any-doctor 0.1.1 → 0.1.2

package/README.md

@@ -32,7 +32,7 @@ each with impact, why, fix, and the honest blind spots. `enter` copies a
 fix prompt for your agent.
 
 ```bash
-npx any-doctor@latest run slop-doctor   # one doctor, straight to the report
+npx any-doctor@latest run slop   # one doctor, straight to the report
 ```
 
 Non-terminals and CI never see a prompt — output is stable and pipeable
@@ -42,11 +42,11 @@ Non-terminals and CI never see a prompt — output is stable and pipeable
 
 | Doctor | Discipline | Checks |
 |---|---|---:|
-| **slop-doctor** | The recurring failures of LLM-written code: identical helpers copied across modules, dead exports, unread bindings, hostname-sniffed environments, careless substring matching, collapsed boolean states | 8 |
-| **convex-doctor** | Convex discipline: indexed reads, bounded collects, validated args, awaited writes, honest runtime boundaries | 15 |
-| **effect-v4-doctor** | Effect v4 discipline — the mechanical rules of the [kitlangton Effect skill](https://www.ui-skills.com/skills/kitlangton/effect), enforced | 10 |
-| **openrouter-doctor** | OpenRouter discipline: stream errors surfaced, keep-alives skipped, cancellations that stop billing | 5 |
-| **async-doctor** | Async and concurrency: dropped promise results, uncleared timers, fetch hygiene | 3 |
+| **slop** | The recurring failures of LLM-written code: identical helpers copied across modules, dead exports, unread bindings, hostname-sniffed environments, careless substring matching, collapsed boolean states | 8 |
+| **convex** | Convex discipline: indexed reads, bounded collects, validated args, awaited writes, honest runtime boundaries | 15 |
+| **effect-v4-kitlangton** | Effect v4 discipline — the mechanical rules of the [kitlangton Effect skill](https://www.ui-skills.com/skills/kitlangton/effect), enforced | 10 |
+| **openrouter** | OpenRouter discipline: stream errors surfaced, keep-alives skipped, cancellations that stop billing | 5 |
+| **async** | Async and concurrency: dropped promise results, uncleared timers, fetch hygiene | 3 |
 
 Checks ship positive and innocent-lookalike fixtures. `verify` compares an
 exact multiset of rule/file/line and optional column, then runs shared innocent

package/bin/analysis-host.js

@@ -9,7 +9,7 @@ const modelCache = new Map();
 const callsCache = new Map();
 const spansCache = new Map();
 // Test seam: the model cache is keyed by mtime+size for the process
-// lifetime; tests bust it between cases. Invisible to slop-doctor's
+// lifetime; tests bust it between cases. Invisible to slop's
 // default run (test-file consumers are the documented narrowing).
 export function clearAnalysisCache() {
     modelCache.clear();

package/bin/certify.js

@@ -161,7 +161,7 @@ export async function certify(mod, fixtures) {
             }
             // Verify always lists everything (includeTestsFor): the sandbox is
             // the doctor's own world — a seed named *.test.ts is deliberate
-            // test data (effect-v4-doctor's sleep-in-test depends on it).
+            // test data (effect-v4-kitlangton's sleep-in-test depends on it).
             const result = await inSandbox(fixture.seed, (tmp) => runOnce(tmp, mod, { includeTests: true }));
             const diff = contract.compareFindings(fixture.expected, result.findings);
             const row = { name: fixture.name, ok: diff.missing.length === 0 && diff.unexpected.length === 0, ...diff };

package/bin/engine.js

@@ -90,7 +90,7 @@ export function resolveAstGrepBinary() {
     return cachedBinary;
 }
 // One batched query over a real repo emits tens of megabytes of JSON (the
-// async-doctor pilot's ten patterns produce 24MB over a 979-file repo) —
+// async pilot's ten patterns produce 24MB over a 979-file repo) —
 // spawnSync's 1MB default truncates that mid-array, and the crash reads as
 // an ast-grep bug instead of a buffer bug. The ceiling exists so a runaway
 // pattern (matching near-every node of a monorepo) fails loudly here

package/bin/mask.js

@@ -5,7 +5,7 @@
 //
 // Regex literals must be masked because they may contain quote
 // characters: an unmasked /["']/ opens a phantom string that swallows
-// every line after it (found by slop-doctor flagging imports whose
+// every line after it (found by slop flagging imports whose
 // type-position uses had been masked out of existence).
 //
 // Two host-side consumers share it: ctx.files.readMasked (the sdk — what

package/docs/plans/finding-lifecycle/design.md

@@ -88,6 +88,45 @@ changed doctor can support an explicit detector comparison, not a code-fix claim
 Expired detailed history must be identified as unavailable, not reconstructed as
 complete from summary counters.
 
