@rigour-labs/core 6.6.6 → 6.7.0

package/dist/types/index.js

@@ -1,9 +1,10 @@
 import { z } from 'zod';
+/** A model name handed to an agent CLI as an argument: one that starts with "-" would be read as a flag. */
+const ModelName = z.string().regex(/^[\w.:/@][\w.:/@-]*$/, 'a model name (letters, digits and . : / @ -), not starting with -');
 export const GatesSchema = z.object({
     max_file_lines: z.number().optional().default(500),
     forbid_todos: z.boolean().optional().default(true),
     forbid_fixme: z.boolean().optional().default(true),
-    forbid_paths: z.array(z.string()).optional().default([]),
     required_files: z.array(z.string()).optional().default([
         'docs/SPEC.md',
         'docs/ARCH.md',
@@ -14,10 +15,6 @@ export const GatesSchema = z.object({
         complexity: z.number().optional().default(10),
         max_methods: z.number().optional().default(10),
         max_params: z.number().optional().default(5),
-        max_nesting: z.number().optional().default(4),
-        max_inheritance_depth: z.number().optional().default(3),
-        max_class_dependencies: z.number().optional().default(5),
-        max_function_lines: z.number().optional().default(50),
     }).optional().default({}),
     staleness: z.object({
         enabled: z.boolean().optional().default(false),
@@ -35,7 +32,6 @@ export const GatesSchema = z.object({
     }).optional().default({}),
     dependencies: z.object({
         forbid: z.array(z.string()).optional().default([]),
-        trusted_registry: z.string().optional(),
         detect_unused: z.boolean().optional().default(true),
         detect_heavy_alternatives: z.boolean().optional().default(true),
         detect_duplicate_purpose: z.boolean().optional().default(true),
@@ -56,12 +52,6 @@ export const GatesSchema = z.object({
         enabled: z.boolean().optional().default(true),
         sensitivity: z.number().min(0).max(1).optional().default(0.8), // 0.8 correlation threshold
         mining_depth: z.number().optional().default(100), // Number of files to sample
-        ignored_patterns: z.array(z.string()).optional().default([]),
-        // v2.14+ Extended Context for frontier models
-        cross_file_patterns: z.boolean().optional().default(true),
-        naming_consistency: z.boolean().optional().default(true),
-        import_relationships: z.boolean().optional().default(true),
-        max_cross_file_depth: z.number().optional().default(50),
     }).optional().default({}),
     environment: z.object({
         enabled: z.boolean().optional().default(true),
@@ -72,14 +62,11 @@ export const GatesSchema = z.object({
     retry_loop_breaker: z.object({
         enabled: z.boolean().optional().default(true),
         max_retries: z.number().optional().default(3), // Fail after 3 consecutive failures in same category
-        auto_classify: z.boolean().optional().default(true), // Auto-detect failure category from error message
         doc_sources: z.record(z.string()).optional().default({}), // Custom doc URLs per category
     }).optional().default({}),
     agent_team: z.object({
         enabled: z.boolean().optional().default(false),
         max_concurrent_agents: z.number().optional().default(3),
-        cross_agent_pattern_check: z.boolean().optional().default(true),
-        handoff_verification: z.boolean().optional().default(true),
         task_ownership: z.enum(['strict', 'collaborative']).optional().default('strict'),
     }).optional().default({}),
     checkpoint: z.object({
@@ -87,7 +74,6 @@ export const GatesSchema = z.object({
         interval_minutes: z.number().optional().default(15),
         quality_threshold: z.number().optional().default(80),
         drift_detection: z.boolean().optional().default(true),
-        auto_save_on_failure: z.boolean().optional().default(true),
     }).optional().default({}),
     security: z.object({
         enabled: z.boolean().optional().default(true),
@@ -135,13 +121,6 @@ export const GatesSchema = z.object({
         ]),
         allowlist_env_names: z.array(z.string()).optional().default([]),
     }).optional().default({}),
-    adaptive: z.object({
-        enabled: z.boolean().optional().default(false),
-        base_coverage_threshold: z.number().optional().default(80),
-        base_quality_threshold: z.number().optional().default(80),
-        auto_detect_tier: z.boolean().optional().default(true),
-        forced_tier: z.enum(['hobby', 'startup', 'enterprise']).optional(),
-    }).optional().default({}),
     // v2.16+ AI-Native Drift Detection Gates
     duplication_drift: z.object({
         enabled: z.boolean().optional().default(true),
@@ -150,8 +129,6 @@ export const GatesSchema = z.object({
     }).optional().default({}),
     hallucinated_imports: z.object({
         enabled: z.boolean().optional().default(true),
-        check_relative: z.boolean().optional().default(true),
