@rigour-labs/core 6.3.1 → 6.4.1

package/dist/semantic/sites/call-sites.test.js

@@ -0,0 +1,46 @@
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { afterEach, describe, expect, it } from 'vitest';
+import { exportCallSites } from './export.js';
+let dir;
+afterEach(() => { if (dir)
+    fs.rmSync(dir, { recursive: true, force: true }); dir = undefined; });
+function sites(code) {
+    dir = fs.mkdtempSync(path.join(os.tmpdir(), 'call-sites-'));
+    fs.writeFileSync(path.join(dir, 'main.ts'), code);
+    return exportCallSites(dir, ['main.ts']).map(s => [s.function, s.callee, s.ordinal, s.handledBy]);
+}
+const DECLS = 'declare function a(): Promise<number>;\ndeclare function b(): Promise<number>;\n';
+describe('findCallSites', () => {
+    it('reports awaited calls and says how each handles failure', () => {
+        expect(sites(`${DECLS}
+export async function load() {
+  const x = await a();
+  try { await b(); } catch { return 0; }
+  const y = await a().catch(() => 0);
+  return x + y;
+}`)).toEqual([
+            ['load', 'a', 0, null],
+            ['load', 'b', 0, 'try'],
+            ['load', 'a', 1, 'call'],
+        ]);
+    });
+    it('treats each element of Promise.all as a site, and allSettled as handled', () => {
+        expect(sites(`${DECLS}
+export async function both() {
+  const [x, y] = await Promise.all([a(), b()]);
+  const settled = await Promise.allSettled([a()]);
+  return [x, y, settled];
+}`)).toEqual([
+            ['both', 'a', 0, null],
+            ['both', 'b', 0, null],
+            ['both', 'a', 1, 'all-settled'],
+        ]);
+    });
+    it('counts a callee that catches and returns as handled', () => {
+        expect(sites(`${DECLS}
+async function safeA() { try { return await a(); } catch { return 0; } }
+export async function use() { return await safeA(); }`)).toContainEqual(['use', 'safeA', 0, 'call']);
+    });
+});

package/dist/semantic/sites/export.d.ts

@@ -0,0 +1,2 @@
+import { type CallSite } from './call-sites.js';
+export declare function exportCallSites(cwd: string, files: string[]): CallSite[];

package/dist/semantic/sites/export.js

@@ -0,0 +1,22 @@
+/**
+ * Call sites for a set of files, through the same program construction the
+ * semantic engine uses (project modules resolved, libraries skipped).
+ */
+import path from 'path';
+import { loadProjectConfig, programBatches } from '../program.js';
+import { findCallSites } from './call-sites.js';
+const SOURCE = /\.(?:[cm]?[jt]s|[jt]sx)$/i;
+export function exportCallSites(cwd, files) {
+    const roots = files.filter(f => SOURCE.test(f) && !/\.d\.[cm]?ts$/i.test(f)).map(f => path.resolve(cwd, f));
+    if (roots.length === 0)
+        return [];
+    const wanted = new Set(roots.map(r => path.normalize(r)));
+    const sites = [];
+    for (const program of programBatches(roots, loadProjectConfig(cwd).options)) {
+        for (const sourceFile of program.getSourceFiles()) {
+            if (wanted.delete(path.normalize(sourceFile.fileName)))
+                sites.push(...findCallSites(cwd, program.getTypeChecker(), sourceFile));
+        }
+    }
+    return sites;
+}

package/dist/semantic/types.d.ts

@@ -7,6 +7,7 @@
  */
 import type ts from 'typescript';
 import type { Provenance, Severity } from '../types/index.js';
+import type { ProjectFacts } from './project-facts.js';
 import type { Summaries } from './summaries.js';
 export interface SemanticFinding {
     rule: string;
@@ -22,9 +23,12 @@ export interface SemanticFinding {
 }
 export interface RuleContext {
     cwd: string;
+    program: ts.Program;
     checker: ts.TypeChecker;
     sourceFile: ts.SourceFile;
     summaries: Summaries;
+    /** The file's own package: declared dependencies and compiler options. */
+    project: ProjectFacts;
 }
 export interface SemanticRule {
     id: string;