+## Doctor identity across authors and renames (planned, M3)
+
+Decisions crossing trust boundaries — committed project records shared
+through Git — need doctor identity that is unique across authors and
+stable across display renames. Two mechanisms, both visible, both
+authored; no hidden self-asserted IDs:
+
+- **Namespace/id.** A doctor's full key is `namespace/id` when it
+  declares a `namespace` (kebab-case author or origin), bare `id`
+  otherwise. Bundled doctors stay bare forever — the curated first-party
+  pack — so the 0.1.2 rename never churns again; third-party doctors
+  MUST declare a namespace, making `alice/convex` and `bob/convex`
+  distinct by construction while keys stay human-readable (surfaces may
+  show the friendly id; machine surfaces carry the full key). A copy
+  that keeps the same namespace/id is honestly the same doctor; a fork
+  that changes meaning diverges through provenance (revision/digest).
+  Self-generated UUIDs are ruled out: they travel with file copies,
+  producing invisible collisions — worse than name collisions because
+  nobody can read the key. The doctor identity key never drops its
+  namespace component: matching decisions on code evidence alone would
+  let one doctor's decision suppress another doctor's finding at the
+  same location — the cross-doctor suppression the identity layer
+  exists to prevent.
+- **`supersedes` for renames.** Renaming is a semantic event only the
+  doctor's owner can assert: `supersedes: "convex-doctor"` (old full
+  key). On load, the state layer migrates decisions from superseded
+  keys to the new ones, gated on provenance continuity — revision or
+  program digest must still match; a rename combined with a meaning
+  change resurfaces decisions for reassessment rather than silently
+  carrying. This is the explicit, authored version of "identity
+  survives renames": no invisible magic, and the migration is visible
+  in state.
+
+Both land with M3 (they are load-bearing only once decisions are
+committed and shared); the doctor contract and the authoring skill
+teach the declaration from day one so authored doctors arrive
+namespaced. The 0.1.1→0.1.2 bundled rename churns once, deliberately,
+while exposure is near zero; `supersedes` is not retrofitted for it.
+
 ## Team convergence
 
 For the same source, compatible doctors/engines, configuration, and committed

package/doctors/{async-doctor.mjs → async.mjs}

@@ -1,5 +1,5 @@
 export const meta = {
-  id: "async-doctor",
+  id: "async",
   description: "Async and concurrency discipline: fetch hygiene, promise handling, timer cleanup.",
   severity: "warning",
   category: "async",

package/doctors/{convex-doctor.mjs → convex.mjs}

@@ -1,5 +1,5 @@
 export const meta = {
-  id: "convex-doctor",
+  id: "convex",
   description: "Convex discipline: indexed reads, bounded collects, query clocks, discarded promises, validated args, awaited writes, honest runtime boundaries.",
   severity: "warning",
   category: "convex",

package/doctors/{effect-v4-doctor.mjs → effect-v4-kitlangton.mjs}

@@ -1,5 +1,5 @@
 export const meta = {
-  id: "effect-v4-doctor",
+  id: "effect-v4-kitlangton",
   description: "Effect v4 discipline: typed errors over hand-rolled tags, Config over direct env reads, named Effect.fn, deterministic generators, validated boundaries, no casts that silence the type system. The mechanical rules of the kitlangton Effect skill, enforced.",
   severity: "warning",
   category: "effect",
@@ -312,7 +312,7 @@ function checkSchemaClass(ctx, file, lines) {
 
 // Two shapes: the Data.TaggedError class-builder (any usage), and any class
 // declaring its own _tag member - the body is brace-tracked from the class
-// line the same way convex-doctor tracks function bodies.
+// line the same way convex tracks function bodies.
 function checkTaggedError(ctx, file, lines) {
   for (let i = 0; i < lines.length; i++) {
     if (/\bData\.TaggedError\b/.test(lines[i])) {

package/doctors/{openrouter-doctor.mjs → openrouter.mjs}

@@ -1,5 +1,5 @@
 export const meta = {
-  id: "openrouter-doctor",
+  id: "openrouter",
   description: "OpenRouter discipline: stream errors surfaced, keep-alives skipped, cancellations that stop billing.",
   severity: "warning",
   category: "openrouter",

package/doctors/{slop-doctor.mjs → slop.mjs}

@@ -1,5 +1,5 @@
 export const meta = {
-  id: "slop-doctor",
+  id: "slop",
   description: "LLM slop discipline: duplicated helpers, dead exports and unread bindings, hostname-sniffed environments, careless text matching, collapsed boolean states. Born from 1,368 Bugbot findings across 182 reviewed PRs.",
   severity: "warning",
   category: "slop",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "any-doctor",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Your agent writes the analyzer, fixtures prove it, CI reruns it forever.",
   "license": "MIT",
   "bin": {