safepropel 1.0.6 → 1.0.8

package/.windsurf/rules/safepropel-framework-autoload.md

@@ -11,9 +11,15 @@ applyTo: '**'
 **Upon workspace load, you MUST immediately load the SafePropel bundle:**
 
 ```javascript
-const { PromptRuntime } = require('./engine/runtime.js');
+const { PromptRuntime } = require('./safepropel/engine/runtime.js');
 const runtime = new PromptRuntime();
-runtime.load('./engine/prompt_bundle.bin');
+const licenseKey = process.env.SAFEPROPEL_LICENSE_KEY;
+
+if (!licenseKey) {
+  throw new Error('SAFEPROPEL_LICENSE_KEY environment variable is required');
+}
+
+runtime.load('./safepropel/engine/prompt_bundle.enc', licenseKey);
 
 console.log('✅ SafePropel Bundle Loaded');
 console.log(`📦 Total Entries: ${runtime.info().totalEntries}`);
@@ -21,6 +27,8 @@ console.log(`📦 Total Entries: ${runtime.info().totalEntries}`);
 
 **This is NOT optional. Load the bundle BEFORE processing ANY user query.**
 
+**CRITICAL:** The bundle path is `./safepropel/engine/prompt_bundle.enc` (encrypted file, requires license key).
+
 ---
 
 ## Framework Enforcement Policy
@@ -65,7 +73,7 @@ This framework contains **ALL** specifications in the binary bundle:
 
 **Ask yourself these questions BEFORE you create ANY file:**
 
-1. ❓ Did I load the bundle using `runtime.load('./engine/prompt_bundle.bin')`?
+1. ❓ Did I load the bundle using `runtime.load('./safepropel/engine/prompt_bundle.enc', licenseKey)`?
    - ❌ NO → **STOP! Load bundle first**
    - ✅ YES → Continue to question 2
 
@@ -135,9 +143,15 @@ This framework contains **ALL** specifications in the binary bundle:
 
 **Step 0: Initialize Bundle (MANDATORY - Do this FIRST when workspace loads)**
 ```javascript
-const { PromptRuntime } = require('./engine/runtime.js');
+const { PromptRuntime } = require('./safepropel/engine/runtime.js');
 const runtime = new PromptRuntime();
-runtime.load('./engine/prompt_bundle.bin');
+const licenseKey = process.env.SAFEPROPEL_LICENSE_KEY;
+
+if (!licenseKey) {
+  throw new Error('SAFEPROPEL_LICENSE_KEY environment variable is required');
+}
+
+runtime.load('./safepropel/engine/prompt_bundle.enc', licenseKey);
 
 // Verify bundle loaded
 const info = runtime.info();

package/.windsurfrules

@@ -13,9 +13,15 @@ User says: "create spec for BRD.txt"
 
 **STEP 2: Load Bundle Internally**
 ```javascript
-const { PromptRuntime } = require('./engine/runtime.js');
+const { PromptRuntime } = require('./safepropel/engine/runtime.js');
 const runtime = new PromptRuntime();
-runtime.load('./engine/prompt_bundle.enc', process.env.SAFEPROPEL_LICENSE_KEY);
+const licenseKey = process.env.SAFEPROPEL_LICENSE_KEY;
+
+if (!licenseKey) {
+  throw new Error('SAFEPROPEL_LICENSE_KEY environment variable is required');
+}
+
+runtime.load('./safepropel/engine/prompt_bundle.enc', licenseKey);
 ```
 
 **STEP 3: Get Workflow Metadata from Bundle**
@@ -57,7 +63,7 @@ const output = executeWorkflow(workflowContent, inputContent, rulesContent, temp
 ```
 User Request
     ↓
-Load engine/prompt_bundle.bin (in memory)
+Load safepropel/engine/prompt_bundle.enc (in memory, requires license key)
     ↓
 Get workflow from bundle (in memory)
     ↓
@@ -104,7 +110,7 @@ discovery-agent, backlog-agent, build-feature-agent, bug-fixing-agent
 User: "Create a spec for health_brd.txt"
 
 Cascade:
-1. Loads engine/prompt_bundle.enc (requires SAFEPROPEL_LICENSE_KEY)
+1. Loads safepropel/engine/prompt_bundle.enc (requires SAFEPROPEL_LICENSE_KEY)
 2. Gets create-spec workflow from bundle
 3. Reads health_brd.txt
 4. Executes workflow

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safepropel",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "SafePropel Framework - Unified Protection System for AI Workflow Execution with 4-layer security (Compilation, Encryption, Runtime Engine, Firewall)",
   "main": "engine/workflow-executor.js",
   "scripts": {

package/postinstall.js

@@ -19,14 +19,14 @@ console.log(`   Source: ${packageDir}`);
 console.log(`   Target: ${projectRoot}`);
 
 try {
-  // Step 1: Copy safepropel folder (engine + safepropel.js)
+  // Step 1: Copy safepropel folder (ONLY engine + safepropel.js - no .windsurf!)
   if (fs.existsSync(safepropelDir)) {
     console.log(`⚠️  safepropel/ folder already exists - skipping`);
   } else {
     fs.mkdirSync(safepropelDir, { recursive: true });
     
-    // Copy engine folder and safepropel.js
-    const safepropelItems = ['engine', 'safepropel.js', 'package.json', 'README.md', 'LICENSE'];
+    // Copy ONLY engine and safepropel.js (not .windsurf or .windsurfrules)
+    const safepropelItems = ['engine', 'safepropel.js'];
     safepropelItems.forEach(item => {
       const src = path.join(packageDir, item);
       const dest = path.join(safepropelDir, item);
@@ -40,7 +40,7 @@ try {
         }
       }
     });
-    console.log(`✅ Copied safepropel/ folder`);
+    console.log(`✅ Copied safepropel/ folder (engine + safepropel.js)`);
   }
   
   // Step 2: Copy .windsurf to PROJECT ROOT (so Cascade can find it)
@@ -76,16 +76,16 @@ try {
 console.log(`
 📁 Project structure:
    your-project/
-   ├── .windsurf/
+   ├── .windsurf/                    (Cascade integration - at root)
    │   └── rules/
    │       └── safepropel-framework-autoload.md
-   ├── .windsurfrules
-   ├── safepropel/
+   ├── .windsurfrules                (Cascade integration - at root)
+   ├── safepropel/                   (Framework files only)
    │   ├── engine/
    │   │   └── prompt_bundle.enc
    │   └── safepropel.js
    └── node_modules/
-       └── safepropel/
+       └── safepropel/               (npm package - not used directly)
 
 📋 REQUIRED SETUP - Set License Key: