@gobing-ai/spur 0.1.8

package/README.md

@@ -0,0 +1,78 @@
+# @gobing-ai/spur
+
+**The `spur` command** — a local-first harness for mainstream coding agents (Claude Code, Codex,
+Gemini CLI, Antigravity, pi, OpenCode, OpenClaw). Spur is **not** a coding agent; it wraps the agents
+you already have with constraint checking, workflow orchestration, agent health checks, and
+conversation-history analytics.
+
+## Install
+
+Pick the path that matches your setup. Both give you a global `spur` command and seed the default
+config into `~/.config/spur/` on first run.
+
+### If you have Bun (`bun >= 1.3.0`) — recommended
+
+The npm package ships a Bun bundle and runs under the Bun runtime you already have.
+
+```bash
+# Install globally → use the `spur` command everywhere
+bun install -g @gobing-ai/spur
+spur --help
+
+# …or run ad-hoc with no install
+bunx @gobing-ai/spur --help
+```
+
+### If you don't have Bun — standalone binary
+
+A self-contained executable (Bun embedded) for macOS and Linux. No runtime to install.
+
+```bash
+# One-liner: downloads the binary, puts it on PATH, seeds config
+curl -fsSL https://raw.githubusercontent.com/gobing-ai/spur/main/scripts/install.sh | sh
+spur --help
+```
+
+The installer drops `spur` into `~/.local/bin` by default. Override the target with `SPUR_INSTALL`,
+or pin a release with `SPUR_VERSION`:
+
+```bash
+SPUR_INSTALL=/usr/local/bin SPUR_VERSION='@gobing-ai/spur-v0.1.7' \
+  sh -c "$(curl -fsSL https://raw.githubusercontent.com/gobing-ai/spur/main/scripts/install.sh)"
+```
+
+If `~/.local/bin` isn't already on your `PATH`, add it (e.g. `export PATH="$HOME/.local/bin:$PATH"`
+in your shell profile). Supported targets: `darwin-arm64`, `darwin-x64`, `linux-arm64`, `linux-x64`.
+Windows: use the Bun path under WSL.
+
+### First run
+
+```bash
+spur init     # seeds ~/.config/spur/ (config.yaml, rules/, workflows/) — idempotent, never clobbers
+```
+
+The standalone installer runs `spur init` for you; the Bun install does it on your first `spur init`.
+
+## Usage
+
+```bash
+spur init                                  # scaffold .spur/ + seed global rules
+spur rule run --preset recommended         # evaluate constraint rules
+spur workflow run <workflow.yaml>          # run an FSM workflow
+spur agent run "<prompt>" --agent auto     # execute a prompt via a coding agent
+spur agent doctor                          # check agent readiness
+spur history import --source claude --root <path>
+spur history analyze
+spur status
+```
+
+Every command supports `--json` for machine-readable output.
+
+## Documentation
+
+Full docs, architecture, and the complete command surface live in the
+[Spur repository](https://github.com/gobing-ai/spur).
+
+## License
+
+Apache-2.0 © [Robin Min](mailto:minlongbing@gmail.com)

