slopbrick 0.17.0 → 0.17.2

package/README.md

@@ -46,7 +46,7 @@ on every scan — your repository, encoded for the next agent.
   lib, modal system, API client) once. The agent and the linter
   enforce it together.
 
-**Status:** v0.16.0 (current). See the [CHANGELOG](./CHANGELOG.md) for
+**Status:** v0.17.0 (current). See the [CHANGELOG](./CHANGELOG.md) for
 the full release notes.
 
 ---
@@ -76,9 +76,9 @@ For every other config question, see [`EXAMPLES.md`](./EXAMPLES.md).
 
 ---
 
-## The headlines (4-score model, v0.16.0+)
+## The headlines (4-score model, v0.17.0+)
 
-> **v0.15.0 introduced the 4-score model; v0.16.0 R3 completed it.**
+> **v0.15.0 introduced the 4-score model; v0.16.0 + v0.17.0 completed it.**
 > The single `Slop Index` is replaced by **4 independent scores**
 > (all 0-100, **higher = better**). The legacy `slopIndex` field
 > is kept as optional on `ProjectReport` for backward compat with
@@ -153,7 +153,7 @@ Next step:
 | Understand the Slop Index vs Coherence | [`docs/scoring-explained.md`](./docs/scoring-explained.md) |
 | Connect Claude Code / Cursor / Copilot | [`docs/MCP.md`](./docs/MCP.md) |
 | See the 4 `.slopbrick/` artifacts (structure, inventory, ...) | [`docs/repository-structure.md`](./docs/repository-structure.md) |
-| See the 80 rules (per-rule descriptions + citations) | [`docs/rule-catalog.md`](./docs/rule-catalog.md) |
+| See the 95 rules (per-rule descriptions + citations) | [`docs/rule-catalog.md`](./docs/rule-catalog.md) |
 | See how the engine works (parser → facts → rules) | [`docs/architecture.md`](./docs/architecture.md) |
 | See which frameworks are supported | [`docs/framework-parity-matrix.md`](./docs/framework-parity-matrix.md) |
 | See what's changed in each release | [`CHANGELOG.md`](./CHANGELOG.md) |

package/dist/index.cjs

@@ -44844,6 +44844,14 @@ var init_config = __esm({
 });
 
