prae-cli 0.4.0 → 0.5.1

package/lib/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import "./evaluate-BilZez15.js";
-import { t as main } from "./cli-BvAYSK5w.js";
-import "./src-CAUNqZJ1.js";
+import "./evaluate-DMyL3qM_.js";
+import { t as main } from "./cli-DfXHsQO7.js";
+import "./src-CXU0_W1P.js";
 import "./views-DalPkBZZ.js";
 
 //#region src/bin.ts

package/lib/{cli-BvAYSK5w.js → cli-DfXHsQO7.js}

@@ -1,5 +1,5 @@
-import { t as evaluate } from "./evaluate-BilZez15.js";
-import { p as seal, t as Ledger } from "./src-CAUNqZJ1.js";
+import { t as evaluate } from "./evaluate-DMyL3qM_.js";
+import { m as seal, t as Ledger } from "./src-CXU0_W1P.js";
 import { a as renderPacks, c as renderShell, i as renderOverview, l as VERDICT_LABEL$1, n as renderApprovals, o as esc, r as renderCompliance, s as renderNav, t as navFor } from "./views-DalPkBZZ.js";
 import { existsSync, readFileSync } from "node:fs";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -864,6 +864,10 @@ const USAGE = `prae — operator policy for agent harnesses
   prae receipt <ledger.jsonl> <seq> --key <private.pem> [--out <file>]
       Export one decision as a self-contained signed receipt.
 
+  prae verify-receipt <receipt.json>
+      Check one receipt with nothing but the file: recompute its hash, verify
+      its signature, and print the key fingerprint to compare against your own.
+
   prae report <ledger.jsonl> [--out <file.html>]
       Render the decision record as a printable evidence report.
 
