@rigour-labs/core 3.0.5 → 3.0.6

package/dist/templates/presets.js

@@ -0,0 +1,227 @@
+export const TEMPLATES = [
+    {
+        name: 'ui',
+        markers: [
+            'react', 'next', 'vue', 'svelte',
+            'next.config.js', 'vite.config.ts', 'tailwind.config.js',
+            'base.css', 'index.html',
+        ],
+        config: {
+            preset: 'ui',
+            ignore: [
+                '.git/**', 'node_modules/**', 'dist/**', 'build/**',
+                '.next/**', '.nuxt/**', '.svelte-kit/**', 'coverage/**', '.turbo/**',
+            ],
+            gates: {
+                max_file_lines: 300,
+                required_files: ['docs/SPEC.md', 'docs/ARCH.md', 'README.md'],
+            },
+            planned: [
+                'Layer Boundary: Components cannot import from DB',
+                'Prop-Drilling Detection: Max depth 5',
+            ],
+        },
+    },
+    {
+        name: 'api',
+        markers: [
+            'express', 'fastify', 'nestjs', 'go.mod',
+            'requirements.txt', 'pyproject.toml', 'app.py', 'main.go', 'index.js',
+        ],
+        config: {
+            preset: 'api',
+            ignore: [
+                '.git/**',
+                'node_modules/**', 'dist/**',
+                'venv/**', '.venv/**', '__pycache__/**', '*.pyc',
+                '.tox/**', '.pytest_cache/**', '.mypy_cache/**', '*.egg-info/**',
+                'vendor/**',
+            ],
+            gates: {
+                max_file_lines: 400,
+                required_files: ['docs/SPEC.md', 'docs/ARCH.md', 'README.md'],
+            },
+            planned: [
+                'Service Layer Enforcement: Controllers -> Services only',
+                'Repo Pattern: Databases access isolated to repositories/',
+            ],
+        },
+    },
+    {
+        name: 'infra',
+        markers: ['Dockerfile', 'docker-compose.yml', 'main.tf', 'k8s/', 'helm/', 'ansible/'],
+        config: {
+            preset: 'infra',
+            ignore: [
+                '.git/**', '.terraform/**', '*.tfstate', '*.tfstate.backup',
+                '.terragrunt-cache/**', 'charts/**/*.tgz',
+            ],
+            gates: {
+                max_file_lines: 300,
+                required_files: ['docs/RUNBOOK.md', 'docs/ARCH.md', 'README.md'],
+            },
+        },
+    },
+    {
+        name: 'data',
+        markers: ['ipynb', 'spark', 'pandas', 'data/', 'dbt_project.yml'],
+        config: {
+            preset: 'data',
+            ignore: [
+                '.git/**', '.ipynb_checkpoints/**', '__pycache__/**', '*.pyc',
+                'dbt_packages/**', 'target/**', 'logs/**', '*.parquet', '*.csv',
+            ],
+            gates: {
+                max_file_lines: 500,
+                required_files: ['docs/DATA_DICTIONARY.md', 'docs/PIPELINE.md', 'README.md'],
+            },
+            planned: [
+                'Stochastic Determinism: Seed setting enforcement',
+                'Data Leaks: Detecting PII in notebook outputs',
+            ],
+        },
+    },
+    // --- Regulated Industry Presets ---
+    {
+        name: 'healthcare',
+        markers: ['hl7', 'fhir', 'hipaa', 'medical', 'patient', 'health', 'ehr', 'phi', 'dicom', 'icd-10', 'snomed'],
+        config: {
+            preset: 'healthcare',
+            ignore: [
+                '.git/**', 'node_modules/**', 'dist/**', 'build/**',
+                'venv/**', '.venv/**', '__pycache__/**',
+            ],
+            gates: {
+                max_file_lines: 300,
+                required_files: ['docs/COMPLIANCE.md', 'docs/SPEC.md', 'docs/ARCH.md', 'README.md'],
+                security: {
+                    enabled: true,
+                    sql_injection: true,
+                    xss: true,
+                    path_traversal: true,
+                    hardcoded_secrets: true,
+                    insecure_randomness: true,
+                    command_injection: true,
+                    block_on_severity: 'critical',
+                },
+            },
+        },
+    },
+    {
+        name: 'fintech',
+        markers: ['trading', 'payment', 'kyc', 'aml', 'pci', 'transaction', 'ledger', 'banking', 'stripe', 'plaid', 'sox'],
+        config: {
+            preset: 'fintech',
+            ignore: [