 // src/cli/render.ts
+function redactSecrets(text) {
+  if (!text) return text;
+  let out = text;
+  for (const pat of SECRET_PATTERNS) {
+    out = out.replace(pat, REDACTED);
+  }
+  return out;
+}
 function colorForSlop(slopIndex) {
   if (slopIndex >= SLOP_BADGE_RED_THRESHOLD) return "red";
   if (slopIndex >= SLOP_BADGE_ORANGE_THRESHOLD) return "orange";
@@ -44882,22 +44890,64 @@ function renderTrend(runs, count) {
   const sparkline2 = formatSparkline(values);
   return `Slop trend (last ${latest.length} runs): ${values.map((v) => Math.round(v)).join(" ")} ${sparkline2}`;
 }
-function renderProgress(completed, total) {
-  const spinner = SPINNER_FRAMES[completed % SPINNER_FRAMES.length];
-  process.stdout.write(`\r${spinner} Scanning... ${completed}/${total} files`);
+function renderProgress(completed, total, startMs = Date.now()) {
+  const safeTotal = total > 0 ? total : 1;
+  const ratio = Math.min(1, completed / safeTotal);
+  const pct = (ratio * 100).toFixed(1);
+  const barWidth = 20;
+  const filled = Math.round(barWidth * ratio);
+  const bar = "\u2588".repeat(filled) + "\u2591".repeat(barWidth - filled);
+  const elapsedSec = ((Date.now() - startMs) / 1e3).toFixed(1);
+  let eta = "";
+  if (completed > 0 && ratio < 1) {
+    const totalMs = Date.now() - startMs;
+    const etaMs = totalMs / completed * (total - completed);
+    eta = ` | ETA ${(etaMs / 1e3).toFixed(0)}s`;
+  }
+  const line = `\r[${bar}] ${completed}/${total} files (${pct}%) | ${elapsedSec}s${eta}   `;
+  if (process.stdout.isTTY) {
+    process.stdout.write(line);
+  } else {
+    const lastPct = renderProgress._lastPct ?? -1;
+    if (Math.abs(parseFloat(pct) - lastPct) >= 2) {
+      process.stdout.write(`[${bar}] ${completed}/${total} files (${pct}%) | ${elapsedSec}s${eta}
+`);
+      renderProgress._lastPct = parseFloat(pct);
+    }
+  }
 }
 function clearProgress() {
-  process.stdout.write(`\r${" ".repeat(80)}\r`);
+  if (process.stdout.isTTY) {
+    process.stdout.write(`\r${" ".repeat(80)}\r`);
+  }
 }
-var SLOP_BADGE_RED_THRESHOLD, SLOP_BADGE_ORANGE_THRESHOLD, SLOP_BADGE_YELLOW_THRESHOLD, WATCH_DEBOUNCE_MS, SPINNER_FRAMES;
+var SECRET_PATTERNS, REDACTED, SLOP_BADGE_RED_THRESHOLD, SLOP_BADGE_ORANGE_THRESHOLD, SLOP_BADGE_YELLOW_THRESHOLD, WATCH_DEBOUNCE_MS;
 var init_render = __esm({
   "src/cli/render.ts"() {
     "use strict";
+    SECRET_PATTERNS = [
+      // AWS
+      /\b(AKIA[0-9A-Z]{16})\b/g,
+      // GitHub PAT
+      /\b(ghp_[A-Za-z0-9]{36,})\b/g,
+      /\b(github_pat_[A-Za-z0-9_]{82})\b/g,
+      // Slack
+      /\b(xox[abpr]-[A-Za-z0-9-]{10,})\b/g,
+      // Stripe
+      /\b(sk_live_[A-Za-z0-9]{24,})\b/g,
+      /\b(pk_live_[A-Za-z0-9]{24,})\b/g,
+      // Google API key
+      /\b(AIza[0-9A-Za-z_-]{35})\b/g,
+      // Generic JWT
+      /\b(eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,})\b/g,
+      // PEM private key
+      /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----/g
+    ];
+    REDACTED = "[REDACTED]";
     SLOP_BADGE_RED_THRESHOLD = 76;
     SLOP_BADGE_ORANGE_THRESHOLD = 51;
     SLOP_BADGE_YELLOW_THRESHOLD = 26;
     WATCH_DEBOUNCE_MS = 100;
-    SPINNER_FRAMES = ["|", "/", "-", "\\"];
   }
 });
 
