prae-cli 0.9.1 → 0.9.2

package/lib/{evaluate-wMPkjcIC.js → evaluate-BqLxhYiP.js}

@@ -348,6 +348,7 @@ function pathArgOf(args, explicit) {
 * appending to a pack can never accidentally widen what an agent may do.
 */
 const STRENGTH = {
+	allow: 0,
 	warn: 1,
 	correct: 2,
 	ask: 3,
@@ -479,6 +480,14 @@ function evaluate(pack, facts) {
 			evaluated
 		};
 	}
+	const allowed = hits.find((hit) => hit.effect.kind === "allow");
+	if (allowed !== void 0) return {
+		kind: "allow",
+		rule: allowed.rule.id,
+		reason: allowed.effect.because,
+		trace,
+		evaluated
+	};
 	return {
 		kind: "allow",
 		trace,
@@ -487,4 +496,4 @@ function evaluate(pack, facts) {
 }
 
 //#endregion
-export { evaluate as t };
+export { hostOf as n, withinAny as r, evaluate as t };

package/lib/index.d.ts

@@ -36,6 +36,8 @@ declare function praeRow(options: {
   readonly pack?: string;
   /** The pack as a file the gate watches (hot reload); wins over `pack`. */
   readonly packFile?: string;
+  /** The workspace's own packs, loaded and watched beside `pack` / `packFile`. */
+  readonly packDir?: string;
   /** `shadow` seals every verdict and lets every call through. */
   readonly mode?: 'enforce' | 'shadow';
   readonly ledger?: string;

package/lib/index.js

@@ -1,6 +1,6 @@
-import "./evaluate-wMPkjcIC.js";
-import "./views-CIg2ZNG0.js";
-import { a as planWrite, i as dshHome, n as applyWrite, o as praeRow, r as defaultProfile, s as profileAt, t as main } from "./cli-7yLG89gV.js";
-import "./src-D7g4lvaY.js";
+import "./evaluate-BqLxhYiP.js";
+import "./views-D4UEfbzt.js";
+import { a as planWrite, i as dshHome, n as applyWrite, o as praeRow, r as defaultProfile, s as profileAt, t as main } from "./cli-B_B6-bUZ.js";
+import "./src-LA7NdLKb.js";
 
 export { applyWrite, defaultProfile, dshHome, main, planWrite, praeRow, profileAt };

package/lib/{instructions-Bg5puOen.js → instructions-ya0LVnZy.js}

@@ -1,4 +1,4 @@
-import { c as renderNav, l as renderShell, s as esc, t as navFor } from "./views-CIg2ZNG0.js";
+import { c as renderNav, l as renderShell, s as esc, t as navFor } from "./views-D4UEfbzt.js";
 
 //#region src/console/instructions.ts
 const STYLE = `

package/lib/{mcp-doNYU-1C.js → mcp-BCXbpqu4.js}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-wMPkjcIC.js";
+import { t as evaluate } from "./evaluate-BqLxhYiP.js";
 import { a as scan, n as MAX_SCAN_BYTES } from "./src-B25SHWcz.js";
 import { readFile, readdir, stat } from "node:fs/promises";
 import { resolve, sep } from "node:path";

