@earntori/cli 0.2.15 → 0.2.17

package/dist/index.js

@@ -163,7 +163,7 @@ function writeJson(p, o) { mkdirSync(dirname(resolve(p)), { recursive: true });
 // `install` writes that harness's files and returns their paths. Add a harness = add a row.
 // Pinned package versions written into agent config (B1b). CLI version = this package's own;
 // MCP version is a constant: bump it in the same commit as a @earntori/mcp release.
-const TORI_MCP_VERSION = "0.1.8";
+const TORI_MCP_VERSION = "0.1.9";
 function cliVersion(cliBin) {
     try {
         return JSON.parse(readFileSync(resolve(dirname(realpathSync(cliBin)), "..", "package.json"), "utf8")).version ?? "latest";
@@ -305,11 +305,51 @@ function projectId() {
     catch { }
     return "local:" + createHash("sha256").update(process.cwd()).digest("hex").slice(0, 12);
 }
+/** Spec rev 86: paths never sent to Tori. `ignore` in .tori/project.json is a list of glob patterns
+ *  (`fixtures/`, `seeds/**`, `*.snap`, `scratch`). A pattern with no slash matches at any depth. */
+function ignorePatterns(root) {
+    try {
+        const j = JSON.parse(readFileSync(join(root, ".tori", "project.json"), "utf8"));
+        return Array.isArray(j?.ignore) ? j.ignore.filter((x) => typeof x === "string") : [];
+    }
+    catch {
+        return [];
+    }
+}
+function globToRe(g) {
+    let p = g.trim().replace(/^\.\//, "").replace(/\/+$/, "");
+    let re = "";
+    for (let i = 0; i < p.length; i++) {
+        const c = p[i];
+        if (c === "*") {
+            if (p[i + 1] === "*") {
+                re += ".*";
+                i++;
+                if (p[i + 1] === "/")
+                    i++;
+            }
+            else
+                re += "[^/]*";
+        }
+        else if (c === "?")
+            re += "[^/]";
+        else
+            re += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+    }
+    return new RegExp((p.includes("/") ? "^" : "(^|/)") + re + "(/|$)");
+}
+function isIgnored(rel, pats) {
+    if (!pats.length)
+        return false;
+    const r = rel.replace(/\\/g, "/").replace(/^\.\//, "");
+    return pats.some((g) => globToRe(g).test(r));
+}
 function gitChanged() {
     try {
         const o = execSync("git status --porcelain --untracked-files=all", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
         const SKIP = /(^|\/)(node_modules|dist|build|out|\.next|\.git|coverage|vendor|\.venv|venv|__pycache__|\.turbo|\.cache)(\/|$)/;
-        return o.split("\n").map((l) => l.slice(3).trim()).filter(Boolean).map((p) => (p.includes(" -> ") ? p.split(" -> ")[1] : p)).filter((p) => !SKIP.test(p)).slice(0, 200);
+        const pats = ignorePatterns(process.cwd());
+        return o.split("\n").map((l) => l.slice(3).trim()).filter(Boolean).map((p) => (p.includes(" -> ") ? p.split(" -> ")[1] : p)).filter((p) => !SKIP.test(p) && !isIgnored(p, pats)).slice(0, 200);
     }
     catch {
         return [];
@@ -317,10 +357,11 @@ function gitChanged() {
 }
 function readCode(paths) {
     const files = [];
+    const pats = ignorePatterns(process.cwd());
     for (const p of paths) {
         const abs = isAbsolute(p) ? p : resolve(p);
         const rel = relative(process.cwd(), abs);
-        if (rel.startsWith("..") || rel.includes("node_modules/") || !CODE_EXT.test(rel) || !existsSync(abs))
+        if (rel.startsWith("..") || rel.includes("node_modules/") || !CODE_EXT.test(rel) || !existsSync(abs) || isIgnored(rel, pats))
             continue;
         try {
             const c = readFileSync(abs, "utf8");
@@ -336,7 +377,7 @@ function formatRun(r, n) {
         return `\u2713 Tori checks clean \u2014 ${n} file(s), no open findings.`;
     const L = [`Tori checks: ${r.findings.length} finding(s) in ${n} file(s). Fix each one, then call the checks_resolve tool with the finding_id and file path so the fix is verified.`];
     for (const f of r.findings)
-        L.push("", `[${f.severity.toUpperCase()}] ${f.path}${f.line ? ":" + f.line : ""}  (${f.rule_id})`, `finding_id: ${f.id}`, f.message, "", "How to fix:", f.fix_hint);
+        L.push("", `[${f.severity.toUpperCase()}] ${f.path}${f.line ? ":" + f.line : ""}  (${f.rule_id}${f.area ? " · " + f.area : ""})`, `finding_id: ${f.id}`, f.message, "", "How to fix:", f.fix_hint);
     if (r.waived?.length)
         L.push("", `Waived (${r.waived.length}, not blocking): ` + r.waived.map((w) => `${w.path}${w.line ? ":" + w.line : ""} ${w.rule_id} \u2014 ${w.reason ?? "no reason"}`).join("; "));
     if (r.reward?.issued)
@@ -539,7 +580,8 @@ async function standards() {
         return;
     }
     const r = await api(cfg, "GET", `/api/v1/standards?project=${encodeURIComponent(project)}`);
-    const line = (s) => `  ${s.enabled ? "on " : "off"}  ${s.id.padEnd(20)} ${s.name}${s.rules ? ` (${s.rules} checks)` : " (no checks yet)"}`;
+    const line = (s) => `  ${s.enabled ? "on " : "off"}  ${s.id.padEnd(20)} ${s.name}${s.rules ? ` (${s.rules} checks)` : " (no checks yet)"}` +
+        (s.areas?.length ? `\n       ${" ".repeat(20)} ${s.areas.map((a) => `${a.name} ${a.rules}`).join(" · ")}` : "");