@@ -45251,10 +45301,10 @@ function formatIssue(issue) {
   const badge = severityBadge(issue.severity);
   const location = issue.filePath ? `${issue.filePath}:${issue.line}:${issue.column}` : `${issue.line}:${issue.column}`;
   const header = `[${badge}] ${issue.ruleId} \xB7 ${location}`;
-  const body = `  ${import_chalk.default.dim(issue.message)}`;
+  const body = `  ${import_chalk.default.dim(redactSecrets(issue.message))}`;
   const lines = [header, body];
   if (issue.advice) {
-    lines.push(`  ${import_chalk.default.cyan("\u2192")} ${issue.advice}`);
+    lines.push(`  ${import_chalk.default.cyan("\u2192")} ${redactSecrets(issue.advice)}`);
   }
   return lines.join("\n");
 }
@@ -45316,26 +45366,26 @@ function formatBriefReport(report) {
   lines.push(formatVerdict(report));
   lines.push("");
   const scoreLines = [
-    { name: "aiQuality", value: report.aiQuality },
-    { name: "engineeringHygiene", value: report.engineeringHygiene },
-    { name: "security", value: report.security },
-    { name: "repositoryHealth", value: report.repositoryHealth }
+    { label: "AI Quality", field: "aiQuality", value: report.aiQuality },
+    { label: "Engineering Hygiene", field: "engineeringHygiene", value: report.engineeringHygiene },
+    { label: "Security", field: "security", value: report.security },
+    { label: "Repository Health", field: "repositoryHealth", value: report.repositoryHealth }
   ];
   const deltaSuffix = formatDeltaSuffix(report);
-  scoreLines.forEach(({ name, value }, idx) => {
+  scoreLines.forEach(({ label, field, value }, idx) => {
     const band = scoreBand(value);
-    const paddedName = name.padEnd(20, " ");
+    const paddedLabel = label.padEnd(20, " ");
     const valueStr = value.toFixed(0).padStart(3, " ");
     const delta = idx === 0 ? deltaSuffix : "";
     lines.push(
-      `  ${paddedName} ${band.color(valueStr)}   ${import_chalk.default.dim(band.label)}${delta}`
+      `  ${paddedLabel} ${band.color(valueStr)}   ${import_chalk.default.dim(band.label)}  ${import_chalk.default.dim.italic(`(${field})`)}${delta}`
     );
   });
   const passed = report.aiQuality >= 70;
   lines.push("");
   lines.push(
     import_chalk.default.dim(
-      `  CI gate: aiQuality >= 70 -> ${passed ? import_chalk.default.green("pass") : import_chalk.default.red("fail")}`
+      `  CI gate: AI Quality >= 70 -> ${passed ? import_chalk.default.green("pass") : import_chalk.default.red("fail")}`
     )
   );
   const suppressed = report.defaultOffSuppressedCount ?? 0;
@@ -45360,6 +45410,7 @@ var init_pretty = __esm({
   "src/report/pretty.ts"() {
     "use strict";
     import_chalk = __toESM(require("chalk"), 1);
+    init_render();
     CATEGORY_GLOSSARY = {
       visual: { short: "visual style", long: "colors, spacing, font sizes, layout" },
       typo: { short: "typography", long: "font weights, line heights, font choices" },
@@ -52404,7 +52455,7 @@ async function runScan(options, explicitPaths) {
   }
   if (defaultOffApplied > 0 && !options.quiet && !machineReadableStdout) {
     console.error(
-      `[v0.14.5i] auto-suppressed ${defaultOffApplied} INVERTED/NOISY issue(s) from ${defaultOff.size} default-off rule(s). See the main output for the trust-signal summary. Re-enable per-rule via \`rules: { 'rule/id': 'medium' }\` in slopbrick.config.mjs.`
+      `[v${VERSION}] auto-suppressed ${defaultOffApplied} INVERTED/NOISY issue(s) from ${defaultOff.size} default-off rule(s). See the main output for the trust-signal summary. Re-enable per-rule via \`rules: { 'rule/id': 'medium' }\` in slopbrick.config.mjs.`
     );
   }
   allIssues.sort((a, b) => SEVERITY_WEIGHTS[b.severity] - SEVERITY_WEIGHTS[a.severity]);
@@ -52463,6 +52514,7 @@ var init_scan = __esm({
     init_signal_strength2();
     init_tokens();
     init_finalizeReport();
+    init_types();
     init_baseline_cache();
     init_printFixSummary();
     init_renderOutput();
@@ -57010,7 +57062,7 @@ process.on("uncaughtException", (err) => {
 });
 async function runCli({ start }) {
   try {
-    const program = new import_commander2.Command().name("slopbrick").description("Repository Coherence Scanner \u2014 surface AI-induced pattern drift, secret leaks, and design-token violations").version(VERSION).option("--framework <name>", "framework multiplier to apply").option("--include <glob>", "include pattern (repeatable)", collectGlob, []).option("--exclude <glob>", "exclude pattern (repeatable)", collectGlob, []).option("--ai-only", "only report AI-specific issues").option("--human-only", "only report human-facing issues").option("--ignore-wcag22", "ignore WCAG 2.2 related issues").option("--format <pretty|json|sarif|html>", "output format", "pretty").option("--threads <n>", "number of worker threads", parseThreads).option("--since <ref>", "only scan files changed since git ref").option("--diff <ref>", "alias for --since <ref>; also adds PR Slop Score to the report").option("--workspace <path>", "workspace/project path", process.cwd()).option("--tighten", "tighten baseline allowances").option("--fix", "apply auto-fixes").option("--dry-run", "with --fix: print what would change without