kodingo-cli 1.0.25 → 1.0.26

package/dist/cli.js

@@ -21,6 +21,7 @@ const sync_1 = require("./commands/sync");
 const context_1 = require("./commands/context");
 const guardrails_1 = require("./commands/guardrails");
 const session_brief_1 = require("./commands/session-brief");
+const check_rules_1 = require("./commands/check-rules");
 const aging_1 = require("./commands/aging");
 const program = new commander_1.Command();
 program.name("kodingo").description("Kodingo CLI").version("1.0.4");
@@ -247,4 +248,8 @@ program
     .option("--prompt", "Output as prompt-ready string instead of JSON")
     .option("--limit <n>", "Max memories to include", "30")
     .action((opts) => (0, session_brief_1.sessionBriefCommand)({ prompt: opts.prompt, limit: parseInt(opts.limit) }));
+program
+    .command("check-rules")
+    .description("Check staged diff against project guardrails — called by pre-commit hook")
+    .action(() => (0, check_rules_1.checkRulesCommand)());
 program.parse(process.argv);

package/dist/commands/check-rules.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkRulesCommand = checkRulesCommand;
+const child_process_1 = require("child_process");
+const persistence_config_1 = require("../utils/persistence-config");
+const API_BASE_DEFAULT = "https://kodingo-api.onrender.com";
+function normalizePath(p) {
+    return p.replace(/\\/g, "/").toLowerCase();
+}
+function getCredentials() {
+    const config = (0, persistence_config_1.readConfig)();
+    const cwd = normalizePath(process.cwd());
+    const ws = (0, persistence_config_1.readWorkspaceConfig)(cwd);
+    const token = ws?.token ?? config.token ?? "";
+    const apiUrl = ws?.apiUrl ?? config.apiUrl ?? API_BASE_DEFAULT;
+    return { token, apiUrl };
+}
+function getStagedDiff() {
+    try {
+        return (0, child_process_1.execSync)("git diff --cached", { encoding: "utf-8", timeout: 10000 });
+    }
+    catch {
+        return "";
+    }
+}
+function getProjectId(token, apiUrl) {
+    return fetch(`${apiUrl}/org/projects/by-token`, {
+        headers: { "X-Kodingo-Token": token },
+    })
+        .then(r => r.ok ? r.json() : null)
+        .then((d) => d?.project?.id ?? null)
+        .catch(() => null);
+}
+async function checkRulesCommand() {
+    const { token, apiUrl } = getCredentials();
+    if (!token)
+        return; // No token — silent pass, never block
+    const diff = getStagedDiff();
+    if (!diff.trim())
+        return; // Empty diff — nothing to check
+    try {
+        const projectId = await getProjectId(token, apiUrl);
+        if (!projectId)
+            return; // Can't resolve project — silent pass
+        const res = await fetch(`${apiUrl}/org/projects/${projectId}/rules/check`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json", "X-Kodingo-Token": token },
+            body: JSON.stringify({ diff }),
+        });
+        if (!res.ok)
+            return; // API error — silent pass, never block on infrastructure failure
+        const data = await res.json();
+        const violations = data.violations ?? [];
+        if (!violations.length)
+            return; // All clear
+        // Hard block
+        console.error("\n╔════════════════════════════════════════════════════════════╗");
+        console.error("║          KORTEX GUARDRAIL VIOLATION — COMMIT BLOCKED        ║");
+        console.error("╚════════════════════════════════════════════════════════════╝\n");
+        console.error(`${violations.length} rule${violations.length !== 1 ? "s" : ""} violated:\n`);
+        for (const v of violations) {
+            console.error(`  ✕ ${v.title}`);
+            console.error(`    ${v.description}`);
+            if (v.explanation)
+                console.error(`    → ${v.explanation}`);
+            console.error("");
+        }
+        console.error("Fix the violations above or contact your engineering lead to update the rules.");
+        console.error("To bypass in an emergency: git commit --no-verify\n");
+        process.exit(1);
+    }
+    catch {
+        return; // Any unexpected error — silent pass
+    }
+}

package/dist/commands/install-hook.js

@@ -20,6 +20,28 @@ async function installHookCommand(options) {
         `"${kodingoBin}" scan-git --repo "$(git rev-parse --show-toplevel)" &`,
         "# </kodingo>",
     ].join("\n");
+    // Pre-commit hook — runs synchronously to enforce guardrails
+    const preCommitPath = path_1.default.join(hooksDir, "pre-commit");
+    const preCommitBlock = [
+        "# <kodingo-guardrails>",
+        "# Kortex: enforce project guardrails before commit",
+        `"${kodingoBin}" check-rules`,
+        "# </kodingo-guardrails>",
+    ].join("\n");
+    if (fs_1.default.existsSync(preCommitPath)) {
+        const existing = fs_1.default.readFileSync(preCommitPath, "utf-8");
+        if (!existing.includes("# <kodingo-guardrails>")) {
+            const updated = existing.endsWith("\n")
+                ? existing + "\n" + preCommitBlock + "\n"
+                : existing + "\n\n" + preCommitBlock + "\n";
+            fs_1.default.writeFileSync(preCommitPath, updated, "utf-8");
+        }
+    }
+    else {
+        const content = "#!/bin/sh\n\n" + preCommitBlock + "\n";
+        fs_1.default.writeFileSync(preCommitPath, content, "utf-8");
+    }
+    fs_1.default.chmodSync(preCommitPath, 0o755);
     if (fs_1.default.existsSync(hookPath)) {
         const existing = fs_1.default.readFileSync(hookPath, "utf-8");
         if (existing.includes("# <kodingo>")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kodingo-cli",
-  "version": "1.0.25",
+  "version": "1.0.26",
   "description": "Kodingo CLI",
   "license": "MIT",
   "private": false,