coderifts 1.8.4 → 1.9.0

package/bin/coderifts.js

@@ -25,6 +25,23 @@ program
     await diff(oldSpec, newSpec, options);
   });
 
+// ── deploy-gate command (deploy-gate #8, phase-1 ADVISORY) ──
+// Gates a deploy on the current { environment, artifact } via a preflight receipt. Phase 1 is
+// advisory: it reports but exits 0 even on deny unless the step is marked --enforce /
+// CODERIFTS_DEPLOY_ENFORCE=true. Composes the validated pure deployGate (@coderifts/agent-guard).
+program
+  .command('deploy-gate')
+  .description('Gate a deploy on the current { environment, artifact } using a preflight receipt (phase-1 advisory)')
+  .option('--env <environment>', 'Target environment (e.g. production, staging)')
+  .option('--artifact <artifact_id>', 'Immutable artifact identity being deployed (content digest or commit SHA)')
+  .option('--receipt <file>', 'Path to the deploy-scoped receipt JSON produced by preflight')
+  .option('--json', 'Output the binding result as JSON')
+  .option('--enforce', 'Treat the step as enforcing: attest ENFORCING and exit non-zero on a gate failure')
+  .action(async (options) => {
+    const { runDeployGate } = require('../src/commands/deploy-gate');
+    await runDeployGate(options);
+  });
+
 // ── init command ──
 program
   .command('init [template]')