writing").option("--show-fixes-diff", "print unified diff of proposed auto-fixes").option("--doctor", "run diagnostics").option("--watch", "watch files and re-run").option("--suggest", "print remediation advice").option("--why-failing", "print the top 5 rules dragging the score down").option("--brief", "terse output (verdict + headline + threshold + delta only)").option("--heatmap", "print migration ROI heatmap").option("--quiet", "suppress non-error output").option("--verbose", "enable debug logging (file paths, timings, rule-fire counts)").option("--strict", "exit 2 if any high-severity issue remains").option("--no-increase", "exit 2 if slop index increased since last run").option("--baseline", "save a baseline after this scan").option("--trend [n]", "print a sparkline of the last n runs", parseTrend).option("--json [path]", "write JSON report to path or stdout").option("--html [path]", "write HTML report to path or stdout").option("--staged", "scan only changed files (staged and unstaged)").option("--changed", "scan working-tree changes (staged + unstaged + untracked)").option("--incremental", "skip unchanged files using the persisted hash cache").option("--cache-path <path>", "path to the incremental-scan cache (default: .slopbrick-cache.json)").option("--tokens <path>", "merge tokens.json layout values into the arbitrary-value allowlist").option("--cache", "cache parsed AST results locally");
+    const program = new import_commander2.Command().name("slopbrick").description("Repository Coherence Scanner \u2014 surface AI-induced pattern drift, secret leaks, and design-token violations").version(VERSION).option("--framework <name>", "framework multiplier to apply").option("--include <glob>", "include pattern (repeatable)", collectGlob, []).option("--exclude <glob>", "exclude pattern (repeatable)", collectGlob, []).option("--ai-only", "only report AI-specific issues").option("--human-only", "only report human-facing issues").option("--ignore-wcag22", "ignore WCAG 2.2 related issues").option("--format <pretty|json|sarif|html>", "output format", "pretty").option("--threads <n>", "number of worker threads", parseThreads).option("--since <ref>", "only scan files changed since git ref").option("--diff <ref>", "alias for --since <ref>; also adds PR Slop Score to the report").option("--workspace <path>", "workspace/project path", process.cwd()).option("--tighten", "tighten baseline allowances").option("--fix", "apply auto-fixes").option("--dry-run", "with --fix: print what would change without writing").option("--show-fixes-diff", "print unified diff of proposed auto-fixes").option("--doctor", "run diagnostics").option("--watch", "watch files and re-run").option("--suggest", "print remediation advice").option("--why-failing", "print the top 5 rules dragging the score down").option("--brief", "terse output (verdict + headline + threshold + delta only)").option("--heatmap", "print migration ROI heatmap").option("--quiet", "suppress non-error output").option("--verbose", "enable debug logging (file paths, timings, rule-fire counts)").option("--strict", "exit 2 if any high-severity issue remains").option("--no-increase", "exit 2 if slop index increased since last run").option("--baseline", "save a baseline after this scan").option("--trend [n]", "print a sparkline of the last n runs", parseTrend).option("--json [path]", "write JSON report to path or stdout").option("--html [path]", "write HTML report to path or stdout").option("--staged", "scan only changed files (staged and unstaged)").option("--changed", "scan working-tree changes (staged + unstaged + untracked)").option("--incremental", "skip unchanged files using the persisted hash cache").option("--cache-path <path>", "path to the incremental-scan cache (default: .slopbrick-cache.json)").option("--tokens <path>", "merge tokens.json layout values into the arbitrary-value allowlist").option("--cache", "cache parsed AST results locally").option("--no-color", "suppress ANSI color codes in output").option("--security-only", "run only the security/* rules").option("--full", "show the complete report (all issues, all categories)");
     program.command("init").description("create a slopbrick config file").option("--yes", "overwrite existing config").option("--all", "write snippets for every supported agent").option("--matrix", "print the agent x file matrix and exit").option("--cursor", "also generate .cursor/rules/slopbrick.mdc for Cursor AI").option("--cursorrules", "legacy Cursor .cursorrules format").option("--agents-md", "also generate AGENTS.md for Codex / opencode / Pi / Cline").option("--claude-md", "also generate CLAUDE.md for Claude Code (takes precedence over AGENTS.md)").option("--aider", "also generate CONVENTIONS.md for Aider").option("--windsurf", "also generate .windsurfrules for Windsurf").option("--cline", "also generate .clinerules/AGENTS.md for Cline").option("--gemini", "also generate .gemini/GEMINI.md for Gemini CLI").option("--copilot", "also generate .github/copilot-instructions.md for GitHub Copilot").action(async (cmdOptions, command) => {
       const options = command.optsWithGlobals();
       if (cmdOptions.matrix) {

