prae-cli 0.3.0 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +16 -0
- package/lib/bin.js +4 -3
- package/lib/{cli-DZ0FPdSr.js → cli-BvAYSK5w.js} +137 -432
- package/lib/evaluate-BilZez15.js +419 -0
- package/lib/index.js +4 -3
- package/lib/{instructions-C6jwClPO.js → instructions-D4VOn2lk.js} +1 -1
- package/lib/mcp-BH5I4Eyu.js +208 -0
- package/lib/playground.js +38 -1
- package/lib/secret-catcher.prae.json +49 -0
- package/lib/src-Br1tGPtS.js +182 -0
- package/lib/{src-Cinsv7Wq.js → src-CBK_quVO.js} +1 -1
- package/lib/src-Vnr0fcpK.js +3 -0
- package/package.json +3 -1
- /package/lib/{src-DGWTvmRZ.js → src-CAUNqZJ1.js} +0 -0
- /package/lib/{src-2pGbYeGU.js → src-CCeafjdm.js} +0 -0
- /package/lib/{src-CuHszf3f.js → src-aU5WW02C.js} +0 -0
- /package/lib/{views-CLLfJPWB.js → views-DalPkBZZ.js} +0 -0
package/README.md
CHANGED
|
@@ -33,6 +33,22 @@ engine, and answering it should not require running an agent.
|
|
|
33
33
|
It also says when no capability claims the named tool, so a reader cannot infer
|
|
34
34
|
coverage that is not there.
|
|
35
35
|
|
|
36
|
+
### `prae scan <file> [--pack <pack.json>] [--json]`
|
|
37
|
+
|
|
38
|
+
Inspect a file for credentials the way the gate does before a read: provider
|
|
39
|
+
formats plus entropy, placeholders dropped. Findings name the type, rule,
|
|
40
|
+
line and confidence — structurally never the secret, so the output is safe to
|
|
41
|
+
paste anywhere. With `--pack`, also prints the verdict that pack would reach.
|
|
42
|
+
|
|
43
|
+
### `prae mcp --root <dir> [--pack <pack.json>] [--ledger <file>]`
|
|
44
|
+
|
|
45
|
+
Serve gated filesystem access over MCP stdio. Any MCP-capable IDE or agent
|
|
46
|
+
mounts this as its file tool; every `read_file` is inspected before its
|
|
47
|
+
contents are returned, refusals are structured JSON with `"retry": false`,
|
|
48
|
+
and every decision lands in the ledger. Reads are confined to `--root`. With
|
|
49
|
+
no `--pack`, the bundled `secret-catcher` pack mounts. See
|
|
50
|
+
`docs/secret-catcher.md` for client configuration.
|
|
51
|
+
|
|
36
52
|
### `prae verify <ledger.jsonl>`
|
|
37
53
|
|
|
38
54
|
Re-derive every hash in a decision log and report any break. Prints the limit
|
package/lib/bin.js
CHANGED
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import
|
|
3
|
-
import "./
|
|
4
|
-
import "./
|
|
2
|
+
import "./evaluate-BilZez15.js";
|
|
3
|
+
import { t as main } from "./cli-BvAYSK5w.js";
|
|
4
|
+
import "./src-CAUNqZJ1.js";
|
|
5
|
+
import "./views-DalPkBZZ.js";
|
|
5
6
|
|
|
6
7
|
//#region src/bin.ts
|
|
7
8
|
main(process.argv.slice(2)).catch((error) => {
|