enigma-cli 1.36.5 → 1.36.8

package/assets/commands/gate.md

@@ -115,6 +115,14 @@ What follows from that:
 - **One fix round, not three.** Every `--action fix` is two full passes, one to
   apply and one to re-review. Select every finding you intend to fix in a single
   `--findings` list instead of responding once per finding.
+- **When the rounds are the cost, raise `gate-severity`.** It is the lowest
+  severity that stops a run to ask you - `error | warning | info`, default
+  `warning`. Anything below it is still found and reported, the run just does not
+  halt for it. `enigma config gate-severity error -l` is the answer to a diff that
+  keeps surfacing one more `info` per round instead of converging. Scope it like
+  `/gate off`: `-l` for this project, `-g` only when the user says every project -
+  a bare `enigma config` writes the GLOBAL file. Report the change and its scope;
+  it is the user's strictness you are lowering.
 - **Propose `--skip test,document` on a throwaway diff** (a typo, a comment, a
   version bump) and let the user decide. Skipping them means no test evidence was
   gathered and no docs were checked, so it is their call - unless they already

package/assets/skills/anti-overengineering-policy/skill.json

@@ -7,6 +7,6 @@
     "minimalCode"
   ],
   "updated": "2026-07-17T00:17:02+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "3f0dcc28341bb0407860534f7ce9314cfc91b5e673f8f3d13b89d61851ed75f6"
 }

package/assets/skills/anti-overengineering-review/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "On-demand over-engineering review - diff review, whole-repo audit, and enigma: debt-marker ledger (tags delete/stdlib/native/yagni/shrink, line/dep scoring); lists cuts, applies nothing.",
   "updated": "2026-06-16T11:24:30+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "f742a2be3f328b9ea1ff9a35a449177c2cbec35ad16e46f7054b7a873a2ab017"
 }

package/assets/skills/backend-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Backend/API architecture: controller-service-repository layering, modern TypeScript project configuration (module resolution, strict flags, @/* path alias), API and request optimization (batching, avoiding redundant calls, skipping no-op writes), server-side caching (Redis), and Zod boundary validation.",
   "updated": "2026-08-02T19:59:01+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "652637f818b4ce4f4d5d83fa68fa57fe7842e32fb179523958c5496af54bb938"
 }

package/assets/skills/ciphera-style-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Ciphera code style conventions (formatting, naming, imports incl. namespace imports for wide module surfaces, path-alias specifiers and no file extensions, comments, code-level anti-patterns; TypeScript-first, language-agnostic).",
   "updated": "2026-08-02T19:59:01+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "3beb0383a9cb0331ef8a579308a2517d24d57a8ba33751ad17d16d0a4f66e344"
 }

package/assets/skills/code-review-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Pre-delivery self-review gate, prioritized review dimensions, and change-quality criteria.",
   "updated": "2026-08-19T12:37:59+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "6b8a924cc11b61d4b45b73384aeb095ce622229359b7cc2c6ce4bb0cf3015ed7"
 }

package/assets/skills/core-engineering-policy/skill.json

@@ -7,6 +7,6 @@
     "codeGraph"
   ],
   "updated": "2026-08-15T20:49:24+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "95b7202e5659f8d9d6f11ce29e7dc5b01575ba86c78ef948bec4753ccf430155"
 }

package/assets/skills/database-expert/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Senior database architecture policy: engine selection (PostgreSQL by default, SQLite only for local-first/embedded stores), ORM selection (Prisma in TypeScript/JavaScript), query optimization, anti-duplication/normalization, scalability, and RGPD/GDPR encryption.",
   "updated": "2026-08-04T18:33:27+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "26fddc14caf697e830448a2cc453ddc470fe83d098d50bd67b278effba63274e"
 }

package/assets/skills/debugging-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Reproduce-isolate-fix debugging methodology with root-cause discipline and regression verification.",
   "updated": "2026-08-02T04:15:47+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "968876bcac9ce6e5a20be05c89ac97191b112c9e08679a8dc506d150c375fec4"
 }