@@ -966,13 +970,13 @@ async function scanFile(path, packPath, json) {
 * not come up inspecting nothing.
 */
 async function mcp(root, packPath, ledgerPath) {
-	const { serveMcp } = await import("./mcp-BH5I4Eyu.js");
+	const { serveMcp } = await import("./mcp-CEN48TpN.js");
 	const { resolve: resolve$1 } = await import("node:path");
 	const bundled = [join(import.meta.dirname, "secret-catcher.prae.json"), join(import.meta.dirname, "..", "..", "..", "examples", "secret-catcher.prae.json")].find((candidate) => existsSync(candidate));
 	const chosen = packPath ?? bundled;
 	if (chosen === void 0) return fail("mcp needs --pack <file>; no bundled secret-catcher found");
 	const pack = await loadPack(chosen);
-	const { Ledger: Ledger$1 } = await import("./src-CBK_quVO.js");
+	const { Ledger: Ledger$1 } = await import("./src-Kubj3MTX.js");
 	const ledger = ledgerPath === void 0 ? void 0 : Ledger$1.open(ledgerPath);
 	console.error(`prae mcp: serving ${resolve$1(root)} under ${pack.pack} ${pack.version}` + (ledgerPath === void 0 ? " (no ledger)" : ` · ledger ${ledgerPath}`));
 	await serveMcp({
@@ -1024,7 +1028,7 @@ async function explain(path, tool, pairs) {
 * a key that arrived beside it is checked against nothing.
 */
 async function keygen(dir) {
-	const { generateKeypair, fingerprint } = await import("./src-CBK_quVO.js");
+	const { generateKeypair, fingerprint } = await import("./src-Kubj3MTX.js");
 	const { writeFileSync: writeFileSync$1 } = await import("node:fs");
 	const keys = generateKeypair();
 	const priv = join(dir, "prae-signing.pem");
@@ -1040,7 +1044,7 @@ async function keygen(dir) {
 	console.log("private key with `signingKey` to sign every row.");
 }
 async function receipt(path, seq, keyPath, out) {
-	const { Ledger: Ledger$1, makeReceipt, fingerprint } = await import("./src-CBK_quVO.js");
+	const { Ledger: Ledger$1, makeReceipt, fingerprint } = await import("./src-Kubj3MTX.js");
 	const { readFileSync: readFileSync$1 } = await import("node:fs");
 	const { createPublicKey } = await import("node:crypto");
 	const privateKey = readFileSync$1(keyPath, "utf8");
@@ -1061,6 +1065,27 @@ async function receipt(path, seq, keyPath, out) {
 	console.log("The verifier compares that fingerprint against the one they");
 	console.log("pinned — a receipt is only as good as the key they trust.");
 }
+/**
+* `prae verify-receipt`: check a single self-contained receipt.
+*
+* The counterparty's command. It needs nothing but the receipt file — no
+* ledger, no PRAE account, no trust in the machine that issued it. The verdict
+* and its wording live in `receipt-check.ts` as a pure function; this reads the
+* file and sets the exit code, so scripts can branch on it.
+*/
+async function verifyReceiptCmd(path) {
+	const { checkReceipt } = await import("./receipt-check-Dql0uqxw.js");
+	let parsed;
+	try {
+		parsed = JSON.parse(await readFile(path, "utf8"));
+	} catch {
+		return fail(`cannot read a receipt from ${path}`);
+	}
+	const result = checkReceipt(parsed);
+	for (const line of result.lines) if (result.ok) console.log(line);
+	else console.error(line);
+	if (!result.ok) process.exit(1);
+}
 async function verify(path, keyPath) {
 	let ledger;
 	try {
@@ -1074,7 +1099,7 @@ async function verify(path, keyPath) {
 		const last = entries.at(-1);
 		console.log(`${result.entries} entries · chain intact${last === void 0 ? "" : ` · seal ${seal(last)}`}`);
 		if (keyPath !== void 0) {
-			const { verifySignature, fingerprint } = await import("./src-CBK_quVO.js");
+			const { verifySignature, fingerprint } = await import("./src-Kubj3MTX.js");
 			const { readFileSync: readFileSync$1 } = await import("node:fs");
 			const publicKey = readFileSync$1(keyPath, "utf8");
 			let signed = 0;
@@ -1150,7 +1175,7 @@ async function report(path, out) {
 * that step is a proposal a human approves, and it starts from this list.
 */
 async function instructions(from, asJson) {
-	const { ingest } = await import("./src-CCeafjdm.js");
+	const { ingest } = await import("./src-C4fnUm9V.js");
 	const result = ingest(from);
 	if (asJson) {
 		console.log(JSON.stringify(result, null, 2));
@@ -1186,7 +1211,7 @@ async function instructions(from, asJson) {
 * on purpose rather than something that happened to their policy.
 */
 async function propose(from, options) {
-	const [{ ingest }, { extract }] = await Promise.all([import("./src-CCeafjdm.js"), import("./src-aU5WW02C.js")]);
+	const [{ ingest }, { extract }] = await Promise.all([import("./src-C4fnUm9V.js"), import("./src-BfYsUDW9.js")]);
 	const read = ingest(from);
 	if (read.files.length === 0) {
 		console.log(`No instruction files found at or above ${from}.`);
@@ -1246,8 +1271,8 @@ async function consoleOut(path, argv) {
 	const instructionsDir = flag(argv, "instructions");
 	if (instructionsDir !== void 0) {
 		const [{ ingest }, { extract }, { renderInstructions }] = await Promise.all([
-			import("./src-CCeafjdm.js"),
-			import("./src-aU5WW02C.js"),
+			import("./src-C4fnUm9V.js"),
+			import("./src-BfYsUDW9.js"),
 			import("./instructions-D4VOn2lk.js")
 		]);
 		const read = ingest(instructionsDir);
@@ -1369,6 +1394,11 @@ async function main(argv) {
 			if (path === void 0) fail("verify needs a ledger file");
 			return verify(path, flag(rest, "key"));
 		}
+		case "verify-receipt": {
+			const path = rest[0];
+			if (path === void 0) fail("verify-receipt needs a receipt file");
+			return verifyReceiptCmd(path);
+		}
 		case "report": {
 			const path = rest[0];
 			if (path === void 0) fail("report needs a ledger file");

package/lib/{evaluate-BilZez15.js → evaluate-DMyL3qM_.js}

@@ -266,6 +266,42 @@ function hostIn(host, list$1) {
 		return host === want;
 	});
 }
+/**
+* Argument names that conventionally carry a filesystem path, in the order
+* they are tried when a path rule names none.
+*
+* A path rule used to default to the single argument spelled `path`. DeepSeek
+* Harness's own `read`, `write` and `edit` tools pass `file_path`, so every
+* shipped path rule without an explicit `arg` — including the baseline's
+* "deny read ./.env" — matched nothing on the very harness it was written
+* for, while the ledger dutifully recorded every allowed read. A rule that
+* silently never fires is the worst way for policy to be wrong; defaulting
+* to the conventional set is the same call the dsh adapter already made for
+* path resolution, now made once, here, for matching too.
+*/
+const PATH_ARGS = [
+	"path",
+	"file_path",
+	"filePath",
+	"target",
+	"directory",
+	"cwd",
+	"file",
+	"dest",
+	"destination",
+	"source"
+];
+/** The first conventional path argument present, as a string, or undefined. */
+function pathArgOf(args, explicit) {
+	if (explicit !== void 0) {
+		const v = args[explicit];
+		return typeof v === "string" ? v : void 0;
+	}
+	for (const key of PATH_ARGS) {
+		const v = args[key];
+		if (typeof v === "string") return v;
+	}
+}
 
