@nerviq/cli 1.0.0 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/cli.js +170 -73
- package/package.json +3 -5
- package/src/activity.js +20 -0
- package/src/aider/domain-packs.js +27 -2
- package/src/aider/mcp-packs.js +231 -0
- package/src/aider/techniques.js +3210 -1397
- package/src/audit.js +290 -9
- package/src/catalog.js +18 -2
- package/src/codex/domain-packs.js +23 -1
- package/src/codex/mcp-packs.js +254 -0
- package/src/codex/techniques.js +4738 -3257
- package/src/copilot/domain-packs.js +23 -1
- package/src/copilot/mcp-packs.js +254 -0
- package/src/copilot/techniques.js +3433 -1936
- package/src/cursor/domain-packs.js +23 -1
- package/src/cursor/mcp-packs.js +257 -0
- package/src/cursor/techniques.js +3697 -1869
- package/src/deprecation.js +98 -0
- package/src/domain-pack-expansion.js +571 -0
- package/src/domain-packs.js +25 -2
- package/src/formatters/otel.js +151 -0
- package/src/gemini/domain-packs.js +23 -1
- package/src/gemini/mcp-packs.js +257 -0
- package/src/gemini/techniques.js +3734 -2238
- package/src/integrations.js +194 -0
- package/src/mcp-packs.js +233 -0
- package/src/opencode/domain-packs.js +23 -1
- package/src/opencode/mcp-packs.js +231 -0
- package/src/opencode/techniques.js +3500 -1687
- package/src/org.js +68 -0
- package/src/source-urls.js +410 -260
- package/src/stack-checks.js +565 -0
- package/src/supplemental-checks.js +767 -0
- package/src/techniques.js +2929 -1449
- package/src/telemetry.js +160 -0
- package/src/windsurf/domain-packs.js +23 -1
- package/src/windsurf/mcp-packs.js +257 -0
- package/src/windsurf/techniques.js +3647 -1834
- package/src/workspace.js +233 -0
- package/CHANGELOG.md +0 -198
- package/content/case-study-template.md +0 -91
- package/content/claims-governance.md +0 -37
- package/content/claude-code/audit-repo/SKILL.md +0 -20
- package/content/claude-native-integration.md +0 -60
- package/content/devto-article.json +0 -9
- package/content/launch-posts.md +0 -226
- package/content/pilot-rollout-kit.md +0 -30
- package/content/release-checklist.md +0 -31
package/content/launch-posts.md
DELETED
|
@@ -1,226 +0,0 @@
|
|
|
1
|
-
# Launch Posts — Proof-Backed Distribution Assets
|
|
2
|
-
|
|
3
|
-
**Status:** Complete — every asset below is anchored in measured proof, a canonical artifact, or a verified runtime surface
|
|
4
|
-
**Date:** 2026-04-03
|
|
5
|
-
|
|
6
|
-
## Shared Proof Anchors
|
|
7
|
-
|
|
8
|
-
Use these links as the canonical sources behind public claims:
|
|
9
|
-
|
|
10
|
-
- Proof artifact index: https://github.com/DnaFin/claudex/blob/main/research/proof-artifacts/README.md
|
|
11
|
-
- CLAUDEX self-dogfood trace: https://github.com/DnaFin/claudex/blob/main/research/proof-artifacts/claudex-self-dogfood-proof-trace-2026-04-03.md
|
|
12
|
-
- VTCLE case study: https://github.com/DnaFin/claudex/blob/main/research/case-study-vtcle-2026-04-03.md
|
|
13
|
-
- Social case study: https://github.com/DnaFin/claudex/blob/main/research/case-study-social-2026-04-03.md
|
|
14
|
-
- Polymiro case study: https://github.com/DnaFin/claudex/blob/main/research/case-study-polymiro-2026-04-03.md
|
|
15
|
-
- Public proof metrics source: https://github.com/DnaFin/claudex/blob/main/research/claudex-proof-metrics-source-2026-04-03.md
|
|
16
|
-
|
|
17
|
-
Measured-result boundary to preserve:
|
|
18
|
-
|
|
19
|
-
- before/after scores were measured with `claudex-setup@1.10.3` on `2026-04-03`
|
|
20
|
-
- current npm latest is `1.16.1`
|
|
21
|
-
- current product surface is `85 checks`
|
|
22
|
-
|
|
23
|
-
## Post 1: Reddit r/ClaudeAI
|
|
24
|
-
|
|
25
|
-
**Title:** I built a CLI that audits your Claude Code setup — 85 checks, measured on 4 real repos
|
|
26
|
-
|
|
27
|
-
**Body:**
|
|
28
|
-
I built a zero-dependency CLI that audits how well a repo is set up for Claude Code.