     out(r, `${project.startsWith("connector:") ? `Project: ${project}\n\n` : ""}Coding standards \u2014 always on:\n${r.standards.filter((s) => s.tier === "coding").map(line).join("\n")}\n\nDomain standards \u2014 choose per project:\n${r.standards.filter((s) => s.tier === "domain").map(line).join("\n")}\n\nEnable: tori standards enable <id…>   Disable: tori standards disable <id…>`);
 }
 async function rules() {
@@ -592,13 +634,48 @@ function logout() {
                 unlinkSync(join(SESSIONS_DIR, f));
     out({ ok: true }, "\u2713 Signed out (all sessions removed)");
 }
-function help() { console.log(`tori \u2014 Tori CLI\n\n  tori login [--base URL]              sign in with GitHub (device flow)\n  tori status [--json]                 balance + your AI keys\n  tori key --limit 5 [--write env] [--file .env] [--json]\n  tori stats [--json]                  your integration + developer program numbers\n  tori init [--local] [--claude|--no-claude] [--cursor|--no-cursor] [--codex|--no-codex]   wire Tori into this project (agents detected unless forced)\n  tori check [paths...] [--json]       run Tori's checks on changed files\n  tori ledger [--project X|all] [--type a,b] [--since ISO] [--limit N] [--json]\n  tori receipt <event_id|seq>          fetch a receipt and verify it locally\n  tori connector new [--label X] | list | revoke <id>   Tori as a remote MCP connector (Claude Cowork etc.)\n  tori standards [enable|disable <id…>] [--connector <label>]   standards that apply to this project, or to a connector's\n  tori rules [add "<rule>"|list|remove <id>] [--connector <label>]   your own rules, in plain English\n  tori init --base https://sandbox.earntori.com   pin this repo to a Tori environment (.tori/project.json)\n  tori logout\n`); }
+function help() { console.log(`tori \u2014 Tori CLI\n\n  tori login [--base URL]              sign in with GitHub (device flow)\n  tori status [--json]                 balance + your AI keys\n  tori key --limit 5 [--write env] [--file .env] [--json]\n  tori stats [--json]                  your integration + developer program numbers\n  tori init [--local] [--claude|--no-claude] [--cursor|--no-cursor] [--codex|--no-codex]   wire Tori into this project (agents detected unless forced)\n  tori check [paths...] [--json]       run Tori's checks on changed files\n  tori ledger [--project X|all] [--type a,b] [--since ISO] [--limit N] [--json]\n  tori receipt <event_id|seq>          fetch a receipt and verify it locally\n  tori connector new [--label X] | list | revoke <id>   Tori as a remote MCP connector (Claude Cowork etc.)\n  tori standards [enable|disable <id…>] [--connector <label>]   standards that apply to this project, or to a connector's\n  tori rules [add "<rule>"|list|remove <id>] [--connector <label>]   your own rules, in plain English\n  tori ignore add <glob…> | list | remove <glob>   paths never sent to Tori (fixtures/, seeds/**, scratch); in .tori/project.json\n  tori init --base https://sandbox.earntori.com   pin this repo to a Tori environment (.tori/project.json)\n  tori logout\n`); }
+function ignoreCmd() {
+    const sub = args[1];
+    const pfile = join(".tori", "project.json");
+    let j = {};
+    try {
+        j = JSON.parse(readFileSync(pfile, "utf8"));
+    }
+    catch { }
+    const cur = Array.isArray(j.ignore) ? j.ignore.filter((x) => typeof x === "string") : [];
+    if (sub === "list" || !sub) {
+        if (has("json"))
+            return out({ ignore: cur }, cur.join("\n"));
+        console.log(cur.length ? cur.join("\n") : "No ignore patterns. Add one: tori ignore add fixtures/");
+        return;
+    }
+    const pats = args.slice(2).filter((a) => !a.startsWith("--")).map((p) => p.trim()).filter(Boolean);
+    if (sub === "add") {
+        if (!pats.length)
+            die("Usage: tori ignore add <glob> [<glob>…]");
+        const next = Array.from(new Set([...cur, ...pats]));
+        writeJson(pfile, { ...j, ignore: next });
+        console.log(`Ignoring ${next.length} pattern(s) in this project; never sent to Tori:\n` + next.join("\n"));
+        return;
+    }
+    if (sub === "remove") {
+        if (!pats.length)
+            die("Usage: tori ignore remove <glob>");
+        const next = cur.filter((p) => !pats.includes(p));
+        writeJson(pfile, { ...j, ignore: next });
+        console.log(next.length ? `Ignoring ${next.length} pattern(s):\n` + next.join("\n") : "No ignore patterns.");
+        return;
+    }
+    die("Usage: tori ignore add <glob…> | list | remove <glob>");
+}
 (async () => {
     switch (cmd) {
         case "login": return login();
         case "status": return status();
         case "init": return init();
         case "check": return check();
+        case "ignore": return ignoreCmd();
         case "ledger": return ledger();
         case "receipt": return receipt();
         case "connector": return connector();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@earntori/cli",
-  "version": "0.2.15",
+  "version": "0.2.17",
   "description": "Tori CLI — holds your coding agent to a standard: checks before it calls a task done, each finding with its fix, on a signed record you can verify offline.",
   "license": "MIT",
   "type": "module",