package/assets/skills/dependency-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Dependency and supply-chain security: lockfiles and reproducible installs, version pinning, vulnerability auditing, vetting/minimizing packages, vendoring, and SBOM/provenance.",
   "updated": "2026-06-01T00:45:28+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "6375d835c2aef2c9bd31ce116444dc3d796f510f9970a213aa3ac4696d7e21b9"
 }

package/assets/skills/email-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Transactional email: React Email templates instead of hand-written HTML tables, server-side rendering, one send module behind the provider SDK, plain-text alternatives, idempotent background sending, link safety, and deliverability (SPF/DKIM/DMARC, bounce suppression, unsubscribe).",
   "updated": "2026-07-30T19:29:19+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "c9724fdbcdbeab99573be3fd44d4cdd97c2a394d99f3c4395f118f17356b00ed"
 }

package/assets/skills/frontend-design/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one.",
   "updated": "2026-07-29T01:18:36+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "9e30ee7d8a1a1e8c6e7f4e043857cd01841c68a427752e45bc0cad9ec5cfa279"
 }

package/assets/skills/frontend-policy/SKILL.md

@@ -457,6 +457,7 @@ Never render an unbounded or large dataset in one shot (no fetch-everything then
 - Pagination (when users need to jump to or deep-link a specific page, the set is bounded, totals/position matter, or results must be SEO-indexable): classic page controls backed by efficient server paging.
 - **Infinite scroll is the preferred default; pagination is the deliberate exception.** Continuous scrolling is what most lists want and what most users now expect, so reach for it first and switch to pages only when one of the reasons above genuinely applies, when the design has nowhere to scroll (a fixed-height panel, a print or export layout, a table meant to be read position by position), or when the user asks for pages. The design and the user's request outrank the default; what does not is skipping the choice and rendering the whole set.
 - Do not infinite-scroll a 30-row admin table or paginate a social feed. A short, bounded list needs neither - just render it (anti-overengineering-policy).
+- A guardrail enforces the part of this that a file can prove: a collection bound from a query or a fetch and then mapped whole, with nothing in the file bounding its size, is blocked (`fe-unbounded-remote-list`). When the collection genuinely is bounded by construction, say so on the line - `enigma:allow-unbounded-list - at most three payment methods per account` - rather than adding paging you do not need. The rule only sees a fetch and a render in the SAME file; a list arriving through a custom hook or a prop is invisible to it and stays your call.
 
 ### Skeletons while loading
 

package/assets/skills/frontend-policy/skill.json

@@ -3,7 +3,7 @@
   "version": "1.30.1",
   "provider": "FJRG2007/enigma",
   "description": "Frontend architecture: reusable components, abstraction thresholds, state management, real-time form validation where an emptied or not-yet-filled field is incomplete rather than invalid (a `*` on the label and an aria-disabled submit, never \"email is not valid\" over an empty input), no-op detection (skip any operation whose result equals current state, not just form saves; dirty means different from the loaded snapshot, not touched), instant first paint (render the shell, load data async, skeletons), perceived performance (prefetch on intent, debounce/throttle, cancel stale requests, avoid waterfalls, lazy widgets), large-list rendering (infinite scroll is the preferred default, pagination the deliberate exception when the design or the user calls for it, virtualization, skeletons, progressive loading), data views that ship their own affordances by default (a log, expense, transaction or history table is not done when the rows render: fuse.js search, the filters its column kinds imply, a date range, sort, filter state in the URL, and an export of the filtered set), every reference to an entity being a way into it (a name, id, project or path in a row links to that record, reveals it in a hover card, or at minimum copies and filters by it, never inert text; machine codes get human labels and raw payloads are never dumped into a cell), optimistic UI with rollback, visual restraint (one card level, spacing before borders, one elevation scale), icon actions (repeated row/card actions are icon-only buttons with aria-label plus title, not text labels), responsive/adaptive layout (fluid units, breakpoints, no overlap/overflow, viewport meta, touch targets), form fields that declare their keyboard and casing (autocapitalize/autocomplete/inputmode per field kind, set once in the shared Input, normalized on blur), variable-length text (min-width:0 in flex/grid, wrap vs truncate, long unbroken strings, worst-case content checks), auth screens (breached-password feedback, strength meter, cookie consent before login/register), and AI chat/agent interfaces via Vercel's AI Elements registry instead of hand-rolled message threads.",
-  "updated": "2026-08-13T18:04:26+02:00",
-  "cliVersion": "1.36.5",
-  "sha": "837f62ef43fa4ab46e7e74bb88dc6cb83e877f039565a80696e05345e28eb20d"
+  "updated": "2026-08-31T02:47:20+02:00",
+  "cliVersion": "1.36.8",
+  "sha": "682be5335e0c761c6aa56e8d4825dec0821ca7875e0684b3cdfcc856bc750a2f"
 }