package/lib/playground.js

@@ -351,6 +351,7 @@
 	* appending to a pack can never accidentally widen what an agent may do.
 	*/
 	const STRENGTH = {
+		allow: 0,
 		warn: 1,
 		correct: 2,
 		ask: 3,
@@ -482,6 +483,14 @@
 				evaluated
 			};
 		}
+		const allowed = hits.find((hit) => hit.effect.kind === "allow");
+		if (allowed !== void 0) return {
+			kind: "allow",
+			rule: allowed.rule.id,
+			reason: allowed.effect.because,
+			trace,
+			evaluated
+		};
 		return {
 			kind: "allow",
 			trace,
@@ -854,9 +863,9 @@
 			check.fail(path, "expected an object");
 			return;
 		}
-		const kind = value.kind;
-		if (kind !== "deny" && kind !== "ask" && kind !== "correct" && kind !== "warn") {
-			check.fail(`${path}.kind`, "expected `deny`, `ask`, `correct`, or `warn`");
+		const kind = value.kind === "hold" ? "ask" : value.kind;
+		if (kind !== "deny" && kind !== "ask" && kind !== "correct" && kind !== "warn" && kind !== "allow") {
+			check.fail(`${path}.kind`, "expected `allow`, `deny`, `hold` (or `ask`), `correct`, or `warn`");
 			return;
 		}
 		check.keys(path, value, kind === "correct" ? [
@@ -890,6 +899,7 @@
 		check.keys(path, value, [
 			"id",
 			"title",
+			"description",
 			"when",
 			"effect",
 			"frameworks"
@@ -908,6 +918,10 @@
 			const title = check.text(`${path}.title`, value.title);
 			if (title !== void 0) rule.title = title;
 		}
+		if (value.description !== void 0) {
+			const description = check.text(`${path}.description`, value.description);
+			if (description !== void 0) rule.description = description;
+		}
 		if (value.frameworks !== void 0) {
 			const frameworks = readFrameworks(check, `${path}.frameworks`, value.frameworks);
 			if (frameworks !== void 0) rule.frameworks = frameworks;
@@ -968,12 +982,16 @@
 			"prae",
 			"pack",
 			"version",
+			"description",
+			"owner",
 			"baseline",
 			"rules"
 		]);
 		if (raw.prae !== "0.1") check.fail(".prae", "expected `\"0.1\"`; this is the only pack version this build reads");
 		const name = check.text(".pack", raw.pack);
 		const version = check.text(".version", raw.version);
+		const description = raw.description === void 0 ? void 0 : check.text(".description", raw.description);
+		const owner = raw.owner === void 0 ? void 0 : check.text(".owner", raw.owner);
 		let baseline;
 		if (raw.baseline !== void 0) if (!isObject(raw.baseline)) check.fail(".baseline", "expected an object");
 		else {
@@ -1010,6 +1028,8 @@
 				prae: "0.1",
 				pack: name,
 				version,
+				...description === void 0 ? {} : { description },
+				...owner === void 0 ? {} : { owner },
 				...baseline === void 0 ? {} : { baseline },
 				rules
 			}

package/lib/{receipt-check-CD-W1wXs.js → receipt-check-DQK_gVPc.js}

@@ -1,4 +1,4 @@
-import { d as verifyReceipt, s as fingerprint } from "./src-D7g4lvaY.js";
+import { c as fingerprint, f as verifyReceipt } from "./src-LA7NdLKb.js";
 
 //#region src/receipt-check.ts
 /** Shape we require before we will call it a receipt at all. */

package/lib/src-7X6dO7gC.js

@@ -0,0 +1,3 @@
+import { _ as hashEntry, a as signBytes, c as fingerprint, d as signEntry, f as verifyReceipt, g as chain, h as canonical, i as sealedKeypair, l as generateKeypair, m as GENESIS, n as readEntries, o as unsealPrivateKey, p as verifySignature, r as verifyEntries, s as verifyBytes, t as Ledger, u as makeReceipt, v as seal } from "./src-LA7NdLKb.js";
+
+export { GENESIS, Ledger, canonical, chain, fingerprint, generateKeypair, hashEntry, makeReceipt, readEntries, seal, sealedKeypair, signBytes, signEntry, unsealPrivateKey, verifyBytes, verifyEntries, verifyReceipt, verifySignature };

package/lib/{src-D7g4lvaY.js → src-LA7NdLKb.js}

@@ -116,6 +116,13 @@ const ANSWER_TTL_MS = 5 * 6e4;
 function signBytes(bytes, privateKey) {
 	return sign(null, Buffer.from(bytes), priv(privateKey)).toString("base64");
 }
+function verifyBytes(bytes, signature, publicKeyPem) {
+	try {
+		return verify(null, Buffer.from(bytes), createPublicKey(publicKeyPem), Buffer.from(signature.trim(), "base64"));
+	} catch {
+		return false;
+	}
+}
 /**
 * How a private key is sealed at rest: scrypt (N = 2^17, r = 8, p = 1) over
 * the passphrase, AES-256-GCM over the key. The sealed file can sit where an
@@ -389,4 +396,4 @@ var Ledger = class Ledger {
 const nap = new Int32Array(new SharedArrayBuffer(4));
 
