@rigour-labs/core 6.7.5 → 6.7.7

package/dist/review-learning/repo-rules.js

@@ -10,11 +10,16 @@
  */
 import fs from 'fs';
 import path from 'path';
-import { isSpecific } from './lessons.js';
+import crypto from 'crypto';
+import { isSpecific, meaningfulWords } from './lessons.js';
 const RULE_FILES = ['AGENTS.md', 'CLAUDE.md', '.github/copilot-instructions.md'];
 const RULE_DIRS = ['.cursor/rules'];
 const MAX_RULE_CHARS = 600;
 const MAX_RULES = 5;
+/** A paragraph that continues the rule before it (its reason, how to apply it, an example) rather than a rule of its own. */
+const CONTINUES = /^\**\s*(why|how to apply|example|examples|evidence|exception|exceptions|fix|note)\b\s*:?\**\s*:?/i;
+/** Worded as a requirement: the team said must, never, always, only, every, do not. A rule without these is guidance. */
+const REQUIREMENT = /\b(must|never|always|only|every|do not|don't|forbidden|required|non-negotiable)\b/i;
 export function readRepoRules(cwd) {
     const files = [
         ...RULE_FILES.filter(f => fs.existsSync(path.join(cwd, f))),
@@ -45,21 +50,39 @@ export function splitRules(source, text) {
         }
     }
     flush();
-    return blocks.map(block => ({
+    // A "Why:" or "How to apply:" paragraph belongs to the rule above it: alone it is not checkable.
+    const merged = [];
+    for (const block of blocks) {
+        if (CONTINUES.test(block) && merged.length)
+            merged[merged.length - 1] = `${merged[merged.length - 1]} ${block}`;
+        else
+            merged.push(block);
+    }
+    return merged.map(block => ({
+        id: crypto.createHash('sha256').update(`${source}\u0000${block.toLowerCase().replace(/[^a-z0-9]+/g, ' ').trim()}`).digest('hex').slice(0, 10),
         source,
         text: block.length > MAX_RULE_CHARS ? `${block.slice(0, MAX_RULE_CHARS)}…` : block,
+        requirement: REQUIREMENT.test(block),
         paths: [...new Set([...block.matchAll(/`([\w@.~-]+\/[\w./@*-]*)`/g)].map(m => m[1].replace(/\*.*$/, '').replace(/^\.\//, '')))].filter(Boolean),
         symbols: [...new Set([...block.matchAll(/`([A-Za-z_$][\w$]*)(?:\(\))?`/g)].map(m => m[1]))].filter(isSpecific),
     }));
 }
-/** Rules that name a path the change touches, or a specific identifier in it; most specific first. */
-export function rulesForChange(rules, files, symbols) {
+/**
+ * The rules most likely to apply to a change, most specific first: a rule naming a path the change
+ * touches or an identifier in it ranks above one that only shares words with it (the change's paths
+ * and added names, split into words), and a rule sharing fewer than two words is left out. Ranking,
+ * not filtering: on a large change most rules share some words, so the judge decides applicability
+ * rule by rule from the top `limit`.
+ */
+function rulesForChange(rules, files, symbols, limit = MAX_RULES) {
+    const changeWords = new Set([...files.flatMap(f => f.split(/[/._-]+/)), ...symbols].flatMap(meaningfulWords));
     const scored = rules.map(rule => {
         const pathHits = rule.paths.filter(p => files.some(f => f === p || f.startsWith(p.endsWith('/') ? p : `${p}/`) || f.endsWith(`/${p}`))).length;
         const symbolHits = rule.symbols.filter(s => symbols.has(s)).length;
-        return { rule, score: 3 * pathHits + 2 * symbolHits };
+        const shared = new Set(meaningfulWords(rule.text).filter(w => changeWords.has(w))).size;
+        return { rule, named: 3 * pathHits + 2 * symbolHits, shared };
     });
-    return scored.filter(s => s.score > 0).sort((a, b) => b.score - a.score).slice(0, MAX_RULES).map(s => s.rule);
+    return scored.filter(s => s.named > 0 || s.shared >= 2).sort((a, b) => b.named - a.named || b.shared - a.shared).slice(0, limit).map(s => s.rule);
 }
 export function rulesSection(rules) {
     if (rules.length === 0)
@@ -74,11 +97,11 @@ function listRuleFiles(cwd, dir) {
         return [];
     }
 }
-/** The rules that apply to a diff's changed files and added identifiers. */
-export function rulesForDiff(cwd, diff, enabled = false) {
+/** The rules that apply to a diff's changed files and added identifiers, the top `limit`. */
+export function rulesForDiff(cwd, diff, enabled = false, limit = MAX_RULES) {
     if (!enabled)
         return [];
     const files = [...diff.matchAll(/^\+\+\+ b\/(.+)$/gm)].map(m => m[1].trim());
     const added = diff.split('\n').filter(line => line.startsWith('+') && !line.startsWith('+++')).join('\n');
-    return rulesForChange(readRepoRules(cwd), files, new Set(added.match(/[A-Za-z_$][\w$]*/g) ?? []));
+    return rulesForChange(readRepoRules(cwd), files, new Set(added.match(/[A-Za-z_$][\w$]*/g) ?? []), limit);
 }