package/assets/skills/git-policy/skill.json

@@ -3,7 +3,7 @@
   "version": "1.6.0",
   "provider": "FJRG2007/enigma",
   "description": "Git & contribution policy (senior engineering standards).",
-  "updated": "2026-08-22T09:22:24+02:00",
-  "cliVersion": "1.36.5",
+  "updated": "2026-08-22T09:25:34+02:00",
+  "cliVersion": "1.36.8",
   "sha": "cb320a6a5fd3279604ad7920b877c1a36e48f4f39aeead1a4c4daa89901d9ce0"
 }

package/assets/skills/logo-sourcing-policy/skill.json

@@ -7,6 +7,6 @@
     "logoColorPolicy"
   ],
   "updated": "2026-07-17T00:17:02+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "09cdbefd98625b02a7d03685e5deed128238ff8454a83fe22279610fe3ef8ddf"
 }

package/assets/skills/security-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Application and AI-agent security: secrets, authn/authz (least privilege), credential flows with breach-checked passwords (Have I Been Pwned), OWASP Top 10, transport/crypto baseline, cookies and consent, secure logging, and agent/MCP/tool-use safety.",
   "updated": "2026-08-19T12:37:59+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "0270c33d2b4559e831aec794c188d293d26fc17e2a8064a967d716ceb3a7bab6"
 }

package/assets/skills/skill-creator/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Create new skills, modify and improve existing skills, and measure skill performance with evals and benchmarks.",
   "updated": "2026-08-03T00:16:54+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "a49f6166f57d734e0f13487332da37903e925f32257447856af0fbd6a5f1dc84"
 }

package/assets/skills/task-completion-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Exhaustive completion discipline for long/multi-item tasks - inventory, coverage ledger, verified done.",
   "updated": "2026-08-02T04:15:47+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "4c2197954135dd3375f32d839238b82a95c0e93e976ddf5a9cbc4a0cf0146e97"
 }

package/assets/skills/technical-writing-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Concise, realistic technical copy - UI microcopy, descriptions, hints, empty/error states, and README/doc prose that informs without over-explaining or restating the obvious, and never uses a typographic dash.",
   "updated": "2026-08-19T12:37:59+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "a5a228a302f50d975a947b9d84676b4c2a4780f2b222f819388cc98d6a12f207"
 }

package/assets/skills/testing-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Test strategy, coverage gates, deterministic tests, mocking discipline, regression-first bug fixing, and test-suite organization (layout by type/domain, mirrored paths, file naming, fixture/helper placement).",
   "updated": "2026-06-16T17:11:49+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "3bdf591057b760f674fb2b1425f63acb426cda2c4f042e1a74c5a5d3807df664"
 }