+                '.git/**', 'node_modules/**', 'dist/**', 'build/**',
+                'venv/**', '.venv/**', '__pycache__/**', 'vendor/**',
+            ],
+            gates: {
+                max_file_lines: 350,
+                required_files: ['docs/AUDIT_LOG.md', 'docs/SPEC.md', 'docs/ARCH.md', 'README.md'],
+                security: {
+                    enabled: true,
+                    sql_injection: true,
+                    xss: true,
+                    path_traversal: true,
+                    hardcoded_secrets: true,
+                    insecure_randomness: true,
+                    command_injection: true,
+                    block_on_severity: 'high',
+                },
+                agent_team: {
+                    enabled: true,
+                    max_concurrent_agents: 3,
+                    cross_agent_pattern_check: true,
+                    handoff_verification: true,
+                    task_ownership: 'strict',
+                },
+            },
+        },
+    },
+    {
+        name: 'government',
+        markers: ['fedramp', 'nist', 'cmmc', 'federal', 'govcloud', 'il4', 'il5', 'fisma', 'itar', 'cui'],
+        config: {
+            preset: 'government',
+            ignore: [
+                '.git/**', 'node_modules/**', 'dist/**', 'build/**',
+                'venv/**', '.venv/**', '__pycache__/**', 'vendor/**',
+            ],
+            gates: {
+                max_file_lines: 250,
+                required_files: ['docs/SECURITY.md', 'docs/SPEC.md', 'docs/ARCH.md', 'README.md'],
+                ast: {
+                    complexity: 8, max_methods: 10, max_params: 4,
+                    max_nesting: 3, max_inheritance_depth: 3,
+                    max_class_dependencies: 5, max_function_lines: 40,
+                },
+                security: {
+                    enabled: true,
+                    sql_injection: true,
+                    xss: true,
+                    path_traversal: true,
+                    hardcoded_secrets: true,
+                    insecure_randomness: true,
+                    command_injection: true,
+                    block_on_severity: 'medium',
+                },
+                agent_team: {
+                    enabled: true,
+                    max_concurrent_agents: 3,
+                    cross_agent_pattern_check: true,
+                    handoff_verification: true,
+                    task_ownership: 'strict',
+                },
+                checkpoint: {
+                    enabled: true,
+                    interval_minutes: 10,
+                    quality_threshold: 85,
+                    drift_detection: true,
+                    auto_save_on_failure: true,
+                },
+            },
+        },
+    },
+    {
+        name: 'devsecops',
+        markers: [
+            'trivy', 'snyk', 'semgrep', 'sonarqube', 'owasp',
+            'sast', 'dast', 'pentest', 'vulnerability', 'cve',
+            'security-scan', 'falco', 'wazuh', 'ossec',
+        ],
+        config: {
+            preset: 'devsecops',
+            ignore: [
+                '.git/**', 'node_modules/**', 'dist/**', 'build/**',
+                'venv/**', '.venv/**', '__pycache__/**', 'vendor/**',
+            ],
+            gates: {
+                max_file_lines: 300,
+                required_files: ['docs/SECURITY.md', 'docs/RUNBOOK.md', 'README.md'],
+                ast: {
+                    complexity: 10, max_methods: 10, max_params: 5,
+                    max_nesting: 3, max_inheritance_depth: 3,
+                    max_class_dependencies: 5, max_function_lines: 50,
+                },
+                security: {
+                    enabled: true,
+                    sql_injection: true,
+                    xss: true,
+                    path_traversal: true,
+                    hardcoded_secrets: true,
+                    insecure_randomness: true,
+                    command_injection: true,
+                    block_on_severity: 'high',
+                },
+                agent_team: {
+                    enabled: true,
+                    max_concurrent_agents: 3,
+                    cross_agent_pattern_check: true,
+                    handoff_verification: true,
+                    task_ownership: 'strict',
+                },
+            },
+        },
+    },
+];