package/dist/review-learning/repo-rules.test.js

@@ -28,6 +28,19 @@ describe('repository rules', () => {
         expect(rules.map(r => r.text.slice(0, 30))).toEqual(['**Migrations are append-only.*', 'Every outbound send goes throu', 'Prefer `fetchWithTimeout` over']);
         expect(rules[1]).toMatchObject({ paths: ['src/lib/delivery.ts'], symbols: ['deliverOrder'] });
         expect(rules[0].paths).toEqual(['migrations/']);
+        expect(rules.map(r => r.requirement)).toEqual([true, true, false]); // "never", "every"; "prefer" is guidance
+        expect(rules[0].id).toMatch(/^[0-9a-f]{10}$/);
+        expect(splitRules('AGENTS.md', AGENTS)[0].id).toBe(rules[0].id); // stable across runs
+    });
+    it('keeps a rule\'s "Why" and "How to apply" paragraphs with it, and ranks a rule naming the change above one that only shares its words', () => {
+        const text = '- **Use the design system.** Every control comes from `src/lib/ui`.\n\n**Why:** one source of styling.\n\n**How to apply:** import from `$lib/ui`, never a raw `<button>`.\n\n- Bound both ends of every time window a scheduled job reads.\n\n- Name the index a new query relies on in the migrations.\n';
+        const rules = splitRules('AGENTS.md', text);
+        expect(rules.map(r => r.text.slice(0, 24))).toEqual(['**Use the design system.', 'Bound both ends of every', 'Name the index a new que']);
+        expect(rules[0].text).toContain('**How to apply:**');
+        fs.writeFileSync(path.join(repo, 'AGENTS.md'), text);
+        const change = diff('src/lib/ui/Button.svelte', 'const timeWindow = scheduledJob.readsRows();');
+        expect(rulesForDiff(repo, change, true, 10).map(r => r.text.slice(0, 12))).toEqual(['**Use the de', 'Bound both e']); // the path hit first, then shared words; the index rule shares nothing
+        expect(rulesForDiff(repo, change, true, 1)).toHaveLength(1);
     });
     it('shows only the rules that name what the change touches, and nothing when disabled', () => {
         expect(rulesForDiff(repo, diff('migrations/2026_add.sql', 'alter table x;'), true).map(r => r.text.slice(0, 20))).toEqual(['**Migrations are app']);

package/dist/templates/universal-config.js

@@ -293,6 +293,7 @@ export const UNIVERSAL_CONFIG = {
             escalate: 'always',
             cross_models: {},
             judge_env: {},
+            reasoning: {},
         },
     },
     ignore: [],

