@soulbatical/tetra-dev-toolkit 1.20.7 → 1.20.8

package/bin/tetra-security-gate.js

@@ -217,9 +217,10 @@ program
 
         if (!resp.ok) {
           const body = await resp.text()
-          console.error(chalk.yellow(`  Ralph Manager returned ${resp.status}: ${body}`))
-          console.log(chalk.yellow('  Falling back to PASS (ralph-manager error).\n'))
-          process.exit(0)
+          console.error(chalk.red.bold(`\n  PUSH BLOCKED — Ralph Manager returned ${resp.status}`))
+          console.error(chalk.red(`  ${body}`))
+          console.error(chalk.red(`  Security-sensitive files detected but review failed.\n`))
+          process.exit(1)
         }
 
         const { data } = await resp.json()
@@ -236,10 +237,13 @@ program
           process.exit(1)
         }
       } catch (err) {
-        // Ralph-manager offline — don't block the push
-        console.log(chalk.yellow(`  Cannot reach ralph-manager at ${baseUrl}`))
-        console.log(chalk.yellow('  Falling back to PASS (offline fallback).\n'))
-        process.exit(0)
+        // Ralph-manager offline — block the push (security files need review)
+        console.error(chalk.red.bold(`\n  PUSH BLOCKED — Cannot reach ralph-manager at ${baseUrl}`))
+        console.error(chalk.red(`  Security-sensitive files detected but review server unreachable.`))
+        console.error(chalk.yellow(`\n  Options:`))
+        console.error(chalk.yellow(`    1. Start ralph-manager: npm run dev:backend`))
+        console.error(chalk.yellow(`    2. Check if backend is running on port 3005\n`))
+        process.exit(1)
       }
 
       // Step 4: Poll for verdict
@@ -273,20 +277,27 @@ program
       }
 
       if (result.status === 'timeout') {
-        console.log(chalk.yellow(`  Agent did not respond within ${timeout}s.`))
-        console.log(chalk.yellow('  Falling back to PASS (timeout fallback).\n'))
-        process.exit(0)
+        console.error(chalk.red.bold(`\n  ════════════════════════════════════════════════════════════`))
+        console.error(chalk.red.bold(`  PUSH BLOCKED — Security Gate TIMEOUT`))
+        console.error(chalk.red.bold(`  ════════════════════════════════════════════════════════════`))
+        console.error(chalk.red(`\n  Agent did not respond within ${timeout}s.`))
+        console.error(chalk.red(`  Security-sensitive files detected but not reviewed.`))
+        console.error(chalk.yellow(`\n  Options:`))
+        console.error(chalk.yellow(`    1. Ensure ralph-manager backend is running (port 3005)`))
+        console.error(chalk.yellow(`    2. Increase timeout: tetra-security-gate --timeout 300`))
+        console.error(chalk.yellow(`    3. Dry-run to see what's being reviewed: tetra-security-gate --dry-run\n`))
+        process.exit(1)
       }
 
-      // Unknown status — don't block
-      console.log(chalk.yellow(`  Unexpected verdict status: ${result.status}`))
-      console.log(chalk.yellow('  Falling back to PASS.\n'))
-      process.exit(0)
+      // Unknown status — block (security files were detected but not reviewed)
+      console.error(chalk.red.bold(`\n  PUSH BLOCKED — Unexpected verdict status: ${result.status}`))
+      console.error(chalk.red(`  Security-sensitive files detected but review inconclusive.\n`))
+      process.exit(1)
 
     } catch (err) {
-      console.error(chalk.red(`\n  ERROR: ${err.message}\n`))
-      // Never block on internal errors
-      process.exit(0)
+      console.error(chalk.red.bold(`\n  PUSH BLOCKED — Security gate error: ${err.message}`))
+      console.error(chalk.red(`  Security-sensitive files detected but review failed.\n`))
+      process.exit(1)
     }
   })
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soulbatical/tetra-dev-toolkit",
-  "version": "1.20.7",
+  "version": "1.20.8",
   "publishConfig": {
     "access": "restricted"
   },