great-cto 2.23.0 → 2.25.0

package/dist/agentshield/index.js

@@ -11,5 +11,5 @@
  *   writeFileSync('agentshield.sarif', JSON.stringify(toSarif(report)));
  */
 export { scan, scanFile } from './scanner.js';
-export { loadRules, parseRulesFile } from './rules-loader.js';
+export { loadRules, parseRulesFile, loadUserRules, userGuardrailsPath } from './rules-loader.js';
 export { SEVERITY_ORDER, severityRank } from './types.js';

package/dist/agentshield/rules-loader.js

@@ -5,9 +5,14 @@
  * each rule file is a list of dash-prefixed entries with key/value lines.
  * If we ever need real YAML (anchors, complex nesting), we'll add `yaml` as
  * a dep then.
+ *
+ * User-defined rules are loaded from ~/.great_cto/guardrails.yml and merged
+ * with the built-in rules. User rules use the same YAML format but include
+ * an optional `action: block | audit | redact` field.
  */
 import { readdirSync, readFileSync, existsSync } from 'node:fs';
 import { join, dirname } from 'node:path';
+import { homedir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 /**
@@ -40,8 +45,39 @@ export function loadRules(rulesDir = defaultRulesDir()) {
         const text = readFileSync(join(rulesDir, f), 'utf8');
         rules.push(...parseRulesFile(text, f));
     }
+    // Merge user-defined rules from ~/.great_cto/guardrails.yml
+    const userRules = loadUserRules();
+    rules.push(...userRules);
     return rules;
 }
+/**
+ * Default path for user-defined guardrail rules.
+ * Falls back to legacy .great_cto/guardrails.yml in the current project.
+ */
+export function userGuardrailsPath() {
+    return join(homedir(), '.great_cto', 'guardrails.yml');
+}
+/**
+ * Load user-defined rules from ~/.great_cto/guardrails.yml.
+ * Returns [] silently if the file does not exist.
+ * Errors in user rules are surfaced as warnings (console.warn) but do not
+ * abort the scan — broken user rules should not block CI.
+ */
+export function loadUserRules(path) {
+    const guardrailsPath = path ?? userGuardrailsPath();
+    if (!existsSync(guardrailsPath))
+        return [];
+    try {
+        const text = readFileSync(guardrailsPath, 'utf8');
+        const parsed = parseRulesFile(text, guardrailsPath);
+        // Mark all user rules as userDefined so scanners can handle action correctly
+        return parsed.map(r => ({ ...r, userDefined: true }));
+    }
+    catch (e) {
+        console.warn(`agentshield: warning — failed to load user guardrails from ${guardrailsPath}: ${e.message}`);
+        return [];
+    }
+}
 /**
  * Parse a minimal YAML format:
  *
@@ -160,6 +196,7 @@ function parseBlock(block, filename) {
             throw new Error(`missing required field "${required}" in rule (block from ${filename})\nparsed: ${JSON.stringify(out)}`);
         }
     }
+    const action = out.action;
     return {
         id: out.id,
         scanner: out.scanner,
@@ -171,5 +208,6 @@ function parseBlock(block, filename) {
         patterns: out.patterns,
         file_globs: out.file_globs,
         negate: out.negate,
+        action: (action === 'block' || action === 'audit' || action === 'redact') ? action : undefined,
     };
 }

package/dist/bootstrap.js

@@ -2,6 +2,7 @@
 // Safe: will NOT overwrite an existing PROJECT.md.
 import { existsSync, mkdirSync, writeFileSync, readFileSync } from "node:fs";
 import { join } from "node:path";
+import { homedir } from "node:os";
 import { dim, success, warn } from "./ui.js";
 import { suggestJurisdictions } from "./jurisdictions.js";
 import { compileFlow, renderFlowMd } from "./flow.js";
@@ -145,6 +146,55 @@ when you actually start work:
 `;
     writeFileSync(projectMd, content, "utf-8");
     success(`created .great_cto/PROJECT.md ${dim(`(archetype: ${archetype})`)}`);
+    // Write ~/.great_cto/guardrails.yml example if it doesn't exist yet.
+    // This is the user-level agentshield config — applies across all projects.
+    const globalGreatCtoDir = join(homedir(), ".great_cto");
+    const guardrailsPath = join(globalGreatCtoDir, "guardrails.yml");
+    if (!existsSync(guardrailsPath)) {
+        mkdirSync(globalGreatCtoDir, { recursive: true });
+        const guardrailsContent = `# ~/.great_cto/guardrails.yml
+# User-defined agentshield rules. Loaded and merged with built-in rules on every scan.
+# Rules use the same YAML format as agentshield-rules/*.yaml.
+#
+# action field (user rules only):
+#   block  — scan fails (treated as critical finding; blocks gate:ship)
+#   audit  — finding reported but scan continues (warning only)
+#   redact — same as audit; marks pattern for future content redaction
+#
+# Example rule — customize with your org's patterns:
+#
+# - id: UG-001
+#   scanner: secrets-in-prompts
+#   title: Internal API token pattern
+#   severity: critical
+#   description: |
+#     Detects hardcoded internal API tokens matching the org pattern mytoken_*.
+#   remediation: |
+#     Move to environment variable. Reference via process.env.MY_TOKEN.
+#   patterns:
+#     - 'mytoken_[a-z0-9]{32}'
+#   action: block
+#
+# - id: UG-002
+#   scanner: prompt-injection
+#   title: Audit use of customer data in prompts
+#   severity: high
+#   description: |
+#     Flags when customer PII fields (email, phone, address) are embedded in prompts.
+#   remediation: |
+#     Replace PII with anonymized tokens before embedding in prompts.
+#   patterns:
+#     - 'customer\.(email|phone|address|ssn)'
+#   action: audit
+#   file_globs:
+#     - "**/*.ts"
+#     - "**/*.py"
+#
+# Add your own rules below:
+`;
+        writeFileSync(guardrailsPath, guardrailsContent, "utf-8");
+        success(`created ~/.great_cto/guardrails.yml ${dim("(user-level agentshield rules — edit to add org-specific patterns)")}`);
+    }
     // Write FLOW.md — compiled delivery flow for agents and user
     const confidence = detectionMeta?.confidence ?? "medium";
     const size = (detection.projectSize ?? "medium");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "2.23.0",
+  "version": "2.25.0",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",