package/dist/services/engineering-knowledge-graph.d.ts

@@ -27,7 +27,7 @@ export interface EngineeringKnowledgeGraph {
     truncated: boolean;
     counts: Record<string, number>;
 }
-interface GraphInput {
+export interface GraphInput {
     repository: {
         id: string;
         name: string;
@@ -65,4 +65,3 @@ interface GraphInput {
     maxFiles?: number;
 }
 export declare function buildEngineeringKnowledgeGraph(input: GraphInput): EngineeringKnowledgeGraph;
-export {};

package/dist/templates/universal-config.js

@@ -235,7 +235,7 @@ export const UNIVERSAL_CONFIG = {
             track_returns: true,
         },
         semantic_bugs: {
-            enabled: false,
+            enabled: true,
         },
         side_effect_analysis: {
             enabled: true,
@@ -252,6 +252,7 @@ export const UNIVERSAL_CONFIG = {
         deep: {
             enabled: false,
             pro: false,
+            max: false,
             provider: 'local',
             threads: 4,
             temperature: 0.1,

package/dist/types/index.d.ts

@@ -577,6 +577,7 @@ export declare const GatesSchema: z.ZodObject<{
     deep: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
         pro: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        max: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
         provider: z.ZodDefault<z.ZodOptional<z.ZodString>>;
         api_key: z.ZodOptional<z.ZodString>;
         api_base_url: z.ZodOptional<z.ZodString>;
@@ -618,6 +619,7 @@ export declare const GatesSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
         pro: boolean;
+        max: boolean;
         provider: string;
         threads: number;
         temperature: number;
@@ -641,6 +643,7 @@ export declare const GatesSchema: z.ZodObject<{
     }, {
         enabled?: boolean | undefined;
         pro?: boolean | undefined;
+        max?: boolean | undefined;
         provider?: string | undefined;
         api_key?: string | undefined;
         api_base_url?: string | undefined;
@@ -666,6 +669,7 @@ export declare const GatesSchema: z.ZodObject<{
     deep: {
         enabled: boolean;
         pro: boolean;
+        max: boolean;
         provider: string;
         threads: number;
         temperature: number;
@@ -899,6 +903,7 @@ export declare const GatesSchema: z.ZodObject<{
     deep?: {
         enabled?: boolean | undefined;
         pro?: boolean | undefined;
+        max?: boolean | undefined;
         provider?: string | undefined;
         api_key?: string | undefined;
         api_base_url?: string | undefined;
@@ -1766,6 +1771,7 @@ export declare const ConfigSchema: z.ZodObject<{
         deep: z.ZodDefault<z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
             pro: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            max: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
             provider: z.ZodDefault<z.ZodOptional<z.ZodString>>;
             api_key: z.ZodOptional<z.ZodString>;
             api_base_url: z.ZodOptional<z.ZodString>;
@@ -1807,6 +1813,7 @@ export declare const ConfigSchema: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
             pro: boolean;
+            max: boolean;
             provider: string;
             threads: number;
             temperature: number;
@@ -1830,6 +1837,7 @@ export declare const ConfigSchema: z.ZodObject<{
         }, {
             enabled?: boolean | undefined;
             pro?: boolean | undefined;
+            max?: boolean | undefined;
             provider?: string | undefined;
             api_key?: string | undefined;
             api_base_url?: string | undefined;
@@ -1855,6 +1863,7 @@ export declare const ConfigSchema: z.ZodObject<{
         deep: {
             enabled: boolean;
             pro: boolean;
+            max: boolean;
             provider: string;
             threads: number;
             temperature: number;
@@ -2088,6 +2097,7 @@ export declare const ConfigSchema: z.ZodObject<{
         deep?: {
             enabled?: boolean | undefined;
             pro?: boolean | undefined;
+            max?: boolean | undefined;
             provider?: string | undefined;
             api_key?: string | undefined;
             api_base_url?: string | undefined;
@@ -2363,6 +2373,7 @@ export declare const ConfigSchema: z.ZodObject<{
         deep: {
             enabled: boolean;
             pro: boolean;
+            max: boolean;
             provider: string;
             threads: number;
             temperature: number;
@@ -2622,6 +2633,7 @@ export declare const ConfigSchema: z.ZodObject<{
         deep?: {
             enabled?: boolean | undefined;
             pro?: boolean | undefined;
+            max?: boolean | undefined;
             provider?: string | undefined;
             api_key?: string | undefined;