package/dist/index.js

@@ -44836,6 +44836,14 @@ var init_config = __esm({
 });
 
 // src/cli/render.ts
+function redactSecrets(text) {
+  if (!text) return text;
+  let out = text;
+  for (const pat of SECRET_PATTERNS) {
+    out = out.replace(pat, REDACTED);
+  }
+  return out;
+}
 function colorForSlop(slopIndex) {
   if (slopIndex >= SLOP_BADGE_RED_THRESHOLD) return "red";
   if (slopIndex >= SLOP_BADGE_ORANGE_THRESHOLD) return "orange";
@@ -44874,22 +44882,64 @@ function renderTrend(runs, count) {
   const sparkline2 = formatSparkline(values);
   return `Slop trend (last ${latest.length} runs): ${values.map((v) => Math.round(v)).join(" ")} ${sparkline2}`;
 }
-function renderProgress(completed, total) {
-  const spinner = SPINNER_FRAMES[completed % SPINNER_FRAMES.length];
-  process.stdout.write(`\r${spinner} Scanning... ${completed}/${total} files`);
+function renderProgress(completed, total, startMs = Date.now()) {
+  const safeTotal = total > 0 ? total : 1;
+  const ratio = Math.min(1, completed / safeTotal);
+  const pct = (ratio * 100).toFixed(1);
+  const barWidth = 20;
+  const filled = Math.round(barWidth * ratio);
+  const bar = "\u2588".repeat(filled) + "\u2591".repeat(barWidth - filled);
+  const elapsedSec = ((Date.now() - startMs) / 1e3).toFixed(1);
+  let eta = "";
+  if (completed > 0 && ratio < 1) {
+    const totalMs = Date.now() - startMs;
+    const etaMs = totalMs / completed * (total - completed);
+    eta = ` | ETA ${(etaMs / 1e3).toFixed(0)}s`;
+  }
+  const line = `\r[${bar}] ${completed}/${total} files (${pct}%) | ${elapsedSec}s${eta}   `;
+  if (process.stdout.isTTY) {
+    process.stdout.write(line);
+  } else {
+    const lastPct = renderProgress._lastPct ?? -1;
+    if (Math.abs(parseFloat(pct) - lastPct) >= 2) {
+      process.stdout.write(`[${bar}] ${completed}/${total} files (${pct}%) | ${elapsedSec}s${eta}
+`);
+      renderProgress._lastPct = parseFloat(pct);
+    }
+  }
 }
 function clearProgress() {
-  process.stdout.write(`\r${" ".repeat(80)}\r`);
+  if (process.stdout.isTTY) {
+    process.stdout.write(`\r${" ".repeat(80)}\r`);
+  }
 }
-var SLOP_BADGE_RED_THRESHOLD, SLOP_BADGE_ORANGE_THRESHOLD, SLOP_BADGE_YELLOW_THRESHOLD, WATCH_DEBOUNCE_MS, SPINNER_FRAMES;
+var SECRET_PATTERNS, REDACTED, SLOP_BADGE_RED_THRESHOLD, SLOP_BADGE_ORANGE_THRESHOLD, SLOP_BADGE_YELLOW_THRESHOLD, WATCH_DEBOUNCE_MS;
 var init_render = __esm({
   "src/cli/render.ts"() {
     "use strict";
+    SECRET_PATTERNS = [
+      // AWS
+      /\b(AKIA[0-9A-Z]{16})\b/g,
+      // GitHub PAT
+      /\b(ghp_[A-Za-z0-9]{36,})\b/g,
+      /\b(github_pat_[A-Za-z0-9_]{82})\b/g,
+      // Slack
+      /\b(xox[abpr]-[A-Za-z0-9-]{10,})\b/g,
+      // Stripe
+      /\b(sk_live_[A-Za-z0-9]{24,})\b/g,
+      /\b(pk_live_[A-Za-z0-9]{24,})\b/g,
+      // Google API key
+      /\b(AIza[0-9A-Za-z_-]{35})\b/g,
+      // Generic JWT
+      /\b(eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,})\b/g,
+      // PEM private key
+      /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----/g
+    ];
+    REDACTED = "[REDACTED]";
     SLOP_BADGE_RED_THRESHOLD = 76;
     SLOP_BADGE_ORANGE_THRESHOLD = 51;
     SLOP_BADGE_YELLOW_THRESHOLD = 26;
     WATCH_DEBOUNCE_MS = 100;
-    SPINNER_FRAMES = ["|", "/", "-", "\\"];
   }
 });
 
