@rigour-labs/core 6.5.1 → 6.5.3

package/dist/types/index.d.ts

@@ -498,6 +498,36 @@ export declare const GatesSchema: z.ZodObject<{
         custom_patterns?: string[] | undefined;
         audit_log?: boolean | undefined;
     }>>>;
+    unindexed_reads: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        migrations: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        migrations: string[];
+    }, {
+        enabled?: boolean | undefined;
+        migrations?: string[] | undefined;
+    }>>>;
+    deprecated_dependencies: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        registry: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        registry?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        registry?: string | undefined;
+    }>>>;
+    migration_order: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        dirs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        dirs: string[];
+    }, {
+        enabled?: boolean | undefined;
+        dirs?: string[] | undefined;
+    }>>>;
     semantic_bugs: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
         rules: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -917,6 +947,18 @@ export declare const GatesSchema: z.ZodObject<{
         custom_patterns: string[];
         audit_log: boolean;
     };
+    unindexed_reads: {
+        enabled: boolean;
+        migrations: string[];
+    };
+    deprecated_dependencies: {
+        enabled: boolean;
+        registry?: string | undefined;
+    };
+    migration_order: {
+        enabled: boolean;
+        dirs: string[];
+    };
     semantic_bugs: {
         enabled: boolean;
         rules?: string[] | undefined;
@@ -1160,6 +1202,18 @@ export declare const GatesSchema: z.ZodObject<{
         custom_patterns?: string[] | undefined;
         audit_log?: boolean | undefined;
     } | undefined;
+    unindexed_reads?: {
+        enabled?: boolean | undefined;
+        migrations?: string[] | undefined;
+    } | undefined;
+    deprecated_dependencies?: {
+        enabled?: boolean | undefined;
+        registry?: string | undefined;
+    } | undefined;
+    migration_order?: {
+        enabled?: boolean | undefined;
+        dirs?: string[] | undefined;
+    } | undefined;
     semantic_bugs?: {
         enabled?: boolean | undefined;
         rules?: string[] | undefined;
@@ -1752,6 +1806,36 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns?: string[] | undefined;
             audit_log?: boolean | undefined;
         }>>>;
+        unindexed_reads: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            migrations: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            migrations: string[];
+        }, {
+            enabled?: boolean | undefined;
+            migrations?: string[] | undefined;
+        }>>>;
+        deprecated_dependencies: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            registry: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            registry?: string | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            registry?: string | undefined;
+        }>>>;
+        migration_order: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            dirs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            dirs: string[];
+        }, {
+            enabled?: boolean | undefined;
+            dirs?: string[] | undefined;
+        }>>>;
         semantic_bugs: z.ZodDefault<z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
             rules: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -2171,6 +2255,18 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns: string[];
             audit_log: boolean;
         };
+        unindexed_reads: {
+            enabled: boolean;
+            migrations: string[];
+        };
+        deprecated_dependencies: {
+            enabled: boolean;
+            registry?: string | undefined;
+        };
+        migration_order: {
+            enabled: boolean;
+            dirs: string[];
+        };
         semantic_bugs: {
             enabled: boolean;
             rules?: string[] | undefined;
@@ -2414,6 +2510,18 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns?: string[] | undefined;
             audit_log?: boolean | undefined;
         } | undefined;
+        unindexed_reads?: {
+            enabled?: boolean | undefined;
+            migrations?: string[] | undefined;
+        } | undefined;
+        deprecated_dependencies?: {
+            enabled?: boolean | undefined;
+            registry?: string | undefined;
+        } | undefined;
+        migration_order?: {
+            enabled?: boolean | undefined;
+            dirs?: string[] | undefined;
+        } | undefined;
         semantic_bugs?: {
             enabled?: boolean | undefined;
             rules?: string[] | undefined;
@@ -2712,6 +2820,18 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns: string[];
             audit_log: boolean;
         };
+        unindexed_reads: {
+            enabled: boolean;
+            migrations: string[];
+        };
+        deprecated_dependencies: {
+            enabled: boolean;
+            registry?: string | undefined;
+        };
+        migration_order: {
+            enabled: boolean;
+            dirs: string[];
+        };
         semantic_bugs: {
             enabled: boolean;
             rules?: string[] | undefined;
@@ -2985,6 +3105,18 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns?: string[] | undefined;
             audit_log?: boolean | undefined;
         } | undefined;
+        unindexed_reads?: {
+            enabled?: boolean | undefined;
+            migrations?: string[] | undefined;
+        } | undefined;
+        deprecated_dependencies?: {
+            enabled?: boolean | undefined;
+            registry?: string | undefined;
+        } | undefined;
+        migration_order?: {
+            enabled?: boolean | undefined;
+            dirs?: string[] | undefined;
+        } | undefined;
         semantic_bugs?: {
             enabled?: boolean | undefined;
             rules?: string[] | undefined;

