0xray 4.0.11 → 4.0.13

package/dist/enforcement/loaders/codex-loader.js

@@ -1,395 +0,0 @@
-/**
- * Codex Rule Loader
- *
- * Loads codex terms from the resolved codex path and converts them
- * to RuleDefinition objects for the rule enforcement system.
- *
- * Phase 4 refactoring: Extracted from RuleEnforcer.loadCodexRules()
- *
- * @module loaders/codex-loader
- */
-import { frameworkLogger } from "../../core/framework-logger.js";
-import { resolveCodexPath } from "../../core/config-paths.js";
-import { existsSync } from "fs";
-import { BaseLoader, } from "./base-loader.js";
-/**
- * Loader for codex terms from codex.json.
- * Converts codex terms to RuleDefinition objects.
- *
- * @example
- * ```typescript
- * const loader = new CodexLoader();
- * if (await loader.isAvailable()) {
- *   const rules = await loader.load();
- *   console.log(`Loaded ${rules.length} codex rules`);
- * }
- * ```
- */
-export class CodexLoader extends BaseLoader {
-    name = "codex";
-    /**
-     * Path to the codex.json file.
-      * Uses the standard config-paths resolver which checks .xray/, etc.
-     */
-    get codexPath() {
-        const candidates = resolveCodexPath();
-        const found = candidates.find((p) => existsSync(p));
-        // Fallback to primary path even if not found yet
-        return found ?? candidates[0] ?? this.resolvePath(".xray/codex.json");
-    }
-    /**
-     * Check if codex.json exists.
-     * @returns Promise resolving to true if codex.json is available
-     */
-    async isAvailable() {
-        return this.fileExists(this.codexPath);
-    }
-    /**
-     * Load codex terms and convert to RuleDefinition objects.
-     * @returns Promise resolving to array of rule definitions
-     */
-    async load() {
-        const rules = [];
-        try {
-            const codexData = await this.loadJsonFile(this.codexPath);
-            // Convert codex terms to rules
-            for (const [key, term] of Object.entries(codexData.terms)) {
-                if (this.isValidCodexTerm(term)) {
-                    const rule = this.convertTermToRule(key, term);
-                    rules.push(rule);
-                }
-            }
-            await frameworkLogger.log("codex-loader", "loaded-codex-rules", "success", {
-                message: `Loaded ${rules.length} codex rules`,
-                ruleCount: rules.length,
-                version: codexData.version,
-            });
-        }
-        catch (error) {
-            await frameworkLogger.log("codex-loader", "failed-to-load-codex", "error", {
-                message: `Failed to load codex rules: ${error instanceof Error ? error.message : String(error)}`,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            // Return empty array on failure - other loaders can continue
-        }
-        return rules;
-    }
-    /**
-     * Type guard to check if an object is a valid CodexTerm.
-     * @param term - Object to validate
-     * @returns True if the object is a valid CodexTerm
-     */
-    isValidCodexTerm(term) {
-        return (typeof term === "object" &&
-            term !== null &&
-            "title" in term &&
-            typeof term.title === "string");
-    }
-    /**
-     * Convert a codex term to a RuleDefinition.
-     * @param key - Term key (number as string)
-     * @param term - Codex term data
-     * @returns RuleDefinition object
-     */
-    convertTermToRule(key, term) {
-        return {
-            id: `codex-${key}`,
-            name: term.title,
-            description: term.description || term.title,
-            category: this.mapCodexCategory(term.category),
-            severity: this.mapCodexSeverity(term.enforcementLevel, term.zeroTolerance),
-            enabled: true,
-            validator: this.createCodexValidator(term),
-        };
-    }
-    /**
-     * Map codex category to RuleCategory.
-     * @param category - Codex category string
-     * @returns Mapped RuleCategory
-     */
-    mapCodexCategory(category) {
-        const categoryMap = {
-            core: "code-quality",
-            architecture: "architecture",
-            performance: "performance",
-            security: "security",
-            testing: "testing",
-            operations: "architecture",
-            documentation: "reporting",
-            process: "architecture",
-            "ci-cd": "testing",
-            infrastructure: "architecture",
-            quality: "code-quality",
-            validation: "code-quality",
-            resilience: "architecture",
-            governance: "architecture",
-            accessibility: "code-quality",
-        };
-        return categoryMap[category || ""] || "codex";
-    }
-    /**
-     * Map codex severity to RuleSeverity.
