@hivelore/core 0.42.1 → 0.43.2

package/dist/index.d.ts

@@ -36,6 +36,10 @@ declare const SensorSchema: z.ZodObject<{
      * the optional `@ast-grep/napi` engine; without it the sensor is unrunnable (warn, never block).
      */
     pattern: z.ZodOptional<z.ZodString>;
+    /** kind=ast: full ast-grep Rule object (`kind`, `inside`, `has`, `not`, `all`, `any`, …). */
+    rule: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    /** kind=ast: explicit language name for extensionless/non-standard files (e.g. python, go). */
+    language: z.ZodOptional<z.ZodString>;
     /**
      * Optional "correct-usage" regex (kind=regex). When `pattern` (the risky call) matches but this
      * regex ALSO appears within a small window around the match, the catch is SUPPRESSED — the diff
@@ -89,6 +93,8 @@ declare const SensorSchema: z.ZodObject<{
     autogen: boolean;
     last_fired: string | null;
     pattern?: string | undefined;
+    rule?: Record<string, unknown> | undefined;
+    language?: string | undefined;
     absent?: string | undefined;
     flags?: string | undefined;
     command?: string | undefined;
@@ -101,6 +107,8 @@ declare const SensorSchema: z.ZodObject<{
     paths?: string[] | undefined;
     kind?: "regex" | "ast" | "shell" | "test" | undefined;
     pattern?: string | undefined;
+    rule?: Record<string, unknown> | undefined;
+    language?: string | undefined;
     absent?: string | undefined;
     flags?: string | undefined;
     command?: string | undefined;
@@ -167,6 +175,10 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
          * the optional `@ast-grep/napi` engine; without it the sensor is unrunnable (warn, never block).
          */
         pattern: z.ZodOptional<z.ZodString>;
+        /** kind=ast: full ast-grep Rule object (`kind`, `inside`, `has`, `not`, `all`, `any`, …). */
+        rule: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        /** kind=ast: explicit language name for extensionless/non-standard files (e.g. python, go). */
+        language: z.ZodOptional<z.ZodString>;
         /**
          * Optional "correct-usage" regex (kind=regex). When `pattern` (the risky call) matches but this
          * regex ALSO appears within a small window around the match, the catch is SUPPRESSED — the diff
@@ -220,6 +232,8 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         autogen: boolean;
         last_fired: string | null;
         pattern?: string | undefined;
+        rule?: Record<string, unknown> | undefined;
+        language?: string | undefined;
         absent?: string | undefined;
         flags?: string | undefined;
         command?: string | undefined;
@@ -232,6 +246,8 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         paths?: string[] | undefined;
         kind?: "regex" | "ast" | "shell" | "test" | undefined;
         pattern?: string | undefined;
+        rule?: Record<string, unknown> | undefined;
+        language?: string | undefined;
         absent?: string | undefined;
         flags?: string | undefined;
         command?: string | undefined;
@@ -317,6 +333,8 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         autogen: boolean;
         last_fired: string | null;
         pattern?: string | undefined;
+        rule?: Record<string, unknown> | undefined;
+        language?: string | undefined;
         absent?: string | undefined;
         flags?: string | undefined;
         command?: string | undefined;
@@ -350,6 +368,8 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         paths?: string[] | undefined;
         kind?: "regex" | "ast" | "shell" | "test" | undefined;
         pattern?: string | undefined;
+        rule?: Record<string, unknown> | undefined;
+        language?: string | undefined;
         absent?: string | undefined;
         flags?: string | undefined;
         command?: string | undefined;
@@ -407,6 +427,8 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         autogen: boolean;
         last_fired: string | null;
         pattern?: string | undefined;
+        rule?: Record<string, unknown> | undefined;
+        language?: string | undefined;
         absent?: string | undefined;
         flags?: string | undefined;
         command?: string | undefined;
@@ -440,6 +462,8 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         paths?: string[] | undefined;
         kind?: "regex" | "ast" | "shell" | "test" | undefined;
         pattern?: string | undefined;
+        rule?: Record<string, unknown> | undefined;
+        language?: string | undefined;
         absent?: string | undefined;
         flags?: string | undefined;
         command?: string | undefined;
@@ -1591,6 +1615,13 @@ interface HaiveConfig {
          * (or pass `--commands`) once the team trusts the sensors. Regex sensors always run. Default false.
          */
         runCommandSensors?: boolean;
+        /**
+         * CI/strict-gate handling when a shell/test sensor cannot execute. `warn` preserves the
+         * fail-open developer default; `block` treats any configured but broken oracle as a broken harness.
+         */
+        commandSensorUnrunnable?: "warn" | "block";
+        /** Require explicit resolution of a diff that demotes, rewrites, or removes a BLOCK sensor. */
+        sensorWeakeningGate?: "warn" | "block";
         /**
          * How `hivelore enforce finish` reacts to hard failures observed this session that were never
          * captured as a lesson (`mem_tried`):

