Files

T

BunBun Labs f8c82902a5 feat: AI Code Governance CLI v1.0.0

- Config-driven gates via .codegov.yml/.codegov.json
- disclosure gate: requires AI-GENERATED/AI-ASSISTED markers on changed files
- rfc gate: requires issue/RFC reference in commit message or PR description
- checklist gate: requires all items checked in REQUIREMENTS.md
- quality gate: runs configurable lint/test/typecheck commands
- CLI with readable reports and non-zero exit on violations
- 41 tests covering all gates, config loading, and integration
- Zero skeletons, no fake features, deferred items honestly documented

2026-06-14 11:08:11 +00:00

2.2 KiB

Raw Blame History

SPEC — AI Code Quality Governance CLI

Core User Value

Stop cowboy-shipping of AI-generated code to production. A lightweight, friction-minimal pre-commit / CI gate that enforces your team's chosen guardrails before merge.

v1 Feature Set (REAL — honestly implemented)

Gates (configurable, all real, no ML)

disclosure-required — Every changed file must contain an AI-GENERATED: or AI-ASSISTED: label comment (or a .codegov.yml override marker). Fails if any changed file lacks it. Supports per-file overrides via config.
rfc-required — Commit message or PR description must reference an RFC, issue, or ticket (regex for #\d+, RFC-\d+, or a custom pattern). Fails if absent.
requirements-checklist — A checklist file (default REQUIREMENTS.md) must exist and all checkboxes (- [x]) must be ticked. Fails if missing or any unchecked.
quality-gates — Runs a configurable array of shell commands (e.g., npm run lint, npm run test, npm run typecheck). Fails on any non-zero exit.

Config (`.codegov.yml`)

Top-level: enabled: boolean, gates: { [name]: GateConfig }
Per-gate: required: boolean, command strings, regex patterns, file paths.
Sane defaults when config is missing (all gates enabled with defaults, plus a warning).

CLI

codegov check [--config path] [--from-ref ref] [--to-ref ref]
Parses git diff, evaluates each enabled gate, prints a readable report, exits non-zero on any failure.
Handles edge cases: no config → defaults + warning; no changed files → pass (nothing to gate); missing RFC → fail with clear message.

Tech Choice

TypeScript / Node 20+
No external runtime deps (uses child_process, fs, path — zero dependencies in package.json)
Dev deps: typescript, @types/node, vitest
Build target: CommonJS, single entry dist/cli.js, shebang #!/usr/bin/env node

Non-Goals (DEFERRED — gated)

Hosted dashboard / web UI (needs backend + auth)
AI-vs-human code detection ML (use disclosure/label instead; be honest in README)
npm publish (needs registry auth)
GitHub Action marketplace listing (needs action.yml polish + marketplace publish)
Paid tier / Stripe (needs backend + payments infra)
Per-team SaaS backend (needs DB + auth)

2.2 KiB Raw Blame History