package/dist/templates/universal-config.d.ts

@@ -0,0 +1,2 @@
+import type { Config } from '../types/index.js';
+export declare const UNIVERSAL_CONFIG: Config;

package/dist/templates/universal-config.js

@@ -0,0 +1,171 @@
+export const UNIVERSAL_CONFIG = {
+    version: 1,
+    commands: {},
+    gates: {
+        max_file_lines: 500,
+        forbid_todos: true,
+        forbid_fixme: true,
+        forbid_paths: [],
+        required_files: ['docs/SPEC.md', 'docs/ARCH.md', 'docs/DECISIONS.md', 'docs/TASKS.md'],
+        ast: {
+            complexity: 10,
+            max_methods: 10,
+            max_params: 5,
+            max_nesting: 4,
+            max_inheritance_depth: 3,
+            max_class_dependencies: 5,
+            max_function_lines: 50,
+        },
+        dependencies: {
+            forbid: [],
+        },
+        architecture: {
+            boundaries: [],
+        },
+        safety: {
+            max_files_changed_per_cycle: 10,
+            protected_paths: ['.github/**', 'docs/**', 'rigour.yml'],
+        },
+        context: {
+            enabled: true,
+            sensitivity: 0.8,
+            mining_depth: 100,
+            ignored_patterns: [],
+            cross_file_patterns: true,
+            naming_consistency: true,
+            import_relationships: true,
+            max_cross_file_depth: 50,
+        },
+        environment: {
+            enabled: true,
+            enforce_contracts: true,
+            tools: {},
+            required_env: [],
+        },
+        retry_loop_breaker: {
+            enabled: true,
+            max_retries: 3,
+            auto_classify: true,
+            doc_sources: {},
+        },
+        agent_team: {
+            enabled: false,
+            max_concurrent_agents: 3,
+            cross_agent_pattern_check: true,
+            handoff_verification: true,
+            task_ownership: 'strict',
+        },
+        checkpoint: {
+            enabled: false,
+            interval_minutes: 15,
+            quality_threshold: 80,
+            drift_detection: true,
+            auto_save_on_failure: true,
+        },
+        security: {
+            enabled: true,
+            sql_injection: true,
+            xss: true,
+            path_traversal: true,
+            hardcoded_secrets: true,
+            insecure_randomness: true,
+            command_injection: true,
+            block_on_severity: 'high',
+        },
+        adaptive: {
+            enabled: false,
+            base_coverage_threshold: 80,
+            base_quality_threshold: 80,
+            auto_detect_tier: true,
+        },
+        staleness: {
+            enabled: false,
+            rules: {
+                'no-var': true,
+                'no-commonjs': false,
+                'no-arguments': false,
+                'prefer-arrow': false,
+                'prefer-template': false,
+                'prefer-spread': false,
+                'prefer-rest': false,
+                'prefer-const': false,
+            },
+        },
+        duplication_drift: {
+            enabled: true,
+            similarity_threshold: 0.8,
+            min_body_lines: 5,
+        },
+        hallucinated_imports: {
+            enabled: true,
+            check_relative: true,
+            check_packages: true,
+            ignore_patterns: [
+                '\\.css$', '\\.scss$', '\\.less$', '\\.svg$', '\\.png$', '\\.jpg$',
+                '\\.json$', '\\.wasm$', '\\.graphql$', '\\.gql$',
+            ],
+        },
+        inconsistent_error_handling: {
+            enabled: true,
+            max_strategies_per_type: 2,
+            min_occurrences: 3,
+            ignore_empty_catches: false,
+        },
+        context_window_artifacts: {
+            enabled: true,
+            min_file_lines: 100,
+            degradation_threshold: 0.4,
+            signals_required: 2,
+        },
+        promise_safety: {
+            enabled: true,
+            check_unhandled_then: true,
+            check_unsafe_parse: true,
+            check_async_without_await: true,
+            check_unsafe_fetch: true,
+            ignore_patterns: [],
+        },
+        phantom_apis: {
+            enabled: true,
+            check_node: true,
+            check_python: true,
+            check_go: true,
+            check_csharp: true,
+            check_java: true,
+            ignore_patterns: [],
+        },
+        deprecated_apis: {
+            enabled: true,
+            check_node: true,
+            check_python: true,
+            check_web: true,
+            check_go: true,
+            check_csharp: true,
+            check_java: true,
+            block_security_deprecated: true,
+            ignore_patterns: [],
+        },
+        test_quality: {
+            enabled: true,
+            check_empty_tests: true,
+            check_tautological: true,
+            check_mock_heavy: true,
+            check_snapshot_abuse: true,
+            check_assertion_free_async: true,
+            max_mocks_per_test: 5,
+            ignore_patterns: [],
+        },
+    },
+    hooks: {
+        enabled: false,
+        tools: [],
+        fast_gates: ['hallucinated-imports', 'phantom-apis', 'deprecated-apis', 'promise-safety', 'security-patterns', 'file-size'],
+        timeout_ms: 5000,
+        block_on_failure: false,
+    },
+    output: {
+        report_path: 'rigour-report.json',
+    },
+    planned: [],
+    ignore: [],
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/core",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "description": "Deterministic quality gate engine for AI-generated code. AST analysis, drift detection, and Fix Packet generation across TypeScript, JavaScript, Python, Go, Ruby, and C#.",
   "license": "MIT",
   "homepage": "https://rigour.run",