package/package.json

@@ -0,0 +1,67 @@
+{
+    "name": "@gobing-ai/spur",
+    "version": "0.1.8",
+    "description": "Spur CLI — local-first harness for mainstream coding agents: constraint checking, workflow orchestration, agent health, and history analytics. Bun-native; exposes the `spur` command.",
+    "keywords": [
+        "spur",
+        "cli",
+        "coding-agents",
+        "bun",
+        "rule-engine",
+        "workflow"
+    ],
+    "homepage": "https://github.com/gobing-ai/spur#readme",
+    "bugs": "https://github.com/gobing-ai/spur/issues",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/gobing-ai/spur.git",
+        "directory": "apps/cli"
+    },
+    "license": "Apache-2.0",
+    "author": "Robin Min <minlongbing@gmail.com>",
+    "type": "module",
+    "bin": {
+        "spur": "spur.js"
+    },
+    "exports": {
+        "./schemas/*": "./schemas/*"
+    },
+    "files": [
+        "spur.js",
+        "spur-cli",
+        "schemas",
+        "README.md"
+    ],
+    "engines": {
+        "bun": ">=1.3.0"
+    },
+    "publishConfig": {
+        "access": "public"
+    },
+    "scripts": {
+        "dev": "bun run src/index.ts",
+        "build": "bun build src/index.ts --compile --outfile ../../dist/cli/spur",
+        "build:binaries": "bun run ../../scripts/spur-dev.ts build-binaries",
+        "build:bundle": "bun build src/index.ts --target=bun --outfile spur.js && bun run ../../scripts/spur-dev.ts bundle-config spur-cli/config",
+        "test": "bun test tests --coverage --coverage-dir=../../.coverage --pass-with-no-tests",
+        "typecheck": "tsc --noEmit",
+        "prepublishOnly": "bun run build:bundle"
+    },
+    "devDependencies": {
+        "@commander-js/extra-typings": "catalog:",
+        "@gobing-ai/spur-app": "workspace:0.1.0",
+        "@gobing-ai/spur-config": "workspace:0.1.0",
+        "@gobing-ai/spur-domain": "workspace:0.1.0",
+        "@gobing-ai/ts-ai-runner": "catalog:",
+        "@gobing-ai/ts-dual-workflow-engine": "catalog:",
+        "@gobing-ai/ts-llm-jsonl-importer": "catalog:",
+        "@gobing-ai/ts-rule-engine": "catalog:",
+        "@gobing-ai/ts-runtime": "catalog:",
+        "@gobing-ai/ts-infra": "catalog:",
+        "@gobing-ai/ts-utils": "catalog:",
+        "@types/bun": "catalog:",
+        "@types/figlet": "^1.7.0",
+        "commander": "catalog:",
+        "figlet": "^1.11.0"
+    }
+}

package/schemas/spur-config.schema.json

@@ -0,0 +1,140 @@
+{
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://github.com/gobing-ai/spur/schemas/spur-config.schema.json",
+    "title": "Spur Project Configuration",
+    "description": "Schema for .spur/config.yaml — the single project configuration surface consumed by spur and (future) spur-server.",
+    "type": "object",
+    "required": ["version", "name"],
+    "properties": {
+        "$schema": {
+            "type": "string",
+            "description": "Reference to this schema for IDE validation. spur resolves this at runtime via loadStructuredConfig."
+        },
+        "version": {
+            "type": "string",
+            "description": "Config schema version. Currently '1'."
+        },
+        "name": {
+            "type": "string",
+            "description": "Project name written by spur init."
+        },
+        "bootstrap": {
+            "type": "object",
+            "description": "Portable bootstrap block consumed by @gobing-ai/ts-infra runNodeApplication. Shared across spur and spur-server.",
+            "properties": {
+                "logging": {
+                    "type": "object",
+                    "properties": {
+                        "enabled": {
+                            "type": "boolean",
+                            "description": "Enable structured logging via LogTape."
+                        },
+                        "level": {
+                            "type": "string",
+                            "enum": ["trace", "debug", "info", "warn", "error", "fatal"],
+                            "description": "Minimum log level."
+                        },
+                        "console": {
+                            "type": "boolean",
+                            "description": "Emit log records to console (stderr)."
+                        },
+                        "json": {
+                            "type": "boolean",
+                            "description": "Format log records as JSON Lines. false = text format."
+                        },
+                        "file": {
+                            "type": "boolean",
+                            "description": "Write log records to a file sink. Uses filePath when set, otherwise disabled."
+                        },
+                        "filePath": {
+                            "type": "string",
+                            "description": "Path to the log file. Relative to project root. Default: .spur/logs/spur.log."
+                        }
+                    }
+                },
+                "telemetry": {
+                    "type": "object",
+                    "properties": {
+                        "enabled": {
+                            "type": "boolean",
+                            "description": "Enable OpenTelemetry tracing/metrics export."
+                        },
+                        "serviceName": {
+                            "type": "string",
+                            "description": "Service name reported to OTel collectors."
+                        },
+                        "environment": {
+                            "type": "string",
+                            "description": "Deployment environment label."
+                        }
+                    }
+                },
+                "database": {
+                    "type": "object",
+                    "properties": {
+                        "enabled": {
+                            "type": "boolean",
+                            "description": "Enable the SQLite database adapter."
+                        },
+                        "driver": {
+                            "type": "string",
+                            "enum": ["bun-sqlite"],
+                            "description": "Database driver. Currently only bun-sqlite."
+                        },
+                        "url": {
+                            "type": "string",
+                            "description": "Database file path. Supports ${DATABASE_URL} interpolation. Default: .spur/spur.db."
+                        }
+                    }
+                },
+                "scheduler": {
+                    "type": "object",
+                    "properties": {
+                        "enabled": {
+                            "type": "boolean",
+                            "description": "Enable the scheduled-task runner. OFF by default for CLI (run-once)."
+                        }
+                    }
+                }
+            }
+        },
+        "agent": {
+            "type": "object",
+            "properties": {
+                "default": {
+                    "type": "string",
+                    "description": "Default coding agent (e.g. pi, claude, codex)."
+                }
+            }
+        },
+        "rules": {
+            "type": "object",
+            "properties": {
+                "paths": {
+                    "type": "array",
+                    "items": { "type": "string" },
+                    "description": "Glob paths to rule files."
+                }
+            }
+        },
+        "workflows": {
+            "type": "object",
+            "properties": {
+                "paths": {
+                    "type": "array",
+                    "items": { "type": "string" },
+                    "description": "Glob paths to workflow directories."
+                }
+            }
+        },
+        "redaction": {
+            "type": "object",
+            "properties": {
+                "enabled": {
+                    "type": "boolean",
+                    "description": "Enable sensitive-data redaction in CLI output."
+                }
+            }
+        }
+    }
+}

