@rigour-labs/core 3.0.6 → 4.0.1

package/dist/types/index.js

@@ -168,6 +168,30 @@ export const GatesSchema = z.object({
         max_mocks_per_test: z.number().optional().default(5),
         ignore_patterns: z.array(z.string()).optional().default([]),
     }).optional().default({}),
+    // v4.0+ Deep Analysis (LLM-powered)
+    deep: z.object({
+        enabled: z.boolean().optional().default(false),
+        pro: z.boolean().optional().default(false),
+        provider: z.string().optional().default('local'), // 'local' for sidecar, or any cloud: 'claude', 'openai', 'gemini', 'groq', 'mistral', 'together', etc.
+        api_key: z.string().optional(),
+        api_base_url: z.string().optional(), // custom API base URL (for self-hosted, proxies, any OpenAI-compatible endpoint)
+        model_name: z.string().optional(), // cloud model name override (e.g. 'gpt-4o', 'claude-sonnet-4-5-20250929', 'gemini-pro')
+        model_path: z.string().optional(), // custom local GGUF model path override
+        threads: z.number().optional().default(4),
+        max_tokens: z.number().optional().default(512),
+        temperature: z.number().optional().default(0.1),
+        timeout_ms: z.number().optional().default(60000),
+        checks: z.object({
+            solid: z.boolean().optional().default(true),
+            dry: z.boolean().optional().default(true),
+            design_patterns: z.boolean().optional().default(true),
+            language_idioms: z.boolean().optional().default(true),
+            error_handling: z.boolean().optional().default(true),
+            test_quality: z.boolean().optional().default(true),
+            architecture: z.boolean().optional().default(true),
+            code_smells: z.boolean().optional().default(true),
+        }).optional().default({}),
+    }).optional().default({}),
 });
 export const CommandsSchema = z.object({
     format: z.string().optional(),
@@ -205,7 +229,7 @@ export const ConfigSchema = z.object({
 export const StatusSchema = z.enum(['PASS', 'FAIL', 'SKIP', 'ERROR']);
 export const SeveritySchema = z.enum(['critical', 'high', 'medium', 'low', 'info']);
 /** Provenance tags — lets dashboards/agents filter by what matters */
-export const ProvenanceSchema = z.enum(['ai-drift', 'traditional', 'security', 'governance']);
+export const ProvenanceSchema = z.enum(['ai-drift', 'traditional', 'security', 'governance', 'deep-analysis']);
 /** Severity weights for score calculation */
 export const SEVERITY_WEIGHTS = {
     critical: 20,
@@ -224,6 +248,11 @@ export const FailureSchema = z.object({
     line: z.number().optional(),
     endLine: z.number().optional(),
     hint: z.string().optional(),
+    // Deep analysis fields
+    confidence: z.number().min(0).max(1).optional(), // LLM confidence score
+    source: z.enum(['ast', 'llm', 'hybrid']).optional(), // Finding source
+    category: z.string().optional(), // e.g. 'srp_violation', 'god_function'
+    verified: z.boolean().optional(), // AST-verified LLM finding
 });
 export const ReportSchema = z.object({
     status: StatusSchema,
@@ -234,12 +263,23 @@ export const ReportSchema = z.object({
         score: z.number().optional(),
         ai_health_score: z.number().optional(),
         structural_score: z.number().optional(),
+        code_quality_score: z.number().optional(), // Deep analysis score
         severity_breakdown: z.record(z.number()).optional(),
         provenance_breakdown: z.object({
             'ai-drift': z.number(),
             traditional: z.number(),
             security: z.number(),
             governance: z.number(),
+            'deep-analysis': z.number(),
+        }).optional(),
+        deep: z.object({
+            enabled: z.boolean(),
+            tier: z.enum(['deep', 'pro', 'cloud']).optional(),
+            model: z.string().optional(),
+            total_ms: z.number().optional(),
+            files_analyzed: z.number().optional(),
+            findings_count: z.number().optional(),
+            findings_verified: z.number().optional(),
         }).optional(),
     }),
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/core",
-  "version": "3.0.6",
+  "version": "4.0.1",
   "description": "Deterministic quality gate engine for AI-generated code. AST analysis, drift detection, and Fix Packet generation across TypeScript, JavaScript, Python, Go, Ruby, and C#.",
   "license": "MIT",
   "homepage": "https://rigour.run",
@@ -55,9 +55,13 @@
     "zod": "^3.22.4"
   },
   "optionalDependencies": {
-    "@xenova/transformers": "^2.17.2"
+    "@anthropic-ai/sdk": "^0.30.1",
+    "@xenova/transformers": "^2.17.2",
+    "better-sqlite3": "^11.0.0",
+    "openai": "^4.104.0"
   },
   "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
     "@types/fs-extra": "^11.0.4",
     "@types/micromatch": "^4.0.10",
     "@types/node": "^25.0.3",