@@ -45244,10 +45294,10 @@ function formatIssue(issue) {
   const badge = severityBadge(issue.severity);
   const location = issue.filePath ? `${issue.filePath}:${issue.line}:${issue.column}` : `${issue.line}:${issue.column}`;
   const header = `[${badge}] ${issue.ruleId} \xB7 ${location}`;
-  const body = `  ${chalk.dim(issue.message)}`;
+  const body = `  ${chalk.dim(redactSecrets(issue.message))}`;
   const lines = [header, body];
   if (issue.advice) {
-    lines.push(`  ${chalk.cyan("\u2192")} ${issue.advice}`);
+    lines.push(`  ${chalk.cyan("\u2192")} ${redactSecrets(issue.advice)}`);
   }
   return lines.join("\n");
 }
@@ -45309,26 +45359,26 @@ function formatBriefReport(report) {
   lines.push(formatVerdict(report));
   lines.push("");
   const scoreLines = [
-    { name: "aiQuality", value: report.aiQuality },
-    { name: "engineeringHygiene", value: report.engineeringHygiene },
-    { name: "security", value: report.security },
-    { name: "repositoryHealth", value: report.repositoryHealth }
+    { label: "AI Quality", field: "aiQuality", value: report.aiQuality },
+    { label: "Engineering Hygiene", field: "engineeringHygiene", value: report.engineeringHygiene },
+    { label: "Security", field: "security", value: report.security },
+    { label: "Repository Health", field: "repositoryHealth", value: report.repositoryHealth }
   ];
   const deltaSuffix = formatDeltaSuffix(report);
-  scoreLines.forEach(({ name, value }, idx) => {
+  scoreLines.forEach(({ label, field, value }, idx) => {
     const band = scoreBand(value);
-    const paddedName = name.padEnd(20, " ");
+    const paddedLabel = label.padEnd(20, " ");
     const valueStr = value.toFixed(0).padStart(3, " ");
     const delta = idx === 0 ? deltaSuffix : "";
     lines.push(
-      `  ${paddedName} ${band.color(valueStr)}   ${chalk.dim(band.label)}${delta}`
+      `  ${paddedLabel} ${band.color(valueStr)}   ${chalk.dim(band.label)}  ${chalk.dim.italic(`(${field})`)}${delta}`
     );
   });
   const passed = report.aiQuality >= 70;
   lines.push("");
   lines.push(
     chalk.dim(
-      `  CI gate: aiQuality >= 70 -> ${passed ? chalk.green("pass") : chalk.red("fail")}`
+      `  CI gate: AI Quality >= 70 -> ${passed ? chalk.green("pass") : chalk.red("fail")}`
     )
   );
   const suppressed = report.defaultOffSuppressedCount ?? 0;
@@ -45352,6 +45402,7 @@ var CATEGORY_GLOSSARY;
 var init_pretty = __esm({
   "src/report/pretty.ts"() {
     "use strict";
+    init_render();
     CATEGORY_GLOSSARY = {
       visual: { short: "visual style", long: "colors, spacing, font sizes, layout" },
       typo: { short: "typography", long: "font weights, line heights, font choices" },
@@ -52401,7 +52452,7 @@ async function runScan(options, explicitPaths) {
   }
   if (defaultOffApplied > 0 && !options.quiet && !machineReadableStdout) {
     console.error(
-      `[v0.14.5i] auto-suppressed ${defaultOffApplied} INVERTED/NOISY issue(s) from ${defaultOff.size} default-off rule(s). See the main output for the trust-signal summary. Re-enable per-rule via \`rules: { 'rule/id': 'medium' }\` in slopbrick.config.mjs.`
+      `[v${VERSION}] auto-suppressed ${defaultOffApplied} INVERTED/NOISY issue(s) from ${defaultOff.size} default-off rule(s). See the main output for the trust-signal summary. Re-enable per-rule via \`rules: { 'rule/id': 'medium' }\` in slopbrick.config.mjs.`
     );
   }
   allIssues.sort((a, b) => SEVERITY_WEIGHTS[b.severity] - SEVERITY_WEIGHTS[a.severity]);
@@ -52457,6 +52508,7 @@ var init_scan = __esm({
     init_signal_strength2();
     init_tokens();
     init_finalizeReport();
+    init_types();
     init_baseline_cache();
     init_printFixSummary();
     init_renderOutput();
@@ -56929,7 +56981,7 @@ process.on("uncaughtException", (err) => {
 });
 async function runCli({ start }) {
   try {