 //#endregion
-export { seal as _, signBytes as a, generateKeypair as c, verifyReceipt as d, verifySignature as f, hashEntry as g, chain as h, sealedKeypair as i, makeReceipt as l, canonical as m, readEntries as n, unsealPrivateKey as o, GENESIS as p, verifyEntries as r, fingerprint as s, Ledger as t, signEntry as u };
+export { hashEntry as _, signBytes as a, fingerprint as c, signEntry as d, verifyReceipt as f, chain as g, canonical as h, sealedKeypair as i, generateKeypair as l, GENESIS as m, readEntries as n, unsealPrivateKey as o, verifySignature as p, verifyEntries as r, verifyBytes as s, Ledger as t, makeReceipt as u, seal as v };

package/lib/{test-run-XNIRHKOu.js → test-run-CCDgJ0Dp.js}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-wMPkjcIC.js";
+import { t as evaluate } from "./evaluate-BqLxhYiP.js";
 
 //#region src/test-run.ts
 /** The path argument a scenario's call carries, if any. */

package/lib/{views-CIg2ZNG0.js → views-D4UEfbzt.js}

@@ -799,6 +799,18 @@ function renderNav(items, active) {
 
 //#endregion
 //#region ../controls/src/index.ts
+const EU_AI_ACT = {
+	id: "eu-ai-act-2024",
+	name: "EU AI Act — Regulation (EU) 2024/1689"
+};
+const NIST_600_1 = {
+	id: "nist-ai-600-1-2024",
+	name: "NIST AI 600-1 (2024) — Generative AI profile"
+};
+const SOC_2 = {
+	id: "soc2-tsc-2017",
+	name: "SOC 2 — Trust Services Criteria (2017)"
+};
 /**
 * What each control asks for, and what this profile actually produces.
 *
@@ -807,9 +819,35 @@ function renderNav(items, active) {
 * the obligation, and a tool that told them the answer would be selling the
 * one thing it cannot supply.
 */
+const isEvent = (e) => e.tool.startsWith("prae:") || e.tool === "system-prompt";
+const decisionsOf = (data) => data.entries.filter((e) => !isEvent(e));
+const allRules = (data) => (data.pack?.rules ?? []).map((r) => r.id);
+/** Rows under the given rules. */
+const under = (data, rules) => {
+	const ids = new Set(rules);
+	return {
+		rules,
+		rows: data.entries.filter((e) => e.rule !== void 0 && ids.has(e.rule))
+	};
+};
+/** Refusals and holds, with the rules that produced them. */
+function heldAndRefused(data) {
+	const rows = decisionsOf(data).filter((e) => e.verdict === "deny" || e.verdict === "ask");
+	return {
+		rules: [...new Set(rows.flatMap((e) => e.rule ? [e.rule] : []))],
+		rows
+	};
+}
 const OBLIGATIONS = [
 	{
 		id: "EU AI Act art. 12",
+		code: "Art. 12",
+		name: "Record-keeping",
+		standard: EU_AI_ACT,
+		trace: (data) => ({
+			rules: [],
+			rows: data.entries
+		}),
 		asks: "Automatic recording of events over the lifetime of the system, to a degree that enables tracing.",
 		evidence: (data) => ({
 			state: data.entries.length > 0 ? "covered" : "partial",
@@ -818,6 +856,12 @@ const OBLIGATIONS = [
 	},
 	{
 		id: "NIST AI 600-1 · GV-1.2",
+		name: "Trustworthy AI in policy",
+		standard: NIST_600_1,
+		trace: (data) => ({
+			rules: allRules(data),
+			rows: []
+		}),
 		asks: "Characteristics of trustworthy AI are integrated into organisational policies.",
 		evidence: (data) => ({
 			state: data.pack === void 0 ? "absent" : "covered",
@@ -826,6 +870,8 @@ const OBLIGATIONS = [
 	},
 	{
 		id: "NIST AI 600-1 · MS-2.6",
+		name: "Regular safety evaluation",
+		standard: NIST_600_1,
 		asks: "AI system is evaluated regularly for safety risks, with results documented.",
 		evidence: () => ({
 			state: "partial",
@@ -834,6 +880,9 @@ const OBLIGATIONS = [
 	},
 	{