-     * @param enforcementLevel - Codex enforcement level
-     * @param zeroTolerance - Whether term has zero tolerance
-     * @returns Mapped RuleSeverity
-     */
-    mapCodexSeverity(enforcementLevel, zeroTolerance) {
-        // Zero tolerance terms are always blocking
-        if (zeroTolerance) {
-            return "blocking";
-        }
-        switch (enforcementLevel?.toLowerCase()) {
-            case "blocking":
-                return "blocking";
-            case "high":
-                return "error";
-            case "medium":
-                return "warning";
-            case "low":
-                return "info";
-            default:
-                return "info";
-        }
-    }
-    /**
-     * Create a validator function for a codex term.
-     * Now actually validates code against the term requirements.
-     * @param term - Codex term data
-     * @returns Validator function that performs real validation
-     */
-    createCodexValidator(term) {
-        return async (context) => {
-            const { newCode, operation } = context;
-            // Only validate write operations with code content
-            if (!newCode || operation !== "write") {
-                return {
-                    passed: true,
-                    message: `${term.title}: No code to validate`,
-                };
-            }
-            const violations = [];
-            const termNum = typeof term.number === "string" ? parseInt(term.number, 10) : term.number;
-            // Term 1: Progressive Prod-Ready Code - no stubs/TODOs/FIXMEs
-            if (termNum === 1) {
-                if (/TODO\s*:/i.test(newCode)) {
-                    violations.push("Code contains TODO - not production-ready");
-                }
-                if (/FIXME\s*:/i.test(newCode)) {
-                    violations.push("Code contains FIXME - not production-ready");
-                }
-                if (/STUB|PLACEHOLDER|TEMP\.{3}/i.test(newCode)) {
-                    violations.push("Code contains stub/placeholder - not production-ready");
-                }
-            }
-            // Term 2: No Patches/Boiler/Stubs
-            if (termNum === 2) {
-                if (/console\.log\s*\(/g.test(newCode) && !newCode.includes("debug")) {
-                    // console.log is a form of temporary debugging
-                }
-            }
-            // Term 7: Resolve All Errors - no console.log debugging
-            if (termNum === 7) {
-                // Strip comments before checking for console.log
-                const codeWithoutComments = newCode
-                    .replace(/\/\/.*$/gm, '')
-                    .replace(/\/\*[\s\S]*?\*\//g, '');
-                const consoleMatches = codeWithoutComments.match(/console\.(log|debug|info)\s*\(/g);
-                if (consoleMatches) {
-                    violations.push(`Found ${consoleMatches.length} console.log/debug/info statements - use frameworkLogger`);
-                }
-                // Check for empty catch blocks
-                if (/catch\s*\([^)]*\)\s*\{\s*\}/.test(codeWithoutComments)) {
-                    violations.push("Empty catch block - errors must be handled");
-                }
-            }
-            // Term 8: Prevent Infinite Loops
-            if (termNum === 8) {
-                if (/while\s*\(\s*true\s*\)/.test(newCode) || /while\s*\(\s*1\s*\)/.test(newCode)) {
-                    violations.push("Infinite while loop detected");
-                }
-                // Check for while loops without clear termination
-                if (/while\s*\([^)]*[^<>!=\?]/.test(newCode)) {
-                    // Potential infinite loop - let it pass with a note
-                }
-            }
-            // Term 11: Type Safety First - no @ts-ignore/@ts-expect-error
-            if (termNum === 11) {
-                if (/@ts-ignore/.test(newCode)) {
-                    violations.push("@ts-ignore found - type safety bypass detected");
-                }
-                if (/@ts-expect-error/.test(newCode)) {
-                    violations.push("@ts-expect-error found - type safety bypass detected");
-                }
-                if (/\: any\b/.test(newCode) && !newCode.includes("// Allow any")) {
-                    violations.push("Type 'any' found - use proper typing instead");
-                }
-            }
-            // Term 26: Test Coverage >85% - check if new code has tests
-            if (termNum === 26) {
-                const exportedItems = newCode.match(/export\s+(function|class|const|let|var)/g);
-                if (exportedItems && exportedItems.length > 3) {
-                    // Large module without obvious test references
-                    if (!newCode.includes(".test.") && !newCode.includes(".spec.") && !newCode.includes("describe(")) {
-                        violations.push(`${exportedItems.length} exported items without test references - ensure 85%+ coverage`);