-        check_packages: z.boolean().optional().default(true),
         ignore_patterns: z.array(z.string()).optional().default([
             '\\.css$', '\\.scss$', '\\.less$', '\\.svg$', '\\.png$', '\\.jpg$',
             '\\.json$', '\\.wasm$', '\\.graphql$', '\\.gql$',
@@ -203,10 +180,8 @@ export const GatesSchema = z.object({
         check_empty_tests: z.boolean().optional().default(true),
         check_tautological: z.boolean().optional().default(true),
         check_mock_heavy: z.boolean().optional().default(true),
-        check_snapshot_abuse: z.boolean().optional().default(true),
         check_assertion_free_async: z.boolean().optional().default(true),
         max_mocks_per_test: z.number().optional().default(5),
-        ignore_patterns: z.array(z.string()).optional().default([]),
     }).optional().default({}),
     // v4.2+ Memory & Skills Governance
     governance: z.object({
@@ -259,15 +234,6 @@ export const GatesSchema = z.object({
             '.windsurf/hooks.json', // Rigour's own hook config
         ]),
     }).optional().default({}),
-    // v4.2+ AI Agent DLP (Data Loss Prevention)
-    input_validation: z.object({
-        enabled: z.boolean().optional().default(true),
-        block_on_detection: z.boolean().optional().default(true),
-        min_secret_length: z.number().optional().default(8),
-        custom_patterns: z.array(z.string()).optional().default([]),
-        ignore_patterns: z.array(z.string()).optional().default([]),
-        audit_log: z.boolean().optional().default(true),
-    }).optional().default({}),
     // v4.3+ Side-Effect Safety Analysis
     // On by default: full scans of three real repositories reported no finding that was not a real defect.
     // A supabase-js read no index can serve, proved from the repository's own migrations (advisory, off by default).
@@ -295,10 +261,13 @@ export const GatesSchema = z.object({
      * range on the same column, a nullable row type the query filters non-null, an optional member every host supplies, a
      * property written and never read. Runs at push, in `rigour review` and in a backtest (the program takes seconds to build).
      * `wire_contracts`: files whose types another service reads, so their members are never write-only here.
+     * `schema_migrations`: folders of SQL migrations (relative, absolute, or `~/`; another repository's is fine, read only)
+     * replayed to learn which columns are NOT NULL, for the nullable-not-null-column note. Missing folders are skipped.
      */
     redundancy: z.object({
         enabled: z.boolean().optional().default(true),
         wire_contracts: z.array(z.string()).optional().default([]),
+        schema_migrations: z.array(z.string()).optional().default(['supabase/migrations']),
     }).optional().default({}),
     /** A parameter the change adds as optional that only tests omit (review/optional-params.ts). */
     optional_params: z.object({ enabled: z.boolean().optional().default(true) }).optional().default({}),
@@ -344,20 +313,11 @@ export const GatesSchema = z.object({
         track_branches: z.boolean().optional().default(false), // opt-in: counts change on purpose in most edits
         track_returns: z.boolean().optional().default(false), // opt-in: same
     }).optional().default({}),
-    // v4.0+ Deep Analysis (LLM-powered)
+    // Model review. Whether it runs, the tier, the provider and its key come from flags and the person's settings, never from a committed file.
     deep: z.object({
-        enabled: z.boolean().optional().default(false),
-        pro: z.boolean().optional().default(false),
-        max: z.boolean().optional().default(false), // local Qwen2.5-Coder-7B (4.7GB); needs ~8GB free memory
-        provider: z.string().optional().default('local'), // 'local' for sidecar, or any cloud: 'claude', 'openai', 'gemini', 'groq', 'mistral', 'together', etc.
-        api_key: z.string().optional(),
-        api_base_url: z.string().optional(), // custom API base URL (for self-hosted, proxies, any OpenAI-compatible endpoint)
-        model_name: z.string().optional(), // cloud model name override (e.g. 'gpt-4o', 'claude-sonnet-4-5-20250929', 'gemini-pro')
-        model_path: z.string().optional(), // custom local GGUF model path override
-        threads: z.number().optional().default(4),
         max_tokens: z.number().optional(), // default per provider: local 1024, cloud 4096
         temperature: z.number().optional().default(0.1),
-        timeout_ms: z.number().optional(), // per inference call; default per provider: local 60s, cloud 120s
+        timeout_ms: z.number().optional(), // per model call; default: cloud 120s, local 60s, local --max 240s
         budget_ms: z.number().optional(), // whole deep run; files not started in time are reported as skipped
         agentic: z.boolean().optional(), // cloud tier: the model may read the repository while it reviews (default true)
