@rigour-labs/cli 5.0.0 → 5.0.1

package/dist/commands/hooks.js

@@ -19,6 +19,7 @@ import chalk from 'chalk';
 import { randomUUID } from 'crypto';
 import { runHookChecker, scanInputForCredentials, formatDLPAlert, createDLPAuditEntry } from '@rigour-labs/core';
 // ── Studio event logging ─────────────────────────────────────────────
+const MAX_EVENT_LOG_LINES = 2000;
 async function logStudioEvent(cwd, event) {
     try {
         const rigourDir = path.join(cwd, '.rigour');
@@ -30,11 +31,30 @@ async function logStudioEvent(cwd, event) {
             ...event,
         }) + '\n';
         await fs.appendFile(eventsPath, logEntry);
+        // Rotate: keep last MAX_EVENT_LOG_LINES entries to prevent unbounded growth
+        await rotateEventLog(eventsPath);
     }
     catch {
         // Silent fail
     }
 }
+async function rotateEventLog(eventsPath) {
+    try {
+        const stat = await fs.stat(eventsPath);
+        // Only check rotation when file exceeds ~500KB (avoids reading on every append)
+        if (stat.size < 512 * 1024)
+            return;
+        const content = await fs.readFile(eventsPath, 'utf-8');
+        const lines = content.trim().split('\n');
+        if (lines.length > MAX_EVENT_LOG_LINES) {
+            const trimmed = lines.slice(-MAX_EVENT_LOG_LINES).join('\n') + '\n';
+            await fs.writeFile(eventsPath, trimmed);
+        }
+    }
+    catch {
+        // Silent fail — rotation is best-effort
+    }
+}
 // ── Tool detection ───────────────────────────────────────────────────
 const TOOL_MARKERS = {
     claude: ['CLAUDE.md', '.claude'],
@@ -249,6 +269,8 @@ process.stdin.on('end', async () => {
         const proc = spawnSync(
             command,
             [...baseArgs, '--mode', 'dlp', '--stdin'],
+            // Note: joining with \\n is safe — credential patterns match within single values.
+            // A credential split across two toolInput fields would be malformed regardless.
             { input: textsToScan.join('\\n'), encoding: 'utf-8', timeout: 3000 }
         );
         if (proc.error) throw proc.error;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/cli",
-  "version": "5.0.0",
+  "version": "5.0.1",
   "description": "CLI quality gates for AI-generated code. Forces AI agents (Claude, Cursor, Copilot) to meet strict engineering standards with PASS/FAIL enforcement.",
   "license": "MIT",
   "homepage": "https://rigour.run",
@@ -44,7 +44,7 @@
     "inquirer": "9.2.16",
     "ora": "^8.0.1",
     "yaml": "^2.8.2",
-    "@rigour-labs/core": "5.0.0"
+    "@rigour-labs/core": "5.0.1"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",