-                    }
-                }
-            }
-            // Term 46: Import Consistency - no src/ imports in source
-            if (termNum === 46) {
-                if (/from\s+['"]\.\.\/src\//.test(newCode) || /from\s+['"]\.\/src\//.test(newCode)) {
-                    violations.push("Import from src/ directory - use relative imports for source files");
-                }
-            }
-            // Term 47: Module System Consistency - no CommonJS in ESM
-            if (termNum === 47) {
-                if (/require\s*\(/.test(newCode) && !newCode.includes("// Allow require")) {
-                    violations.push("CommonJS require() in ES module - use import statements");
-                }
-                if (/module\.exports/.test(newCode)) {
-                    violations.push("module.exports in ES module - use export statements");
-                }
-            }
-            // Term 32: Proper Error Handling - no empty catch
-            if (termNum === 32) {
-                if (/catch\s*\([^)]*\)\s*\{\s*\}/.test(newCode)) {
-                    violations.push("Empty catch block - errors must be handled");
-                }
-                // Check for throws without messages
-                if (/throw\s+new\s+Error\s*\(\s*\)/.test(newCode)) {
-                    violations.push("Empty Error throw - provide meaningful error message");
-                }
-            }
-            // Term 38: Functionality Retention - no accidental deletions
-            if (termNum === 38) {
-                // This is harder to check statically, but can warn about destructive patterns
-            }
-            // Term 29: Security by Design - check for hardcoded secrets
-            if (termNum === 29) {
-                if (/password\s*=\s*['"][^'"]{8,}['"]/i.test(newCode)) {
-                    violations.push("Potential hardcoded password detected");
-                }
-                if (/api[_-]?key\s*=\s*['"][^'"]{20,}['"]/i.test(newCode)) {
-                    violations.push("Potential hardcoded API key detected");
-                }
-                if (/secret\s*=\s*['"][^'"]{8,}['"]/i.test(newCode)) {
-                    violations.push("Potential hardcoded secret detected");
-                }
-            }
-            // Term 12: Early Returns and Guard Clauses - deeply nested code
-            if (termNum === 12) {
-                let maxNesting = 0;
-                let currentNesting = 0;
-                let inString = false;
-                let inBlockComment = false;
-                for (let i = 0; i < newCode.length; i++) {
-                    const char = newCode[i];
-                    const nextChar = newCode[i + 1];
-                    // Handle comments
-                    if (inBlockComment) {
-                        if (char === '*' && nextChar === '/') {
-                            inBlockComment = false;
-                            i++;
-                        }
-                        continue;
-                    }
-                    if (char === '/' && nextChar === '*') {
-                        inBlockComment = true;
-                        i++;
-                        continue;
-                    }
-                    if (char === '/' && nextChar === '/') {
-                        i = newCode.indexOf('\n', i);
-                        continue;
-                    }
-                    // Handle strings
-                    if (char === '"' || char === "'" || char === '`') {
-                        inString = !inString;
-                        continue;
-                    }
-                    if (inString)
-                        continue;
-                    // Count nesting
-                    if (char === '{') {
-                        currentNesting++;
-                        maxNesting = Math.max(maxNesting, currentNesting);
-                    }
-                    else if (char === '}') {
-                        currentNesting = Math.max(0, currentNesting - 1);
-                    }
-                }
-                if (maxNesting > 5) {
-                    violations.push(`Excessive nesting depth (${maxNesting} levels) - use early returns/guard clauses`);
-                }
-            }
-            // Term 19: Small, Focused Functions - check function size
-            if (termNum === 19) {
-                // Match actual function declarations and arrow functions (not variable declarations)
-                const functionRegex = /(?:^|\n)(?:function\s+\w+|async\s+function\s+\w+|(?:\([^)]*\)|[^=])=>\s*\{)/g;
-                const matches = newCode.match(functionRegex);
-                if (matches) {
-                    for (const match of matches) {
-                        const startIdx = newCode.indexOf(match);
-                        const afterMatch = newCode.substring(startIdx + match.length);