 		id: "SOC 2 · CC7.2",
+		name: "Monitoring for anomalies",
+		standard: SOC_2,
+		trace: (data) => heldAndRefused(data),
 		asks: "The entity monitors system components for anomalies indicative of malicious acts.",
 		evidence: (data) => ({
 			state: data.entries.some((e) => e.verdict === "deny") ? "covered" : "partial",
@@ -842,6 +891,12 @@ const OBLIGATIONS = [
 	},
 	{
 		id: "SOC 2 · CC6.1",
+		name: "Logical access restriction",
+		standard: SOC_2,
+		trace: (data) => ({
+			rules: allRules(data),
+			rows: []
+		}),
 		asks: "Logical access to protected information assets is restricted to authorised users.",
 		evidence: () => ({
 			state: "partial",
@@ -937,6 +992,28 @@ function frameworkRow(frameworkId, control) {
 	return {
 		id: `${framework?.short ?? frameworkId} · ${control}`,
 		asks: `${name}. ${risk?.summary ?? ""}`.trim(),
+		trace: (data) => {
+			const by = BOUNDED_BY[control];
+			if (by !== void 0) return under(data, citing(data.pack, by.framework, by.control).map((r) => r.id));
+			const rules = citing(data.pack, frameworkId, control).map((r) => r.id);
+			if (rules.length > 0) return under(data, rules);
+			if (control === "ASI06") return {
+				rules: [],
+				rows: data.entries.filter((e) => e.rule === "PRAE-ASM" || e.rule === "PRAE-CTX")
+			};
+			if (control === "ASI10") return {
+				rules: [
+					"ASI02",
+					"ASI03",
+					"ASI08"
+				].flatMap((c) => citing(data.pack, AGENTIC, c)).map((r) => r.id),
+				rows: decisionsOf(data).filter((e) => e.verdict === "deny")
+			};
+			return {
+				rules: [],
+				rows: []
+			};
+		},
 		evidence: (data) => {
 			if (data.pack === void 0) return {
 				state: "absent",
@@ -975,8 +1052,6 @@ const ISO_27001 = {
 	id: "iso-iec-27001-2022",
 	name: "ISO/IEC 27001:2022 — Annex A"
 };
-const isEvent = (e) => e.tool.startsWith("prae:") || e.tool === "system-prompt";
-const decisionsOf = (data) => data.entries.filter((e) => !isEvent(e));
 /** Rules in the pack whose `when` names a capability matching `test`. */
 function rulesOn(pack, test) {
 	return (pack?.rules ?? []).filter((rule) => {
@@ -1018,6 +1093,10 @@ const ISO_CONTROLS = [
 		id: "ISO/IEC 42001 · A.2.2",
 		name: "AI policy",
 		standard: ISO_42001,
+		trace: (data) => ({
+			rules: allRules(data),
+			rows: []
+		}),
 		asks: "The organisation has a documented policy for developing or using AI systems.",
 		evidence: (data) => data.pack === void 0 ? {
 			state: "absent",
@@ -1031,6 +1110,7 @@ const ISO_CONTROLS = [
 		id: "ISO/IEC 42001 · A.6.2.6",
 		name: "AI system operation and monitoring",
 		standard: ISO_42001,
+		trace: heldAndRefused,
 		asks: "The AI system is monitored while it operates, and what is found is acted on.",
 		evidence: monitored
 	},
@@ -1038,6 +1118,10 @@ const ISO_CONTROLS = [
 		id: "ISO/IEC 42001 · A.6.2.8",
 		name: "Recording of event logs",
 		standard: ISO_42001,
+		trace: (data) => ({
+			rules: [],
+			rows: data.entries
+		}),
 		asks: "Event logs are kept while the AI system is in use.",
 		evidence: recorded
 	},
@@ -1045,6 +1129,13 @@ const ISO_CONTROLS = [
 		id: "ISO/IEC 42001 · A.9.4",
 		name: "Intended use of the AI system",
 		standard: ISO_42001,
+		trace: (data) => {
+			const rows = decisionsOf(data).filter((e) => e.verdict === "deny");
+			return {
+				rules: [...new Set(rows.flatMap((e) => e.rule ? [e.rule] : []))],
+				rows
+			};
+		},
 		asks: "The AI system is used only for its intended uses.",
 		evidence: (data) => {