         repo_rules: z.boolean().optional(), // show the reviewer the rules in AGENTS.md / CLAUDE.md / Cursor rules that name what the change touches (default false)
@@ -389,26 +349,10 @@ export const CommandsSchema = z.object({
     test: z.string().optional(),
 });
 export const HooksSchema = z.object({
-    enabled: z.boolean().optional().default(false),
-    tools: z.array(z.enum(['claude', 'cursor', 'cline', 'windsurf'])).optional().default([]),
-    fast_gates: z.array(z.string()).optional().default([
-        'hallucinated-imports',
-        'phantom-apis',
-        'deprecated-apis',
-        'promise-safety',
-        'security-patterns',
-        'side-effect-analysis',
-        'file-size',
-    ]),
-    timeout_ms: z.number().optional().default(5000),
-    block_on_failure: z.boolean().optional().default(false),
     /** Stop hook: hold "done" until the agent acknowledges each risky changed function (rigour_review_ack). */
     require_review_ack: z.boolean().optional().default(false),
-    /** Enable DLP (Data Loss Prevention) pre-input hooks — default ON for security */
-    dlp: z.boolean().optional().default(true),
 }).optional().default({});
 export const ConfigSchema = z.object({
-    version: z.number().default(1),
     preset: z.string().optional(),
     paradigm: z.string().optional(),
     commands: CommandsSchema.optional().default({}),
@@ -439,13 +383,44 @@ export const ConfigSchema = z.object({
             /** single: the first installed reviewer. cross: prefer a vendor not on the commits' trailers. full: two vendors, verdicts merged. */
             mode: z.enum(['single', 'cross', 'full']).optional().default('single'),
             /** The model for the claude reviewer. */
-            model: z.string().optional(),
+            model: ModelName.optional(),
             /** A model per reviewer name, e.g. { cursor: "auto" }. */
-            models: z.record(z.string()).optional().default({}),
+            models: z.record(ModelName).optional().default({}),
             timeout_ms: z.number().optional().default(15 * 60_000),
+            /**
+             * With two vendors: match their findings, cross-examine only what one raised, and block only on what is
+             * confirmed (review/reviewer/panel.ts). `on` implies mode full. `required`: no user or run may turn it off,
+             * and a run without two vendors is unavailable instead of falling back to one.
+             */
+            panel: z.enum(['off', 'on', 'required']).optional().default('off'),
+            /** No user or run may review with fewer than the team's mode (a protected branch, CI). */
+            mode_required: z.boolean().optional().default(false),
+            /**
+             * Whether people may dismiss a reviewer finding as not a bug (`rigour dismiss <id>`, Studio). Off by default:
+             * a wrong finding is fixed by improving the reviewer, a right one by fixing the code. A team decision only.
+             */
+            dismissals: z.boolean().optional().default(false),
+            /** Findings cross-examined per review at most; the rest are shown as disputed. */
+            panel_max_items: z.number().int().positive().optional().default(20),
+            /**
+             * Spending caps per repository and local day, unset by default. Runs are checked before any judge starts
+             * (a cross-examination counts too); dollars are the ones the CLIs reported, so a cap stops new reviews once
+             * reached. Past a cap a review is skipped, or unavailable when the team requires the reviewer.
+             */
+            max_runs_per_day: z.number().int().positive().optional(),
+            max_usd_per_day: z.number().positive().optional(),
+            /** Judges in a full or panel review, each from a different vendor; capped by the vendors installed. */
+            judges: z.union([z.literal(2), z.literal(3)]).optional().default(2),
+            /**
+             * When a full or panel review adds judges. `always`: every review. `risk`: only when the change has a
+             * risky function (the router's score), a human review exists, or the run is the --full hard stop; any
+             * other change gets one judge. Measured against `always` by the backtest before you rely on it.
+             */
+            escalate: z.enum(['always', 'risk']).optional().default('always'),
+            /** A model per reviewer name for cross-examination (a narrow verification task), e.g. { claude: "haiku" }. */
+            cross_models: z.record(ModelName).optional().default({}),
         }).optional().default({}),
     }).optional().default({}),
-    planned: z.array(z.string()).optional().default([]),
     ignore: z.array(z.string()).optional().default([]),
 });
 export const StatusSchema = z.enum(['PASS', 'FAIL', 'SKIP', 'ERROR']);