-                        const closingIdx = afterMatch.indexOf('}');
-                        if (closingIdx > 0) {
-                            const functionBody = afterMatch.substring(0, closingIdx);
-                            const lines = functionBody.split('\n').filter(l => l.trim().length > 0);
-                            if (lines.length > 30) {
-                                violations.push(`Function with ${lines.length} lines - consider splitting into smaller functions (max 30)`);
-                                break;
-                            }
-                        }
-                    }
-                }
-            }
-            // Term 16: DRY - Don't Repeat Yourself - detect code duplication
-            if (termNum === 16) {
-                const lines = newCode.split('\n').filter(l => l.trim().length > 0 && !l.trim().startsWith('//') && !l.trim().startsWith('/*') && !l.trim().startsWith('*'));
-                const seenPatterns = new Map();
-                for (const line of lines) {
-                    // Normalize: remove extra spaces, take first 40 chars
-                    const normalized = line.replace(/\s+/g, ' ').trim().substring(0, 40);
-                    if (normalized.length > 10) {
-                        const count = (seenPatterns.get(normalized) || 0) + 1;
-                        seenPatterns.set(normalized, count);
-                        if (count >= 2) {
-                            violations.push(`Repeated code pattern detected (${count}x) - extract to reusable function`);
-                            break;
-                        }
-                    }
-                }
-            }
-            // Term 3: Do Not Over-Engineer - complexity check
-            if (termNum === 3) {
-                const classMatches = newCode.match(/class\s+\w+/g) || [];
-                const interfaceMatches = newCode.match(/interface\s+\w+/g) || [];
-                const typeMatches = newCode.match(/type\s+\w+\s*=/g) || [];
-                const abstractionCount = classMatches.length + interfaceMatches.length + typeMatches.length;
-                const exportedFunctions = (newCode.match(/export\s+(?:function|const|class|interface|type)/g) || []).length;
-                if (abstractionCount > 5 && exportedFunctions < abstractionCount) {
-                    violations.push(`Over-abstraction: ${abstractionCount} types/interfaces/classes with few exports - keep it simpler`);
-                }
-            }
-            // Term 13: Error Boundaries and Graceful Degradation
-            if (termNum === 13) {
-                const hasTryCatch = /try\s*\{/.test(newCode);
-                const hasAsyncAwait = /async\s+(?:function|\()/i.test(newCode);
-                const hasPromiseCatch = /\.catch\s*\(/g.test(newCode);
-                if (hasAsyncAwait && !hasTryCatch && !hasPromiseCatch) {
-                    violations.push("Async function without try-catch or .catch() - add error boundaries");
-                }
-            }
-            if (violations.length > 0) {
-                return {
-                    passed: false,
-                    message: `${term.title} violated: ${violations.join("; ")}`,
-                    suggestions: violations.map(v => `Fix: ${v}`),
-                };
-            }
-            return {
-                passed: true,
-                message: `${term.title} validated`,
-            };
-        };
-    }
-}

package/dist/enforcement/loaders/index.d.ts

@@ -1,36 +0,0 @@
-/**
- * Rule Loaders Module
- *
- * This module provides rule loading capabilities for the 0xRay framework.
- * Loaders encapsulate the logic for loading rules from various sources.
- *
- * Phase 4 refactoring: Extracted async rule loading from RuleEnforcer
- *
- * @module loaders
- *
- * @example
- * ```typescript
- * import {
- *   LoaderOrchestrator,
- *   CodexLoader,
- *   AgentTriageLoader,
- *   IRuleLoader
- * } from './enforcement/loaders/index.js';
- *
- * // Use the orchestrator to load all rules
- * const orchestrator = new LoaderOrchestrator();
- * const result = await orchestrator.loadAllRules();
- *
- * // Or use individual loaders
- * const codexLoader = new CodexLoader();
- * if (await codexLoader.isAvailable()) {
- *   const codexRules = await codexLoader.load();
- * }
- * ```
- */
-export { BaseLoader } from "./base-loader.js";
-export { CodexLoader } from "./codex-loader.js";
-export { AgentTriageLoader } from "./agent-triage-loader.js";
-export { ProcessorLoader } from "./processor-loader.js";
-export { AgentsMdValidationLoader } from "./agents-md-validation-loader.js";
-export { LoaderOrchestrator, type LoaderOrchestratorOptions, type LoaderOrchestratorResult, } from "./loader-orchestrator.js";

package/dist/enforcement/loaders/index.js

@@ -1,39 +0,0 @@
-/**
- * Rule Loaders Module
- *
- * This module provides rule loading capabilities for the 0xRay framework.