             api_base_url?: string | undefined;
@@ -3003,7 +3015,7 @@ export declare const ReportSchema: z.ZodObject<{
             /** ok: every inference ran; partial: some failed; error: deep did not run. */
             status: z.ZodOptional<z.ZodEnum<["ok", "partial", "error"]>>;
             mode: z.ZodOptional<z.ZodEnum<["facts", "code"]>>;
-            tier: z.ZodOptional<z.ZodEnum<["deep", "lite", "legacy", "cloud"]>>;
+            tier: z.ZodOptional<z.ZodEnum<["deep", "lite", "legacy", "max", "cloud"]>>;
             model: z.ZodOptional<z.ZodString>;
             model_fallback: z.ZodOptional<z.ZodBoolean>;
             total_ms: z.ZodOptional<z.ZodNumber>;
@@ -3018,7 +3030,7 @@ export declare const ReportSchema: z.ZodObject<{
             status?: "ok" | "partial" | "error" | undefined;
             mode?: "code" | "facts" | undefined;
             error?: string | undefined;
-            tier?: "deep" | "lite" | "legacy" | "cloud" | undefined;
+            tier?: "deep" | "max" | "lite" | "legacy" | "cloud" | undefined;
             model?: string | undefined;
             model_fallback?: boolean | undefined;
             total_ms?: number | undefined;
@@ -3032,7 +3044,7 @@ export declare const ReportSchema: z.ZodObject<{
             status?: "ok" | "partial" | "error" | undefined;
             mode?: "code" | "facts" | undefined;
             error?: string | undefined;
-            tier?: "deep" | "lite" | "legacy" | "cloud" | undefined;
+            tier?: "deep" | "max" | "lite" | "legacy" | "cloud" | undefined;
             model?: string | undefined;
             model_fallback?: boolean | undefined;
             total_ms?: number | undefined;
@@ -3049,7 +3061,7 @@ export declare const ReportSchema: z.ZodObject<{
             status?: "ok" | "partial" | "error" | undefined;
             mode?: "code" | "facts" | undefined;
             error?: string | undefined;
-            tier?: "deep" | "lite" | "legacy" | "cloud" | undefined;
+            tier?: "deep" | "max" | "lite" | "legacy" | "cloud" | undefined;
             model?: string | undefined;
             model_fallback?: boolean | undefined;
             total_ms?: number | undefined;
@@ -3078,7 +3090,7 @@ export declare const ReportSchema: z.ZodObject<{
             status?: "ok" | "partial" | "error" | undefined;
             mode?: "code" | "facts" | undefined;
             error?: string | undefined;
-            tier?: "deep" | "lite" | "legacy" | "cloud" | undefined;
+            tier?: "deep" | "max" | "lite" | "legacy" | "cloud" | undefined;
             model?: string | undefined;
             model_fallback?: boolean | undefined;
             total_ms?: number | undefined;
@@ -3109,7 +3121,7 @@ export declare const ReportSchema: z.ZodObject<{
             status?: "ok" | "partial" | "error" | undefined;
             mode?: "code" | "facts" | undefined;
             error?: string | undefined;
-            tier?: "deep" | "lite" | "legacy" | "cloud" | undefined;
+            tier?: "deep" | "max" | "lite" | "legacy" | "cloud" | undefined;
             model?: string | undefined;
             model_fallback?: boolean | undefined;
             total_ms?: number | undefined;
@@ -3157,7 +3169,7 @@ export declare const ReportSchema: z.ZodObject<{
             status?: "ok" | "partial" | "error" | undefined;
             mode?: "code" | "facts" | undefined;
             error?: string | undefined;
-            tier?: "deep" | "lite" | "legacy" | "cloud" | undefined;
+            tier?: "deep" | "max" | "lite" | "legacy" | "cloud" | undefined;
             model?: string | undefined;
             model_fallback?: boolean | undefined;
             total_ms?: number | undefined;
@@ -3199,10 +3211,14 @@ export declare const ReportSchema: z.ZodObject<{
     }[];
 }>;
 export type Report = z.infer<typeof ReportSchema>;
-/** Options passed from CLI --deep / --pro / -k flags */
+/** Options passed from CLI --deep / --pro / --max / -k flags */
 export interface DeepOptions {
     enabled: boolean;
     pro?: boolean;
+    /** Local 7B model: the strongest free tier, for laptops with 16GB. */
+    max?: boolean;
+    /** A local GGUF to run instead of the tier's published model (evaluating a fine-tune before release). */
+    modelPath?: string;
     apiKey?: string;
     provider?: string;
     apiBaseUrl?: string;
@@ -3210,4 +3226,11 @@ export interface DeepOptions {
     agents?: number;
     maxFiles?: number;
     focusLines?: Record<string, number[]>;
+    /** Lines the change removed per file, anchored at the new-side line (from a diff). */
+    removedLines?: Record<string, Array<{
+        line: number;
+        text: string[];
+    }>>;
+    /** What the change intends (a PR description): reference for the stronger tiers. */
+    prBody?: string;
 }

