safepropel 1.4.7 → 1.4.9

package/.windsurf/rules/safepropel-framework-autoload.md

@@ -14,9 +14,16 @@ Cascade reads this instruction file and uses its own capabilities to complete ta
 
 **Example: "create spec for health.txt"**
 
-**STEP 0: VERIFY LICENSE KEY (MANDATORY)**
+**STEP 0: VERIFY LICENSE KEY (MANDATORY - STOP IF MISSING)**
+
+**CRITICAL:** Before proceeding, verify license key is available:
 - Check: Is SAFEPROPEL_LICENSE_KEY environment variable set?
-- If NO → STOP immediately, report error to user: "SAFEPROPEL_LICENSE_KEY is required"
+- If NO → **STOP immediately, do NOT proceed to any other step**
+  - Do NOT load templates
+  - Do NOT load rules
+  - Do NOT attempt to execute workflow
+  - Do NOT use your own knowledge as fallback
+  - **ONLY action: Report to user:** "License key required. Please set SAFEPROPEL_LICENSE_KEY environment variable or provide --license-key=KEY flag, then try again."
 - If YES → Continue to Step 1
 
 **STEP 1: Identify workflow from query**

package/cascade-rules.js

@@ -35,13 +35,28 @@ Example: \`create-spec\` workflow references 9 rules, \`create-design\` might re
 
 ### When User Requests: "create spec for health.txt"
 
-**STEP 1: Verify License Key (MANDATORY)**
+**STEP 1: Verify License Key (MANDATORY - STOP IF MISSING)**
+
 \`\`\`javascript
 if (!process.env.SAFEPROPEL_LICENSE_KEY) {
-  throw new Error('❌ SAFEPROPEL_LICENSE_KEY environment variable is required');
+  // CRITICAL: STOP EXECUTION IMMEDIATELY
+  // Do NOT proceed with any workflow execution
+  // Do NOT use templates or rules
+  // Do NOT generate any output
+  // Do NOT improvise or create manually
+  return "License key required. Please set SAFEPROPEL_LICENSE_KEY environment variable or provide --license-key=KEY flag, then try again.";
 }
 \`\`\`
 
+**ABSOLUTE REQUIREMENT:**
+- If license key is missing, STOP immediately
+- Do NOT continue to STEP 2
+- Do NOT load templates
+- Do NOT load rules  
+- Do NOT generate output
+- Do NOT use your own knowledge as fallback
+- The ONLY action is to ask user for the key
+
 **STEP 2: Run CLI with --json and --cascade-internal Flags**
 \`\`\`bash
 node safepropel/safepropel.js create-spec health.txt --json --cascade-internal

package/engine/workflow-executor.js

@@ -167,6 +167,14 @@ class WorkflowExecutor {
    */
   execute(commandStr, workspaceRoot = process.cwd()) {
     try {
+      // SECURITY CHECK: Validate license key for encrypted bundles
+      if (this.runtime._isEncrypted && !this.runtime._licenseKey) {
+        return {
+          success: false,
+          message: 'License key required. Set SAFEPROPEL_LICENSE_KEY environment variable or use --license-key=KEY'
+        };
+      }
+      
       // Parse command
       const { workflowName, inputFile, options } = this.parseCommand(commandStr);
       

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safepropel",
-  "version": "1.4.7",
+  "version": "1.4.9",
   "description": "SafePropel Framework - Hybrid Security Model: Encrypted Workflows + Transparent Rules & Templates with Dynamic Loading",
   "main": "engine/workflow-executor.js",
   "scripts": {
@@ -33,5 +33,8 @@
     ".propel/templates/",
     "README.md",
     "LICENSE"
-  ]
+  ],
+  "dependencies": {
+    "safepropel": "^1.4.8"
+  }
 }