package/spur-cli/config/config.example.yaml

@@ -0,0 +1,44 @@
+# Spur project configuration for spur-new
+# Generated by `spur init`
+
+$schema: "@gobing-ai/spur/schemas/spur-config.schema.json"
+version: "1"
+name: spur-new
+
+# ── Portable bootstrap (consumed by @gobing-ai/ts-infra runNodeApplication) ──
+# Shared across spur and (future) spur-server. Keys map 1:1 to ts-infra's
+# LoggingOptions / TelemetryOptions / database / SchedulerOptions.
+bootstrap:
+  logging:
+    enabled: true
+    level: info # debug | info | warn | error
+    console: false
+    json: false
+    file: true
+    filePath: .spur/spur.log # relative to project root
+  telemetry:
+    enabled: false # OFF by default for CLI (per-invocation latency)
+    serviceName: spur
+    environment: development
+    # endpoint: http://localhost:4318   # set => Node OTel exporter activates
+  database:
+    enabled: true
+    driver: bun-sqlite
+    url: .spur/spur.db # ${DATABASE_URL} interpolation supported
+  scheduler:
+    enabled: false # CLI is run-once; no scheduler
+
+# ── Spur app section (validated by a local zod schema — UNCHANGED keys) ──
+agent:
+  default: pi
+
+rules:
+  paths:
+    - .spur/rules/**/*.yaml
+
+workflows:
+  paths:
+    - .spur/workflows/
+
+redaction:
+  enabled: false

package/spur-cli/config/rules/README.md

@@ -0,0 +1,40 @@
+# Spur Rules
+
+This directory is the **single source of truth** for Spur's quality-gate ruleset.
+It is self-contained and authoritative — `spur rule run` resolves all categories
+and presets from local `.spur/rules/**/*.yaml` with no fallback to a global
+install or to ts-libs.
+
+## Categories
+
+| Category | Dir | Purpose |
+|---|---|---|
+| `typescript` | `typescript/` | TypeScript tooling, output boundaries, biome-suppression ban, no `debugger` |
+| `strict` | `strict/` | Opt-in strict rules (runtime boundaries, HTTP boundaries, structural) |
+| `boundary` | `boundary/` | DB/DAO boundary enforcement |
+| `structure` | `structure/` | File layout, protected files, no focused/skipped tests |
+| `quality` | `quality/` | Post-test gates (coverage) |
+| `surface` | `surface/` | CLI surface consistency (registerXxxCommand wiring, --json serialization) |
+
+## Presets
+
+| Preset | When | Extends |
+|---|---|---|
+| `recommended-pre-check` | Before tests | `typescript`, `structure`, `boundary`, `surface` |
+| `recommended-post-check` | After tests | `quality` |
+| `strict-check` | Opt-in | `strict` |
+
+## Relationship to ts-libs
+
+Rules originally authored in `ts-libs/.spur/rules/` were **absorbed and adapted**
+(here, not copied verbatim). Each absorbed file carries an `Absorbed from
+ts-libs/.spur/rules/...` header documenting what was re-scoped, omitted, or
+tuned for Spur's app-repo layout. After absorption, ts-libs and spur-new
+maintain their rulesets independently.
+
+## Not absorbed (Spur-irrelevant)
+
+- `typescript/esm-build-conventions` — governs ts-libs' library publish/dist
+  flow. Spur apps don't publish libraries this way.
+- `migration/rg-dialect` — one-time grep→rg migration helper.
+- `migration/rg-migration` — one-time grep→rg migration helper.