package/assets/skills/validation-policy/skill.json

@@ -4,6 +4,6 @@
   "provider": "FJRG2007/enigma",
   "description": "Strict frontend + backend schema validation, normalization before validation (shared normalizers: trim, lowercase email, capitalize names, canonicalize links and handles), real-time error timing (an emptied or not-yet-filled field is incomplete, not invalid: a `*` and an aria-disabled submit instead of \"not valid\" over an empty input), schema consistency, and safe client-facing error handling.",
   "updated": "2026-08-11T17:10:56+02:00",
-  "cliVersion": "1.36.5",
+  "cliVersion": "1.36.8",
   "sha": "24928a4c9eed28ebede9f23f746b09a9d3d8176f8fcca61a7780a853fa5bed4e"
 }

package/bin/checksums.json

@@ -1,6 +1,6 @@
 {
-  "enigma-darwin-arm64": "6157a58a82576e14d593119b36bb46ee651078eaa55843e2c6cbbf67ba590aab",
-  "enigma-linux-arm64": "5ce022873a1e042f9c7287ef45b57278e419794a37f6e036c0c927421b9b4d3a",
-  "enigma-linux-x64": "cf5a154f0160d6db6fcda1857234d558de6ff7c8af0ec181b941333e15796f62",
-  "enigma-win32-x64.exe": "65cc0dfcb866278e477142e42677af9fa728029999bc8af9d9aa3c5e16ffb714"
+  "enigma-darwin-arm64": "47a9362415fe914b3ccd1356f1c46192c43c352b363be232a0bc20ba83635470",
+  "enigma-linux-arm64": "94bc1fa8562891c02b16fe61f2466f57a5072ceda737a6999174aa2ebb542b3c",
+  "enigma-linux-x64": "bbbcf79f48df7f65ce7949901da5f0619fe55144befcc053c897b37fcf021c73",
+  "enigma-win32-x64.exe": "f95fd67131a856be85109de0325859e6f28207e721692079c971d85b8c672612"
 }

package/bin/statusline.mjs

@@ -21,7 +21,13 @@ import { join } from "node:path";
 import { readFileSync } from "node:fs";
 
 /** Snapshot schema this renderer understands; a newer file is ignored, not guessed at. */
-const SNAPSHOT_VERSION = 1;
+const SNAPSHOT_VERSION = 2;
+
+/** The pre-map file: a single flat snapshot. Still read during an upgrade, never written. */
+const LEGACY_SNAPSHOT_VERSION = 1;
+
+/** Schema version of the code graph's snapshot; a pre-map file carried no version at all. */
+const CODEGRAPH_SNAPSHOT_VERSION = 2;
 
 /** Spinner frames, advanced once per second (the status bar's fastest refresh). */
 const SPINNER = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
@@ -160,17 +166,26 @@ function badge(color256) {
  * Same reason the gate has one: this is a Node script and the engine is compiled into the Bun
  * binary, so the statusline can never call it. A hook that already ran the engine leaves the two
  * numbers worth showing behind in a small file, and this only reads them.
+ *
+ * Keyed per repository for the same reason the gate snapshot is, and more urgently: the writer
+ * is a session hook, so with several projects open every prompt in one of them used to blank
+ * this segment in the others. The deepest matching root wins, so a clone nested inside another
+ * repository reads its own counters.
  */
 export function readCodeGraphStatus(cwd) {
     if (typeof cwd !== "string" || !cwd) return null;
     try {
         const root = process.env.ENIGMA_CODEGRAPH_DIR || join(os.homedir(), ".enigma", "codegraph");
-        const snap = parseJson(readFileSync(join(root, "statusline.json"), "utf8"));
-        if (!snap || typeof snap.root !== "string") return null;
-        // Only speak for the repo this session is actually in - a snapshot from another project
-        // would put someone else's file count on this status line.
-        if (!isInside(cwd, snap.root)) return null;
-        return { symbols: Number(snap.symbols) || 0, stale: Number(snap.stale) || 0 };
+        const file = parseJson(readFileSync(join(root, "statusline.json"), "utf8"));
+        if (!file) return null;
+        let entries;
+        if (file.version === CODEGRAPH_SNAPSHOT_VERSION && file.repos && typeof file.repos === "object") entries = Object.values(file.repos);
+        else if (file.version === undefined && typeof file.root === "string") entries = [file];
+        else return null;
+        // Only speak for the repo this session is actually in - another project's counters
+        // on this status line would be worse than none.
+        const best = deepestEntryFor(entries, cwd, "root");
+        return best === null ? null : { symbols: Number(best.symbols) || 0, stale: Number(best.stale) || 0 };
     } catch { return null; }
 }
 