- * Loaders encapsulate the logic for loading rules from various sources.
- *
- * Phase 4 refactoring: Extracted async rule loading from RuleEnforcer
- *
- * @module loaders
- *
- * @example
- * ```typescript
- * import {
- *   LoaderOrchestrator,
- *   CodexLoader,
- *   AgentTriageLoader,
- *   IRuleLoader
- * } from './enforcement/loaders/index.js';
- *
- * // Use the orchestrator to load all rules
- * const orchestrator = new LoaderOrchestrator();
- * const result = await orchestrator.loadAllRules();
- *
- * // Or use individual loaders
- * const codexLoader = new CodexLoader();
- * if (await codexLoader.isAvailable()) {
- *   const codexRules = await codexLoader.load();
- * }
- * ```
- */
-// Base loader
-export { BaseLoader } from "./base-loader.js";
-// Concrete loaders
-export { CodexLoader } from "./codex-loader.js";
-export { AgentTriageLoader } from "./agent-triage-loader.js";
-export { ProcessorLoader } from "./processor-loader.js";
-export { AgentsMdValidationLoader } from "./agents-md-validation-loader.js";
-// Orchestrator
-export { LoaderOrchestrator, } from "./loader-orchestrator.js";

package/dist/enforcement/loaders/loader-orchestrator.d.ts

@@ -1,96 +0,0 @@
-/**
- * Loader Orchestrator
- *
- * Coordinates multiple rule loaders to load rules from various sources.
- * Manages loader execution, error handling, and rule aggregation.
- *
- * Phase 4 refactoring: Extracted loader orchestration from RuleEnforcer
- *
- * @module loaders/loader-orchestrator
- */
-import { IRuleLoader, RuleDefinition } from "../types.js";
-/**
- * Options for LoaderOrchestrator configuration.
- */
-export interface LoaderOrchestratorOptions {
-    /** Whether to continue loading if one loader fails */
-    continueOnError?: boolean;
-    /** Whether to log loader activity */
-    enableLogging?: boolean;
-}
-/**
- * Result from the orchestrator's load operation.
- */
-export interface LoaderOrchestratorResult {
-    /** All loaded rules */
-    rules: RuleDefinition[];
-    /** Number of successful loaders */
-    successfulLoaders: number;
-    /** Number of failed loaders */
-    failedLoaders: number;
-    /** Loader-specific results */
-    loaderResults: Map<string, {
-        success: boolean;
-        ruleCount: number;
-        error?: string;
-    }>;
-}
-/**
- * Orchestrates multiple rule loaders to load rules from various sources.
- *
- * @example
- * ```typescript
- * const orchestrator = new LoaderOrchestrator();
- * const result = await orchestrator.loadAllRules();
- * console.log(`Loaded ${result.rules.length} rules from ${result.successfulLoaders} loaders`);
- * ```
- */
-export declare class LoaderOrchestrator {
-    private loaders;
-    private options;
-    /**
-     * Create a new LoaderOrchestrator.
-     * @param options - Configuration options
-     */
-    constructor(options?: LoaderOrchestratorOptions);
-    /**
-     * Register the default set of loaders.
-     */
-    private registerDefaultLoaders;
-    /**
-     * Load all rules from all available loaders.
-     * @returns Promise resolving to orchestrator result
-     */
-    loadAllRules(): Promise<LoaderOrchestratorResult>;
-    /**
-     * Register a custom loader.
-     * @param loader - Loader to register
-     */
-    registerLoader(loader: IRuleLoader): void;
-    /**
-     * Get all registered loaders.
-     * @returns Array of registered loaders
-     */
-    getLoaders(): IRuleLoader[];
-    /**
-     * Get loader by name.
-     * @param name - Loader name
-     * @returns Loader instance or undefined
-     */
-    getLoader(name: string): IRuleLoader | undefined;
-    /**
-     * Remove a loader by name.
-     * @param name - Loader name
-     * @returns True if loader was removed
-     */
-    removeLoader(name: string): boolean;
-    /**
-     * Clear all registered loaders.
-     */
-    clearLoaders(): void;
-    /**
-     * Get count of registered loaders.
-     * @returns Number of loaders
-     */
-    getLoaderCount(): number;
-}