package/spur-cli/config/rules/boundary/dao-boundary.yaml

@@ -0,0 +1,126 @@
+# DAO / database boundary rules — keep DB access centralized in packages/domain,
+# drizzle confined to schema authoring, and table DDL derived (not hand-written).
+# Enforces ADR-011 (ts-db consumed as a facade; tables are a single source of truth).
+rules:
+  - id: ts-db-only-in-domain
+    description: >
+      @gobing-ai/ts-db may only be imported inside packages/domain. Apps and
+      other packages must consume persistence through @gobing-ai/spur-domain
+      DAOs, never the raw adapter. (ADR-011)
+    severity: error
+    evaluator:
+      type: forbidden-import
+      config:
+        forbidden:
+          - specifier: "@gobing-ai/ts-db"
+          - specifier: "@gobing-ai/ts-db/schema"
+          - specifier: "@gobing-ai/ts-db/bun-sqlite"
+          - specifier: "@gobing-ai/ts-db/d1"
+        scope:
+          include:
+            - "apps/**/src/**/*.ts"
+            - "packages/app/src/**/*.ts"
+            - "packages/config/src/**/*.ts"
+            - "packages/contracts/src/**/*.ts"
+          exclude:
+            - "**/node_modules/**"
+            - "**/tests/**"
+
+  - id: drizzle-only-in-domain-schema
+    description: >
+      drizzle-orm is an internal detail of the ts-db facade. Spur may import it
+      ONLY in packages/domain/src/schema/ (table authoring via defineTable column
+      builders). DAOs, analytics, apps, and other packages must use the ts-db
+      vocabulary (EntityDao/BaseDao + predicate spec), never drizzle. (ADR-011)
+    severity: error
+    evaluator:
+      type: forbidden-import
+      config:
+        forbidden:
+          - specifier: "drizzle-orm"
+          - specifier: "drizzle-orm/sqlite-core"
+          - specifier: "drizzle-orm/bun-sqlite"
+          - specifier: "drizzle-orm/d1"
+          - specifier: "drizzle-zod"
+        scope:
+          include:
+            - "apps/**/src/**/*.ts"
+            - "packages/**/src/**/*.ts"
+          exclude:
+            - "packages/domain/src/schema/**"
+            - "**/node_modules/**"
+            - "**/tests/**"
+
+  - id: tables-via-defineTable
+    description: >
+      Tables must be defined with defineTable() (from @gobing-ai/ts-db/schema),
+      not bare sqliteTable() — so DDL and zod derive from one source. Allowed only
+      under packages/domain/src/schema/. (ADR-011)
+    severity: error
+    evaluator:
+      type: rg
+      config:
+        pattern: "sqliteTable\\("
+    include:
+      - "apps/**/src/**/*.ts"
+      - "packages/**/src/**/*.ts"
+    exclude:
+      - "**/node_modules/**"
+      - "**/tests/**"
+
+  - id: no-hand-written-ddl-for-drizzle-tables
+    description: >
+      Domain tables derive their CREATE TABLE via createTableSql (single source of
+      truth) — do not hand-write DDL. Exempt: the CLI migration journal and
+      package-owned schema SQL re-exported from ts-libs. (ADR-011)
+    severity: error
+    evaluator:
+      type: rg
+      config:
+        # Match DDL statement form (CREATE/ALTER/DROP TABLE <name> ... '(' or ';'),
+        # not the bare words in prose/comments. Inline `(?i)` replaces the JS
+        # `flags: i` — the rg evaluator honors inline flags, not a `flags` field.
+        pattern: "(?i)(CREATE|ALTER|DROP)\\s+TABLE\\s+(IF\\s+(NOT\\s+)?EXISTS\\s+)?[\"'`]?[A-Za-z_][A-Za-z0-9_]*[\"'`]?\\s*[(;]"
+    include:
+      - "apps/**/src/**/*.ts"
+      - "packages/**/src/**/*.ts"
+    exclude:
+      - "packages/domain/src/migrations.ts"
+      - "**/node_modules/**"
+      - "**/tests/**"
+
+  - id: raw-sql-only-in-domain
+    description: >
+      Raw SQL string literals (SELECT/INSERT/UPDATE/DELETE) must stay inside
+      packages/domain (the DAO/migration layer). Apps and other packages query
+      through @gobing-ai/spur-domain DAOs. (ADR-011)
+    severity: error
+    evaluator:
+      type: rg
+      config:
+        pattern: "(SELECT |INSERT INTO|UPDATE |DELETE FROM)"
+    include:
+      - "apps/**/src/**/*.ts"
+      - "packages/app/src/**/*.ts"
+      - "packages/config/src/**/*.ts"
+      - "packages/contracts/src/**/*.ts"
+    exclude:
+      - "**/node_modules/**"
+      - "**/tests/**"
+
+  - id: no-sql-text-imports
+    description: >
+      .sql text-imports (import ... from './x.sql' with { type: 'text' }) are
+      non-portable through build/publish and are forbidden. Inline SQL in .ts or
+      derive DDL via createTableSql instead. (ADR-011)
+    severity: error
+    evaluator:
+      type: rg
+      config:
+        pattern: "from\\s+['\"][^'\"]*\\.sql['\"]"
+    include:
+      - "apps/**/src/**/*.ts"
+      - "packages/**/src/**/*.ts"
+    exclude:
+      - "**/node_modules/**"
+      - "**/tests/**"

