refactorai-cli 0.2.21__tar.gz → 0.2.23__tar.gz

{refactorai_cli-0.2.21 → refactorai_cli-0.2.23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: refactorai-cli
-Version: 0.2.21
+Version: 0.2.23
 Summary: Local-first CLI for the refactor platform
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -53,6 +53,6 @@ python -m twine upload ./refactorai-cli/dist/*
 ## Install test (local)
 
 ```bash
-python -m pip install ./refactorai-cli/dist/refactorai_cli-0.2.21-py3-none-any.whl
+python -m pip install ./refactorai-cli/dist/refactorai_cli-0.2.23-py3-none-any.whl
 refactor --version
 ```

{refactorai_cli-0.2.21 → refactorai_cli-0.2.23}/README.md

@@ -42,6 +42,6 @@ python -m twine upload ./refactorai-cli/dist/*
 ## Install test (local)
 
 ```bash
-python -m pip install ./refactorai-cli/dist/refactorai_cli-0.2.21-py3-none-any.whl
+python -m pip install ./refactorai-cli/dist/refactorai_cli-0.2.23-py3-none-any.whl
 refactor --version
 ```

{refactorai_cli-0.2.21 → refactorai_cli-0.2.23}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "refactorai-cli"
-version = "0.2.21"
+version = "0.2.23"
 description = "Local-first CLI for the refactor platform"
 readme = "README.md"
 requires-python = ">=3.11"

{refactorai_cli-0.2.21 → refactorai_cli-0.2.23}/refactorai_cli/__init__.py

@@ -5,4 +5,4 @@ the shared `refactor_core` pipeline from a project folder while staying
 authenticated to the hosted platform via a developer key.
 """
 
-__version__ = "0.2.21"
+__version__ = "0.2.23"

{refactorai_cli-0.2.21 → refactorai_cli-0.2.23}/refactorai_cli/commands/run_cmds.py

@@ -73,6 +73,7 @@ from refactor_core.pipeline import build_refactor_prompt, build_review_prompt
 from refactor_core.providers import get_provider, resolve_provider_name, supported_providers
 from refactor_core.rules import annotate_documents_with_rules, filter_documents_by_rules
 from refactor_core.security import merge_refactor_findings, suppress_findings_for_rr
+from refactor_core.security.semgrep_runner import EMBEDDED_SEMGREP_SENTINEL
 from refactor_core.security.suppression import SecuritySuppression
 from refactor_core.sandbox_runtime import (
     DEFAULT_IMAGE as SANDBOX_DEFAULT_IMAGE,
@@ -716,13 +717,29 @@ def _resolve_runtime_semgrep_binary() -> str:
     return ""
 
 
+def _active_runtime_version() -> str:
+    try:
+        status = runtime_status()
+    except Exception:
+        return ""
+    return str(status.get("active_version") or "").strip()
+
+
 def _inject_runtime_scanner_settings(constitution) -> None:
     settings = dict(getattr(constitution, "settings", {}) or {})
     if not bool(settings.get("security_scanner_enabled", False)):
         constitution.settings = settings
         return
+    active_version = _active_runtime_version()
+    scanner_path = _resolve_runtime_semgrep_binary()
     settings["security_scan_require_runtime_binary"] = True
-    settings["security_scan_binary"] = _resolve_runtime_semgrep_binary()
+    if scanner_path:
+        settings["security_scan_binary"] = scanner_path
+    elif active_version:
+        # Runtime artifact can include semgrep as an embedded python module.
+        settings["security_scan_binary"] = EMBEDDED_SEMGREP_SENTINEL
+    else:
+        settings["security_scan_binary"] = ""
     constitution.settings = settings
 
 
@@ -742,8 +759,8 @@ def _report_runtime_scanner_status() -> None:
         return
     if active:
         console.print(
-            "[yellow]security scanner[/yellow]: runtime active but scanner binary missing "
-            f"[dim](runtime={active})[/dim]"
+            "[green]security scanner[/green]: ready "
+            f"[dim](runtime={active}, embedded in runtime artifact)[/dim]"
         )
         return
     console.print(

{refactorai_cli-0.2.21 → refactorai_cli-0.2.23}/refactorai_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: refactorai-cli
-Version: 0.2.21
+Version: 0.2.23
 Summary: Local-first CLI for the refactor platform
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -53,6 +53,6 @@ python -m twine upload ./refactorai-cli/dist/*
 ## Install test (local)
 
 ```bash
-python -m pip install ./refactorai-cli/dist/refactorai_cli-0.2.21-py3-none-any.whl
+python -m pip install ./refactorai-cli/dist/refactorai_cli-0.2.23-py3-none-any.whl
 refactor --version
 ```