package/dist/types/index.js

@@ -266,8 +266,9 @@ export const GatesSchema = z.object({
         audit_log: z.boolean().optional().default(true),
     }).optional().default({}),
     // v4.3+ Side-Effect Safety Analysis
+    // On by default: full scans of three real repositories reported no finding that was not a real defect.
     semantic_bugs: z.object({
-        enabled: z.boolean().optional().default(false),
+        enabled: z.boolean().optional().default(true),
         rules: z.array(z.string()).optional(),
     }).optional().default({}),
     side_effect_analysis: z.object({
@@ -301,6 +302,7 @@ export const GatesSchema = z.object({
     deep: z.object({
         enabled: z.boolean().optional().default(false),
         pro: z.boolean().optional().default(false),
+        max: z.boolean().optional().default(false), // local Qwen2.5-Coder-7B (4.7GB); needs ~8GB free memory
         provider: z.string().optional().default('local'), // 'local' for sidecar, or any cloud: 'claude', 'openai', 'gemini', 'groq', 'mistral', 'together', etc.
         api_key: z.string().optional(),
         api_base_url: z.string().optional(), // custom API base URL (for self-hosted, proxies, any OpenAI-compatible endpoint)
@@ -412,7 +414,7 @@ export const ReportSchema = z.object({
             /** ok: every inference ran; partial: some failed; error: deep did not run. */
             status: z.enum(['ok', 'partial', 'error']).optional(),
             mode: z.enum(['facts', 'code']).optional(),
-            tier: z.enum(['deep', 'lite', 'legacy', 'cloud']).optional(),
+            tier: z.enum(['deep', 'lite', 'legacy', 'max', 'cloud']).optional(),
             model: z.string().optional(),
             model_fallback: z.boolean().optional(),
             total_ms: z.number().optional(),

package/dist/utils/diff-removed.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/diff-removed.test.js