|
|
29
|
-
|
|
30
|
-
It checks `85` things across `CLAUDE.md`, hooks, commands, agents, skills, MCP config, permissions, diagrams, and verification loops.
|
|
31
|
-
|
|
32
|
-
Measured on `2026-04-03` with `claudex-setup@1.10.3`:
|
|
33
|
-
- CLAUDEX: `62 -> 90`
|
|
34
|
-
- VTCLE: `46 -> 64`
|
|
35
|
-
- Social: `40 -> 48`
|
|
36
|
-
- Polymiro: `35 -> 48`
|
|
37
|
-
|
|
38
|
-
```bash
|
|
39
|
-
npx claudex-setup
|
|
40
|
-
```
|
|
41
|
-
|
|
42
|
-
It starts trust-first:
|
|
43
|
-
- audit first
|
|
44
|
-
- plan / suggest-only before writes
|
|
45
|
-
- apply only what you approve
|
|
46
|
-
- rollback artifacts for every applied batch
|
|
47
|
-
|
|
48
|
-
Zero dependencies. No API keys. Runs local.
|
|
49
|
-
|
|
50
|
-
GitHub: https://github.com/DnaFin/claudex-setup
|
|
51
|
-
|
|
52
|
-
Proof and case studies:
|
|
53
|
-
- https://github.com/DnaFin/claudex/blob/main/research/proof-artifacts/README.md
|
|
54
|
-
- https://github.com/DnaFin/claudex/blob/main/research/case-study-vtcle-2026-04-03.md
|
|
55
|
-
- https://github.com/DnaFin/claudex/blob/main/research/case-study-social-2026-04-03.md
|
|
56
|
-
- https://github.com/DnaFin/claudex/blob/main/research/case-study-polymiro-2026-04-03.md
|
|
57
|
-
|
|
58
|
-
Would love feedback on what checks or rollout surfaces are still missing.
|
|
59
|
-
|
|
60
|
-
**Evidence anchor:** proof artifact index + 3 external case studies + current proof source
|
|
61
|
-
|
|
62
|
-
---
|
|
63
|
-
|
|
64
|
-
## Post 2: Reddit r/ChatGPTCoding
|
|
65
|
-
|
|
66
|
-
**Title:** Most Claude Code repos are missing the safety layer, not the model
|
|
67
|
-
|
|
68
|
-
**Body:**
|
|
69
|
-
The interesting problem with Claude Code is not "can it write code?".
|
|
70
|
-
It's "is the repo actually set up so Claude can work safely and predictably?".
|
|
71
|
-
|
|
72
|
-
I built `claudex-setup` to audit that surface:
|
|
73
|
-
- `85` checks
|
|
74
|
-
- zero dependencies
|
|
75
|
-
- local-only by default
|
|
76
|
-
- trust-first flow: audit -> plan -> apply -> rollback
|
|
77
|
-
|
|
78
|
-
Measured on 4 real repos:
|
|
79
|
-
- FastAPI repo: `46 -> 64`
|
|
80
|
-
- React Native repo: `40 -> 48`
|
|
81
|
-
- Python/Docker repo: `35 -> 48`
|
|
82
|
-
- research engine repo: `62 -> 90`
|
|
83
|
-
|
|
84
|
-
```bash
|
|
85
|
-
npx claudex-setup
|
|
86
|
-
```
|
|
87
|
-
|
|
88
|
-
The most common misses were not exotic:
|
|
89
|
-
- no deny rules
|
|
90
|
-
- no secrets protection
|
|
91
|
-
- no mermaid architecture
|
|
92
|
-
- no hooks registered in settings
|
|
93
|
-
|
|
94
|
-
Proof:
|
|
95
|
-
https://github.com/DnaFin/claudex/blob/main/research/proof-artifacts/README.md
|
|
96
|
-
|
|
97
|
-
**Evidence anchor:** measured before/after traces + common gap summary from public proof set
|
|
98
|
-
|
|
99
|
-
---
|
|
100
|
-
|
|
101
|
-
## Post 3: Dev.to Article
|
|
102
|
-
|
|
103
|
-
**Title:** What 4 Real Repos Taught Me About Claude Code Readiness
|
|
104
|
-
|
|
105
|
-
**Body (excerpt):**
|
|
106
|
-
I tested `claudex-setup` on 4 real repos and the pattern was clear:
|
|
107
|
-
|
|
108
|
-
- the best teams still miss permission deny rules
|
|
109
|
-
- mature repos often have hooks in files but not actually registered
|
|
110
|
-
- non-standard settings formats are a real adoption trap
|
|
111
|
-
- shared `settings.json` matters more than personal local overrides
|
|
112
|
-
|
|
113
|
-
Measured on `2026-04-03` with `claudex-setup@1.10.3`:
|
|
114
|
-
- CLAUDEX: `62 -> 90`
|
|
115
|
-
- VTCLE: `46 -> 64`
|
|
116
|
-
- Social: `40 -> 48`
|
|
117
|
-
- Polymiro: `35 -> 48`
|
|
118
|
-
|
|
119
|
-
The product today is strongest as:
|
|
120
|
-
|
|
121
|
-
`audit -> plan -> safe apply -> governance -> benchmark`
|
|
122
|
-
|
|
123
|
-
Not a code generator. Not an MCP installer. A trust layer for Claude Code repos.