 //#endregion
 //#region ../kernel/src/rule.ts
@@ -319,7 +355,7 @@ function matches(when, facts) {
 		if (!commandMatches(when.command, raw)) return false;
 	}
 	if (when.path !== void 0) {
-		const raw = facts.args[when.path.arg ?? "path"];
+		const raw = pathArgOf(facts.args, when.path.arg);
 		if (typeof raw !== "string") return false;
 		if (when.path.inside !== void 0 && !withinAny(raw, when.path.inside)) return false;
 		if (when.path.outside !== void 0 && withinAny(raw, when.path.outside)) return false;

package/lib/index.js

@@ -1,6 +1,6 @@
-import "./evaluate-BilZez15.js";
-import { a as planWrite, i as dshHome, n as applyWrite, o as praeRow, r as defaultProfile, s as profileAt, t as main } from "./cli-BvAYSK5w.js";
-import "./src-CAUNqZJ1.js";
+import "./evaluate-DMyL3qM_.js";
+import { a as planWrite, i as dshHome, n as applyWrite, o as praeRow, r as defaultProfile, s as profileAt, t as main } from "./cli-DfXHsQO7.js";
+import "./src-CXU0_W1P.js";
 import "./views-DalPkBZZ.js";
 
 export { applyWrite, defaultProfile, dshHome, main, planWrite, praeRow, profileAt };

package/lib/{mcp-BH5I4Eyu.js → mcp-CEN48TpN.js}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-BilZez15.js";
+import { t as evaluate } from "./evaluate-DMyL3qM_.js";
 import { a as scan, n as MAX_SCAN_BYTES } from "./src-Br1tGPtS.js";
 import { readFile, readdir, stat } from "node:fs/promises";
 import { resolve, sep } from "node:path";

package/lib/playground.js

@@ -269,6 +269,42 @@
 			return host === want;
 		});
 	}
+	/**
+	* Argument names that conventionally carry a filesystem path, in the order
+	* they are tried when a path rule names none.
+	*
+	* A path rule used to default to the single argument spelled `path`. DeepSeek
+	* Harness's own `read`, `write` and `edit` tools pass `file_path`, so every
+	* shipped path rule without an explicit `arg` — including the baseline's
+	* "deny read ./.env" — matched nothing on the very harness it was written
+	* for, while the ledger dutifully recorded every allowed read. A rule that
+	* silently never fires is the worst way for policy to be wrong; defaulting
+	* to the conventional set is the same call the dsh adapter already made for
+	* path resolution, now made once, here, for matching too.
+	*/
+	const PATH_ARGS = [
+		"path",
+		"file_path",
+		"filePath",
+		"target",
+		"directory",
+		"cwd",
+		"file",
+		"dest",
+		"destination",
+		"source"
+	];
+	/** The first conventional path argument present, as a string, or undefined. */
+	function pathArgOf(args, explicit) {
+		if (explicit !== void 0) {
+			const v = args[explicit];
+			return typeof v === "string" ? v : void 0;
+		}
+		for (const key of PATH_ARGS) {
+			const v = args[key];
+			if (typeof v === "string") return v;
+		}
+	}
 
 //#endregion
 //#region ../kernel/src/rule.ts
@@ -322,7 +358,7 @@
 			if (!commandMatches(when.command, raw)) return false;
 		}
 		if (when.path !== void 0) {
-			const raw = facts.args[when.path.arg ?? "path"];
+			const raw = pathArgOf(facts.args, when.path.arg);
 			if (typeof raw !== "string") return false;
 			if (when.path.inside !== void 0 && !withinAny(raw, when.path.inside)) return false;
 			if (when.path.outside !== void 0 && withinAny(raw, when.path.outside)) return false;