 			if (data.pack === void 0) return {
@@ -1065,6 +1156,10 @@ const ISO_CONTROLS = [
 		id: "ISO/IEC 27001 · A.8.3",
 		name: "Information access restriction",
 		standard: ISO_27001,
+		trace: (data) => ({
+			rules: rulesOn(data.pack, (c) => c.startsWith("fs:")).map((r) => r.id),
+			rows: decisionsOf(data).filter((e) => e.verdict === "deny" && e.capability?.startsWith("fs:"))
+		}),
 		asks: "Access to information is restricted according to the access-control policy.",
 		evidence: (data) => {
 			const rules = rulesOn(data.pack, (c) => c.startsWith("fs:"));
@@ -1086,6 +1181,10 @@ const ISO_CONTROLS = [
 		id: "ISO/IEC 27001 · A.8.12",
 		name: "Data leakage prevention",
 		standard: ISO_27001,
+		trace: (data) => ({
+			rules: [...new Set([...rulesOn(data.pack, (c) => c === "net:fetch").map((r) => r.id), ...(data.pack?.rules ?? []).filter((r) => r.when.secrets !== void 0).map((r) => r.id)])],
+			rows: decisionsOf(data).filter((e) => e.verdict === "deny" && (e.capability === "net:fetch" || e.secrets !== void 0 || e.phase === "output"))
+		}),
 		asks: "Leakage of sensitive information is prevented where it is processed or sent.",
 		evidence: (data) => {
 			const rules = [...rulesOn(data.pack, (c) => c === "net:fetch"), ...(data.pack?.rules ?? []).filter((r) => r.when.secrets !== void 0)];
@@ -1107,6 +1206,10 @@ const ISO_CONTROLS = [
 		id: "ISO/IEC 27001 · A.8.15",
 		name: "Logging",
 		standard: ISO_27001,
+		trace: (data) => ({
+			rules: [],
+			rows: data.entries
+		}),
 		asks: "Activities, exceptions and other relevant events are logged, and the logs are protected.",
 		evidence: recorded
 	},
@@ -1114,6 +1217,7 @@ const ISO_CONTROLS = [
 		id: "ISO/IEC 27001 · A.8.16",
 		name: "Monitoring activities",
 		standard: ISO_27001,
+		trace: heldAndRefused,
 		asks: "Systems are monitored for anomalous behaviour, and potential incidents are evaluated.",
 		evidence: monitored
 	}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prae-cli",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Operator policy for agent harnesses: validate packs, explain a decision, test a pack against security invariants, verify a decision log, and provision a governed DSH profile.",
   "keywords": [
     "dsh-plugin",
@@ -33,7 +33,8 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "capmark": "^0.3.1",
-    "dsh-overlay-check": "^0.4.0"
+    "dsh-overlay-check": "^0.4.0",
+    "yaml": "^2.8.3"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",
@@ -41,11 +42,11 @@
     "typescript": "^5.9.2",
     "vitest": "^3.2.4",
     "@prae/controls": "0.1.0",
-    "@prae/extract": "0.1.0",
     "@prae/inspect": "0.1.0",
+    "@prae/extract": "0.1.0",
     "@prae/instructions": "0.1.0",
-    "@prae/kernel": "0.1.0",
     "@prae/ledger": "0.1.0",
+    "@prae/kernel": "0.1.0",
     "@prae/tokens": "0.1.0"
   },
   "scripts": {

package/lib/src-d82lSKVQ.js

@@ -1,3 +0,0 @@
-import { _ as seal, a as signBytes, c as generateKeypair, d as verifyReceipt, f as verifySignature, g as hashEntry, h as chain, i as sealedKeypair, l as makeReceipt, m as canonical, n as readEntries, o as unsealPrivateKey, p as GENESIS, r as verifyEntries, s as fingerprint, t as Ledger, u as signEntry } from "./src-D7g4lvaY.js";
-
-export { GENESIS, Ledger, canonical, chain, fingerprint, generateKeypair, hashEntry, makeReceipt, readEntries, seal, sealedKeypair, signBytes, signEntry, unsealPrivateKey, verifyEntries, verifyReceipt, verifySignature };