package/dist/types/index.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/index.test.js

@@ -0,0 +1,33 @@
+import { describe, expect, it } from 'vitest';
+import yaml from 'yaml';
+import { ConfigSchema } from './index.js';
+describe('rigour.yml', () => {
+    it('still loads a file that sets the settings no check ever read, and keeps everything else', () => {
+        const old = yaml.parse(`
+version: 1
+planned: [Layer boundaries]
+hooks: { enabled: true, tools: [claude], fast_gates: [file-size], timeout_ms: 5000, block_on_failure: true, dlp: false, require_review_ack: true }
+gates:
+  max_file_lines: 300
+  forbid_paths: [secret/]
+  ast: { complexity: 7, max_nesting: 3, max_function_lines: 40 }
+  adaptive: { enabled: true, forced_tier: enterprise }
+  input_validation: { enabled: true, min_secret_length: 12 }
+  deep: { enabled: true, provider: claude, api_key: sk-test, model_name: x, threads: 8, temperature: 0.2 }
+  test_quality: { check_snapshot_abuse: false, ignore_patterns: [x], max_mocks_per_test: 3 }
+`);
+        const config = ConfigSchema.parse(old);
+        expect(config.gates.max_file_lines).toBe(300);
+        expect(config.gates.ast.complexity).toBe(7);
+        expect(config.gates.deep.temperature).toBe(0.2);
+        expect(config.gates.test_quality.max_mocks_per_test).toBe(3);
+        expect(config.hooks.require_review_ack).toBe(true);
+        // What nothing read is dropped, so no code can start depending on it by accident.
+        expect(config).not.toHaveProperty('version');
+        expect(config).not.toHaveProperty('planned');
+        expect(config.gates).not.toHaveProperty('adaptive');
+        expect(config.gates).not.toHaveProperty('input_validation');
+        expect(config.gates.deep).not.toHaveProperty('api_key');
+        expect(config.hooks).not.toHaveProperty('block_on_failure');
+    });
+});

package/dist/utils/command-line.d.ts

@@ -0,0 +1,8 @@
+/**
+ * A `commands:` entry from rigour.yml as a program and its arguments. Run without a shell, so pipes,
+ * `&&` and variable assignments are not interpreted: a team that needs them points at a script.
+ */
+export declare function splitCommand(command: string): {
+    bin: string;
+    args: string[];
+};

