@earntori/cli 0.2.16 → 0.2.18

package/dist/index.js

@@ -243,8 +243,14 @@ const HARNESSES = [
 ];
 async function init() {
     const pin = flag("base");
-    if (pin)
-        writeJson(join(".tori", "project.json"), { base: pin.replace(/\/$/, "") });
+    if (pin) {
+        let prev = {};
+        try {
+            prev = JSON.parse(readFileSync(join(".tori", "project.json"), "utf8"));
+        }
+        catch { }
+        writeJson(join(".tori", "project.json"), { ...prev, base: pin.replace(/\/$/, "") });
+    }
     let cfg = loadCfg();
     if (!cfg) {
         console.log(pin ? `Not signed in for ${pin} \u2014 signing in first` : "Not signed in \u2014 signing in first");
@@ -283,7 +289,8 @@ async function init() {
         (set.length === HARNESSES.length ? "" : "\n(Not detected: " + HARNESSES.filter((h) => !set.includes(h)).map((h) => `${h.label} \u2014 tori init --${h.id === "claude-code" ? "claude" : h.id}`).join("; ") + ".)") + next);
 }
 function repoIndex() { try {
-    const out = execSync("git ls-files", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).split("\n").filter(Boolean);
+    const pats = ignorePatterns(process.cwd());
+    const out = execSync("git ls-files", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).split("\n").filter(Boolean).filter((p) => !isIgnored(p, pats));
     return out.length ? out.slice(0, 5000) : undefined;
 }
 catch {
@@ -305,11 +312,51 @@ function projectId() {
     catch { }
     return "local:" + createHash("sha256").update(process.cwd()).digest("hex").slice(0, 12);
 }
+/** Spec rev 86: paths never sent to Tori. `ignore` in .tori/project.json is a list of glob patterns
+ *  (`fixtures/`, `seeds/**`, `*.snap`, `scratch`). A pattern with no slash matches at any depth. */
+function ignorePatterns(root) {
+    try {
+        const j = JSON.parse(readFileSync(join(root, ".tori", "project.json"), "utf8"));
+        return Array.isArray(j?.ignore) ? j.ignore.filter((x) => typeof x === "string") : [];
+    }
+    catch {
+        return [];
+    }
+}
+function globToRe(g) {
+    let p = g.trim().replace(/^\.\//, "").replace(/\/+$/, "");
+    let re = "";
+    for (let i = 0; i < p.length; i++) {
+        const c = p[i];
+        if (c === "*") {
+            if (p[i + 1] === "*") {
+                re += ".*";
+                i++;
+                if (p[i + 1] === "/")
+                    i++;
+            }
+            else
+                re += "[^/]*";
+        }
+        else if (c === "?")
+            re += "[^/]";
+        else
+            re += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+    }
+    return new RegExp((p.includes("/") ? "^" : "(^|/)") + re + "(/|$)");
+}
+function isIgnored(rel, pats) {
+    if (!pats.length)
+        return false;
+    const r = rel.replace(/\\/g, "/").replace(/^\.\//, "");
+    return pats.some((g) => globToRe(g).test(r));
+}
 function gitChanged() {
     try {
         const o = execSync("git status --porcelain --untracked-files=all", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
         const SKIP = /(^|\/)(node_modules|dist|build|out|\.next|\.git|coverage|vendor|\.venv|venv|__pycache__|\.turbo|\.cache)(\/|$)/;
-        return o.split("\n").map((l) => l.slice(3).trim()).filter(Boolean).map((p) => (p.includes(" -> ") ? p.split(" -> ")[1] : p)).filter((p) => !SKIP.test(p)).slice(0, 200);
+        const pats = ignorePatterns(process.cwd());
+        return o.split("\n").map((l) => l.slice(3).trim()).filter(Boolean).map((p) => (p.includes(" -> ") ? p.split(" -> ")[1] : p)).filter((p) => !SKIP.test(p) && !isIgnored(p, pats)).slice(0, 200);
     }
     catch {
         return [];
@@ -317,10 +364,11 @@ function gitChanged() {
 }
 function readCode(paths) {
     const files = [];
+    const pats = ignorePatterns(process.cwd());
     for (const p of paths) {
         const abs = isAbsolute(p) ? p : resolve(p);
         const rel = relative(process.cwd(), abs);
-        if (rel.startsWith("..") || rel.includes("node_modules/") || !CODE_EXT.test(rel) || !existsSync(abs))
+        if (rel.startsWith("..") || rel.includes("node_modules/") || !CODE_EXT.test(rel) || !existsSync(abs) || isIgnored(rel, pats))
             continue;
         try {
             const c = readFileSync(abs, "utf8");
@@ -593,13 +641,48 @@ function logout() {
                 unlinkSync(join(SESSIONS_DIR, f));
     out({ ok: true }, "\u2713 Signed out (all sessions removed)");
 }