|
|
124
|
-
|
|
125
|
-
Proof packet:
|
|
126
|
-
https://github.com/DnaFin/claudex/blob/main/research/proof-artifacts/README.md
|
|
127
|
-
|
|
128
|
-
**Evidence anchor:** proof artifact index + case-study docs + current proof source
|
|
129
|
-
|
|
130
|
-
---
|
|
131
|
-
|
|
132
|
-
## Post 4: Twitter/X Thread
|
|
133
|
-
|
|
134
|
-
**Tweet 1:**
|
|
135
|
-
I built a zero-dependency CLI that audits Claude Code readiness across `85` checks.
|
|
136
|
-
|
|
137
|
-
Measured on 4 real repos:
|
|
138
|
-
- `62 -> 90`
|
|
139
|
-
- `46 -> 64`
|
|
140
|
-
- `40 -> 48`
|
|
141
|
-
- `35 -> 48`
|
|
142
|
-
|
|
143
|
-
`npx claudex-setup`
|
|
144
|
-
|
|
145
|
-
Proof: github.com/DnaFin/claudex/blob/main/research/proof-artifacts/README.md
|
|
146
|
-
|
|
147
|
-
**Tweet 2:**
|
|
148
|
-
The most common misses were boring and important:
|
|
149
|
-
- no deny rules
|
|
150
|
-
- no secrets protection
|
|
151
|
-
- no mermaid diagram
|
|
152
|
-
- no hooks registered in settings
|
|
153
|
-
|
|
154
|
-
It is much more "trust layer" than "AI magic".
|
|
155
|
-
|
|
156
|
-
**Tweet 3:**
|
|
157
|
-
What it does well today:
|
|
158
|
-
- audit first
|
|
159
|
-
- suggest / plan before writes
|
|
160
|
-
- apply selectively
|
|
161
|
-
- emit rollback artifacts
|
|
162
|
-
- benchmark on isolated copy
|
|
163
|
-
|
|
164
|
-
**Tweet 4:**
|
|
165
|
-
Best result so far:
|
|
166
|
-
- CLAUDEX self-dogfood: `62 -> 90`
|
|
167
|
-
|
|
168
|
-
Best external proof:
|
|
169
|
-
- VTCLE: `46 -> 64`
|
|
170
|
-
|
|
171
|
-
Case studies:
|
|
172
|
-
- github.com/DnaFin/claudex/blob/main/research/case-study-vtcle-2026-04-03.md
|
|
173
|
-
- github.com/DnaFin/claudex/blob/main/research/case-study-social-2026-04-03.md
|
|
174
|
-
- github.com/DnaFin/claudex/blob/main/research/case-study-polymiro-2026-04-03.md
|
|
175
|
-
|
|
176
|
-
**Tweet 5:**
|
|
177
|
-
Measured results were captured on `claudex-setup@1.10.3` on `2026-04-03`.
|
|
178
|
-
Current npm latest is `1.16.1`, so exact scores can move slightly, but the proof packet is explicit about that boundary.
|
|
179
|
-
|
|
180
|
-
**Evidence anchor:** proof artifact index + per-repo traces
|
|
181
|
-
|
|
182
|
-
---
|
|
183
|
-
|
|
184
|
-
## Post 5: Hacker News (Show HN)
|
|
185
|
-
|
|
186
|
-
**Title:** Show HN: claudex-setup — audit Claude Code readiness with 85 checks
|
|
187
|
-
|
|
188
|
-
**Body:**
|
|
189
|
-
I built a CLI that audits how well a repo is set up for Claude Code.
|
|
190
|
-
|
|
191
|
-
This is not a code-quality linter and not an MCP installer.
