rulereceipt 0.1.69 → 0.1.70

package/dist/checks/classify.js

@@ -243,6 +243,11 @@ function isClaimEvidenceRule(rule) {
     return CLAIM_SHAPE.test(text) && EVIDENCE_NOUN.test(text);
 }
 const BRANCH_WORD = /\bbranch\b/i;
+// A git ref-action verb. "Never push to `main`" / "don't commit to `master`"
+// are branch rules even without the literal word "branch" — found missed in the
+// 2026-09-29 full-tool validation. Paired with a backticked, branch-shaped
+// literal (and NOT a file token), so a bare English "main" is not swept in.
+const GIT_REF_ACTION = /\b(?:push(?:ing|es|ed)?|commit(?:ting|s|ted)?|merg(?:e|ing|es|ed)|rebas(?:e|ing|es|ed)|checkout)\b/i;
 /**
  * A literal that could actually be a git branch name.
  *
@@ -729,8 +734,10 @@ export function classifyRule(rule) {
     // Real rules here name exactly one branch ("the `demo` branch", "never
     // push to the `main` branch"), and a rule that mentions branches while
     // naming a command belongs to whichever checker handles that command.
-    const branchName = [...patterns].find(isBranchName);
-    if (BRANCH_WORD.test(text) && branchName !== undefined) {
+    // A branch name is a backticked, branch-shaped literal that is NOT a file
+    // token (`.env`, `dist/`) — those belong to fileLifecycle, not a ref check.
+    const branchName = [...patterns].find((p) => isBranchName(p) && !looksLikeFilePathToken(p));
+    if ((BRANCH_WORD.test(text) || GIT_REF_ACTION.test(text)) && branchName !== undefined) {
         return { kind: "gitBranchPolicy", rule, branchName, polarity, polarityInferred };
     }
     // A forbid scoped by a condition the literal checkers cannot evaluate.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rulereceipt",
-  "version": "0.1.69",
+  "version": "0.1.70",
   "description": "Checks whether your AI coding agent followed your rules, with evidence. Works with Claude Code (Codex in testing); reads CLAUDE.md, AGENTS.md, Cursor, Copilot and Windsurf rules.",
   "repository": {
     "type": "git",