unslop 0.1.3 → 0.1.5

package/README.md

@@ -42,6 +42,9 @@ unslop --format json .
 # SARIF output (for CI integration)
 unslop --format sarif .
 
+# List built-in rules and defaults
+unslop --list-rules
+
 # With config file
 unslop --config .unslop.yaml .
 ```
@@ -68,18 +71,20 @@ Use `--changed-only` to focus on uncommitted files and prioritize reuse against
 | Dead exports | Clone | 95% |
 | Complexity budget breaches | Practices | 90% |
 | Boundary violations (`packages -> apps`, cross-app deps, cycles) | Practices | 90-98% |
-| Generic naming entropy | Practices | 74% |
 | Ignored Go errors | Practices | 93% |
 | Go context leaks | Practices | 87% |
 | React broad barrel re-exports | Practices | 78-86% |
 
 ## Architecture
 
-Three engines run in parallel:
+Four artifact engines run in parallel and are evaluated through a rule catalog:
 
 1. **Clone Detection** (in-process) — tree-sitter parsing → pre-normalization (cached) → alpha-renaming → hash/suffix-tree/PQ-gram comparison
-2. **Semantic Analysis** (subprocess) — delegates to oxlint, clippy, ruff, etc. for language-specific pattern detection
-3. **Best Practices** (in-process) — deterministic clean-code and architecture checks (complexity, boundaries, naming, Go hygiene, React barrels)
+2. **Semantic Analysis** (subprocess) — external linter diagnostics
+3. **Best Practices** (in-process) — deterministic clean-code and architecture checks
+4. **Repo Policy** (in-process) — repository policy signals
+
+Each rule is now a first-class catalog entry with defaults and per-rule controls.
 
 Built on Semgrep's model: **tree-sitter CST → language-specific normalizer → generic normalized tree → language-agnostic analysis**.
 
@@ -106,52 +111,74 @@ SDK stability policy: `pkg/sdk/STABILITY.md`.
 
 ## Configuration
 
-Create `.unslop.yaml` in your project root:
+Create `.unslop.yaml` in your project root. v2 requires `version: 2`:
 
 ```yaml
-# Minimum token count for clone detection
-min_tokens: 50
-
-# Similarity threshold for near-miss detection (0.0-1.0)
-similarity_threshold: 0.8
-
-# Max near-miss comparisons
-max_suffix_pairs: 10000
-
-# Max structural (PQ-gram) comparisons
-max_pqgram_pairs: 50000
-
-# External linters
-linters:
-  oxlint:
+version: 2
+
+analysis:
+  ignore:
+    - "vendor/"
+    - "node_modules/"
+  extensions: [".ts", ".tsx", ".go"]
+  languages: ["typescript", "go"]
+  changed_only: false
+
+engines:
+  clone:
+    min_tokens: 50
+    similarity_threshold: 0.8
+    max_suffix_pairs: 10000
+    max_pqgram_pairs: 50000
+  linters:
+    oxlint:
+      enabled: true
+      command: oxlint
+      args: ["--format", "json"]
+      timeout: "60s"
+  practices:
     enabled: true
-    command: oxlint
-    args: ["--format", "json"]
+    profile: balanced
+    ignore_tests: true
+    max_findings_per_rule: 200
+
+rules:
+  defaults:
+    severity: warning
+    gateable: false
+  exact-clone:
+    severity: error
+    gateable: true
+  barrel-import:
+    enabled: false
+  complexity-budget:
+    paths:
+      include: ["apps/**"]
+      exclude: ["scripts/**"]
+
+gates:
+  max_score: 35
+  fail_on_rules: ["exact-clone", "boundary-violation-cycle"]
+  fail_on_tiers: ["A"]
 
-# Paths to ignore (in addition to .gitignore)
-ignore:
-  - "vendor/"
-  - "node_modules/"
-  - "*.generated.ts"
-
-# Slop score configuration
 slop_score:
-  # strict | balanced | lenient
   profile: balanced
-  # number of top contributors shown in terminal output (1-10)
   top_contributors: 5
-
-# Best-practices configuration
-best_practices:
-  enabled: true
-  # strict | balanced | lenient
-  profile: balanced
-  # ignore test-like paths for best-practices findings
-  ignore_tests: true
-  # deterministic per-rule cap (20-1000)
-  max_findings_per_rule: 200
 ```
 
+See `/Users/danieledeling/projects/go/unslop/docs/config-v2.md` and `/Users/danieledeling/projects/go/unslop/docs/rules.md` for full details.
+
+## v2 Breaking Change
+
+Configuration is now strict v2:
+
+- `version: 2` is required when using a config file
+- unknown top-level keys fail parsing
+- unknown non-legacy rule IDs fail parsing
+- removed legacy rule IDs are silently ignored in config/CLI rule selectors
+- unknown fields under `rules.<id>` fail parsing
+- there is no v1 compatibility bridge
+
 Example terminal section (`--verbose`):
 
 ```text
@@ -182,6 +209,12 @@ make test      # Run all tests with race detector
 make bench     # Run benchmarks
 make lint      # Run golangci-lint
 make build     # Build binary to bin/unslop
+
+# Full npm release (version sync + tests + all-platform build + publish)
+make release-npm VERSION=0.1.3
+
+# Same flow without publishing (sanity check)
+make release-npm VERSION=0.1.3 RELEASE_ARGS="--dry-run"
 ```
 
 ## License

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unslop",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Detect duplicated code, dead code, and anti-patterns in AI-generated codebases",
   "bin": {
     "unslop": "bin.js"
@@ -9,11 +9,11 @@
     "bin.js"
   ],
   "optionalDependencies": {
-    "@unslop/darwin-arm64": "0.1.3",
-    "@unslop/darwin-x64": "0.1.3",
-    "@unslop/linux-arm64": "0.1.3",
-    "@unslop/linux-x64": "0.1.3",
-    "@unslop/win32-x64": "0.1.3"
+    "@unslop/darwin-arm64": "0.1.5",
+    "@unslop/darwin-x64": "0.1.5",
+    "@unslop/linux-arm64": "0.1.5",
+    "@unslop/linux-x64": "0.1.5",
+    "@unslop/win32-x64": "0.1.5"
   },
   "license": "Apache-2.0",
   "repository": {