package/spur-cli/config/rules/migration/rg-dialect.yaml

@@ -0,0 +1,44 @@
+# One-off migration guard for the `regex` → `rg` (ripgrep) evaluator move.
+#
+# NOT part of recommended-pre-check — it is a transitional check, run on demand:
+#   spur rule run --preset rg-migration
+#
+# It flags `rg`-typed rules whose patterns use ripgrep-incompatible constructs
+# (lookbehind, backreferences) so they stay on `type: regex`. Once a project's
+# rule files are migrated and clean, this preset rarely needs to run again.
+rules:
+  - id: rg-evaluator-patterns-are-ripgrep-dialect
+    description: "Patterns on the `rg` evaluator run under ripgrep's Rust regex engine, which has no lookbehind or backreferences. Such JS-only constructs belong on the `regex` (JS RegExp) evaluator. Keeps `rg` rules from failing to compile at scan time."
+    severity: error
+    evaluator:
+      type: exit-code
+      config:
+        command: sh
+        args:
+          - -c
+          - |
+            errors=0
+            for f in $(rg --files .spur/rules -g '*.yaml'); do
+              yq -e '.rules != null' "$f" >/dev/null 2>&1 || continue
+              count="$(yq '.rules | length' "$f")"
+              i=0
+              while [ "$i" -lt "$count" ]; do
+                rtype="$(yq ".rules[$i].evaluator.type // \"\"" "$f")"
+                if [ "$rtype" = "rg" ]; then
+                  pat="$(yq ".rules[$i].evaluator.config.pattern // \"\"" "$f")"
+                  # ripgrep's regex crate rejects lookbehind and backreferences.
+                  if printf '%s' "$pat" | rg -q '\(\?<[=!]'; then
+                    echo "INVALID: $f: rules[$i] rg pattern uses lookbehind (unsupported by ripgrep) — use type: regex"
+                    errors=$((errors + 1))
+                  fi
+                  if printf '%s' "$pat" | rg -q '\\[1-9]'; then
+                    echo "INVALID: $f: rules[$i] rg pattern uses a backreference (unsupported by ripgrep) — use type: regex"
+                    errors=$((errors + 1))
+                  fi
+                fi
+                i=$((i + 1))
+              done
+            done
+            [ "$errors" -eq 0 ] || exit 1
+    include:
+      - ".spur/rules/**/*.yaml"