-function help() { console.log(`tori \u2014 Tori CLI\n\n  tori login [--base URL]              sign in with GitHub (device flow)\n  tori status [--json]                 balance + your AI keys\n  tori key --limit 5 [--write env] [--file .env] [--json]\n  tori stats [--json]                  your integration + developer program numbers\n  tori init [--local] [--claude|--no-claude] [--cursor|--no-cursor] [--codex|--no-codex]   wire Tori into this project (agents detected unless forced)\n  tori check [paths...] [--json]       run Tori's checks on changed files\n  tori ledger [--project X|all] [--type a,b] [--since ISO] [--limit N] [--json]\n  tori receipt <event_id|seq>          fetch a receipt and verify it locally\n  tori connector new [--label X] | list | revoke <id>   Tori as a remote MCP connector (Claude Cowork etc.)\n  tori standards [enable|disable <id…>] [--connector <label>]   standards that apply to this project, or to a connector's\n  tori rules [add "<rule>"|list|remove <id>] [--connector <label>]   your own rules, in plain English\n  tori init --base https://sandbox.earntori.com   pin this repo to a Tori environment (.tori/project.json)\n  tori logout\n`); }
+function help() { console.log(`tori \u2014 Tori CLI\n\n  tori login [--base URL]              sign in with GitHub (device flow)\n  tori status [--json]                 balance + your AI keys\n  tori key --limit 5 [--write env] [--file .env] [--json]\n  tori stats [--json]                  your integration + developer program numbers\n  tori init [--local] [--claude|--no-claude] [--cursor|--no-cursor] [--codex|--no-codex]   wire Tori into this project (agents detected unless forced)\n  tori check [paths...] [--json]       run Tori's checks on changed files\n  tori ledger [--project X|all] [--type a,b] [--since ISO] [--limit N] [--json]\n  tori receipt <event_id|seq>          fetch a receipt and verify it locally\n  tori connector new [--label X] | list | revoke <id>   Tori as a remote MCP connector (Claude Cowork etc.)\n  tori standards [enable|disable <id…>] [--connector <label>]   standards that apply to this project, or to a connector's\n  tori rules [add "<rule>"|list|remove <id>] [--connector <label>]   your own rules, in plain English\n  tori ignore add <glob…> | list | remove <glob>   paths never sent to Tori (fixtures/, seeds/**, scratch); in .tori/project.json\n  tori init --base https://sandbox.earntori.com   pin this repo to a Tori environment (.tori/project.json)\n  tori logout\n`); }
+function ignoreCmd() {
+    const sub = args[1];
+    const pfile = join(".tori", "project.json");
+    let j = {};
+    try {
+        j = JSON.parse(readFileSync(pfile, "utf8"));
+    }
+    catch { }
+    const cur = Array.isArray(j.ignore) ? j.ignore.filter((x) => typeof x === "string") : [];
+    if (sub === "list" || !sub) {
+        if (has("json"))
+            return out({ ignore: cur }, cur.join("\n"));
+        console.log(cur.length ? cur.join("\n") : "No ignore patterns. Add one: tori ignore add fixtures/");
+        return;
+    }
+    const pats = args.slice(2).filter((a) => !a.startsWith("--")).map((p) => p.trim()).filter(Boolean);
+    if (sub === "add") {
+        if (!pats.length)
+            die("Usage: tori ignore add <glob> [<glob>…]");
+        const next = Array.from(new Set([...cur, ...pats]));
+        writeJson(pfile, { ...j, ignore: next });
+        console.log(`Ignoring ${next.length} pattern(s) in this project; never sent to Tori:\n` + next.join("\n"));
+        return;
+    }
+    if (sub === "remove") {
+        if (!pats.length)
+            die("Usage: tori ignore remove <glob>");
+        const next = cur.filter((p) => !pats.includes(p));
+        writeJson(pfile, { ...j, ignore: next });
+        console.log(next.length ? `Ignoring ${next.length} pattern(s):\n` + next.join("\n") : "No ignore patterns.");
+        return;
+    }
+    die("Usage: tori ignore add <glob…> | list | remove <glob>");
+}
 (async () => {
     switch (cmd) {
         case "login": return login();
         case "status": return status();
         case "init": return init();
         case "check": return check();
+        case "ignore": return ignoreCmd();
         case "ledger": return ledger();
         case "receipt": return receipt();
         case "connector": return connector();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@earntori/cli",
-  "version": "0.2.16",
+  "version": "0.2.18",
   "description": "Tori CLI — holds your coding agent to a standard: checks before it calls a task done, each finding with its fix, on a signed record you can verify offline.",
   "license": "MIT",
   "type": "module",