package/lib/receipt-check-Dql0uqxw.js

@@ -0,0 +1,39 @@
+import { c as verifyReceipt, i as fingerprint } from "./src-CXU0_W1P.js";
+
+//#region src/receipt-check.ts
+/** Shape we require before we will call it a receipt at all. */
+function looksLikeReceipt(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const r = value;
+	return typeof r.signature === "string" && typeof r.publicKey === "string" && typeof r.entry === "object" && r.entry !== null;
+}
+function checkReceipt(parsed) {
+	if (!looksLikeReceipt(parsed)) return {
+		ok: false,
+		lines: ["✗ not a receipt: expected `entry`, `signature` and `publicKey` fields"]
+	};
+	const result = verifyReceipt(parsed);
+	if (!result.ok) return {
+		ok: false,
+		lines: [`✗ receipt does NOT verify: ${result.reason}`]
+	};
+	const { verdict, tool, rule, subject } = parsed.entry;
+	return {
+		ok: true,
+		lines: [
+			"✓ receipt verifies — authentic and unaltered",
+			`  ${[
+				verdict,
+				tool,
+				rule === void 0 ? void 0 : `· ${rule}`,
+				subject === void 0 ? void 0 : `· ${subject}`
+			].filter((part) => part !== void 0).join(" ")}`,
+			`  sealed by key  ${fingerprint(parsed.publicKey)}`,
+			"  Compare that fingerprint to the one you pinned out of band.",
+			"  It matches → this is a decision that key’s holder sealed, unchanged."
+		]
+	};
+}
+
+//#endregion
+export { checkReceipt };

package/lib/{src-CAUNqZJ1.js → src-CXU0_W1P.js}

@@ -76,6 +76,23 @@ function makeReceipt(entry, privateKeyPem, publicKeyPem) {
 		publicKey: publicKeyPem
 	};
 }
+/** Verify a receipt from nothing but the receipt. */
+function verifyReceipt(receipt) {
+	if (receipt.receipt !== "prae/1") return {
+		ok: false,
+		reason: `unknown receipt format ${String(receipt.receipt)}`
+	};
+	const { seq, prev, hash, sig,...record } = receipt.entry;
+	if (hashEntry(record, seq, prev) !== hash) return {
+		ok: false,
+		reason: "entry contents do not match their seal; the row was altered"
+	};
+	if (!verifySignature(receipt.entry, receipt.signature, receipt.publicKey)) return {
+		ok: false,
+		reason: "signature does not verify; not sealed by this key"
+	};
+	return { ok: true };
+}
 /**
 * A short identifier for a public key, for pinning by eye.
 *
@@ -222,4 +239,4 @@ var Ledger = class Ledger {
 };
 
 //#endregion
-export { generateKeypair as a, verifySignature as c, chain as d, hashEntry as f, fingerprint as i, GENESIS as l, readEntries as n, makeReceipt as o, seal as p, verifyEntries as r, signEntry as s, Ledger as t, canonical as u };
+export { generateKeypair as a, verifyReceipt as c, canonical as d, chain as f, fingerprint as i, verifySignature as l, seal as m, readEntries as n, makeReceipt as o, hashEntry as p, verifyEntries as r, signEntry as s, Ledger as t, GENESIS as u };

package/lib/src-Kubj3MTX.js

@@ -0,0 +1,3 @@
+import { a as generateKeypair, c as verifyReceipt, d as canonical, f as chain, i as fingerprint, l as verifySignature, m as seal, n as readEntries, o as makeReceipt, p as hashEntry, r as verifyEntries, s as signEntry, t as Ledger, u as GENESIS } from "./src-CXU0_W1P.js";
+
+export { GENESIS, Ledger, canonical, chain, fingerprint, generateKeypair, hashEntry, makeReceipt, readEntries, seal, signEntry, verifyEntries, verifyReceipt, verifySignature };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prae-cli",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "Operator policy for agent harnesses: validate packs, explain a decision, verify a decision log, and provision a governed DSH profile.",
   "keywords": [
     "dsh-plugin",
@@ -40,8 +40,8 @@
     "tsdown": "^0.15.6",
     "typescript": "^5.9.2",
     "vitest": "^3.2.4",
-    "@prae/controls": "0.1.0",
     "@prae/extract": "0.1.0",
+    "@prae/controls": "0.1.0",
     "@prae/inspect": "0.1.0",
     "@prae/instructions": "0.1.0",
     "@prae/kernel": "0.1.0",

package/lib/src-CBK_quVO.js

@@ -1,3 +0,0 @@
-import { a as generateKeypair, c as verifySignature, d as chain, f as hashEntry, i as fingerprint, l as GENESIS, n as readEntries, o as makeReceipt, p as seal, r as verifyEntries, s as signEntry, t as Ledger, u as canonical } from "./src-CAUNqZJ1.js";
-
-export { GENESIS, Ledger, canonical, chain, fingerprint, generateKeypair, hashEntry, makeReceipt, readEntries, seal, signEntry, verifyEntries, verifySignature };