package/dist/index.js

@@ -36,6 +36,10 @@ var SensorSchema = z.object({
    * the optional `@ast-grep/napi` engine; without it the sensor is unrunnable (warn, never block).
    */
   pattern: z.string().optional(),
+  /** kind=ast: full ast-grep Rule object (`kind`, `inside`, `has`, `not`, `all`, `any`, …). */
+  rule: z.record(z.unknown()).optional(),
+  /** kind=ast: explicit language name for extensionless/non-standard files (e.g. python, go). */
+  language: z.string().optional(),
   /**
    * Optional "correct-usage" regex (kind=regex). When `pattern` (the risky call) matches but this
    * regex ALSO appears within a small window around the match, the catch is SUPPRESSED — the diff
@@ -967,7 +971,7 @@ function buildPreventionReceipt(events, memories, usage, options) {
       red_proven: sensor?.red_proven === true
     };
   }).sort((a, b) => b.at.localeCompare(a.at));
-  const preventedCountTotal = Object.values(usage.by_id).reduce((sum, item) => sum + item.prevented_count, 0);
+  const preventedCountTotal = Object.values(usage.by_id).reduce((sum, item) => sum + (item.prevented_count ?? 0), 0);
   return {
     generated_at: now.toISOString(),
     since: options.since.toISOString(),
@@ -2559,6 +2563,8 @@ var DEFAULT_CONFIG = {
     antiPatternGate: "anchored",
     bootstrapGate: "block",
     humanCommits: "relaxed",
+    commandSensorUnrunnable: "warn",
+    sensorWeakeningGate: "warn",
     scoreThreshold: 80,
     cleanupGeneratedArtifacts: true,
     toolProfile: "enforcement",
@@ -2593,6 +2599,8 @@ var AUTOPILOT_DEFAULTS = {
     antiPatternGate: "anchored",
     bootstrapGate: "block",
     humanCommits: "relaxed",
+    commandSensorUnrunnable: "warn",
+    sensorWeakeningGate: "warn",
     scoreThreshold: 85,
     cleanupGeneratedArtifacts: true,
     toolProfile: "enforcement",
@@ -4220,6 +4228,7 @@ function diffFileChanges(diff) {
       const newPath = raw === "/dev/null" ? null : normalizeProjectPath(raw);
       current = {
         path: newPath ?? oldPath ?? "",
+        created: oldPath === null && newPath !== null,
         deleted: newPath === null,
         removed: [],
         added: []
@@ -4247,6 +4256,7 @@ function detectSensorWeakening(diff) {
       weakenings.push({ file: file.path, memory_id: memoryId, change, detail });
     };
     const removedBlockSeverity = file.removed.some((l) => SEVERITY_BLOCK_RE.test(l));
+    if (file.created) continue;
     if (file.deleted) {
       if (file.removed.some((l) => SENSOR_BLOCK_START_RE.test(l)) && removedBlockSeverity) {
         flag("memory-deleted", "memory file with a block sensor deleted");
@@ -4269,7 +4279,10 @@ function detectSensorWeakening(diff) {
     }
     const removedAbsent = file.removed.find((l) => SENSOR_ABSENT_KEY_RE.test(l));
     const addedAbsent = file.added.find((l) => SENSOR_ABSENT_KEY_RE.test(l));
-    if (addedAbsent !== void 0 && addedAbsent.trim() !== removedAbsent?.trim()) {
+    const addingNewSensorBlock = file.added.some((l) => SENSOR_BLOCK_START_RE.test(l)) && !file.removed.some(
+      (l) => SENSOR_BLOCK_START_RE.test(l) || SENSOR_ORACLE_KEY_RE.test(l) || SEVERITY_BLOCK_RE.test(l) || SEVERITY_WARN_RE.test(l)
+    );
+    if (!addingNewSensorBlock && addedAbsent !== void 0 && addedAbsent.trim() !== removedAbsent?.trim()) {
       flag("suppression-broadened", removedAbsent === void 0 ? "absent marker added" : "absent marker changed");
     }
     if (file.removed.some((l) => SENSOR_BLOCK_START_RE.test(l)) && removedBlockSeverity && !file.added.some((l) => SENSOR_BLOCK_START_RE.test(l))) {