package/spur-cli/config/rules/quality/coverage-gate.yaml

@@ -0,0 +1,36 @@
+# Coverage gate — per-file line coverage meets threshold from Bun's lcov output.
+# Absorbed from ts-libs/.spur/rules/quality/coverage-gate.yaml, re-scoped to
+# Spur's monorepo layout:
+#   - lcovPath kept at .coverage/lcov.info (Spur's `bun run test` writes
+#     coverage there via --coverage-dir=.coverage)
+#   - include expanded to apps/** + packages/** (Spur tests cover both;
+#     ts-libs only covers packages/**)
+#   - threshold kept at 90 matching bunfig.toml coverageThreshold
+#   - no drizzle exclude needed (Spur doesn't vendor generated SQL in src/)
+#
+# Scope tightened to production source only and aligned with the tsdoc-export
+# gate's exclusions: tests carry no coverage obligation, stubs are
+# declaration-only, and schema/migrations/db are implementation internals
+# (DDL, journals, adapter wiring) whose per-file coverage is noise rather than
+# a meaningful test-gap signal.
+rules:
+  - id: coverage-gate
+    description: "Per-file line coverage meets 90% threshold (read from lcov)"
+    severity: error
+    evaluator:
+      type: coverage-gate
+      config:
+        lcovPath: .coverage/lcov.info
+        threshold: 90
+        include:
+          - "apps/**/src/**"
+          - "packages/**/src/**"
+        exclude:
+          - "**/node_modules/**"
+          - "**/vendors/**"
+          - "**/dist/**"
+          - "**/tests/**"
+          - "**/stubs/**"
+          - "**/schema/**"
+          - "**/migrations.ts"
+          - "**/db.ts"

package/spur-cli/config/rules/quality/tsdoc-exports.yaml

@@ -0,0 +1,29 @@
+# TSDoc-on-exports — enforced by Spur's post-check gate.
+# Absorbed from ts-libs/.spur/rules/quality/tsdoc-exports.yaml.
+#
+# Rationale: exported symbols in production source (apps/**/src, packages/**/src)
+# are public integration points that warrant doc comments. The post-check gate
+# keeps those boundaries documented.
+#
+# Scope tightened from the evaluator's default (**/*.ts) to production source only.
+# Excluded: tests (no public API contract), stubs (declaration-only), schema/
+# migrations/db (implementation internals, not public API), dist, node_modules.
+include:
+  - "apps/**/src/**/*.ts"
+  - "packages/**/src/**/*.ts"
+exclude:
+  - "**/node_modules/**"
+  - "**/dist/**"
+  - "**/tests/**"
+  - "**/stubs/**"
+  - "**/schema/**"   # drizzle DDL definitions — not public API surface
+  - "**/migrations.ts"
+  - "**/db.ts"
+rules:
+  - id: every-export-has-tsdoc
+    description: >
+      Exported declarations must have a preceding TSDoc comment.
+    severity: error
+    enabled: true
+    evaluator:
+      type: tsdoc-export

package/spur-cli/config/rules/recommended-post-check.yaml

@@ -0,0 +1,10 @@
+# Recommended post-check preset — coverage gate and exported-symbol docs.
+# Use with: spur rule run --preset recommended-post-check --fail-on warning
+#
+# Runs AFTER tests (test-post-check). Enforces the coverage gate on
+# fresh .coverage/lcov.info output from bun test --coverage, checks exported
+# declarations for TSDoc comments. All other rules (typescript, structure,
+# boundary, surface) run in pre-check.
+name: recommended-post-check
+extends:
+  - quality

package/spur-cli/config/rules/recommended-pre-check.yaml

@@ -0,0 +1,12 @@
+# Recommended pre-check preset — portable rule categories from global install.
+# Use with: spur rule run --preset recommended-pre-check
+#
+# Runs BEFORE tests (test-pre-check). TypeScript quality, structural, DB
+# boundary, and CLI surface consistency rules. TSDoc exports run in post-check
+# alongside coverage-gate.
+name: recommended-pre-check
+extends:
+  - typescript
+  - structure
+  - boundary
+  - surface

package/spur-cli/config/rules/rg-migration.yaml

@@ -0,0 +1,14 @@
+# rg-migration preset — on-demand guard for the regex → rg (ripgrep) evaluator move.
+#
+# Run explicitly when migrating rule files onto the `rg` evaluator:
+#   spur rule run --preset rg-migration --fail-on warning
+#
+# Deliberately NOT included in recommended-pre-check / recommended-post-check:
+# it is a transitional check, not a standing quality gate. See the rule-engine
+# README "Rules Migration" section.
+name: rg-migration
+description: >
+  Flags rg-typed rule patterns that use ripgrep-incompatible constructs
+  (lookbehind, backreferences). Run on demand during the regex → rg migration.
+extends:
+  - migration