0;
   }
   const first = args[0];
-  if (first === "install" || first === "trust" || first === "uninstall" || first === "verify")
+  if (first === "install" || first === "uninstall" || first === "verify")
     return trustRuntimeCommand(args);
   if (first === "host") return runtimeHostCommand(args.slice(1), options);
   console.error(
-    `Error: 'rogatio runtime' no longer starts or stops the runtime. Use 'rogatio runtime install|uninstall' to manage the host manifest and request-body trust, or 'rogatio runtime host [path]' to run the native-messaging host. Start/stop is driven from the extension's controls.`
+    `Error: 'rogatio runtime' no longer starts or stops the runtime. Use 'rogatio runtime install|uninstall|verify' to manage the host manifest and request-body trust, or 'rogatio runtime host [path]' to run the native-messaging host. Start/stop is driven from the extension's controls.`
   );
   showRuntimeHelp();
   return 2;
@@ -27907,8 +27912,9 @@ Commands:
   edit [path]     Launch browser editor for .rogatio.json
   test [path] [url...]  Run offline dry-run tests against .rogatio.json
   verify [path]   Validate .rogatio.json file
-  runtime <install|uninstall|host>  Native messaging runtime control
+  runtime <install|uninstall|verify|host>  Native messaging runtime control
   runtime host [path]  Run the native-messaging runtime host
+  ai <setup|ls|show|delete|test>  AI provider configuration
 
 Global Options:
   --help, -h      Show help

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rogatio/cli",
-  "version": "6.0.1",
+  "version": "6.1.0",
   "private": false,
   "type": "module",
   "description": "Local-first browser request and response rules — editor host, file verification, test runner, and runtime dispatch.",