-    const program = new Command().name("slopbrick").description("Repository Coherence Scanner \u2014 surface AI-induced pattern drift, secret leaks, and design-token violations").version(VERSION).option("--framework <name>", "framework multiplier to apply").option("--include <glob>", "include pattern (repeatable)", collectGlob, []).option("--exclude <glob>", "exclude pattern (repeatable)", collectGlob, []).option("--ai-only", "only report AI-specific issues").option("--human-only", "only report human-facing issues").option("--ignore-wcag22", "ignore WCAG 2.2 related issues").option("--format <pretty|json|sarif|html>", "output format", "pretty").option("--threads <n>", "number of worker threads", parseThreads).option("--since <ref>", "only scan files changed since git ref").option("--diff <ref>", "alias for --since <ref>; also adds PR Slop Score to the report").option("--workspace <path>", "workspace/project path", process.cwd()).option("--tighten", "tighten baseline allowances").option("--fix", "apply auto-fixes").option("--dry-run", "with --fix: print what would change without writing").option("--show-fixes-diff", "print unified diff of proposed auto-fixes").option("--doctor", "run diagnostics").option("--watch", "watch files and re-run").option("--suggest", "print remediation advice").option("--why-failing", "print the top 5 rules dragging the score down").option("--brief", "terse output (verdict + headline + threshold + delta only)").option("--heatmap", "print migration ROI heatmap").option("--quiet", "suppress non-error output").option("--verbose", "enable debug logging (file paths, timings, rule-fire counts)").option("--strict", "exit 2 if any high-severity issue remains").option("--no-increase", "exit 2 if slop index increased since last run").option("--baseline", "save a baseline after this scan").option("--trend [n]", "print a sparkline of the last n runs", parseTrend).option("--json [path]", "write JSON report to path or stdout").option("--html [path]", "write HTML report to path or stdout").option("--staged", "scan only changed files (staged and unstaged)").option("--changed", "scan working-tree changes (staged + unstaged + untracked)").option("--incremental", "skip unchanged files using the persisted hash cache").option("--cache-path <path>", "path to the incremental-scan cache (default: .slopbrick-cache.json)").option("--tokens <path>", "merge tokens.json layout values into the arbitrary-value allowlist").option("--cache", "cache parsed AST results locally");
+    const program = new Command().name("slopbrick").description("Repository Coherence Scanner \u2014 surface AI-induced pattern drift, secret leaks, and design-token violations").version(VERSION).option("--framework <name>", "framework multiplier to apply").option("--include <glob>", "include pattern (repeatable)", collectGlob, []).option("--exclude <glob>", "exclude pattern (repeatable)", collectGlob, []).option("--ai-only", "only report AI-specific issues").option("--human-only", "only report human-facing issues").option("--ignore-wcag22", "ignore WCAG 2.2 related issues").option("--format <pretty|json|sarif|html>", "output format", "pretty").option("--threads <n>", "number of worker threads", parseThreads).option("--since <ref>", "only scan files changed since git ref").option("--diff <ref>", "alias for --since <ref>; also adds PR Slop Score to the report").option("--workspace <path>", "workspace/project path", process.cwd()).option("--tighten", "tighten baseline allowances").option("--fix", "apply auto-fixes").option("--dry-run", "with --fix: print what would change without writing").option("--show-fixes-diff", "print unified diff of proposed auto-fixes").option("--doctor", "run diagnostics").option("--watch", "watch files and re-run").option("--suggest", "print remediation advice").option("--why-failing", "print the top 5 rules dragging the score down").option("--brief", "terse output (verdict + headline + threshold + delta only)").option("--heatmap", "print migration ROI heatmap").option("--quiet", "suppress non-error output").option("--verbose", "enable debug logging (file paths, timings, rule-fire