package/dist/utils/command-line.js

@@ -0,0 +1,8 @@
+/**
+ * A `commands:` entry from rigour.yml as a program and its arguments. Run without a shell, so pipes,
+ * `&&` and variable assignments are not interpreted: a team that needs them points at a script.
+ */
+export function splitCommand(command) {
+    const parts = command.match(/(?:[^\s"']+|"[^"]*"|'[^']*')+/g) ?? [command];
+    return { bin: parts[0], args: parts.slice(1).map(arg => arg.replace(/^["']|["']$/g, '')) };
+}

package/dist/utils/command-line.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/command-line.test.js

@@ -0,0 +1,8 @@
+import { describe, expect, it } from 'vitest';
+import { splitCommand } from './command-line.js';
+describe('splitCommand', () => {
+    it('splits on spaces and keeps a quoted argument whole, without its quotes', () => {
+        expect(splitCommand('npm run lint')).toEqual({ bin: 'npm', args: ['run', 'lint'] });
+        expect(splitCommand(`vitest run "src/a b.test.ts" --reporter 'dot'`)).toEqual({ bin: 'vitest', args: ['run', 'src/a b.test.ts', '--reporter', 'dot'] });
+    });
+});

package/dist/utils/profile.js

@@ -16,7 +16,7 @@ import { spawnSync } from 'child_process';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
-const TEAM_ENV = ['RIGOUR_ORGANIZATION_ID', 'RIGOUR_TEAM_ID', 'RIGOUR_ACTOR_ID', 'RIGOUR_TEAM_REPOSITORIES', 'RIGOUR_TEAM_DATABASE_URL', 'RIGOUR_TEAM_DATABASE_URL_COMMAND', 'RIGOUR_TEAM_SEMANTIC'];
+const TEAM_ENV = ['RIGOUR_ORGANIZATION_ID', 'RIGOUR_TEAM_ID', 'RIGOUR_ACTOR_ID', 'RIGOUR_TEAM_REPOSITORIES', 'RIGOUR_TEAM_DATABASE_URL', 'RIGOUR_TEAM_DATABASE_URL_COMMAND', 'RIGOUR_TEAM_SEMANTIC', 'RIGOUR_TEAM_SYNC_PERSONAL'];
 /** Where profiles are listed: always the person's real home, never a profile's. */
 export function profilesPath() {
     return process.env.RIGOUR_PROFILES || path.join(os.homedir(), '.rigour', 'profiles.json');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/core",
-  "version": "6.6.6",
+  "version": "6.7.0",
   "description": "Rigour's review engine: deterministic gates on changed lines, rules and lessons learned from your team's fixes, and per-check precision from what you fix versus dismiss, across TypeScript, JavaScript, Python, Go, Ruby and C#.",
   "engines": {
     "node": ">=22"
@@ -70,15 +70,14 @@
   },
   "optionalDependencies": {
     "@anthropic-ai/sdk": "^0.30.1",
-    "@xenova/transformers": "^2.17.2",
     "pg": "^8.16.3",
     "sqlite3": "^5.1.7",
     "openai": "^4.104.0",
-    "@rigour-labs/brain-darwin-x64": "6.6.6",
-    "@rigour-labs/brain-darwin-arm64": "6.6.6",
-    "@rigour-labs/brain-win-x64": "6.6.6",
-    "@rigour-labs/brain-linux-x64": "6.6.6",
-    "@rigour-labs/brain-linux-arm64": "6.6.6"
+    "@rigour-labs/brain-darwin-x64": "6.7.0",
+    "@rigour-labs/brain-linux-arm64": "6.7.0",
+    "@rigour-labs/brain-darwin-arm64": "6.7.0",
+    "@rigour-labs/brain-win-x64": "6.7.0",
+    "@rigour-labs/brain-linux-x64": "6.7.0"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",