@@ -194,22 +209,52 @@ function pidAlive(pid) {
 
 /**
  * Loads the gate snapshot for `cwd`, or null when there is nothing to show.
- * Rejects a snapshot that is for another repository, from an unknown schema
- * version, already settled, or left behind by a daemon that is no longer running.
+ *
+ * The file carries one entry per repository, so a run in another project can no longer
+ * take this repository's slot and blank its bar. Where several entries contain `cwd` -
+ * a repository checked out inside another one, a worktree, a vendored clone - the
+ * deepest root wins, matching how the run ledger resolves the same ambiguity.
+ *
+ * Rejects an entry that is for another repository, already settled, carries no steps,
+ * or was left behind by a daemon that is no longer running. A version-1 file (one flat
+ * snapshot, no map) is still read: during an upgrade the renderer is new while the
+ * daemon is still the old long-running process, and a dark bar there would look like
+ * this very bug.
  */
 export function readSnapshot(cwd, path = snapshotPath()) {
-    let snap;
+    let file;
     try {
-        snap = parseJson(readFileSync(path, "utf8"));
+        file = parseJson(readFileSync(path, "utf8"));
     } catch {
         return null;
     }
-    if (!snap || snap.version !== SNAPSHOT_VERSION) return null;
-    if (!ACTIVE_RUN_STATUSES.has(snap.status)) return null;
-    if (!Array.isArray(snap.steps) || snap.steps.length === 0) return null;
-    if (typeof snap.repoPath !== "string" || !isInside(cwd, snap.repoPath)) return null;
-    if (!pidAlive(snap.pid)) return null;
-    return snap;
+    if (!file) return null;
+    let entries;
+    if (file.version === SNAPSHOT_VERSION && file.repos && typeof file.repos === "object") entries = Object.values(file.repos);
+    else if (file.version === LEGACY_SNAPSHOT_VERSION) entries = [file];
+    else return null;
+    return deepestEntryFor(entries, cwd, "repoPath", (snap) =>
+        ACTIVE_RUN_STATUSES.has(snap.status) && Array.isArray(snap.steps) && snap.steps.length > 0 && pidAlive(snap.pid));
+}
+
+/**
+ * The entry of a per-repository snapshot file that owns `cwd`, or null when none does.
+ *
+ * Both files enigma keeps for this bar - the gate snapshot and the code graph's counters - are
+ * maps from a repository root to one entry, and both resolve a cwd the same way: skip an entry
+ * whose root does not contain it, then let the DEEPEST root win, so a repository checked out
+ * inside another one (a worktree, a vendored clone) reads its own entry rather than its
+ * parent's. `accept` carries whatever else that file rejects on.
+ */
+function deepestEntryFor(entries, cwd, key, accept) {
+    let best = null;
+    for (const entry of entries) {
+        if (!entry || typeof entry[key] !== "string") continue;
+        if (!isInside(cwd, entry[key])) continue;
+        if (accept && !accept(entry)) continue;
+        if (best === null || entry[key].length > best[key].length) best = entry;
+    }
+    return best;
 }
 