package/dist/types/index.js

@@ -270,6 +270,21 @@ export const GatesSchema = z.object({
     }).optional().default({}),
     // v4.3+ Side-Effect Safety Analysis
     // On by default: full scans of three real repositories reported no finding that was not a real defect.
+    // A supabase-js read no index can serve, proved from the repository's own migrations (advisory, off by default).
+    unindexed_reads: z.object({
+        enabled: z.boolean().optional().default(false),
+        migrations: z.array(z.string()).optional().default([]),
+    }).optional().default({}),
+    // A dependency whose installed version npm marks deprecated (advisory, off by default: it asks the registry).
+    deprecated_dependencies: z.object({
+        enabled: z.boolean().optional().default(false),
+        registry: z.string().optional(),
+    }).optional().default({}),
+    // A migration added on a branch that sorts before the newest one on the base (advisory, off by default).
+    migration_order: z.object({
+        enabled: z.boolean().optional().default(false),
+        dirs: z.array(z.string()).optional().default(['**/supabase/migrations']),
+    }).optional().default({}),
     semantic_bugs: z.object({
         enabled: z.boolean().optional().default(true),
         rules: z.array(z.string()).optional(),

package/dist/utils/glob-paths.d.ts

@@ -0,0 +1,4 @@
+/** Ignore entries: a plain path also ignores everything under it. Matched only, never listed. */
+export declare function withDirectoryForms(patterns: string[]): string[];
+/** Search patterns: a plain path that is a directory becomes `dir/**`; files and globs stay. */
+export declare function directoriesAsGlobs(cwd: string, patterns: string[]): string[];

package/dist/utils/glob-paths.js

@@ -0,0 +1,26 @@
+import fs from 'fs';
+import path from 'path';
+import { isDynamicPattern } from 'globby';
+/*
+ * globby's default directory expansion stats every pattern and ignore entry,
+ * and throws ENOTDIR when one runs through a file: `.git/**` in a git
+ * worktree, where `.git` is a file. Rigour turns it off
+ * (`expandDirectories: false`) and expands plain paths itself, as before:
+ * a directory `legacy` also means `legacy/**`.
+ */
+/** Ignore entries: a plain path also ignores everything under it. Matched only, never listed. */
+export function withDirectoryForms(patterns) {
+    return patterns.flatMap(pattern => isDynamicPattern(pattern) ? [pattern] : [pattern, `${pattern.replace(/\/+$/, '')}/**`]);
+}
+/** Search patterns: a plain path that is a directory becomes `dir/**`; files and globs stay. */
+export function directoriesAsGlobs(cwd, patterns) {
+    return patterns.map(pattern => !isDynamicPattern(pattern) && isDirectory(path.resolve(cwd, pattern)) ? `${pattern.replace(/\/+$/, '')}/**` : pattern);
+}
+function isDirectory(target) {
+    try {
+        return fs.statSync(target).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}

package/dist/utils/glob-paths.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/glob-paths.test.js