package/dist/types/index.d.ts

@@ -2457,6 +2457,32 @@ export declare const ConfigSchema: z.ZodObject<{
             escalate: z.ZodDefault<z.ZodOptional<z.ZodEnum<["always", "risk"]>>>;
             /** A model per reviewer name for cross-examination (a narrow verification task), e.g. { claude: "haiku" }. */
             cross_models: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+            /** Reasoning effort per reviewer name where the CLI or API takes one (codex, api): low, medium or high. */
+            reasoning: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["low", "medium", "high"]>>>>;
+            /**
+             * A judge reached through a model API (OpenAI-compatible chat completions with tools), named `api` in
+             * `reviewers`: any model the team can call. The key is read from the environment variable `key_env`, never
+             * from this file. `vendor` is the model's maker, for cross and full modes (inferred from the model name when unset).
+             */
+            api: z.ZodOptional<z.ZodObject<{
+                url: z.ZodString;
+                model: z.ZodString;
+                key_env: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                vendor: z.ZodOptional<z.ZodEnum<["anthropic", "openai", "google", "other"]>>;
+                max_turns: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            }, "strip", z.ZodTypeAny, {
+                model: string;
+                url: string;
+                key_env: string;
+                max_turns: number;
+                vendor?: "anthropic" | "openai" | "google" | "other" | undefined;
+            }, {
+                model: string;
+                url: string;
+                key_env?: string | undefined;
+                vendor?: "anthropic" | "openai" | "google" | "other" | undefined;
+                max_turns?: number | undefined;
+            }>>;
             /**
              * Environment variables a judge's CLI must not see, per reviewer name, e.g. { codex: { unset: [OPENAI_API_KEY] } }
              * when that variable holds a key meant for another service. RIGOUR_API_KEY is never passed to a judge.
@@ -2482,12 +2508,20 @@ export declare const ConfigSchema: z.ZodObject<{
             judges: 2 | 3;
             escalate: "always" | "risk";
             cross_models: Record<string, string>;
+            reasoning: Record<string, "high" | "medium" | "low">;
             judge_env: Record<string, {
                 unset: string[];
             }>;
             model?: string | undefined;
             max_runs_per_day?: number | undefined;
             max_usd_per_day?: number | undefined;
+            api?: {
+                model: string;
+                url: string;
+                key_env: string;
+                max_turns: number;
+                vendor?: "anthropic" | "openai" | "google" | "other" | undefined;
+            } | undefined;
         }, {
             enabled?: boolean | undefined;
             mode?: "single" | "cross" | "full" | undefined;
@@ -2505,6 +2539,14 @@ export declare const ConfigSchema: z.ZodObject<{
             judges?: 2 | 3 | undefined;
             escalate?: "always" | "risk" | undefined;
             cross_models?: Record<string, string> | undefined;
+            reasoning?: Record<string, "high" | "medium" | "low"> | undefined;
+            api?: {
+                model: string;
+                url: string;
+                key_env?: string | undefined;
+                vendor?: "anthropic" | "openai" | "google" | "other" | undefined;
+                max_turns?: number | undefined;
+            } | undefined;
             judge_env?: Record<string, {
                 unset?: string[] | undefined;
             }> | undefined;
@@ -2526,12 +2568,20 @@ export declare const ConfigSchema: z.ZodObject<{
             judges: 2 | 3;
             escalate: "always" | "risk";
             cross_models: Record<string, string>;
+            reasoning: Record<string, "high" | "medium" | "low">;
             judge_env: Record<string, {
                 unset: string[];
             }>;
             model?: string | undefined;
             max_runs_per_day?: number | undefined;
             max_usd_per_day?: number | undefined;
+            api?: {
+                model: string;
+                url: string;
+                key_env: string;
+                max_turns: number;
+                vendor?: "anthropic" | "openai" | "google" | "other" | undefined;
+            } | undefined;
         };
         github_account?: string | undefined;
     }, {
@@ -2555,6 +2605,14 @@ export declare const ConfigSchema: z.ZodObject<{
             judges?: 2 | 3 | undefined;
             escalate?: "always" | "risk" | undefined;
             cross_models?: Record<string, string> | undefined;
+            reasoning?: Record<string, "high" | "medium" | "low"> | undefined;
+            api?: {
+                model: string;
+                url: string;
+                key_env?: string | undefined;
+                vendor?: "anthropic" | "openai" | "google" | "other" | undefined;
+                max_turns?: number | undefined;
+            } | undefined;
             judge_env?: Record<string, {
                 unset?: string[] | undefined;
             }> | undefined;
@@ -2832,12 +2890,20 @@ export declare const ConfigSchema: z.ZodObject<{
             judges: 2 | 3;
             escalate: "always" | "risk";
             cross_models: Record<string, string>;
+            reasoning: Record<string, "high" | "medium" | "low">;
             judge_env: Record<string, {
                 unset: string[];
             }>;
             model?: string | undefined;
             max_runs_per_day?: number | undefined;
             max_usd_per_day?: number | undefined;
+            api?: {
+                model: string;
+                url: string;
+                key_env: string;
+                max_turns: number;
+                vendor?: "anthropic" | "openai" | "google" | "other" | undefined;
+            } | undefined;
         };
         github_account?: string | undefined;
     };
@@ -3120,6 +3186,14 @@ export declare const ConfigSchema: z.ZodObject<{
             judges?: 2 | 3 | undefined;
             escalate?: "always" | "risk" | undefined;
             cross_models?: Record<string, string> | undefined;
+            reasoning?: Record<string, "high" | "medium" | "low"> | undefined;
+            api?: {
+                model: string;
+                url: string;
+                key_env?: string | undefined;
+                vendor?: "anthropic" | "openai" | "google" | "other" | undefined;
+                max_turns?: number | undefined;
+            } | undefined;
             judge_env?: Record<string, {
                 unset?: string[] | undefined;
             }> | undefined;