 /** Reports whether `cwd` is the repo root or a directory beneath it. */

package/dist/guardrails.js

@@ -755,6 +755,36 @@ var BUILTIN_RULES = [
     severity: "block",
     skill: "frontend-policy"
   },
+  {
+    id: "fe-unbounded-remote-list",
+    label: "A list from the server is rendered whole",
+    files: ["*.tsx", "*.jsx", "*.vue", "*.svelte", "*.astro"],
+    excludeFiles: ["*.test.*", "*.spec.*", "**/tests/**", "**/__tests__/**", "**/dist/**", "dist/**", "**/build/**", "build/**", "**/.next/**", ".next/**", "**/node_modules/**"],
+    scope: "file",
+    // The ask: "el modelo no lo integra si no se lo pides". Infinite scroll and pagination
+    // live in frontend-policy, a skill that is read when it happens to be, so a screen that
+    // will hold thousands of rows ships rendering every one. This is that rule at the tier
+    // where it cannot be skipped.
+    //
+    // MEASURED over 1345 component files of references/repos + packages + apps: 0 findings,
+    // 0 false positives, and it fires on both synthetic positives. THE RECALL IS THE HONEST
+    // CAVEAT and it is why the skill still owns the convention: only ONE file in that corpus
+    // binds a fetched collection in a shape a file-local check can see. Mature apps read
+    // their lists through a custom hook or take them as a prop, and the fetch is then several
+    // hops away - unknowable from the one file the engine is given. What this DOES cover is
+    // the shape an agent writes when it is asked for a screen: fetch and render in the same
+    // component, which is exactly the case the report was about.
+    //
+    // The first cut asked only "does the file fetch" and "does the file map", and flagged 76
+    // files - nearly all of them mapping a module constant (STEPS.map) in a component that
+    // fetched something unrelated. Tying the rendered list to the binding that produced it is
+    // the whole precision story.
+    stage: "diff",
+    fileCheck: "fe-unbounded-remote-list",
+    message: "This list comes from the server and every row of it is rendered, so the screen is only as fast as the smallest dataset anyone tested it with. Bound it: ask the server for a page (cursor or offset) and load the next one as the user reaches the end - virtualized infinite scroll is the default, explicit pagination the deliberate exception when the design or the user calls for it. Whichever you pick, the list needs its loading, empty and end-of-list states. Mark the line `enigma:allow-unbounded-list` when the collection is bounded by construction and say what bounds it (frontend-policy, database-expert).",
+    severity: "block",
+    skill: "frontend-policy"
+  },
   {
     id: "fe-page-await-no-boundary",
     label: "Server route streams its shell before its data",
@@ -1662,6 +1692,7 @@ var FILE_CHECKS = {
   "fe-textarea-size-bounds": (content) => textareaSizeBounds(content),
   "fe-view-blanked-while-loading": (content) => viewBlankedWhileLoading(content),
   "fe-truncated-value-unreachable": (content) => truncatedValueUnreachable(content),
+  "fe-unbounded-remote-list": (content) => unboundedRemoteList(content),
   "fe-page-await-no-boundary": (content, file) => pageAwaitWithoutBoundary(content, file),
   "ts-import-extension": (content, file) => extensionImports(content, file),
