aico-ai 1.1.5 → 1.1.6

package/.aicoignore

@@ -1,18 +1,53 @@
-# CodeGuard AI Ignore
+# .aicoignore — files and patterns excluded from aico review, rules, and security scan
+# Same syntax as .gitignore: glob patterns, one per line, # for comments
 
 # Dependencies
-node_modules/
+node_modules/**
 package-lock.json
 yarn.lock
 pnpm-lock.yaml
+bun.lockb
 
 # Build outputs
-dist/
-build/
+dist/**
+build/**
+out/**
+.next/**
+.nuxt/**
 
-# Secrets
+# Environment / secrets
 .env
 .env.*
 
-# Large files
+# Test snapshots & coverage
+**/__snapshots__/**
+*.snap
+coverage/**
+.nyc_output/**
+
+# Binary / media assets
+*.png
+*.jpg
+*.jpeg
+*.gif
+*.svg
+*.ico
+*.pdf
+*.zip
+*.gz
+*.tar
+*.wasm
+
+# Auto-generated / minified
+*.min.js
+*.bundle.js
+*.min.css
+
+# Database migrations
+prisma/migrations/**
+
+# Logs
 *.log
+
+# Vendored / third-party code
+vendor/**

package/lib/git-utils.js

@@ -1,6 +1,7 @@
 import { simpleGit } from 'simple-git';
 import pc from 'picocolors';
 import fs from 'fs';
+import { loadAicoIgnore, toGitExclude } from './ignore-utils.js';
 
 const git = simpleGit();
 
@@ -11,10 +12,10 @@ const IGNORED_FILES = [
     'pnpm-lock.yaml',
     'bun.lockb',
     '.env',
-    '*.png', '*.jpg', '*.jpeg', '*.gif', '*.svg', '*.ico', // Images
-    '*.pdf', '*.zip', '*.gz', '*.tar', // Binaries
-    'dist/*', 'build/*', '.next/*', 'node_modules/*', // Build artifacts
-    'prisma/migrations/*', // Database migrations
+    '*.png', '*.jpg', '*.jpeg', '*.gif', '*.svg', '*.ico',
+    '*.pdf', '*.zip', '*.gz', '*.tar',
+    'dist/*', 'build/*', '.next/*', 'node_modules/*',
+    'prisma/migrations/*',
 ];
 
 /**
@@ -23,8 +24,9 @@ const IGNORED_FILES = [
  */
 export async function getStagedDiff() {
     try {
-        // Filter out common large/binary files to save context
-        const excludeArgs = IGNORED_FILES.map(file => `:(exclude)${file}`);
+        const aicoIgnorePatterns = loadAicoIgnore();
+        const allIgnored = [...IGNORED_FILES, ...aicoIgnorePatterns];
+        const excludeArgs = allIgnored.map(toGitExclude);
         let diff = await git.diff(['--cached', '--', '.', ...excludeArgs]);
 
         return diff;

package/lib/ignore-utils.js

@@ -0,0 +1,70 @@
+import fs from 'fs';
+import path from 'path';
+
+const AICOIGNORE_PATH = '.aicoignore';
+
+/**
+ * Reads .aicoignore from the project root and returns an array of patterns.
+ * Ignores blank lines and lines starting with #.
+ * @returns {string[]}
+ */
+export function loadAicoIgnore() {
+    try {
+        if (!fs.existsSync(AICOIGNORE_PATH)) return [];
+
+        return fs.readFileSync(AICOIGNORE_PATH, 'utf-8')
+            .split('\n')
+            .map(line => line.trim())
+            .filter(line => line.length > 0 && !line.startsWith('#'));
+    } catch {
+        return [];
+    }
+}
+
+/**
+ * Converts a .aicoignore / glob-style pattern to a git pathspec exclude string.
+ * @param {string} pattern
+ * @returns {string}
+ */
+export function toGitExclude(pattern) {
+    return `:(exclude)${pattern}`;
+}
+
+/**
+ * Checks whether a file path matches any of the given .aicoignore-style patterns.
+ * Supports * (any segment) and ** (any path).
+ * @param {string} filePath
+ * @param {string[]} patterns
+ * @returns {boolean}
+ */
+export function matchesAicoIgnore(filePath, patterns) {
+    const normalized = filePath.replace(/\\/g, '/');
+
+    for (const pattern of patterns) {
+        if (globMatch(normalized, pattern)) return true;
+    }
+    return false;
+}
+
+/**
+ * Minimal glob matcher supporting *, **, and ? wildcards.
+ * @param {string} str
+ * @param {string} pattern
+ * @returns {boolean}
+ */
+function globMatch(str, pattern) {
+    const regexStr = pattern
+        .replace(/\./g, '\\.')
+        .replace(/\*\*/g, '\u0001')   // placeholder for **
+        .replace(/\*/g, '[^/]*')       // * = anything except /
+        .replace(/\u0001/g, '.*')      // ** = anything including /
+        .replace(/\?/g, '[^/]');
+
+    // Match against the full path or just the basename
+    const fullMatch = new RegExp(`^${regexStr}$`).test(str);
+    const baseMatch = new RegExp(`^${regexStr}$`).test(path.basename(str));
+    // Also match if pattern has no slash and matches basename
+    const noSlash = !pattern.includes('/');
+
+    return fullMatch || (noSlash && baseMatch);
+}

package/lib/rules-engine.js

@@ -1,6 +1,7 @@
 import fs from 'fs';
 import path from 'path';
 import pc from 'picocolors';
+import { loadAicoIgnore, matchesAicoIgnore } from './ignore-utils.js';
 
 const RULES_PATH = '.aico/rules.json';
 const DEFAULT_RULES_TEMPLATE = {
@@ -136,10 +137,13 @@ export function validateAgainstRules(diff, fileContent, filePath) {
 
     const violations = [];
 
-    // Check if file should be ignored
+    // Check if file should be ignored (rules.json ignore list or .aicoignore)
     if (shouldIgnoreFile(filePath, rules.ignore)) {
         return [];
     }
+    if (matchesAicoIgnore(filePath, loadAicoIgnore())) {
+        return [];
+    }
 
     // Check forbidden patterns
     if (rules.rules.forbidden) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aico-ai",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "type": "module",
   "main": "index.js",
   "bin": {