@rigour-labs/core 6.5.2 → 6.5.4

package/dist/types/index.d.ts

@@ -498,6 +498,36 @@ export declare const GatesSchema: z.ZodObject<{
         custom_patterns?: string[] | undefined;
         audit_log?: boolean | undefined;
     }>>>;
+    unindexed_reads: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        migrations: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        migrations: string[];
+    }, {
+        enabled?: boolean | undefined;
+        migrations?: string[] | undefined;
+    }>>>;
+    deprecated_dependencies: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        registry: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        registry?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        registry?: string | undefined;
+    }>>>;
+    migration_order: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        dirs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        dirs: string[];
+    }, {
+        enabled?: boolean | undefined;
+        dirs?: string[] | undefined;
+    }>>>;
     semantic_bugs: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
         rules: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -917,6 +947,18 @@ export declare const GatesSchema: z.ZodObject<{
         custom_patterns: string[];
         audit_log: boolean;
     };
+    unindexed_reads: {
+        enabled: boolean;
+        migrations: string[];
+    };
+    deprecated_dependencies: {
+        enabled: boolean;
+        registry?: string | undefined;
+    };
+    migration_order: {
+        enabled: boolean;
+        dirs: string[];
+    };
     semantic_bugs: {
         enabled: boolean;
         rules?: string[] | undefined;
@@ -1160,6 +1202,18 @@ export declare const GatesSchema: z.ZodObject<{
         custom_patterns?: string[] | undefined;
         audit_log?: boolean | undefined;
     } | undefined;
+    unindexed_reads?: {
+        enabled?: boolean | undefined;
+        migrations?: string[] | undefined;
+    } | undefined;
+    deprecated_dependencies?: {
+        enabled?: boolean | undefined;
+        registry?: string | undefined;
+    } | undefined;
+    migration_order?: {
+        enabled?: boolean | undefined;
+        dirs?: string[] | undefined;
+    } | undefined;
     semantic_bugs?: {
         enabled?: boolean | undefined;
         rules?: string[] | undefined;
@@ -1752,6 +1806,36 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns?: string[] | undefined;
             audit_log?: boolean | undefined;
         }>>>;
+        unindexed_reads: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            migrations: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            migrations: string[];
+        }, {
+            enabled?: boolean | undefined;
+            migrations?: string[] | undefined;
+        }>>>;
+        deprecated_dependencies: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            registry: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            registry?: string | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            registry?: string | undefined;
+        }>>>;
+        migration_order: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            dirs: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            dirs: string[];
+        }, {
+            enabled?: boolean | undefined;
+            dirs?: string[] | undefined;
+        }>>>;
         semantic_bugs: z.ZodDefault<z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
             rules: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -2171,6 +2255,18 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns: string[];
             audit_log: boolean;
         };
+        unindexed_reads: {
+            enabled: boolean;
+            migrations: string[];
+        };
+        deprecated_dependencies: {
+            enabled: boolean;
+            registry?: string | undefined;
+        };
+        migration_order: {
+            enabled: boolean;
+            dirs: string[];
+        };
         semantic_bugs: {
             enabled: boolean;
             rules?: string[] | undefined;
@@ -2414,6 +2510,18 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns?: string[] | undefined;
             audit_log?: boolean | undefined;
         } | undefined;
+        unindexed_reads?: {
+            enabled?: boolean | undefined;
+            migrations?: string[] | undefined;
+        } | undefined;
+        deprecated_dependencies?: {
+            enabled?: boolean | undefined;
+            registry?: string | undefined;
+        } | undefined;
+        migration_order?: {
+            enabled?: boolean | undefined;
+            dirs?: string[] | undefined;
+        } | undefined;
         semantic_bugs?: {
             enabled?: boolean | undefined;
             rules?: string[] | undefined;
@@ -2712,6 +2820,18 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns: string[];
             audit_log: boolean;
         };
+        unindexed_reads: {
+            enabled: boolean;
+            migrations: string[];
+        };
+        deprecated_dependencies: {
+            enabled: boolean;
+            registry?: string | undefined;
+        };
+        migration_order: {
+            enabled: boolean;
+            dirs: string[];
+        };
         semantic_bugs: {
             enabled: boolean;
             rules?: string[] | undefined;
@@ -2985,6 +3105,18 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_patterns?: string[] | undefined;
             audit_log?: boolean | undefined;
         } | undefined;
+        unindexed_reads?: {
+            enabled?: boolean | undefined;
+            migrations?: string[] | undefined;
+        } | undefined;
+        deprecated_dependencies?: {
+            enabled?: boolean | undefined;
+            registry?: string | undefined;
+        } | undefined;
+        migration_order?: {
+            enabled?: boolean | undefined;
+            dirs?: string[] | undefined;
+        } | undefined;
         semantic_bugs?: {
             enabled?: boolean | undefined;
             rules?: string[] | undefined;
@@ -3511,6 +3643,11 @@ export interface DeepOptions {
     }>>;
     /** What the change intends (a PR description): reference for the stronger tiers. */
     prBody?: string;
+    /**
+     * Review every risky changed function, ignoring the review ledger and reviewed.json. Those
+     * record what an agent said it reviewed; an enforcing check reviews independently.
+     */
+    independent?: boolean;
     /** The change's unified diff (from reviewChange): a cloud agentic review reads the PR as a whole. */
     diff?: string;
 }