package/dist/types/index.js

@@ -324,7 +324,7 @@ export const GatesSchema = z.object({
         timeout_ms: z.number().optional(), // per model call; default: cloud 120s, local 60s, local --max 240s
         budget_ms: z.number().optional(), // whole deep run; files not started in time are reported as skipped
         agentic: z.boolean().optional(), // cloud tier: the model may read the repository while it reviews (default true)
-        repo_rules: z.boolean().optional(), // show the reviewer the rules in AGENTS.md / CLAUDE.md / Cursor rules that name what the change touches (default false)
+        repo_rules: z.boolean().optional(), // show the model review, the agent review list and the stop hook the rules in AGENTS.md / CLAUDE.md / Cursor rules that name what the change touches (default false); the reviewer always checks them
         review_lessons: z.enum(['verified', 'all', 'off']).optional(), // the team's past review lessons: they raise a function's risk and are shown to the reviewer. verified (default), all, or off
         router: z.object({
             enabled: z.boolean().optional(), // default true
@@ -423,6 +423,20 @@ export const ConfigSchema = z.object({
             escalate: z.enum(['always', 'risk']).optional().default('always'),
             /** A model per reviewer name for cross-examination (a narrow verification task), e.g. { claude: "haiku" }. */
             cross_models: z.record(ModelName).optional().default({}),
+            /** Reasoning effort per reviewer name where the CLI or API takes one (codex, api): low, medium or high. */
+            reasoning: z.record(z.enum(['low', 'medium', 'high'])).optional().default({}),
+            /**
+             * A judge reached through a model API (OpenAI-compatible chat completions with tools), named `api` in
+             * `reviewers`: any model the team can call. The key is read from the environment variable `key_env`, never
+             * from this file. `vendor` is the model's maker, for cross and full modes (inferred from the model name when unset).
+             */
+            api: z.object({
+                url: z.string().url(),
+                model: z.string().min(1),
+                key_env: z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/, 'an environment variable name').optional().default('RIGOUR_JUDGE_API_KEY'),
+                vendor: z.enum(['anthropic', 'openai', 'google', 'other']).optional(),
+                max_turns: z.number().int().positive().optional().default(60),
+            }).optional(),
             /**
              * Environment variables a judge's CLI must not see, per reviewer name, e.g. { codex: { unset: [OPENAI_API_KEY] } }
              * when that variable holds a key meant for another service. RIGOUR_API_KEY is never passed to a judge.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/core",
-  "version": "6.7.5",
+  "version": "6.7.7",
   "description": "Rigour's review engine: deterministic gates on changed lines, rules and lessons learned from your team's fixes, and per-check precision from what you fix versus dismiss, across TypeScript, JavaScript, Python, Go, Ruby and C#.",
   "engines": {
     "node": ">=22.13"
@@ -72,11 +72,11 @@
     "@anthropic-ai/sdk": "^0.30.1",
     "pg": "^8.16.3",
     "openai": "^5.23.2",
-    "@rigour-labs/brain-darwin-x64": "6.7.5",
-    "@rigour-labs/brain-linux-arm64": "6.7.5",
-    "@rigour-labs/brain-win-x64": "6.7.5",
-    "@rigour-labs/brain-darwin-arm64": "6.7.5",
-    "@rigour-labs/brain-linux-x64": "6.7.5"
+    "@rigour-labs/brain-darwin-arm64": "6.7.7",
+    "@rigour-labs/brain-darwin-x64": "6.7.7",
+    "@rigour-labs/brain-linux-arm64": "6.7.7",
+    "@rigour-labs/brain-win-x64": "6.7.7",
+    "@rigour-labs/brain-linux-x64": "6.7.7"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",