@@ -0,0 +1,29 @@
+import { describe, expect, it } from 'vitest';
+import { parseDiff, removedByFile } from './diff.js';
+const DIFF = `diff --git a/src/a.ts b/src/a.ts
+--- a/src/a.ts
++++ b/src/a.ts
+@@ -1,5 +1,4 @@
+ export function load(id: string) {
+-  if (!id) return null;
+-  audit(id);
++  audit(id ?? '');
+   return fetch(id);
+ }
+@@ -20,2 +19,1 @@
+-const legacy = true;
+ export const x = 1;
+`;
+describe('removedByFile', () => {
+    it('groups removed lines into blocks anchored at the new-side line', () => {
+        expect(removedByFile(DIFF)).toEqual({
+            'src/a.ts': [
+                { line: 2, text: ['  if (!id) return null;', '  audit(id);'] },
+                { line: 19, text: ['const legacy = true;'] },
+            ],
+        });
+    });
+    it('leaves added-line parsing unchanged', () => {
+        expect([...parseDiff(DIFF)['src/a.ts']]).toEqual([2]);
+    });
+});

package/dist/utils/diff.d.ts

@@ -1,3 +1,15 @@
 export declare function parseDiff(diff: string): Record<string, Set<number>>;
 /** Changed lines as sorted arrays, the shape DeepOptions.focusLines takes. */
 export declare function changedLinesByFile(mapping: Record<string, Set<number>>): Record<string, number[]>;
+/** Lines a change removed, anchored at the new-side line where they were. */
+export interface RemovedBlock {
+    /** New-side line the removal sits before (1-based). */
+    line: number;
+    text: string[];
+}
+/**
+ * Removed lines per file, grouped into consecutive blocks. A reviewer needs
+ * what a change deleted as much as what it added: a dropped guard or a
+ * deleted call is invisible in the new file alone.
+ */
+export declare function removedByFile(diff: string): Record<string, RemovedBlock[]>;

package/dist/utils/diff.js

@@ -50,3 +50,29 @@ function readHunkHeader(state, line) {
 export function changedLinesByFile(mapping) {
     return Object.fromEntries(Object.entries(mapping).map(([file, lines]) => [file, [...lines].sort((a, b) => a - b)]));
 }
+/**
+ * Removed lines per file, grouped into consecutive blocks. A reviewer needs
+ * what a change deleted as much as what it added: a dropped guard or a
+ * deleted call is invisible in the new file alone.
+ */
+export function removedByFile(diff) {
+    const removed = {};
+    const state = { mapping: {}, file: '', newLine: 0, oldLeft: 0, newLeft: 0 };
+    let open = null;
+    for (const line of diff.split('\n')) {
+        const inHunk = state.oldLeft > 0 || state.newLeft > 0;
+        if (inHunk && line.startsWith('-') && state.file) {
+            if (!open)
+                (removed[state.file] ??= []).push(open = { line: state.newLine, text: [] });
+            open.text.push(line.slice(1));
+        }
+        else if (!line.startsWith('\\')) {
+            open = null;
+        }
+        if (inHunk)
+            readHunkLine(state, line);
+        else
+            readHeaderLine(state, line);
+    }
+    return removed;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/core",
-  "version": "6.3.1",
+  "version": "6.4.1",
   "description": "AI-native quality gate engine with local Bayesian learning. AST analysis, drift detection, Fix Packet generation, and agent self-healing across TypeScript, JavaScript, Python, Go, Ruby, and C#.",
   "license": "MIT",
   "homepage": "https://rigour.run",
@@ -67,11 +67,11 @@
     "pg": "^8.16.3",
     "sqlite3": "^5.1.7",
     "openai": "^4.104.0",
-    "@rigour-labs/brain-darwin-x64": "6.3.1",
-    "@rigour-labs/brain-darwin-arm64": "6.3.1",
-    "@rigour-labs/brain-linux-x64": "6.3.1",
-    "@rigour-labs/brain-linux-arm64": "6.3.1",
-    "@rigour-labs/brain-win-x64": "6.3.1"
+    "@rigour-labs/brain-darwin-arm64": "6.4.1",
+    "@rigour-labs/brain-darwin-x64": "6.4.1",
+    "@rigour-labs/brain-linux-x64": "6.4.1",
+    "@rigour-labs/brain-win-x64": "6.4.1",
+    "@rigour-labs/brain-linux-arm64": "6.4.1"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",