|
|
192
|
-
It focuses on Claude workflow quality:
|
|
193
|
-
- `CLAUDE.md`
|
|
194
|
-
- hooks
|
|
195
|
-
- commands
|
|
196
|
-
- agents
|
|
197
|
-
- skills
|
|
198
|
-
- MCP config
|
|
199
|
-
- permissions / deny rules
|
|
200
|
-
- diagrams
|
|
201
|
-
- verification loops
|
|
202
|
-
|
|
203
|
-
Core workflow:
|
|
204
|
-
- `npx claudex-setup`
|
|
205
|
-
- `npx claudex-setup suggest-only`
|
|
206
|
-
- `npx claudex-setup plan`
|
|
207
|
-
- `npx claudex-setup apply`
|
|
208
|
-
- `npx claudex-setup benchmark`
|
|
209
|
-
|
|
210
|
-
Measured on 4 real repos on `2026-04-03` with `claudex-setup@1.10.3`:
|
|
211
|
-
- CLAUDEX: `62 -> 90`
|
|
212
|
-
- VTCLE: `46 -> 64`
|
|
213
|
-
- Social: `40 -> 48`
|
|
214
|
-
- Polymiro: `35 -> 48`
|
|
215
|
-
|
|
216
|
-
Trust decisions that mattered:
|
|
217
|
-
- zero dependencies
|
|
218
|
-
- audit before write
|
|
219
|
-
- rollback artifacts
|
|
220
|
-
- cross-platform Node hooks
|
|
221
|
-
- explicit proof packets instead of vague claims
|
|
222
|
-
|
|
223
|
-
Proof packet:
|
|
224
|
-
https://github.com/DnaFin/claudex/blob/main/research/proof-artifacts/README.md
|
|
225
|
-
|
|
226
|
-
**Evidence anchor:** proof artifact index + current npm proof source
|
|
@@ -1,30 +0,0 @@
|
|
|
1
|
-
# Pilot Rollout Kit
|
|
2
|
-
|
|
3
|
-
## Suggested pilot shape
|
|
4
|
-
|
|
5
|
-
1. Choose 1-2 repos with active owners and low blast radius.
|
|
6
|
-
2. Run `discover`, `suggest-only`, and `governance` before any write flow.
|
|
7
|
-
3. Pick one permission profile and document why it fits the pilot.
|
|
8
|
-
4. Run `benchmark` to capture a baseline and expected value.
|
|
9
|
-
5. Use `plan` and selective `apply` for the first write batch.
|
|
10
|
-
|
|
11
|
-
## Approval checklist
|
|
12
|
-
|
|
13
|
-
- Engineering owner approves scope.
|
|
14
|
-
- Security owner approves permission profile and hooks.
|
|
15
|
-
- Pilot owner records success metrics.
|
|
16
|
-
- Rollback expectations are documented before apply.
|
|
17
|
-
|
|
18
|
-
## Success metrics
|
|
19
|
-
|
|
20
|
-
- readiness score delta
|
|
21
|
-
- organic score delta
|
|
22
|
-
- number of proposal bundles accepted
|
|
23
|
-
- rollback-free apply rate
|
|
24
|
-
- time to first useful Claude workflow
|
|
25
|
-
|
|
26
|
-
## Rollback expectations
|
|
27
|
-
|
|
28
|
-
- every apply run must produce a rollback artifact
|
|
29
|
-
- rejected starter artifacts are deleted using the rollback manifest
|
|
30
|
-
- rollback decisions are logged in the activity trail
|
|
@@ -1,31 +0,0 @@
|
|
|
1
|
-
# claudex-setup Release Checklist
|
|
2
|
-
|
|
3
|
-
Use this before tagging or publishing a release.
|
|
4
|
-
|
|
5
|
-
## Code And Packaging
|
|
6
|
-
|
|
7
|
-
- bump `package.json` version intentionally
|
|
8
|
-
- update `CHANGELOG.md` with the shipped changes
|
|
9
|
-
- run `npm test`
|
|
10
|
-
- run `npm pack --dry-run`
|
|
11
|
-
|
|
12
|
-
## Product Surface Consistency
|
|
13
|
-
|
|
14
|
-
- verify `README.md` reflects the current CLI surface
|
|
15
|
-
- verify `docs/index.html` reflects the current CLI surface
|
|
16
|
-
- verify new flags and commands appear in `--help`
|
|
17
|
-
- verify proof numbers and public claims match the current state
|
|
18
|
-
|
|
19
|
-
## Trust And Governance
|
|
20
|
-
|
|
21
|
-
- run `npx claudex-setup --snapshot` on the repo itself
|
|
22
|
-
- run `npx claudex-setup governance --out governance.md`
|
|
23
|
-
- verify MCP package names and env preflight behavior for changed packs
|
|
24
|
-
- verify no recommendation regressions on known scenarios
|
|
25
|
-
|
|
26
|
-
## Release Readiness
|
|
27
|
-
|
|
28
|
-
- confirm npm publish target and account are correct
|
|
29
|
-
- confirm git branch / commit matches the intended release
|
|
30
|
-
- confirm any new templates or content files are included in the package
|
|
31
|
-
- capture one final note about what changed and what still remains intentionally deferred
|