   "ts-alias-deep-relative": (content, file) => deepRelativeImports(content, file),
@@ -1881,6 +1912,48 @@ function viewBlankedWhileLoading(content) {
   }
   return out;
 }
+var REMOTE_COLLECTION_BINDINGS = [
+  /const\s+\{\s*data\s*:\s*(\w+)[^}]*\}\s*=\s*use\w*Query\s*\(/g,
+  /const\s+\{\s*data\s*:\s*(\w+)[^}]*\}\s*=\s*useSWR\s*\(/g,
+  /const\s+\{\s*(data)\s*[,}][^=]*=\s*use\w*Query\s*\(/g,
+  /const\s+\{\s*(data)\s*[,}][^=]*=\s*useSWR\s*\(/g,
+  /const\s+(\w+)\s*=\s*(?:await\s+)?[\w.]*\.findMany\s*\(/g,
+  /const\s+\{\s*data\s*:\s*(\w+)[^}]*\}\s*=\s*await\s+[\w.]*\.from\s*\(/g,
+  /const\s+(\w+)\s*=\s*await\s+[\w.]*\.(?:list|getAll|findAll|scan)\s*\(/g,
+  /const\s+(\w+)\s*=\s*await\s+getDocs\s*\(/g,
+  /const\s+(\w+)\s*=\s*useLoaderData\s*(?:<[^>]*>)?\s*\(/g,
+  /const\s+(\w+)\s*=\s*await\s+\(?\s*await\s+fetch\s*\([^;]*\)\s*\)?\.json\s*\(/g
+];
+var LIST_BOUNDED = /useInfiniteQuery|useSWRInfinite|fetchNextPage|hasNextPage|loadMore|load_more|IntersectionObserver|useVirtualizer|react-window|react-virtual\b|virtua\b|VirtualList|Virtuoso|FlatList|RecyclerListView|paginat|pageSize|page_size|perPage|per_page|\bcursor\b|\boffset\b|\.slice\s*\(|\btake\s*:|\blimit\s*:|\bLIMIT\b|\bfirst\s*:|\brange\s*\(/i;
+var ALLOW_UNBOUNDED_LIST = /enigma:allow-unbounded-list/;
+function remoteCollectionNames(content) {
+  const names = /* @__PURE__ */ new Set();
+  for (const re of REMOTE_COLLECTION_BINDINGS) {
+    re.lastIndex = 0;
+    let m;
+    while ((m = re.exec(content)) !== null) if (m[1]) names.add(m[1]);
+  }
+  return [...names].filter((n) => !/^[A-Z0-9_]+$/.test(n));
+}
+function unboundedRemoteList(content) {
+  const names = remoteCollectionNames(content);
+  if (names.length === 0 || LIST_BOUNDED.test(content)) return [];
+  const alt = names.join("|");
+  const renders = new RegExp(
+    `\\{\\s*(?:${alt})\\b[\\w.?\\[\\]]*\\s*\\.\\s*(?:map|flatMap)\\s*\\(|v-for\\s*=\\s*["'][^"']*\\bin\\s+(?:${alt})\\b|\\{#each\\s+(?:${alt})\\b`
+  );
+  const lines = content.split("\n");
+  const out = [];
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    if (COMMENT_LINE.test(line) || /enigma:/.test(line)) continue;
+    if (!renders.test(line)) continue;
+    if (markedNearby(lines, i, ALLOW_UNBOUNDED_LIST)) continue;
+    out.push({ line: i + 1, detail: `'${names.join("', '")}' comes from the server and every row of it is rendered` });
+    break;
+  }
+  return out;
+}
 var CLIP_ONE_LINE = /\btruncate\b|\btext-ellipsis\b|text-overflow\s*:\s*ellipsis/;
 var DYNAMIC_CHILD = /(?<![=!<>-])>\s*\{(?![#/:@])/;
 var VALUE_REACHABLE = /\btitle\s*=|aria-label\s*=|<\s*Tooltip|TooltipTrigger|data-tooltip|hoverCard|HoverCard/i;
@@ -2466,6 +2539,7 @@ export {
   readLedger,
   readReplyLedger,
   recordFindings,
+  remoteCollectionNames,
   runGuardrailsHook,
   runGuardrailsScan,
   runGuardrailsScanCli,
@@ -2473,6 +2547,7 @@ export {
   summarizeLedger,
   textareaSizeBounds,
   truncatedValueUnreachable,
+  unboundedRemoteList,
   viewBlankedWhileLoading,
   wideNamedImports
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "enigma-cli",
-  "version": "1.36.5",
+  "version": "1.36.8",
   "description": "Everything you need to work with a coding agent: install shared policy skills for Claude Code, OpenAI Codex and opencode, and set up portable git security hooks.",
   "type": "module",
   "bin": {