@alexcodeplace/slopgate 0.3.1 → 0.3.3

package/README.md

@@ -93,6 +93,28 @@ slopgate baseline --prune --config .slopgate/config.toml
 slopgate --self-test --config "$(npm root -g)/slopgate/rules/baseline/selftest.config.toml"
 ```
 
+### Run immutable full-repository CI gate:
+```bash
+slopgate scan --scope repo --tier commit --format github --config .slopgate/config.toml
+```
+
+### Record reviewer defects and enforce rule harvesting:
+```bash
+slopgate defect record --class missing-button-type --file src/app.tsx --line 42 --source code-review --config .slopgate/config.toml
+slopgate harvest --check --config .slopgate/config.toml
+```
+
+Second distinct occurrence requires `.slopgate/rules/ast/<class>.yml` plus `.slopgate/fixtures/<class>.invalid.ts[x]` and `<class>.valid.ts[x]`. `--self-test` proves rule fires on configured fixtures.
+
+### Reusable GitHub gate:
+```yaml
+jobs:
+  slopgate:
+    uses: alexcodeplace/slopgate/.github/workflows/slopgate.yml@v1
+```
+
+Self-hosted jobs reject fork pull requests before checkout. Use repository-owned branches or isolated disposable runners for untrusted forks.
+
 ### Install or reinstall hooks:
 ```bash
 slopgate install-hooks --config .slopgate/config.toml
@@ -701,12 +723,10 @@ Tool crash / timeout → `⚠ skipped: <id> (<reason>)` warning, gate continues
 
 - **Git-only** — no other VCS support
 - **No auto-fix** — violations are reported, not automatically corrected
-- **No CI integration yet** — hooks are local and Claude Code only; CI layer is future work
 - **`slopgate audit` command** — planned for v2 (non-gating architecture-health report: hotspots, module shape, co-change coupling, ratchet progress tracking)
 - **Embeddings-based semantic duplicate detection** — planned, not in v1
 - **API-surface diff gate** — track breaking changes to public exports (future)
 - **LLM-judge skill** — on-demand deep review of architectural debt (separate sub-project)
-- **Rule harvesting** — auto-generate rules from repeated violations (separate sub-project)
 
 ---
 

package/hooks/commit-hook.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # Slopgate PreToolUse hook — runs --staged before a git commit. Exit 1 → commit blocked.
 TOOL_JSON=$(cat)
-CMD=$(node -e "
+CMD=$(/usr/bin/bun -e "
 let d='';process.stdin.on('data',c=>d+=c).on('end',()=>{try{process.stdout.write(JSON.parse(d).tool_input?.command||'')}catch{process.stdout.write('')}});" <<< "$TOOL_JSON" 2>/dev/null)
 echo "$CMD" | grep -qE 'git[[:space:]]+commit' || exit 0
 
@@ -9,4 +9,4 @@ ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0
 CONFIG="$ROOT/.slopgate/config.toml"
 [ -f "$CONFIG" ] || exit 0
 HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-exec node "$HERE/../bin/slopgate" --staged --config "$CONFIG"
+exec /usr/bin/bun "$HERE/../bin/slopgate" --staged --config "$CONFIG"

package/hooks/edit-hook.sh

@@ -2,7 +2,7 @@
 # Slopgate PostToolUse hook — single-file scan after Edit/Write.
 # Exit 2 → stderr feeds back into the agent turn. FAIL-OPEN: any error/timeout → exit 0.
 TOOL_JSON=$(cat)
-FILE=$(node -e "
+FILE=$(/usr/bin/bun -e "
 let d='';process.stdin.on('data',c=>d+=c).on('end',()=>{try{process.stdout.write(JSON.parse(d).tool_input?.file_path||'')}catch{process.stdout.write('')}});" <<< "$TOOL_JSON" 2>/dev/null) || exit 0
 [ -n "$FILE" ] || exit 0
 case "$FILE" in *.test.ts|*.test.tsx) exit 0 ;; *.ts|*.tsx|*.astro) ;; *) exit 0 ;; esac
@@ -14,6 +14,6 @@ CONFIG="$ROOT/.slopgate/config.toml"
 [ -f "$CONFIG" ] || exit 0
 
 HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-OUT=$(timeout 5 node "$HERE/../bin/slopgate" --file "$FILE" --config "$CONFIG" 2>&1)
+OUT=$(timeout 5 /usr/bin/bun "$HERE/../bin/slopgate" --file "$FILE" --config "$CONFIG" 2>&1)
 [ "$?" -eq 1 ] && { echo "$OUT" >&2; exit 2; }
 exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alexcodeplace/slopgate",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "type": "module",
   "description": "Global code-quality / anti-slop gate — engine shared, rules per-project.",
   "license": "MIT",