@@ -0,0 +1,40 @@
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { FileScanner } from './scanner.js';
+import { directoriesAsGlobs, withDirectoryForms } from './glob-paths.js';
+let root;
+beforeEach(() => {
+    root = fs.mkdtempSync(path.join(os.tmpdir(), 'glob-paths-'));
+    fs.mkdirSync(path.join(root, 'src'));
+    fs.mkdirSync(path.join(root, 'legacy'));
+    fs.writeFileSync(path.join(root, 'src', 'a.ts'), 'export const a = 1;\n');
+    fs.writeFileSync(path.join(root, 'legacy', 'old.ts'), 'export const b = 2;\n');
+});
+afterEach(() => fs.rmSync(root, { recursive: true, force: true }));
+describe('withDirectoryForms', () => {
+    it('adds the directory form to plain paths and leaves globs alone', () => {
+        expect(withDirectoryForms(['legacy', 'build/', '.git/**', '**/*.min.js'])).toEqual(['legacy', 'legacy/**', 'build/', 'build/**', '.git/**', '**/*.min.js']);
+    });
+});
+describe('directoriesAsGlobs', () => {
+    it('turns a directory into dir/** and leaves files, missing paths and globs alone', () => {
+        expect(directoriesAsGlobs(root, ['src', 'src/a.ts', 'missing', '**/*.ts'])).toEqual(['src/**', 'src/a.ts', 'missing', '**/*.ts']);
+    });
+});
+describe('FileScanner in a git worktree', () => {
+    it('scans when .git is a file and the config ignores .git/**', async () => {
+        fs.writeFileSync(path.join(root, '.git'), 'gitdir: /elsewhere/.git/worktrees/x\n');
+        const files = await FileScanner.findFiles({ cwd: root, patterns: ['**/*.ts'], ignore: ['.git/**'] });
+        expect(files.sort()).toEqual(['legacy/old.ts', 'src/a.ts']);
+    });
+    it('finds a file or a whole directory named by a plain path', async () => {
+        expect(await FileScanner.findFiles({ cwd: root, patterns: ['src/a.ts'] })).toEqual(['src/a.ts']);
+        expect(await FileScanner.findFiles({ cwd: root, patterns: ['legacy'] })).toEqual(['legacy/old.ts']);
+    });
+    it('still ignores a whole directory named by a plain path', async () => {
+        const files = await FileScanner.findFiles({ cwd: root, patterns: ['**/*.ts'], ignore: ['legacy'] });
+        expect(files).toEqual(['src/a.ts']);
+    });
+});

package/dist/utils/scanner.js

@@ -1,6 +1,7 @@
 import { globby } from 'globby';
 import fs from 'fs-extra';
 import path from 'path';
+import { directoriesAsGlobs, withDirectoryForms } from './glob-paths.js';
 /**
  * Glob patterns use `/` as the separator and `\` as the escape character.
  * Only on Windows can a backslash be a path separator, and even there one
@@ -33,9 +34,10 @@ export class FileScanner {
         const userIgnore = options.ignore || [];
         const ignore = [...new Set([...this.DEFAULT_IGNORE, ...userIgnore])].map(toGlobSeparators);
         const normalizedCwd = options.cwd.replace(/\\/g, '/');
-        return globby(patterns, {
+        return globby(directoriesAsGlobs(normalizedCwd, patterns), {
             cwd: normalizedCwd,
-            ignore: ignore,
+            ignore: withDirectoryForms(ignore),
+            expandDirectories: false,
         });
     }
     /**

package/dist/utils/scanner.test.js

@@ -1,7 +1,8 @@
 import { describe, it, expect, vi } from 'vitest';
 import { FileScanner } from './scanner.js';
 import { globby } from 'globby';
-vi.mock('globby', () => ({
+vi.mock('globby', async (importOriginal) => ({
+    isDynamicPattern: (await importOriginal()).isDynamicPattern,
     globby: vi.fn(),
 }));
 describe('FileScanner', () => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rigour-labs/core",
-  "version": "6.5.1",
-  "description": "AI-native quality gate engine with local Bayesian learning. AST analysis, drift detection, Fix Packet generation, and agent self-healing across TypeScript, JavaScript, Python, Go, Ruby, and C#.",
+  "version": "6.5.3",
+  "description": "Rigour's review engine: deterministic gates on changed lines, rules and lessons learned from your team's fixes, and per-check precision from what you fix versus dismiss, across TypeScript, JavaScript, Python, Go, Ruby and C#.",
   "engines": {
     "node": ">=22"
   },
@@ -70,11 +70,11 @@
     "pg": "^8.16.3",
     "sqlite3": "^5.1.7",
     "openai": "^4.104.0",
-    "@rigour-labs/brain-darwin-arm64": "6.5.1",
-    "@rigour-labs/brain-linux-arm64": "6.5.1",
-    "@rigour-labs/brain-darwin-x64": "6.5.1",
-    "@rigour-labs/brain-linux-x64": "6.5.1",
-    "@rigour-labs/brain-win-x64": "6.5.1"
+    "@rigour-labs/brain-darwin-arm64": "6.5.3",
+    "@rigour-labs/brain-darwin-x64": "6.5.3",
+    "@rigour-labs/brain-linux-x64": "6.5.3",
+    "@rigour-labs/brain-linux-arm64": "6.5.3",
+    "@rigour-labs/brain-win-x64": "6.5.3"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",