package/dist/types/index.js

@@ -270,6 +270,21 @@ export const GatesSchema = z.object({
     }).optional().default({}),
     // v4.3+ Side-Effect Safety Analysis
     // On by default: full scans of three real repositories reported no finding that was not a real defect.
+    // A supabase-js read no index can serve, proved from the repository's own migrations (advisory, off by default).
+    unindexed_reads: z.object({
+        enabled: z.boolean().optional().default(false),
+        migrations: z.array(z.string()).optional().default([]),
+    }).optional().default({}),
+    // A dependency whose installed version npm marks deprecated (advisory, off by default: it asks the registry).
+    deprecated_dependencies: z.object({
+        enabled: z.boolean().optional().default(false),
+        registry: z.string().optional(),
+    }).optional().default({}),
+    // A migration added on a branch that sorts before the newest one on the base (advisory, off by default).
+    migration_order: z.object({
+        enabled: z.boolean().optional().default(false),
+        dirs: z.array(z.string()).optional().default(['**/supabase/migrations']),
+    }).optional().default({}),
     semantic_bugs: z.object({
         enabled: z.boolean().optional().default(true),
         rules: z.array(z.string()).optional(),

package/dist/utils/user-state.d.ts

@@ -0,0 +1,7 @@
+/** The user's Rigour directory: RIGOUR_HOME/.rigour when set (tests, sandboxes), else ~/.rigour. */
+export declare function rigourUserDir(): string;
+/**
+ * Per-repository state kept outside the workspace, where an agent editing the repository
+ * cannot rewrite it: arbitration tokens, stop-hook attempt counts. Keyed by the real path.
+ */
+export declare function repoStateDir(cwd: string): string;

package/dist/utils/user-state.js

@@ -0,0 +1,21 @@
+import crypto from 'crypto';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+/** The user's Rigour directory: RIGOUR_HOME/.rigour when set (tests, sandboxes), else ~/.rigour. */
+export function rigourUserDir() {
+    return path.join(process.env.RIGOUR_HOME || os.homedir(), '.rigour');
+}
+/**
+ * Per-repository state kept outside the workspace, where an agent editing the repository
+ * cannot rewrite it: arbitration tokens, stop-hook attempt counts. Keyed by the real path.
+ */
+export function repoStateDir(cwd) {
+    let root = path.resolve(cwd);
+    try {
+        root = fs.realpathSync(root);
+    }
+    catch { /* not created yet: the resolved path is the key */ }
+    const key = crypto.createHash('sha256').update(root).digest('hex').slice(0, 16);
+    return path.join(rigourUserDir(), 'repos', key);
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rigour-labs/core",
-  "version": "6.5.2",
-  "description": "AI-native quality gate engine with local Bayesian learning. AST analysis, drift detection, Fix Packet generation, and agent self-healing across TypeScript, JavaScript, Python, Go, Ruby, and C#.",
+  "version": "6.5.4",
+  "description": "Rigour's review engine: deterministic gates on changed lines, rules and lessons learned from your team's fixes, and per-check precision from what you fix versus dismiss, across TypeScript, JavaScript, Python, Go, Ruby and C#.",
   "engines": {
     "node": ">=22"
   },
@@ -70,11 +70,11 @@
     "pg": "^8.16.3",
     "sqlite3": "^5.1.7",
     "openai": "^4.104.0",
-    "@rigour-labs/brain-darwin-arm64": "6.5.2",
-    "@rigour-labs/brain-linux-arm64": "6.5.2",
-    "@rigour-labs/brain-darwin-x64": "6.5.2",
-    "@rigour-labs/brain-win-x64": "6.5.2",
-    "@rigour-labs/brain-linux-x64": "6.5.2"
+    "@rigour-labs/brain-darwin-arm64": "6.5.4",
+    "@rigour-labs/brain-darwin-x64": "6.5.4",
+    "@rigour-labs/brain-linux-arm64": "6.5.4",
+    "@rigour-labs/brain-linux-x64": "6.5.4",
+    "@rigour-labs/brain-win-x64": "6.5.4"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",