counts)").option("--strict", "exit 2 if any high-severity issue remains").option("--no-increase", "exit 2 if slop index increased since last run").option("--baseline", "save a baseline after this scan").option("--trend [n]", "print a sparkline of the last n runs", parseTrend).option("--json [path]", "write JSON report to path or stdout").option("--html [path]", "write HTML report to path or stdout").option("--staged", "scan only changed files (staged and unstaged)").option("--changed", "scan working-tree changes (staged + unstaged + untracked)").option("--incremental", "skip unchanged files using the persisted hash cache").option("--cache-path <path>", "path to the incremental-scan cache (default: .slopbrick-cache.json)").option("--tokens <path>", "merge tokens.json layout values into the arbitrary-value allowlist").option("--cache", "cache parsed AST results locally").option("--no-color", "suppress ANSI color codes in output").option("--security-only", "run only the security/* rules").option("--full", "show the complete report (all issues, all categories)");
     program.command("init").description("create a slopbrick config file").option("--yes", "overwrite existing config").option("--all", "write snippets for every supported agent").option("--matrix", "print the agent x file matrix and exit").option("--cursor", "also generate .cursor/rules/slopbrick.mdc for Cursor AI").option("--cursorrules", "legacy Cursor .cursorrules format").option("--agents-md", "also generate AGENTS.md for Codex / opencode / Pi / Cline").option("--claude-md", "also generate CLAUDE.md for Claude Code (takes precedence over AGENTS.md)").option("--aider", "also generate CONVENTIONS.md for Aider").option("--windsurf", "also generate .windsurfrules for Windsurf").option("--cline", "also generate .clinerules/AGENTS.md for Cline").option("--gemini", "also generate .gemini/GEMINI.md for Gemini CLI").option("--copilot", "also generate .github/copilot-instructions.md for GitHub Copilot").action(async (cmdOptions, command) => {
       const options = command.optsWithGlobals();
       if (cmdOptions.matrix) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "slopbrick",
-  "version": "0.17.0",
-  "description": "Discovered, modeled, and governed repository structure. SlopBrick scans source code, classifies it against 80+ rules across 13 categories, computes 4 scores (aiQuality, engineeringHygiene, security, repositoryHealth), and persists the structure for AI agents and CI.",
+  "version": "0.17.2",
+  "description": "Discovered, modeled, and governed repository structure. SlopBrick scans source code, classifies it against 95 rules in 15 categories, computes 4 scores (aiQuality, engineeringHygiene, security, repositoryHealth), and persists the structure for AI agents and CI.",
   "type": "module",
   "bin": {
     "slopbrick": "bin/slopbrick.js"
@@ -54,7 +54,7 @@
     "minimatch": "^9.0.5",
     "pgsql-parser": "^17.9.15"
   },
-  "//_usebrick_note": "@usebrick/core and @usebrick/engine are private workspace packages. They are listed in devDependencies to keep pnpm-lock.yaml in sync; tsup.config.ts → noExternal bundles them into dist/; the prepack-guard.mjs allowlist includes both. Neither ends up in the published tarball's runtime deps. See https://github.com/usebrick/platform/blob/main/docs/repository-structure.md",
+  "//_usebrick_note": "@usebrick/core and @usebrick/engine are private workspace packages. They are listed in devDependencies to keep pnpm-lock.yaml in sync; tsup.config.ts \u2192 noExternal bundles them into dist/; the prepack-guard.mjs allowlist includes both. Neither ends up in the published tarball's runtime deps. See https://github.com/usebrick/platform/blob/main/docs/repository-structure.md",
   "devDependencies": {
     "@types/node": "^20.14.0",
     "@usebrick/core": "workspace:*",
@@ -111,4 +111,4 @@
     "url": "https://github.com/usebrick/platform/issues"
   },
   "homepage": "https://github.com/usebrick/platform#readme"
-}
+}